Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft
File:                     nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft (raw, json)
Hash identifier:          sDlSq27N0+NfPKXa3KXeFtlN6kN1qOvYwY8aotwwrDE=
Subject key identifier:   88:0A:F4:4B:92:84:57:99:95:5A:FE:0D:37:9E:69:AB:DA:DD:F3:3C
Authority key identifier: 9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B
Certificate issuer:       /CN=A91538E7/serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B
Certificate serial:       07B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft
Manifest number:          07B0
Signing time:             Thu 12 Jun 2025 00:25:11 +0000
Manifest this update:     Thu 12 Jun 2025 00:25:11 +0000
Manifest next update:     Thu 19 Jun 2025 00:25:11 +0000
Files and hashes:         1: nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl (hash: mtEf9FSfUDmKoZw/vzR8JKN5CQ7DCUWts4MYrxgF/tM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1974 (0x7b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91538E7, serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B
        Validity
            Not Before: Jun 12 00:25:11 2025 GMT
            Not After : Jun 19 00:25:11 2025 GMT
        Subject: CN=684a1e67-3461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a4:3c:64:c6:e0:0b:e5:f3:f3:a3:54:7a:4a:
                    38:10:be:05:f4:16:b6:d7:2c:13:23:81:e8:b6:ec:
                    77:fa:e0:73:fd:0e:16:99:32:52:a7:44:16:23:bb:
                    93:80:bb:9a:bb:af:9f:08:a5:2b:df:ba:b3:5f:9a:
                    5f:2c:95:56:89:0e:85:79:f1:fb:88:37:7b:72:71:
                    87:7e:c1:77:1e:99:7c:14:00:38:f8:53:33:d0:7a:
                    36:19:2f:fd:00:01:56:ba:27:a7:c1:13:6e:4b:39:
                    96:82:5c:e0:29:c7:d1:8e:2e:03:e4:a3:7f:39:a2:
                    9e:1a:de:7a:89:5f:9d:fc:59:bc:db:52:46:8b:4b:
                    52:61:fd:25:6f:7b:6e:0b:1a:4c:a2:21:bd:e6:f3:
                    89:f1:26:58:56:f7:61:e0:d9:09:19:0e:fd:ee:1f:
                    4b:29:0a:e5:ff:55:99:96:7d:8a:4e:6b:81:55:32:
                    4c:e6:ed:4b:b3:6c:46:78:ec:cd:bc:1f:28:2a:ed:
                    4b:bb:51:ef:eb:75:5a:5a:71:3a:d1:04:bf:f4:6c:
                    42:47:f8:6b:4a:ec:ff:83:02:c9:4c:ed:cc:6d:5d:
                    c0:43:91:4c:24:f1:57:ee:88:30:ca:ad:50:46:69:
                    1f:28:d9:9e:eb:b2:35:c1:ea:5e:8d:47:09:b7:52:
                    73:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:0A:F4:4B:92:84:57:99:95:5A:FE:0D:37:9E:69:AB:DA:DD:F3:3C
            X509v3 Authority Key Identifier:
                keyid:9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:59:dc:03:47:28:ac:2d:0a:47:af:2e:07:eb:27:d9:c4:cf:
         96:53:14:e0:b0:f8:69:34:b8:dd:f0:30:43:1e:9c:df:6e:2b:
         63:0e:3f:b1:0f:b9:3c:a3:e6:92:d3:00:fe:97:59:3a:17:d8:
         67:43:84:5a:67:ca:e7:3b:ac:cf:f3:a0:81:df:3c:ac:e5:a0:
         06:3f:40:f9:6c:e5:05:16:42:09:d6:fb:af:77:2b:ed:26:cb:
         9d:b0:d9:8d:b3:34:28:95:21:82:ee:76:87:aa:0b:b6:27:e6:
         b9:b6:24:51:0e:b2:10:26:fc:22:f0:ee:ff:a5:dd:9a:05:ed:
         e8:86:41:38:9f:a2:a0:1f:0a:1d:52:8a:3c:f1:49:c1:25:70:
         fb:3a:89:49:05:62:7f:ad:63:86:eb:15:77:1a:d5:87:5a:88:
         5c:21:5b:8c:2a:6c:1c:fc:8c:3d:66:99:ab:f2:f3:07:4c:5a:
         91:1b:89:87:5e:ee:5d:f9:93:f0:f5:82:85:ba:9e:7d:09:91:
         16:b7:d7:22:32:a1:52:ea:f0:56:3c:50:28:11:3a:f6:2a:e8:
         4d:25:51:14:43:42:20:9e:e5:49:83:5f:0e:25:12:16:04:e1:
         52:46:b8:7c:2e:1a:a7:7b:84:45:c4:90:55:b1:ec:57:40:be:
         b2:03:53:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----