Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft
File:                     8eArOUb---b0ZPQ0jvIVX2HQehs.mft (raw, json)
Hash identifier:          1e9bWbNzADAH4IG1S6nv6mG8wLSjiQZnzZNwvanRsIc=
Subject key identifier:   B2:BC:F8:BA:54:03:80:05:E1:BB:D0:E7:67:67:D8:DF:1C:A4:50:BE
Authority key identifier: F1:E0:2B:39:46:FE:FB:E6:F4:64:F4:34:8E:F2:15:5F:61:D0:7A:1B
Certificate issuer:       /CN=A91FF4FC/serialNumber=F1E02B3946FEFBE6F464F4348EF2155F61D07A1B
Certificate serial:       0DBF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft
Manifest number:          0DBA
Signing time:             Fri 28 Mar 2025 18:02:40 +0000
Manifest this update:     Fri 28 Mar 2025 18:02:39 +0000
Manifest next update:     Fri 04 Apr 2025 18:02:39 +0000
Files and hashes:         1: 8eArOUb---b0ZPQ0jvIVX2HQehs.crl (hash: XU3GSdlRfUN7+IOUdYZKF9O5tuELr1ktON1ejgoR+u4=)
                          2: A280C1FCA06D11EB92FB3739C4F9AE02.roa (hash: RrERgA4WZb4Wa4GmbO3PCvypqKfkRQ0lOSC1wGlAXvY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3519 (0xdbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF4FC
        Validity
            Not Before: Mar 28 18:02:39 2025 GMT
            Not After : Apr  4 18:02:39 2025 GMT
        Subject: CN=67e6e440-f793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8e:c1:7d:1c:96:d0:68:b4:98:10:f6:5a:9a:
                    cf:14:51:99:8b:67:2a:07:ae:e6:da:18:21:86:79:
                    0f:64:84:d7:b2:a9:92:17:13:a6:e7:9b:67:94:ea:
                    e8:33:1c:14:df:d7:08:c9:2d:10:08:f0:bc:64:86:
                    5c:ee:48:c9:75:30:65:a5:a1:2d:49:f2:51:c0:84:
                    8a:66:bb:3a:1d:53:66:33:c0:94:17:46:45:d2:7f:
                    24:e9:6e:14:f0:d3:3e:6e:71:87:49:b3:b9:aa:97:
                    f8:38:c9:86:a1:bf:1b:e9:4e:d6:b3:2f:b7:8a:9b:
                    c8:95:2a:ae:ed:35:5e:dd:24:3d:9d:e7:18:f4:5d:
                    88:c5:e7:64:40:65:87:59:8b:58:c5:b1:c7:ab:f6:
                    94:de:9f:37:48:15:30:01:c5:41:d7:06:72:61:ea:
                    2f:65:95:9b:25:a5:35:6c:24:8e:a6:74:a3:82:ba:
                    ec:4a:56:4c:35:c1:d7:e4:6e:f2:aa:36:e8:a6:76:
                    eb:cf:8a:a6:f8:90:46:dc:35:5b:36:f2:34:a7:d2:
                    fa:81:43:02:64:13:36:f3:13:60:35:58:d3:0c:5f:
                    43:89:81:9d:cf:d0:f9:5b:e1:d6:ff:88:c6:e2:60:
                    84:36:ee:85:81:05:73:e4:d9:9d:53:c3:87:71:41:
                    95:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:BC:F8:BA:54:03:80:05:E1:BB:D0:E7:67:67:D8:DF:1C:A4:50:BE
            X509v3 Authority Key Identifier:
