Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft
File:                     Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft (raw, json)
Hash identifier:          C1Z1IxVH7ihUhG+poLph6WRvqB/6CHkSO+m6b2prlnU=
Subject key identifier:   39:52:34:80:F5:9A:A7:98:FE:4B:86:35:61:FC:6B:40:70:59:D5:6E
Authority key identifier: 1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C
Certificate issuer:       /CN=A91F7BE4/serialNumber=1E6B3944B6788E90E997D8A8E8067C5969B8898C
Certificate serial:       0FC1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft
Manifest number:          0FB8
Signing time:             Fri 28 Mar 2025 17:36:58 +0000
Manifest this update:     Fri 28 Mar 2025 17:36:57 +0000
Manifest next update:     Fri 04 Apr 2025 17:36:57 +0000
Files and hashes:         1: Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl (hash: kB8TyqvuVx1R6W0BjFPhZhYWlEHH2I2c5QPpmU/qNAw=)
                          2: DB63DD0C511311E998B6E814C4F9AE02.roa (hash: Mh1zi5YD9Zt1qZTGwDKJ/p09AgZsGk5KhqRaFO5mGTY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4033 (0xfc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7BE4
        Validity
            Not Before: Mar 28 17:36:57 2025 GMT
            Not After : Apr  4 17:36:57 2025 GMT
        Subject: CN=67e6de39-981e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e8:b0:db:10:68:df:90:7a:6f:14:5b:97:7f:
                    68:98:9f:f6:4c:16:81:b9:7c:fa:58:e8:a0:5f:04:
                    9c:18:2a:24:7e:5b:23:74:91:2a:27:77:40:fc:5b:
                    15:24:e8:1a:77:a8:85:b5:4f:37:25:5f:22:a0:aa:
                    26:22:f0:4e:e3:8e:59:18:25:2b:7b:a6:00:d7:84:
                    c2:a3:73:a9:44:a0:5b:2d:d1:7f:0c:44:29:ec:8c:
                    ae:5d:7f:90:3b:cb:7a:d3:c6:9e:27:e3:ab:6d:50:
                    2b:31:01:d1:52:a7:44:0d:16:0b:c4:01:61:75:f5:
                    5a:e2:96:cd:6b:0f:2b:82:b1:28:bb:8e:e2:09:1e:
                    36:dd:1c:98:8f:41:7b:70:59:9d:23:d1:e4:ce:fc:
                    a1:41:70:7f:6e:62:2f:b1:1c:89:b8:18:a2:ba:6e:
                    6d:98:a9:d6:1e:48:d6:bd:a5:ec:a4:e5:a9:20:34:
                    5a:b2:f6:86:94:96:ce:ad:b2:b5:48:ed:87:59:16:
                    3c:dd:70:ae:a8:e3:6a:58:1d:b7:91:94:1b:5b:71:
                    77:ca:8f:4f:b9:51:9c:ee:e9:97:cd:9f:75:55:97:
                    e2:40:19:69:d0:65:d6:65:3e:c1:f0:78:fb:cd:77:
                    84:2e:dc:6a:ed:9b:7a:1d:d2:03:6b:ce:f4:2e:df:
                    0a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:52:34:80:F5:9A:A7:98:FE:4B:86:35:61:FC:6B:40:70:59:D5:6E
            X509v3 Authority Key Identifier:
                keyid:1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:ac:3a:c2:50:70:d3:e5:bf:5b:8c:cf:a4:23:e7:7a:5c:f6:
         91:11:6a:b0:7e:7b:78:b5:8a:9a:d3:a6:87:60:bb:42:e4:40:
         bb:81:d4:7f:68:7d:bd:65:a4:0b:53:ac:bd:bc:41:93:51:31:
         cf:73:b6:a1:e9:da:af:a2:d5:52:bd:40:d4:73:90:45:32:4f:
         5c:36:c7:67:e1:da:b4:81:c9:ce:c8:39:c2:bd:8b:c8:60:8f:
         d3:04:48:63:f1:27:4b:0c:15:37:c5:d8:55:bf:7c:bc:30:22:
         df:4a:e4:d6:dc:2e:bd:e9:92:0e:67:17:44:57:a1:37:b6:11:
         ea:44:ec:05:a3:03:2f:35:eb:8e:ed:ce:b3:68:66:c0:ab:be:
         03:45:43:e3:59:02:9d:8b:77:dd:5b:7b:81:11:c9:13:6c:a5:
         2a:7b:94:9c:b7:2c:db:70:11:80:f1:d5:81:86:c4:6e:0e:38:
         0c:68:e6:27:e2:74:30:75:89:b4:9e:45:20:1c:85:77:ea:da:
         90:95:e8:58:f9:5d:73:99:fc:9b:99:8f:5d:a9:81:e8:0e:29:
         a5:78:b2:98:73:07:69:80:5a:ce:0b:45:11:ee:4b:c1:37:85:
         63:64:50:52:e5:b4:89:e3:1e:cc:96:07:f6:c5:33:32:69:1a:
         57:82:a9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----