Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft
File:                     zb-gptBh4f5wNLQPLuLktT3o_eE.mft (raw, json)
Hash identifier:          Lp5rIb9JW9Hfl1hUUHpptruFN8BheLdMLIpXdquQaZ4=
Subject key identifier:   79:DE:FD:01:DE:CE:59:B8:58:29:BA:44:6F:52:C0:15:7E:45:3E:1A
Authority key identifier: CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1
Certificate issuer:       /CN=A91F98B5/serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1
Certificate serial:       18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft
Manifest number:          17
Signing time:             Sat 29 Mar 2025 07:17:41 +0000
Manifest this update:     Sat 29 Mar 2025 07:17:40 +0000
Manifest next update:     Sat 05 Apr 2025 07:17:40 +0000
Files and hashes:         1: zb-gptBh4f5wNLQPLuLktT3o_eE.crl (hash: NAhrDVh4wEeYyLZgWlHO9M6FnyWXf+BYwNtXdnQesWw=)
                          2: EE851FDEEC0011EFADA98F2DC4F9AE02.roa (hash: OZMDk8CAGnHPuScyAupgMP+yHuNGfJRkkoNsoyK4gd8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F98B5
        Validity
            Not Before: Mar 29 07:17:40 2025 GMT
            Not After : Apr  5 07:17:40 2025 GMT
        Subject: CN=67e79e95-2388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ce:67:36:3a:b7:ef:95:70:7d:44:55:57:de:
                    14:3d:f3:52:76:77:e3:65:72:93:71:f6:4f:61:ad:
                    36:04:f8:ab:58:0d:cb:21:e8:3b:b7:b0:90:e7:99:
                    a3:78:b9:41:ca:5c:ad:7c:b3:f5:cd:dc:69:65:2e:
                    45:2a:e4:5d:ed:d5:2f:c1:a7:8c:c7:da:df:6e:32:
                    4f:ed:8c:59:e7:82:60:b8:39:51:78:02:aa:81:1c:
                    79:86:93:58:2b:08:5b:79:08:15:8d:59:6c:bc:dd:
                    94:a0:33:97:13:4f:ac:29:57:ca:60:09:7c:b9:07:
                    83:eb:5d:4d:40:ff:41:5d:f5:4f:54:5b:13:d3:5f:
                    ff:88:73:44:b0:44:96:5c:a7:9d:0e:95:97:84:e2:
                    ba:7e:70:50:13:1c:89:02:9f:30:f8:c6:2c:4b:3b:
                    8f:3a:3a:e4:12:dd:d1:33:b0:97:e1:e4:ba:ef:bb:
                    e1:7f:83:d0:89:53:fb:7b:a0:a1:d5:ac:1e:a1:75:
                    1c:0a:89:d8:e4:e3:56:c1:68:7b:da:37:fb:bc:97:
                    01:3f:e5:e5:d4:4a:85:4e:86:84:41:4d:25:cf:2a:
                    d3:16:47:67:47:a0:57:bc:7b:e2:d8:e6:d3:44:82:
                    f2:64:fb:6e:1d:8d:41:f9:7c:13:b6:88:16:43:9d:
                    8d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:DE:FD:01:DE:CE:59:B8:58:29:BA:44:6F:52:C0:15:7E:45:3E:1A
            X509v3 Authority Key Identifier:
                keyid:CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:cd:e8:b6:a9:84:65:42:16:77:a2:0e:b8:cc:38:76:44:a9:
         b4:b1:47:77:05:b0:1d:4e:c3:f3:f1:d0:aa:ab:57:2d:37:80:
         79:a6:b6:1f:11:ca:7d:35:9f:13:05:fb:63:bc:16:7a:93:0b:
         f8:09:4b:4f:57:e2:ef:c7:39:5b:cd:97:0f:d1:49:24:f5:05:
         18:1f:00:f3:9c:82:02:87:22:7a:87:ab:1a:65:ca:5d:3b:dc:
         19:f1:18:b2:b0:c1:35:3b:db:ec:96:3d:79:fb:04:98:c9:e3:
         8e:2a:34:a4:9a:17:2f:da:41:be:11:25:19:2f:d8:8e:cc:84:
         23:09:6e:8a:d9:a7:61:62:18:84:70:0c:0d:17:e2:ff:32:68:
         7a:05:0e:f9:ea:91:65:0c:6b:71:ba:91:0e:0d:51:81:8c:d4:
         9e:b4:04:d6:36:d8:f9:5d:23:ae:8a:db:b0:c9:2a:3b:84:0e:
         ba:62:5f:40:aa:83:b7:52:65:3c:1b:1d:9a:c0:83:8a:6c:fc:
         79:e1:29:fb:4c:65:c0:36:d7:c4:ca:98:db:33:b1:d4:cf:e0:
         89:4e:48:34:77:ac:cf:05:a1:83:52:5a:d3:01:f3:74:c3:64:
         88:63:18:be:8c:8c:20:5d:5d:9c:aa:8c:2c:0d:56:59:9a:36:
         b7:ac:d3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----