Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/UCKd4DW3JXL04AJ0cutoJv3-lK4.mft
File:                     UCKd4DW3JXL04AJ0cutoJv3-lK4.mft (raw, json)
Hash identifier:          3tthEWInvlv/KmQEz2YwYIIqQDpEPN+uSUE0hnRUqUA=
Subject key identifier:   72:DF:41:E7:99:50:AC:E6:A0:CC:02:8F:72:4E:77:7F:92:AD:57:28
Authority key identifier: 50:22:9D:E0:35:B7:25:72:F4:E0:02:74:72:EB:68:26:FD:FE:94:AE
Certificate issuer:       /CN=A9111590/serialNumber=50229DE035B72572F4E0027472EB6826FDFE94AE
Certificate serial:       0540
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCKd4DW3JXL04AJ0cutoJv3-lK4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/UCKd4DW3JXL04AJ0cutoJv3-lK4.mft
Manifest number:          04EA
Signing time:             Tue 13 Dec 2022 01:02:44 +0000
Manifest this update:     Tue 13 Dec 2022 01:02:43 +0000
Manifest next update:     Tue 20 Dec 2022 01:02:43 +0000
Files and hashes:         1: UCKd4DW3JXL04AJ0cutoJv3-lK4.crl (hash: a/52pw/U6QLGkyulBmerLHquSe2hSY4DQX7RDABv36Y=)
                          2: B8B76206651E11ED9F241567C4F9AE02.roa (hash: IBYkCwvBkdbnLi4ai9iB2k9/uqIoFndrbql6PjIrgno=)
                          3: 7C0246AE41E411ECB11D8F15C4F9AE02.roa (hash: ZzBqNcf2O97rinpRH/JLq8u9O60d3f/mEoTVFGyJabA=)
                          4: 5B72A1CE19B411EDB5935275C4F9AE02.roa (hash: 5xIxIk5tikKLBSk/T8ZQHiJkhU8fIY+tq4MJy79Vgc8=)
                          5: 4AF79C947A7011EB940A5E42C4F9AE02.roa (hash: NDifrjQadadLrTCkYqlz+p+zJwZmwG9uGyrGP0HPxuw=)
                          6: 7D83FFFE41E411ECB11D8F15C4F9AE02.roa (hash: bU0LH9KN5Ig7mmMCcfxjXi7gJfDAyFXD3hUdEfI2mI0=)
                          7: 51574146A58C11ECB0E23511C4F9AE02.roa (hash: 34xSbZuvDMVs6TeWYCOI+oqELAG0NmfqbnjY6R0tfO0=)
                          8: 7CD288B441E411ECB11D8F15C4F9AE02.roa (hash: XYYoPyly/lSqz39xeCWtTHtUk6VgIgT+GyNLcrVeA0Q=)
                          9: D6659698FC7311EB8E369E75C4F9AE02.roa (hash: J8fAHk4ZJs56SsDUE3UaYKiiHHl22fO2yWnrYeiJWwM=)
                          10: 50EE231C417A11ECA13E0E44C4F9AE02.roa (hash: z+SGj/WMrUhIZwE+FS/ngKth4sp8+c+hJRE2xD/Buiw=)
                          11: 60C7AB34FE9D11EBA06C6018C4F9AE02.roa (hash: +LLhTizfsvlTsFBLSmaA40LNkQHFsyeljtLxbmdPpOY=)
                          12: 87BF52BC2CF811EC94F13C7FC4F9AE02.roa (hash: fr2CzyYTcOQXqphaBSd/BYj6NXeg491xb82WGBulwWM=)
                          13: 5234E7BCA58C11ECB0E23511C4F9AE02.roa (hash: ELjO4PyCix6naOz4Re4MX+I5/5jpeSbwr6QTKh5PhqQ=)
                          14: 010AC25C662B11EDBF694F5AC4F9AE02.roa (hash: m4TpEo79d/gpD9RRWRXTBIFxPmjWrB0vrKsQNrp7k6A=)
                          15: 5FD5B616F14C11EB99AFEE14C4F9AE02.roa (hash: g2pRn12KhzZWdgxtc6x81swOTu9sUAj+S/Cxr0W9Du8=)
