Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft
File:                     HTaU7xQhyRhUqIesqWELxWCucIQ.mft (raw, json)
Hash identifier:          LVskuzAJxQn8iADch0Mgj+ydD+0Qn0JHNTVaaC6annA=
Subject key identifier:   3F:59:BA:BA:C7:51:90:0D:47:5B:BA:87:4D:19:91:88:37:1B:FD:26
Authority key identifier: 1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84
Certificate issuer:       /CN=A919EB4E/serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084
Certificate serial:       0E8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft
Manifest number:          0E6D
Signing time:             Fri 28 Mar 2025 17:50:44 +0000
Manifest this update:     Fri 28 Mar 2025 17:50:43 +0000
Manifest next update:     Fri 04 Apr 2025 17:50:43 +0000
Files and hashes:         1: HTaU7xQhyRhUqIesqWELxWCucIQ.crl (hash: X0o7QNAD08KnEq6w3MoJutCGGjNETJVueQSN6AmjfdA=)
                          2: 89A93D5E971811E9AE51CA15C4F9AE02.roa (hash: 5Mh91OkrfeMvxN8zUlmhEA/cU28vfWanQEE4gEKGkZE=)
                          3: F73EFF46839211EEA1EC8A0EC4F9AE02.roa (hash: 2l3pLCgtvIHc/+HLPDdULsr+5gl+RLvHUNSD8p67gig=)
                          4: 7A40B730E2D811EBAB97665DC4F9AE02.roa (hash: y3SbjjkjO1hJ5EMyWPMdR5kijs47MB+EfJV1pQiq6As=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3726 (0xe8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EB4E
        Validity
            Not Before: Mar 28 17:50:43 2025 GMT
            Not After : Apr  4 17:50:43 2025 GMT
        Subject: CN=67e6e174-ac02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ac:69:4c:2f:6b:b0:e9:c5:5b:58:67:82:ba:
                    8c:98:5c:48:4c:71:4d:d0:92:ee:b0:00:c9:71:51:
                    86:06:d2:48:77:23:c8:c2:1a:4b:42:0b:bf:a7:f4:
                    35:b9:93:e1:9a:53:37:db:32:72:40:7f:0a:ab:a6:
                    28:19:cd:cf:01:79:d6:eb:7d:6f:8c:ca:1e:26:be:
                    8b:2d:c1:f5:0c:04:4a:57:c9:9a:c8:43:80:a8:2d:
                    9a:39:65:a1:07:af:fd:54:94:03:d8:46:b6:eb:0f:
                    7d:3a:5a:43:ef:50:3f:1c:b4:ac:87:0e:b9:73:2f:
                    98:9b:65:46:40:3a:1e:cf:8a:c0:69:83:22:41:1d:
                    07:c4:f6:91:fd:e1:65:65:6a:9d:00:6e:d8:64:e8:
                    b2:3c:6e:82:08:d3:f7:c9:cf:73:ec:1e:6a:a9:ab:
                    93:b1:6b:37:db:ef:8e:7b:93:03:e6:4a:32:98:b2:
                    91:82:3c:90:b4:bb:b9:d1:44:f9:ff:4e:cf:20:e6:
                    9e:e8:07:3e:7e:1a:f5:65:01:a6:96:a8:cd:4c:e3:
                    f1:50:93:d2:35:d6:bd:98:ff:75:98:4a:02:2a:fa:
                    b8:09:a3:4d:fe:7d:7f:0d:a8:66:26:de:dc:45:19:
                    0c:65:98:bb:12:db:98:f6:93:f2:30:c6:a2:51:16:
                    0b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:59:BA:BA:C7:51:90:0D:47:5B:BA:87:4D:19:91:88:37:1B:FD:26
            X509v3 Authority Key Identifier:
                keyid:1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:3f:b0:3c:e4:e9:86:2d:06:ed:80:9d:b0:9e:51:23:e0:b4:
         de:de:30:0b:03:d5:00:31:11:ab:29:14:e9:97:2a:df:02:c0:
         fd:d7:c6:54:6f:62:85:35:9e:eb:1a:91:37:a4:b2:e8:a4:aa:
         78:ea:4f:fc:f3:ea:35:e6:52:9d:72:8a:4d:0f:f7:b3:05:ed:
         b7:e6:e7:64:5f:d3:e9:65:c4:56:73:55:e3:46:d9:93:d9:5a:
         ba:51:43:c0:1a:f9:b2:11:49:db:33:e7:80:ec:8c:80:7f:80:
         96:fe:2c:90:c2:03:a0:61:21:c4:3f:7c:d2:b4:82:98:b0:cb:
         35:8e:50:9a:f9:26:2c:12:22:b0:e6:c5:70:f6:01:db:f8:85:
         c9:77:7c:da:ca:41:0d:46:a9:51:8b:af:28:43:ff:25:bc:d6:
         16:d8:0e:a1:74:4a:f5:49:c0:a8:86:62:3b:56:1c:58:65:85:
         27:b7:f5:18:00:ee:89:21:6e:c1:42:b0:bb:8f:47:cb:11:ca:
         b0:8b:e4:93:e4:5a:de:49:e8:ac:ed:d6:f4:75:09:31:9e:c9:
         97:ce:25:04:88:77:4a:f1:bf:a1:b7:6a:e2:ee:d5:f6:5d:a1:
         b6:cf:3e:f2:ae:29:13:90:44:7e:ce:84:1f:c2:ab:7c:a7:76:
         1d:83:03:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----