Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft
File:                     g3nXR_dKVe3HOg4EIcebXsDk3nY.mft (raw, json)
Hash identifier:          qLri1CMrbIghTbfIH73Y4uURvQC6xbV9mzCryAUOiAc=
Subject key identifier:   A5:0E:F1:FF:69:98:99:21:4B:95:EA:4E:88:75:F9:31:53:3F:B7:55
Authority key identifier: 83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76
Certificate issuer:       /CN=A91F9C42/serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76
Certificate serial:       014A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft
Manifest number:          0144
Signing time:             Sat 29 Mar 2025 03:46:31 +0000
Manifest this update:     Sat 29 Mar 2025 03:46:30 +0000
Manifest next update:     Sat 05 Apr 2025 03:46:30 +0000
Files and hashes:         1: g3nXR_dKVe3HOg4EIcebXsDk3nY.crl (hash: bXZ/Xkwpypg+m/oS7M5WQ3fKLsxXW5KyJQw2bOXUHUI=)
                          2: 3A7527ECC1F711EF8B510B86C4F9AE02.roa (hash: PSPyDidUc2Ysk1Zzt/hq/yHS8xGylcttSXcqtY7zcuE=)
                          3: D7FC7B4C217A11EE8C2D2243C4F9AE02.roa (hash: Bz/Ejq1tEuz4EVJF91Xaku+18lMYhCoYHiQXonf6xO8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 330 (0x14a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9C42
        Validity
            Not Before: Mar 29 03:46:30 2025 GMT
            Not After : Apr  5 03:46:30 2025 GMT
        Subject: CN=67e76d16-8ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f2:ab:df:49:0c:f5:d0:9b:9e:8d:4d:6e:6d:
                    df:26:ac:6d:c4:70:5c:09:45:1a:34:23:a5:6b:58:
                    32:f5:db:c4:23:83:7e:f8:74:79:2a:19:b7:90:c0:
                    59:bf:fa:18:40:81:da:93:29:ae:05:4a:55:16:5a:
                    c6:04:87:ff:8c:76:b5:71:b9:6d:5a:99:f9:64:71:
                    11:e1:92:f1:38:51:bc:01:6d:09:0a:57:cd:05:1e:
                    b1:69:6a:5d:a4:6b:01:cf:ab:97:17:22:e8:aa:d7:
                    7e:82:c6:24:24:9d:f8:ff:0a:70:b7:0f:31:44:5f:
                    be:88:83:3e:88:6c:a0:68:19:f5:13:c7:4b:37:42:
                    e9:01:25:7b:83:9c:eb:2a:36:cd:a5:b2:3a:db:30:
                    ac:2b:8d:3c:6c:0e:da:0d:2c:ba:0b:86:1e:ed:0e:
                    15:1b:78:72:f6:6c:b5:1d:3d:fb:e8:12:60:d8:eb:
                    23:1f:af:2e:02:d9:a7:5e:8f:b7:74:07:a0:49:a4:
                    22:14:17:80:30:bd:cd:07:25:ed:09:11:9d:d9:51:
                    f3:fe:de:44:b6:ac:a0:64:d4:c9:77:7e:d6:42:e6:
                    df:3f:52:ba:8e:11:e0:91:81:ec:ec:b5:f8:a7:c7:
                    68:9d:ef:6f:93:98:8b:f0:b1:c9:a3:6e:90:7c:19:
                    94:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:0E:F1:FF:69:98:99:21:4B:95:EA:4E:88:75:F9:31:53:3F:B7:55
            X509v3 Authority Key Identifier:
                keyid:83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:0f:bd:21:3b:20:26:0b:87:2f:86:14:9f:50:6b:6f:15:a3:
         a5:4b:0a:de:df:e1:b2:f2:b0:ce:3f:1e:59:45:9c:25:4b:fc:
         25:32:6c:d2:76:2d:f0:03:82:b3:4b:d9:e2:af:c6:49:37:aa:
         4d:5b:11:98:9c:5e:6e:69:1e:7e:94:dd:b4:79:e4:f4:3c:1d:
         3f:a1:32:9b:7a:b5:d1:0f:68:aa:cc:61:52:f6:ee:d7:2c:4d:
         1b:df:5f:0a:46:8d:5e:09:d9:c5:5b:3e:38:9f:7c:1d:79:9a:
         6b:3c:0c:fd:9c:b8:f9:56:b7:8a:41:ec:6d:b0:3e:55:df:d2:
         eb:84:f8:91:ab:ec:92:99:f2:f0:7d:ef:08:67:d2:6d:90:c4:
         b7:8b:31:3d:f1:6d:1f:55:2a:94:41:48:e7:b6:2e:a8:0d:d3:
         86:eb:5a:49:f7:df:74:20:b1:73:d2:65:18:fe:fa:4b:58:58:
         a7:9c:bb:96:bb:eb:cd:2d:b0:99:b1:82:70:d1:fb:24:0c:75:
         73:62:f0:63:16:c3:dd:76:8c:a7:91:cc:0f:e5:2c:87:a2:d4:
         77:be:2c:b0:c0:9c:b8:2c:d2:2c:31:8b:d7:cb:9f:91:33:1b:
         40:25:6f:f1:38:cf:c2:d3:ab:93:bc:e1:2b:69:c4:02:e2:55:
         6e:0d:4c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----