Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft
File:                     8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft (raw, json)
Hash identifier:          EwDMQWA5OM/wc6IwkG/lQw3Wj6sJVvtP8YOjVq1/O2Q=
Subject key identifier:   03:DC:45:32:1F:06:C1:76:36:A8:FE:3C:43:33:E5:90:89:70:F8:E1
Authority key identifier: F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED
Certificate issuer:       /CN=A91E094D/serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED
Certificate serial:       0578
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft
Manifest number:          0565
Signing time:             Fri 28 Mar 2025 23:40:37 +0000
Manifest this update:     Fri 28 Mar 2025 23:40:36 +0000
Manifest next update:     Fri 04 Apr 2025 23:40:36 +0000
Files and hashes:         1: 8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl (hash: yZkJVQoeoUZsTZkCGprYm2Z03ZOZKkl2jiakYj5Zpq0=)
                          2: 22A3D2E4E5D311EFB5545A4EC4F9AE02.roa (hash: KgAjUYIuzjhpkZFNtYWs181NTAA2NQcYLWH/gU6nAAg=)
                          3: 660A349884C511EFB2831C16C4F9AE02.roa (hash: q2RN3xLXUOsYwfNjHGYHuCEJyjXQ1ifjwY5JK1sjpVs=)
                          4: ED49BD3C649A11ECBDAC9565C4F9AE02.roa (hash: 5+nKIDKYjPUjJXitKA/NG2KaCsn8s1r6GRZFIHnwdms=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1400 (0x578)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E094D
        Validity
            Not Before: Mar 28 23:40:36 2025 GMT
            Not After : Apr  4 23:40:36 2025 GMT
        Subject: CN=67e73374-a05d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cb:d4:85:e0:d1:b4:1e:0f:89:c7:c2:aa:06:
                    d9:34:c4:12:b4:64:b5:fa:35:05:8f:3e:82:27:a7:
                    8a:58:1f:75:01:46:71:94:bc:dd:78:ec:ff:eb:35:
                    c6:7b:5e:5c:b7:d2:c5:7d:60:ba:9f:e6:f7:5c:48:
                    0e:87:09:33:39:3d:ce:bb:da:a1:73:64:5d:52:f2:
                    cb:2f:5c:01:d0:f4:31:c4:f3:4c:4c:db:5a:4d:44:
                    a2:cf:19:42:c7:ce:e6:da:d6:a7:37:44:f8:47:19:
                    b9:e0:13:ff:88:41:c4:3d:82:68:8b:c2:f6:f3:fd:
                    70:ae:23:39:c6:1e:59:28:a1:60:86:64:54:2f:41:
                    b0:14:5a:89:5c:4f:d4:55:ae:ea:c4:b3:95:39:41:
                    01:4a:09:0d:3d:5a:40:54:e4:da:1e:85:99:21:29:
                    48:20:c3:d7:c5:f1:f7:06:20:48:ed:29:ee:3b:2e:
                    23:ee:ee:57:9b:ca:34:aa:1a:4c:0c:65:3f:ae:a2:
                    c0:53:7b:fe:46:df:fe:14:2a:31:2e:cc:3f:0c:ca:
                    ea:31:be:e8:5b:dc:08:e9:d0:30:8a:fa:88:db:d7:
                    da:af:ae:9d:24:40:f9:8e:3c:d9:4c:93:93:87:54:
                    51:b9:f6:35:a8:73:f8:2b:08:ae:40:bb:fe:66:8c:
                    1c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:DC:45:32:1F:06:C1:76:36:A8:FE:3C:43:33:E5:90:89:70:F8:E1
            X509v3 Authority Key Identifier:
                keyid:F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:08:6a:00:15:65:3d:f6:76:27:34:7e:38:22:2e:d7:08:e4:
         a2:b0:1a:57:1e:45:40:35:75:4c:32:c3:f5:af:c7:81:39:c2:
         8b:c5:a0:ed:2b:b9:3d:10:0d:2c:fc:6a:df:e5:77:14:8e:d1:
         5c:50:50:ec:10:9e:85:30:bb:07:4d:3a:a4:e3:aa:e6:97:ff:
         3c:7b:39:61:77:f5:36:26:a4:b6:93:fd:eb:0d:44:36:4e:79:
         31:be:2f:b2:58:5e:5c:4e:b4:a2:51:4f:21:fd:b5:af:d8:7c:
         d9:d9:0e:a6:94:f0:db:e2:2e:fc:27:10:3d:cf:3c:93:41:a9:
         be:f7:4a:66:36:23:19:03:c6:c5:ff:cf:7c:bb:79:af:be:91:
         c9:53:23:e2:d4:5b:7c:4e:bf:65:c4:0f:3a:0c:dd:24:cd:81:
         4a:c9:2e:56:38:c5:d1:4f:08:02:19:f0:77:9c:d0:de:93:85:
         47:19:75:3e:f3:8e:fd:02:57:52:39:d4:02:a3:f3:8f:12:cf:
         f0:3b:a7:ca:90:f1:a7:e0:7c:1b:f0:e1:d0:28:af:50:c0:95:
         bb:15:d2:2e:0c:45:29:81:e9:04:b6:21:49:46:12:ab:e8:1c:
         a9:d4:ae:f7:e3:f5:94:84:25:85:e5:8b:4b:31:41:40:9d:c3:
         b5:ef:8b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----