Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.mft
File:                     iruZJsMSoUFJxSMLpV-oz1uJquE.mft (raw, json)
Hash identifier:          rdAOyKDk4n1zexempz8w+iHMI4H8K9leXvtz95DIGEI=
Subject key identifier:   13:25:46:E3:70:44:1F:D2:A8:1E:84:AA:18:14:B0:4A:04:8B:8A:48
Authority key identifier: 8A:BB:99:26:C3:12:A1:41:49:C5:23:0B:A5:5F:A8:CF:5B:89:AA:E1
Certificate issuer:       /CN=A91E8C52/serialNumber=8ABB9926C312A14149C5230BA55FA8CF5B89AAE1
Certificate serial:       0621
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iruZJsMSoUFJxSMLpV-oz1uJquE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.mft
Manifest number:          061C
Signing time:             Fri 28 Mar 2025 23:01:22 +0000
Manifest this update:     Fri 28 Mar 2025 23:01:22 +0000
Manifest next update:     Fri 04 Apr 2025 23:01:22 +0000
Files and hashes:         1: iruZJsMSoUFJxSMLpV-oz1uJquE.crl (hash: zGVQllx3BqfZWQh96piM7reN2PtjeNKKhCPZS/2tAFw=)
                          2: 09C9D20691BC11EB8C38801CC4F9AE02.roa (hash: PxaaK39Y5xEd7lxiNReKmMyjJOrete3xtkbzR6qIJuQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1569 (0x621)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8C52
        Validity
            Not Before: Mar 28 23:01:22 2025 GMT
            Not After : Apr  4 23:01:22 2025 GMT
        Subject: CN=67e72a42-3133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f2:d6:32:2e:f4:ad:7b:36:1a:06:2d:b1:5f:
                    17:47:94:91:1b:4c:1e:04:3b:1f:3e:2b:d1:d8:12:
                    ce:db:5d:f8:2f:60:3b:83:c4:71:10:aa:bb:0c:f5:
                    03:c1:4c:85:0a:41:e6:69:7c:91:79:23:0e:9a:ec:
                    eb:d1:1c:e2:c0:44:d4:2e:2c:a7:23:ef:0e:61:2a:
                    c3:bd:99:9f:72:c9:08:f7:1d:a9:0d:85:c5:40:9e:
                    2e:b4:4f:8c:2a:b2:14:3b:4b:18:b9:cf:49:30:86:
                    63:a6:09:4c:d4:19:ff:06:48:21:c2:2d:08:a4:66:
                    df:29:28:ec:18:6c:e9:fa:07:cb:4e:b2:91:3d:b3:
                    0d:1f:b4:a0:ab:34:8a:9f:3d:56:b6:70:c2:14:5f:
                    47:92:85:75:61:b1:36:77:ee:09:87:ba:cb:eb:cc:
                    5d:26:a2:8a:df:02:86:5a:0f:4c:c8:00:48:40:ea:
                    e7:73:8c:4f:f0:a5:aa:69:06:ce:2f:61:d4:3a:72:
                    c5:93:93:f7:4e:e7:28:dd:21:0d:8a:77:3c:a9:a7:
                    10:6b:d6:a9:21:e9:94:f3:c2:74:e5:99:b1:49:15:
                    e5:15:b9:1e:01:83:ba:e1:01:4a:ca:d2:2d:be:d3:
                    41:92:23:88:96:d1:27:0e:74:da:01:8a:09:ec:97:
                    b6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:25:46:E3:70:44:1F:D2:A8:1E:84:AA:18:14:B0:4A:04:8B:8A:48
            X509v3 Authority Key Identifier:
                keyid:8A:BB:99:26:C3:12:A1:41:49:C5:23:0B:A5:5F:A8:CF:5B:89:AA:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iruZJsMSoUFJxSMLpV-oz1uJquE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C52/B46CD77E91B911EB9C5B4618C4F9AE02/iruZJsMSoUFJxSMLpV-oz1uJquE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:cd:ad:0c:26:d4:c2:c6:a8:5a:b4:70:ec:c8:8a:d9:e0:9a:
         87:00:69:8f:c7:d7:56:31:9d:24:a5:44:e7:95:e9:b5:b6:af:
         09:6b:86:db:65:97:50:e0:30:10:5e:08:15:95:e2:49:21:3c:
         81:db:7a:2b:08:83:08:4b:79:1d:65:08:3f:10:b4:ad:32:8c:
         c8:c2:c4:25:79:30:ee:6c:83:41:3b:19:6e:12:2a:18:f2:31:
         42:ce:93:0a:4d:36:f3:d9:ee:f1:4c:6f:c4:57:64:93:69:d7:
         5a:b7:cd:19:49:8c:22:5b:f3:5b:51:b7:94:73:c1:9c:91:59:
         fc:d9:de:61:d5:3b:8c:dc:c6:d7:61:c5:d1:6e:ac:f9:e7:d8:
         7f:e7:b7:4d:7f:68:84:21:38:d2:1b:ea:e1:d6:92:2d:93:c4:
         26:83:a8:d8:07:a2:b2:cc:a8:ed:f2:62:96:0e:a3:77:60:54:
         16:04:72:a8:35:0e:df:62:7b:5f:ec:01:c4:9a:d8:c4:82:04:
         eb:6a:23:7f:02:07:c3:c2:35:6a:9d:8d:fc:63:65:cc:06:97:
         b4:be:ae:a7:60:6a:12:47:73:25:58:e0:d4:08:6b:ea:9b:b2:
         da:c3:43:54:2d:52:d1:38:a2:dd:b1:80:67:74:a8:52:6f:f0:
         c8:a0:ce:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----