                          16: D5813750FC7311EB8E369E75C4F9AE02.roa (hash: 75KIiNNqzZMoTkNRQNnspX+oeP0MkV2Kxz9+X1e5Auo=)
                          17: 767783A49C3311EB9AACD084C4F9AE02.roa (hash: x/TmxnyNRKbRiaCYaaElqwa1ybw1sKGND/Vj7+7k508=)
                          18: 351208BEF14F11EB81CD331CC4F9AE02.roa (hash: K4rDuCB816HgPz3Tuw90Q/w5yMXJ7QET6q8+glykZPU=)
                          19: 16C489C43F8611ECB9DA3E56C4F9AE02.roa (hash: 8/XHOA/gXqIu7stsxWUWucRPZ5e3CZM+10prpgyNlcg=)
                          20: 32E15C8EF14F11EB81CD331CC4F9AE02.roa (hash: +Kau/MCtqYawn2vHZeGFgQJXSb3sEdzI8j9FLsQmC/8=)
                          21: 007955CE662B11EDBF694F5AC4F9AE02.roa (hash: w1FSLQHemD09D4nJwjBfCxdvhZBK7yhT6YfRtAL4ucI=)
                          22: 345A29BAF14F11EB81CD331CC4F9AE02.roa (hash: TQQSV43Vn/nEHBs819tYRcjh4g0Jx4VBGXQTHeBZWCs=)
                          23: 774A2C509C3311EB9AACD084C4F9AE02.roa (hash: X+vNgmZboVOIy993Q4izdplIrL80n3ZiiygV/FkFIZc=)
                          24: 286249720C5011ED82DAE666C4F9AE02.roa (hash: B97p/I1NpNM5YIxRGUdjKJBwWtWvNczUN/0iggaqe/s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1344 (0x540)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111590/serialNumber=50229DE035B72572F4E0027472EB6826FDFE94AE
        Validity
            Not Before: Dec 13 01:02:43 2022 GMT
            Not After : Dec 20 01:02:43 2022 GMT
        Subject: CN=6397cf33-f0a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f3:e4:13:9c:89:68:a2:ae:b1:55:90:93:1f:
                    a6:47:70:8e:23:0d:11:cd:db:eb:06:be:d1:00:43:
                    9e:65:fa:60:b7:f9:91:4a:78:48:ec:e9:6e:db:71:
                    ee:b8:43:7b:c0:52:8c:7b:9d:f5:a3:a9:9c:4c:bd:
                    41:c6:4f:e6:b1:56:18:57:d3:47:f3:97:7e:3c:4f:
                    62:72:b1:08:a0:5b:36:a3:93:ba:6e:e2:ed:fc:d9:
                    43:ea:ce:8b:19:61:e6:dd:92:56:4f:dd:ab:04:fb:
                    c8:4a:b2:ab:d5:55:ac:69:ae:2c:47:51:3c:83:59:
                    10:50:ed:8d:05:19:6d:b6:72:79:7e:c4:92:f8:bb:
                    8f:7c:9f:50:b7:25:e1:1e:97:10:0c:96:25:79:71:
                    63:05:27:27:cd:cd:b0:bd:a4:09:a9:0d:f4:82:84:
                    ec:8f:b0:c6:a7:04:92:76:e7:9e:ed:fa:16:15:24:
                    31:b9:a6:0d:fe:ea:b6:85:09:21:9e:9f:af:c8:47:
                    54:42:c6:a4:30:b9:83:66:7c:23:14:63:70:95:93:
                    df:fb:af:bd:ad:b7:5a:af:85:9e:03:ca:bd:fe:66:
                    7b:38:de:ea:b8:38:b9:75:42:d2:97:94:f2:6b:4f:
                    5f:c9:bf:a4:65:40:1b:76:41:7e:33:92:2a:c6:82:
                    64:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:DF:41:E7:99:50:AC:E6:A0:CC:02:8F:72:4E:77:7F:92:AD:57:28
            X509v3 Authority Key Identifier:
                keyid:50:22:9D:E0:35:B7:25:72:F4:E0:02:74:72:EB:68:26:FD:FE:94:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/UCKd4DW3JXL04AJ0cutoJv3-lK4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCKd4DW3JXL04AJ0cutoJv3-lK4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/UCKd4DW3JXL04AJ0cutoJv3-lK4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:46:96:29:6f:f9:21:c1:1c:e2:0b:8d:be:56:45:af:b4:cd:
         72:0e:80:d1:f9:6e:50:31:6b:15:5d:0a:69:78:51:52:f9:61:
         db:80:6a:46:7d:55:19:3b:ab:01:fc:00:87:df:21:62:2a:d6:
         df:a6:c8:32:76:75:17:da:ce:a4:77:85:b3:d5:d6:a4:f3:7d:
         45:4d:e3:7f:69:86:80:35:8e:f8:0b:bb:f9:94:33:82:6b:8f:
         a9:19:3e:c1:c5:ac:6f:5c:6b:c6:b0:48:f6:b6:42:61:f7:52:
         36:ab:e3:89:c5:9a:a5:40:c6:f6:ac:0f:4d:89:3e:4f:16:01:
         02:75:2e:43:d4:17:e0:96:db:31:38:20:24:a4:ae:f9:ef:df:
         47:2c:58:0c:db:3f:d4:f7:b5:4b:2f:52:23:47:61:9d:1d:32:
         96:49:4f:b5:aa:c6:3d:5c:2e:89:de:6c:2c:83:b5:3c:a7:be:
         04:2d:b6:8a:ff:fc:2a:7f:eb:ca:51:04:9b:61:63:0a:e9:4c:
         bc:1c:91:f3:84:25:c5:73:4b:88:82:4b:64:05:d3:e4:01:8b:
         6d:80:f2:47:d4:74:cb:d9:cb:64:ae:1a:f2:f3:70:65:d3:d8:
         c0:78:75:b7:7d:74:17:51:2d:61:90:90:af:e2:ef:ec:2e:3a:
         d9:bd:a3:47
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTE1OTAxMTAvBgNVBAUTKDUwMjI5REUwMzVCNzI1NzJGNEUwMDI3NDcyRUI2ODI2
RkRGRTk0QUUwHhcNMjIxMjEzMDEwMjQzWhcNMjIxMjIwMDEwMjQzWjAYMRYwFAYD
VQQDEw02Mzk3Y2YzMy1mMGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv/PkE5yJaKKusVWQkx+mR3COIw0RzdvrBr7RAEOeZfpgt/mRSnhI7Olu23Hu
uEN7wFKMe531o6mcTL1Bxk/msVYYV9NH85d+PE9icrEIoFs2o5O6buLt/NlD6s6L
GWHm3ZJWT92rBPvISrKr1VWsaa4sR1E8g1kQUO2NBRlttnJ5fsSS+LuPfJ9QtyXh
HpcQDJYleXFjBScnzc2wvaQJqQ30goTsj7DGpwSSduee7foWFSQxuaYN/uq2hQkh
np+vyEdUQsakMLmDZnwjFGNwlZPf+6+9rbdar4WeA8q9/mZ7ON7quDi5dULSl5Ty
a09fyb+kZUAbdkF+M5IqxoJkRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHLfQeeZ
UKzmoMwCj3JOd3+SrVcoMB8GA1UdIwQYMBaAFFAineA1tyVy9OACdHLraCb9/pSu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTU5MC8wMjVDRDI2MjdB
NkUxMUVCODFBRjJFM0ZDNEY5QUUwMi9VQ0tkNERXM0pYTDA0QUowY3V0b0p2My1s
SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VDS2Q0RFczSlhMMDRBSjBjdXRvSnYzLWxLNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MTU5MC8wMjVDRDI2MjdBNkUxMUVCODFBRjJFM0ZDNEY5QUUwMi9VQ0tkNERXM0pY
TDA0QUowY3V0b0p2My1sSzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQClRpYpb/khwRziC42+VkWvtM1yDoDR+W5QMWsVXQppeFFS+WHbgGpG
fVUZO6sB/ACH3yFiKtbfpsgydnUX2s6kd4Wz1dak831FTeN/aYaANY74C7v5lDOC
a4+pGT7BxaxvXGvGsEj2tkJh91I2q+OJxZqlQMb2rA9NiT5PFgECdS5D1Bfgltsx
OCAkpK75799HLFgM2z/U97VLL1IjR2GdHTKWSU+1qsY9XC6J3mwsg7U8p74ELbaK
//wqf+vKUQSbYWMK6Uy8HJHzhCXFc0uIgktkBdPkAYttgPJH1HTL2ctkrhry83Bl
09jAeHW3fXQXUS1hkJCv4u/sLjrZvaNH
-----END CERTIFICATE-----