Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft
File:                     09zhcUP5z134AE-MZZf7LIzMcEY.mft (raw, json)
Hash identifier:          FT0Orkr2DR0p4/Dykee4eKH6DlVTTROsca/tDo64xj4=
Subject key identifier:   76:18:78:D7:31:B8:9A:7C:FB:18:E4:B5:10:1F:68:F5:7C:D3:2A:91
Authority key identifier: D3:DC:E1:71:43:F9:CF:5D:F8:00:4F:8C:65:97:FB:2C:8C:CC:70:46
Certificate issuer:       /CN=A91F7D74/serialNumber=D3DCE17143F9CF5DF8004F8C6597FB2C8CCC7046
Certificate serial:       73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09zhcUP5z134AE-MZZf7LIzMcEY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft
Manifest number:          70
Signing time:             Sat 29 Mar 2025 06:13:35 +0000
Manifest this update:     Sat 29 Mar 2025 06:13:35 +0000
Manifest next update:     Sat 05 Apr 2025 06:13:35 +0000
Files and hashes:         1: 09zhcUP5z134AE-MZZf7LIzMcEY.crl (hash: GNdIgVbyGzDcpoXXK5cakHG7TLShTulqwxYJVRHIWoU=)
                          2: 6A3FA88A693C11EF8B032237C4F9AE02.roa (hash: 2nR72gd8fEEO90sm8QM92ng7Ua1iEJ7Ic792MqQQzEM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7D74
        Validity
            Not Before: Mar 29 06:13:35 2025 GMT
            Not After : Apr  5 06:13:35 2025 GMT
        Subject: CN=67e78f8f-901d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:94:b8:c5:a8:8e:ee:52:a2:6f:59:e4:a3:14:
                    f0:3c:cb:7f:55:dd:f0:e5:69:8a:46:0c:79:09:df:
                    15:75:29:c1:32:64:3c:f2:0a:eb:5d:86:84:0f:b9:
                    c7:68:6c:cc:d2:a2:d1:41:d7:2c:fb:cd:93:62:43:
                    dd:2a:92:8c:2d:26:b5:d2:1e:87:2a:34:50:49:79:
                    f3:77:8b:4d:28:ce:bd:84:7d:f6:4d:c1:18:93:0a:
                    19:f8:55:ce:2a:5b:2f:7b:c0:fd:75:17:a4:c0:bc:
                    1a:ba:fc:5c:cf:a7:45:5e:9d:58:82:fc:67:3b:45:
                    6a:8c:ce:d1:2f:e3:a6:08:9e:fd:5b:83:d1:26:43:
                    a8:74:62:5e:36:7c:b8:ed:59:22:b0:7e:b5:61:36:
                    f5:30:aa:42:b5:0e:e7:fa:63:23:ba:23:8c:c5:85:
                    76:2f:bb:e6:07:a4:2a:ec:39:89:e2:cb:a1:e1:eb:
                    5f:94:8a:f4:50:27:cf:e6:9b:24:d0:f3:66:d8:28:
                    75:4c:b8:d3:37:3e:a5:b2:b5:a9:cd:ca:11:eb:0e:
                    7b:0d:27:eb:69:cf:66:ac:4f:29:c3:7c:99:e1:a7:
                    e3:82:ab:18:cb:62:a4:6e:aa:d0:82:56:1b:78:f5:
                    56:f6:9a:55:32:b9:3c:b1:f1:38:1b:29:2e:17:58:
                    07:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:18:78:D7:31:B8:9A:7C:FB:18:E4:B5:10:1F:68:F5:7C:D3:2A:91
            X509v3 Authority Key Identifier:
                keyid:D3:DC:E1:71:43:F9:CF:5D:F8:00:4F:8C:65:97:FB:2C:8C:CC:70:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09zhcUP5z134AE-MZZf7LIzMcEY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:75:1a:b9:7e:72:cc:d7:89:66:20:ca:c7:d7:87:c4:48:3e:
         da:ab:45:44:16:f2:4e:34:09:4d:c1:df:ac:4b:2a:a1:21:0c:
         f2:29:b9:f9:c7:c4:56:f7:0f:fc:58:c1:30:65:6c:5a:01:a9:
         ec:7b:1c:fd:d3:c4:9a:44:99:25:00:1e:cb:09:20:34:ef:9e:
         f4:e0:81:2e:86:97:a8:cf:64:52:03:2d:c1:79:51:2b:77:90:
         93:20:61:eb:49:22:f3:2c:4c:64:f9:06:66:a5:e0:b7:82:00:
         82:8e:c5:b8:a7:6a:66:da:a3:59:d9:46:30:5c:b4:50:21:e8:
         2a:d9:56:12:a4:4e:7d:de:f0:68:35:9b:45:60:d4:b2:b2:68:
         58:80:5f:ce:5c:54:2f:e1:fe:f6:35:ff:e5:64:c1:75:cd:b2:
         d1:7e:5b:32:c6:4a:3f:74:ec:76:ef:bc:7b:cb:65:0a:70:03:
         4f:10:bf:aa:ee:ed:f8:76:3b:aa:ec:f3:d8:6d:44:8a:34:01:
         72:aa:6c:26:26:a8:a6:06:46:c9:5e:25:cc:62:4c:f2:16:0a:
         f2:e7:f3:f7:0e:05:d4:5e:1f:eb:63:eb:73:e1:d4:35:24:c6:
         ff:b1:57:71:68:d4:56:25:7f:84:00:28:05:e1:99:31:0a:1e:
         eb:a4:ad:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----