Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
File:                     uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft (raw, json)
Hash identifier:          IhyOJ+ReqdmjFrmYhseCFr7T1uj3G8c+rcgYdurmZBo=
Subject key identifier:   A7:87:DE:5B:A8:A4:EC:79:DC:46:ED:5F:42:5A:82:78:BB:A6:C8:6E
Authority key identifier: B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9
Certificate issuer:       /CN=A919E83B/serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9
Certificate serial:       07D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
Manifest number:          07BF
Signing time:             Fri 28 Mar 2025 21:25:48 +0000
Manifest this update:     Fri 28 Mar 2025 21:25:47 +0000
Manifest next update:     Fri 04 Apr 2025 21:25:47 +0000
Files and hashes:         1: uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl (hash: 7o89ebZ2P43tZa5A80QDjxnB1hnG9jlIP3+j46HNyu4=)
                          2: E68BF368DD9911EF85614A53C4F9AE02.roa (hash: r8A/94ghc8/XPx2goFiqLMeQN6YHcN5iJvMsFi80QDA=)
                          3: 8BB3088E982F11ED9D647578C4F9AE02.roa (hash: mT5QuDERTmVPlXZR5moXPT7cKPExBS2mAmCXS/H0poY=)
                          4: F89E68D6982911ED90F8C877C4F9AE02.roa (hash: XvMq/9vITeOjRr0vA0uouJy5AhVhjzN8FwnxzNY6RG4=)
                          5: 2DCC2988982711ED9D75C85AC4F9AE02.roa (hash: T7wBB0Q/OxACrFHdpRUHNW4aCrfVBO0wryHpyaFwA8M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2009 (0x7d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E83B
        Validity
            Not Before: Mar 28 21:25:47 2025 GMT
            Not After : Apr  4 21:25:47 2025 GMT
        Subject: CN=67e713db-a947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9a:4f:75:46:de:d4:ed:5f:60:be:73:74:a7:
                    17:f6:c5:fe:ca:39:78:5d:aa:0a:26:9c:e5:05:c0:
                    c5:f2:3d:3d:4e:70:07:a1:da:ab:74:52:8a:64:d0:
                    48:26:5e:f2:bb:86:e2:3c:d8:5e:97:11:87:24:c3:
                    69:11:a2:b9:4f:49:0e:56:1d:c9:71:33:4a:76:67:
                    49:32:30:7f:d3:83:7e:95:d9:0f:6d:e8:a5:eb:5e:
                    6d:19:b5:63:43:da:ce:4d:5b:e8:1d:51:62:a6:c4:
                    0c:5e:e3:67:66:80:e6:1d:41:dc:5d:b8:d4:fa:b5:
                    40:bc:7a:b0:61:f5:c8:7e:62:d6:57:aa:02:79:f0:
                    8c:36:9a:d9:bc:21:ad:59:29:ab:ac:72:d2:e5:21:
                    e2:e4:cf:ff:3c:bb:b2:c4:14:d8:70:99:55:c5:bd:
                    97:82:fe:df:52:c0:0e:ee:67:c4:9f:5b:5f:60:02:
                    73:e5:f6:b5:cd:47:f7:a3:9d:a0:ab:25:3f:8d:1b:
                    d5:56:1d:75:c2:46:f4:ab:63:c4:ad:50:6c:99:74:
                    0a:8b:b2:e8:cb:59:18:83:7a:b2:cf:80:b4:07:d1:
                    9c:d5:31:97:9f:cb:c9:38:7b:c3:93:0a:2c:04:b4:
                    24:56:7e:98:62:18:0b:41:f2:ad:d2:16:34:03:68:
                    43:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:87:DE:5B:A8:A4:EC:79:DC:46:ED:5F:42:5A:82:78:BB:A6:C8:6E
            X509v3 Authority Key Identifier:
                keyid:B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:15:66:7f:64:ab:01:1a:ec:f6:79:93:f8:bc:08:7c:bf:ea:
         28:b3:c1:bf:7e:1e:3c:2c:30:69:4f:14:0e:be:37:32:8f:80:
         41:b3:d5:81:ea:11:bf:64:dd:8b:77:00:2d:3b:29:36:2a:89:
         57:a6:b7:59:b8:20:d6:41:6c:c7:f9:95:dc:85:b6:32:75:ec:
         5a:83:5b:30:f0:45:2b:45:a7:06:22:c7:1d:4e:3e:89:9d:cd:
         d9:7f:6d:b5:8e:9a:1c:8f:85:61:75:15:f1:86:e0:61:cd:ec:
         57:df:9e:c6:6d:09:11:1b:e5:91:f7:a9:90:85:b7:55:06:6c:
         aa:cf:7d:ce:8d:9f:42:ed:8c:9d:6e:91:74:31:4c:3f:b5:9b:
         40:0f:50:eb:7d:6a:90:a4:0b:8d:9b:d0:9d:6c:91:6f:77:06:
         8f:3f:f9:0b:76:05:0c:64:6c:04:b6:43:22:1d:c1:4f:17:08:
         47:e6:80:5b:1d:db:2c:e3:86:ea:75:12:99:74:a1:73:97:a6:
         cf:fa:0d:d2:e5:7d:c4:d7:cf:30:ff:ca:b8:e9:b2:d8:98:34:
         e7:38:ca:e0:94:39:e7:0f:97:9c:dc:03:ab:0b:49:9c:ce:66:
         58:3a:bb:08:c3:6a:94:64:5e:7c:0f:28:c4:07:3d:55:b5:25:
         7e:0a:07:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----