Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft
File:                     ooradhG9_Q-tuB2KgDoRCZAPd4A.mft (raw, json)
Hash identifier:          D49AC70NtHw7bI1t+IdUCTGHUPqd2Kb9Ct4JrA0oGfo=
Subject key identifier:   6B:22:4F:41:3B:48:7F:70:E9:CD:72:6D:D2:23:1E:A6:83:15:54:05
Authority key identifier: A2:8A:DA:76:11:BD:FD:0F:AD:B8:1D:8A:80:3A:11:09:90:0F:77:80
Certificate issuer:       /CN=A91FBFC9/serialNumber=A28ADA7611BDFD0FADB81D8A803A1109900F7780
Certificate serial:       07ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ooradhG9_Q-tuB2KgDoRCZAPd4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft
Manifest number:          07E1
Signing time:             Fri 28 Mar 2025 21:14:41 +0000
Manifest this update:     Fri 28 Mar 2025 21:14:40 +0000
Manifest next update:     Fri 04 Apr 2025 21:14:40 +0000
Files and hashes:         1: ooradhG9_Q-tuB2KgDoRCZAPd4A.crl (hash: 0khgDcZ+wkloS8/lhfsmvoB4ovD5I6ngKSvJ3nPQjl8=)
                          2: 76A59020E12911EAB8642E19C4F9AE02.roa (hash: 7SJtSkXKrhgxiJ/u+ScdWT/CZ8bW5ltRvm0xbyH8/2Q=)
                          3: B019C596499E11EBA61D7146C4F9AE02.roa (hash: 9WsPzCvsd/JuejjAiVSpINcZRZVtqlKA7kdOF+8fdUE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2029 (0x7ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBFC9
        Validity
            Not Before: Mar 28 21:14:40 2025 GMT
            Not After : Apr  4 21:14:40 2025 GMT
        Subject: CN=67e71141-5331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f6:48:61:97:3e:fc:1e:f0:25:b5:51:85:82:
                    8e:04:79:f1:e5:a9:90:db:c2:35:44:b9:64:ea:01:
                    8e:9b:4d:98:9c:a9:b9:b1:b8:76:b5:38:b2:fa:5c:
                    6d:bb:76:ed:63:7d:63:05:e7:63:19:81:6a:fe:e5:
                    3b:2f:25:3b:9b:50:a4:bd:68:cb:51:87:e2:77:66:
                    3b:b8:a9:24:b4:d7:fd:f5:aa:f1:ad:0b:0e:4a:b1:
                    75:6d:ef:e0:35:6c:03:be:c7:86:31:6e:53:70:57:
                    d9:13:d7:cb:5e:5e:e6:60:f7:d9:df:ae:ef:b9:b6:
                    f3:f2:28:3c:24:02:e0:3b:69:62:e9:99:79:e6:5c:
                    e4:34:13:40:a3:a0:f3:be:72:00:dc:b6:57:33:eb:
                    d5:c0:63:a7:fb:34:bd:f3:40:45:c9:6a:1a:e9:24:
                    3c:66:cb:1f:07:48:f8:05:f7:f6:24:f2:e8:ff:de:
                    31:f8:5c:ed:16:25:8b:78:0a:a1:71:06:43:a9:8f:
                    e6:60:8e:b2:e7:c8:87:0a:a8:52:d4:72:b5:96:95:
                    b0:26:a7:82:74:93:8f:cb:a3:17:bf:19:5c:da:56:
                    e4:53:e9:04:74:ad:69:07:6d:a5:5c:c3:6a:e6:6f:
                    30:c3:75:cf:81:ec:fe:36:a9:c0:85:0a:4d:62:8b:
                    c9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:22:4F:41:3B:48:7F:70:E9:CD:72:6D:D2:23:1E:A6:83:15:54:05
            X509v3 Authority Key Identifier:
                keyid:A2:8A:DA:76:11:BD:FD:0F:AD:B8:1D:8A:80:3A:11:09:90:0F:77:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ooradhG9_Q-tuB2KgDoRCZAPd4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:3e:29:75:e0:bf:83:a7:0a:40:43:5f:d2:53:f3:b4:38:cb:
         58:5b:69:8d:66:6a:96:78:ac:d9:f9:1b:8a:b1:10:1d:e8:00:
         f5:a5:39:19:02:84:06:08:e0:48:64:72:a5:c0:96:e7:1e:ec:
         49:94:13:d3:46:85:e6:5f:5e:03:34:fe:86:bd:66:9c:7b:b2:
         94:85:fd:8f:75:1b:81:3c:53:62:d9:4f:a6:4e:9d:7a:15:0a:
         ce:1a:9a:e6:33:05:89:2e:72:62:e9:c5:4d:63:04:00:5c:83:
         fe:7c:c3:71:87:c8:da:6d:ac:04:04:86:da:5a:09:62:98:91:
         54:a2:19:58:24:32:68:ee:d5:fd:d7:c0:35:55:ff:0e:1f:c1:
         53:b7:6a:1b:e6:91:3f:6c:27:b9:f6:99:9d:b6:8b:ca:63:6a:
         e2:ed:b4:dd:c7:ec:c7:09:e3:86:6c:bb:48:44:83:bb:a3:72:
         a8:d5:11:74:42:76:77:7e:97:25:95:19:56:8c:7e:a6:6f:97:
         a3:5c:7b:14:47:a5:2f:93:26:83:11:20:a9:f4:ed:0d:db:d0:
         0c:f3:79:04:0f:76:f0:13:2d:98:58:f8:8d:05:53:53:43:64:
         fa:90:ca:2a:9f:30:39:a7:d5:f7:6b:09:05:1a:17:78:4c:20:
         fb:fe:3f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----