                keyid:F1:E0:2B:39:46:FE:FB:E6:F4:64:F4:34:8E:F2:15:5F:61:D0:7A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:5d:92:9c:7d:28:07:5f:76:39:02:8a:88:d5:50:9b:dc:0b:
         d5:94:5a:5d:e2:b4:ee:14:a5:40:63:0f:d3:d3:d1:69:10:ba:
         41:0d:96:3e:f5:02:ee:20:d9:bf:0b:51:a7:e5:09:13:6e:22:
         d0:68:83:dc:67:54:e6:1e:a5:03:7f:ec:ec:6a:ac:a2:57:95:
         0f:5f:8b:8e:44:c7:3c:af:d4:c5:06:15:1a:a9:cd:26:93:2b:
         45:5c:95:68:ee:a4:bf:0d:f3:45:56:d6:b5:95:a6:3d:bd:12:
         ba:ef:b7:97:fe:8c:8b:9e:ca:69:f7:b8:15:37:eb:60:00:fc:
         d9:ad:d9:c0:72:51:ee:04:cd:b9:eb:8c:98:56:1d:46:a4:74:
         7d:9d:00:0a:44:a0:18:3f:eb:ba:96:13:bc:56:b7:47:80:c5:
         8a:b5:6d:ce:6e:54:a0:a2:b9:0d:56:7e:81:d2:68:9e:d2:6c:
         c0:e4:71:10:a7:d0:ee:9f:cc:cb:5e:9b:06:4c:d6:64:90:a7:
         ba:9b:51:b3:54:95:1a:55:c3:a6:7a:6c:0e:63:a2:73:a4:01:
         b5:5a:4f:cf:72:1f:9f:87:62:ce:c2:b6:d1:d8:db:ea:a6:b5:
         03:94:7a:f0:91:9b:3b:1c:d6:c9:2c:1c:e4:12:00:24:3e:be:
         4d:9c:3c:72
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkY0RkMxMTAvBgNVBAUTKEYxRTAyQjM5NDZGRUZCRTZGNDY0RjQzNDhFRjIxNTVG
NjFEMDdBMUIwHhcNMjUwMzI4MTgwMjM5WhcNMjUwNDA0MTgwMjM5WjAYMRYwFAYD
VQQDEw02N2U2ZTQ0MC1mNzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuI7BfRyW0Gi0mBD2WprPFFGZi2cqB67m2hghhnkPZITXsqmSFxOm55tnlOro
MxwU39cIyS0QCPC8ZIZc7kjJdTBlpaEtSfJRwISKZrs6HVNmM8CUF0ZF0n8k6W4U
8NM+bnGHSbO5qpf4OMmGob8b6U7Wsy+3ipvIlSqu7TVe3SQ9necY9F2IxedkQGWH
WYtYxbHHq/aU3p83SBUwAcVB1wZyYeovZZWbJaU1bCSOpnSjgrrsSlZMNcHX5G7y
qjbopnbrz4qm+JBG3DVbNvI0p9L6gUMCZBM28xNgNVjTDF9DiYGdz9D5W+HW/4jG
4mCENu6FgQVz5NmdU8OHcUGV0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLK8+LpU
A4AF4bvQ52dn2N8cpFC+MB8GA1UdIwQYMBaAFPHgKzlG/vvm9GT0NI7yFV9h0Hob
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjRGQy8zQjYzNEJCRUI0
NDQxMUU5ODY3MTNEMURDNEY5QUUwMi84ZUFyT1ViLS0tYjBaUFEwanZJVlgySFFl
aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhlQXJPVWItLS1iMFpQUTBqdklWWDJIUWVocy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RjRGQy8zQjYzNEJCRUI0NDQxMUU5ODY3MTNEMURDNEY5QUUwMi84ZUFyT1ViLS0t
YjBaUFEwanZJVlgySFFlaHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBRXZKcfSgHX3Y5AoqI1VCb3AvVlFpd4rTuFKVAYw/T09FpELpBDZY+
9QLuINm/C1Gn5QkTbiLQaIPcZ1TmHqUDf+zsaqyiV5UPX4uORMc8r9TFBhUaqc0m
kytFXJVo7qS/DfNFVta1laY9vRK677eX/oyLnspp97gVN+tgAPzZrdnAclHuBM25
64yYVh1GpHR9nQAKRKAYP+u6lhO8VrdHgMWKtW3OblSgorkNVn6B0mie0mzA5HEQ
p9Dun8zLXpsGTNZkkKe6m1GzVJUaVcOmemwOY6JzpAG1Wk/Pch+fh2LOwrbR2Nvq
prUDlHrwkZs7HNbJLBzkEgAkPr5NnDxy
-----END CERTIFICATE-----