Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
File:                     qSFNuZGEmynE8EXDNkcOnYLEjOI.mft (raw, json)
Hash identifier:          VqRTDcI1kLwk3HG/1aQH7AsAFlsCCsZ8N+DtqETSlBQ=
Subject key identifier:   90:2E:31:BF:5D:9F:2F:27:DE:C0:2A:FE:96:1D:73:F8:07:82:A2:9E
Authority key identifier: A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2
Certificate issuer:       /CN=A91EB929/serialNumber=A9214DB991849B29C4F045C336470E9D82C48CE2
Certificate serial:       D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
Manifest number:          CD
Signing time:             Sat 29 Mar 2025 05:06:52 +0000
Manifest this update:     Sat 29 Mar 2025 05:06:52 +0000
Manifest next update:     Sat 05 Apr 2025 05:06:52 +0000
Files and hashes:         1: qSFNuZGEmynE8EXDNkcOnYLEjOI.crl (hash: cAYasgaMCF1ThnqnEnSvcLOEdSKVhfvpn9nSchf7gVg=)
                          2: 70C04006D5EF11EE8279357EC4F9AE02.roa (hash: CD5JHrOld6EH8gDDi5gO0sRUppO6UZeQlXazyHZlOek=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB929
        Validity
            Not Before: Mar 29 05:06:52 2025 GMT
            Not After : Apr  5 05:06:52 2025 GMT
        Subject: CN=67e77fec-54ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2d:4c:3e:2a:53:bb:08:56:bb:90:8d:67:a2:
                    33:af:93:ac:ce:5b:b8:a8:84:fb:79:a4:92:81:e6:
                    91:1a:a8:3f:23:de:9b:df:83:41:17:d2:3b:34:19:
                    78:98:67:12:ae:00:ea:17:d9:b8:8f:21:19:2a:e5:
                    b7:ea:ea:ff:42:6b:c0:4f:ce:38:ae:4d:4e:c5:9f:
                    39:ea:bc:73:ab:65:bb:b2:5f:e9:04:db:fa:75:ef:
                    4a:09:f7:7f:af:51:50:d5:e3:47:61:d3:3c:a2:b1:
                    5b:6b:26:c7:05:83:59:1f:8f:48:75:1e:46:22:81:
                    54:fd:72:f4:10:d4:5c:82:27:36:26:a5:68:b5:35:
                    a1:a2:6f:3c:ec:6e:a0:28:14:47:3a:e1:03:79:9c:
                    26:98:f3:a5:02:f0:dd:62:f8:c4:49:f7:ac:75:c1:
                    66:71:fd:7c:b2:5f:39:bd:55:ac:06:9b:84:fa:19:
                    83:35:31:72:8e:c0:26:13:6c:b8:c2:33:f8:3b:da:
                    a1:68:d1:e5:ba:29:41:d7:b6:77:3f:45:4e:f6:59:
                    96:4b:55:54:c1:57:c7:a3:83:34:19:a3:3b:62:5c:
                    ec:5e:bb:bf:51:6c:ca:cd:e6:94:de:5d:35:d2:a4:
                    44:ea:d4:24:dd:d1:c0:45:9c:c4:19:a5:ac:11:8e:
                    34:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:2E:31:BF:5D:9F:2F:27:DE:C0:2A:FE:96:1D:73:F8:07:82:A2:9E
            X509v3 Authority Key Identifier:
                keyid:A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:80:92:a8:14:73:1a:52:85:81:64:ba:7d:2d:9f:7b:c6:04:
         d3:44:80:a0:eb:60:f8:4f:52:d4:92:1b:8f:98:b8:04:55:d4:
         f6:db:ae:6c:4f:1e:b5:19:fc:44:0a:50:3d:57:54:c6:d4:92:
         09:9a:63:9c:8c:19:26:e3:91:e5:1a:58:65:7a:66:51:4d:0e:
         da:79:c0:0f:0a:b5:81:3d:07:27:50:71:06:2d:dc:c7:de:21:
         38:1a:67:97:82:75:f0:43:0f:9e:f0:ba:a7:ed:be:b5:9e:84:
         a0:29:e2:bb:fc:5a:79:05:00:62:2e:78:4e:a0:cb:e4:cc:45:
         b7:bb:15:79:37:9a:a3:77:b4:d2:c1:4a:ee:95:6e:1d:e7:92:
         1a:52:0a:1f:89:a1:96:25:76:f1:4b:b6:66:8f:94:25:63:22:
         ac:4d:7a:bf:a3:0a:c3:b4:f6:1a:82:df:0b:87:11:9e:a2:fd:
         dc:5c:96:b0:27:28:59:f6:64:e9:6a:16:bd:0b:13:d5:47:a8:
         fc:06:2a:1e:c6:67:0a:4c:fe:54:9b:a8:0a:6f:84:4c:bb:e9:
         db:d2:60:f2:9f:0e:5e:0f:f6:aa:e4:88:dc:93:74:af:f2:8d:
         b0:0e:54:a4:59:1a:98:08:fd:7d:23:33:a9:9f:b0:0c:e4:31:
         82:94:77:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----