Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft
File:                     S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft (raw, json)
Hash identifier:          H5/hG0trBmjnmzLArUioF6ZHtPcxB7DSoKaJzaa3Yas=
Subject key identifier:   64:D5:1C:88:78:11:F3:25:98:ED:9C:42:77:6A:CF:92:18:31:94:13
Authority key identifier: 4B:85:67:FB:38:7B:FD:74:07:6B:50:97:70:01:32:C7:AC:86:E6:20
Certificate issuer:       /CN=A91ECC52/serialNumber=4B8567FB387BFD74076B5097700132C7AC86E620
Certificate serial:       0760
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft
Manifest number:          075B
Signing time:             Fri 28 Mar 2025 21:48:32 +0000
Manifest this update:     Fri 28 Mar 2025 21:48:31 +0000
Manifest next update:     Fri 04 Apr 2025 21:48:31 +0000
Files and hashes:         1: S4Vn-zh7_XQHa1CXcAEyx6yG5iA.crl (hash: 84VUrOmmpG4GGzdbfRRbDpAGTsxEhVTfnHMy9n2jhWM=)
                          2: 65D706B213FA11EB92A6FE61C4F9AE02.roa (hash: HDw255HT5Qq+WExObAcGQTxVC/IMJorhiCibpd+wpAY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1888 (0x760)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ECC52
        Validity
            Not Before: Mar 28 21:48:31 2025 GMT
            Not After : Apr  4 21:48:31 2025 GMT
        Subject: CN=67e71930-8c9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f7:d1:6d:1c:5e:4f:7d:03:91:b3:01:cd:c0:
                    2f:24:ce:73:75:14:f4:9e:f6:de:0c:bd:79:72:2a:
                    d8:0b:b4:97:a2:7c:44:1d:3b:21:c4:cc:56:56:b8:
                    a7:07:8c:17:05:89:68:e4:db:81:14:79:c4:9b:24:
                    ff:6b:64:fd:ec:33:2e:66:8d:7a:9a:d6:a0:ec:6c:
                    fa:19:fc:e6:e0:68:0a:f9:97:04:6d:86:4a:ed:ea:
                    9a:e6:c7:d0:98:50:78:40:50:13:ce:22:18:cd:18:
                    66:96:0e:59:93:e8:7f:6a:e4:be:c1:be:43:57:19:
                    eb:4b:8b:b3:13:4d:c3:8f:91:0b:9d:49:02:a6:dd:
                    0f:38:93:08:9d:68:f8:ca:e3:f1:f4:a8:04:7f:f5:
                    d5:0b:3d:6a:13:e2:9b:7d:83:8d:3b:64:a1:5b:06:
                    fa:97:d5:6e:cc:5c:92:89:9d:50:81:15:4c:6f:96:
                    26:10:d4:95:e6:fb:4f:fa:b0:92:b4:01:1e:cd:db:
                    eb:07:fa:05:0f:f8:ff:11:39:b1:c6:ae:e5:ec:42:
                    87:f0:82:7d:d5:9d:00:86:c9:5d:28:fd:9c:a5:6d:
                    a3:df:dd:01:c5:90:69:6c:f6:7d:c9:2f:5b:3a:32:
                    ea:ad:33:2d:75:38:db:3e:39:4a:04:20:43:1e:f4:
                    4d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D5:1C:88:78:11:F3:25:98:ED:9C:42:77:6A:CF:92:18:31:94:13
            X509v3 Authority Key Identifier:
                keyid:4B:85:67:FB:38:7B:FD:74:07:6B:50:97:70:01:32:C7:AC:86:E6:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:b4:d1:2e:cc:00:ce:d7:b8:bf:44:bb:5c:22:b5:2f:e9:39:
         e2:c2:ae:97:e2:e7:55:d2:1b:cc:93:c7:1c:4a:87:f6:e0:ae:
         f0:92:eb:e6:60:59:da:84:6a:c1:16:39:0a:61:37:ab:ad:fd:
         96:70:9f:13:78:65:98:61:e1:e9:26:fc:cd:79:90:0d:64:3a:
         5b:6b:bd:59:38:38:1f:36:bf:e7:48:47:18:73:c4:b6:35:ba:
         03:39:ae:07:b0:33:8a:f6:8a:65:5a:e3:8d:a2:b9:b8:56:1b:
         1b:6f:51:25:44:1d:a1:85:a7:be:fd:00:fd:a7:c1:ab:00:b7:
         99:19:43:98:48:6a:26:72:c9:2f:36:b4:86:ad:98:70:c8:83:
         8e:a6:a1:ad:1a:f5:b7:30:64:be:ee:f4:09:b4:02:e9:62:45:
         18:41:56:72:3c:4b:1f:eb:82:52:f1:35:51:37:f7:21:e7:27:
         04:b0:a3:66:d2:e5:ea:d6:f6:67:24:f2:97:aa:b4:e9:70:89:
         c4:06:8e:9b:6f:71:9d:ec:9e:c6:4a:92:d9:02:e9:da:fb:9b:
         d8:73:a6:68:a7:01:89:1f:17:ab:ac:61:bd:3f:ae:df:b8:01:
         52:b6:a7:9c:82:aa:df:bd:15:a7:88:76:07:95:a6:95:de:07:
         3b:47:fe:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----