Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91421E5/00BFA512AC9A11EA923F8549C4F9AE02/kzTGOltB4aVnIoM49UIie32paOI.mft
File:                     kzTGOltB4aVnIoM49UIie32paOI.mft (raw, json)
Hash identifier:          KDlz7L6oQd6FWSOUQtu1LRreUJKtPOxUYLcYJbYHwz8=
Subject key identifier:   BC:B6:12:DB:F2:58:57:20:0D:9A:CF:E2:95:DA:AA:E9:42:93:89:41
Authority key identifier: 93:34:C6:3A:5B:41:E1:A5:67:22:83:38:F5:42:22:7B:7D:A9:68:E2
Certificate issuer:       /CN=A91421E5/serialNumber=9334C63A5B41E1A567228338F542227B7DA968E2
Certificate serial:       07FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzTGOltB4aVnIoM49UIie32paOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91421E5/00BFA512AC9A11EA923F8549C4F9AE02/kzTGOltB4aVnIoM49UIie32paOI.mft
Manifest number:          07F9
Signing time:             Tue 20 Feb 2024 03:49:11 +0000
Manifest this update:     Tue 20 Feb 2024 03:49:11 +0000
Manifest next update:     Tue 27 Feb 2024 03:49:11 +0000
Files and hashes:         1: kzTGOltB4aVnIoM49UIie32paOI.crl (hash: md4RJ/MYqWjafXqzK6V5zUleA8uzDoLrhQ1gmfrTD0E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2045 (0x7fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91421E5/serialNumber=9334C63A5B41E1A567228338F542227B7DA968E2
        Validity
            Not Before: Feb 20 03:49:11 2024 GMT
            Not After : Feb 27 03:49:11 2024 GMT
        Subject: CN=65d42137-12ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:46:49:d4:3d:ee:48:c8:7c:cc:18:58:32:74:
                    8d:61:5f:95:ea:82:e6:06:be:09:4f:ab:0f:12:a1:
                    7a:89:4e:1f:df:65:76:22:cd:78:41:2a:7f:94:3f:
                    2d:4b:ed:e4:2d:19:49:85:10:34:d9:7e:33:a8:aa:
                    fd:dd:a3:fe:e5:e6:fc:91:02:a0:bc:97:df:48:9f:
                    80:28:56:18:2f:55:32:e8:7d:49:6d:87:68:11:36:
                    8c:c2:ee:68:f8:11:bf:50:2b:9a:ad:93:f7:62:dc:
                    76:c1:78:82:5b:94:f6:56:6a:ca:c7:07:c0:a6:cf:
                    53:81:95:a0:ce:f4:4e:85:d5:c4:af:2f:65:d0:1f:
                    f2:90:b7:4e:61:c4:6d:c2:84:26:40:ff:46:5e:c9:
                    87:e8:1c:67:98:e9:ee:5d:af:1c:8c:e0:ef:a6:dc:
                    98:68:39:53:ad:f6:a7:7d:d6:21:36:42:85:c9:2a:
                    68:04:90:92:b0:dd:a5:f9:b1:d2:86:da:17:62:2b:
                    32:4e:1e:f9:ee:26:93:93:6d:54:06:e5:60:45:f8:
                    49:62:38:c9:f3:75:9f:97:00:af:ce:37:50:0b:17:
                    02:17:90:1e:16:1b:28:6a:9a:f1:a2:db:c8:a2:84:
                    d5:cd:99:9b:16:f5:8c:e1:30:cc:ef:e3:77:6a:d9:
                    4d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B6:12:DB:F2:58:57:20:0D:9A:CF:E2:95:DA:AA:E9:42:93:89:41
            X509v3 Authority Key Identifier:
                keyid:93:34:C6:3A:5B:41:E1:A5:67:22:83:38:F5:42:22:7B:7D:A9:68:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91421E5/00BFA512AC9A11EA923F8549C4F9AE02/kzTGOltB4aVnIoM49UIie32paOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzTGOltB4aVnIoM49UIie32paOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91421E5/00BFA512AC9A11EA923F8549C4F9AE02/kzTGOltB4aVnIoM49UIie32paOI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:fb:77:86:a2:8d:bd:67:6c:46:b7:b8:07:81:fb:43:2a:aa:
         19:43:37:94:73:c8:a3:25:65:a6:77:8f:aa:c5:2e:60:6a:ec:
         c5:1c:e5:d6:4f:5b:a1:3b:bb:2a:94:dc:20:08:73:5a:39:04:
         fe:49:28:dd:2d:40:83:ac:84:45:6f:61:6d:b8:0e:29:76:d5:
         90:7f:b9:4b:83:68:28:a2:fd:5b:28:72:57:98:2f:fc:e2:f0:
         22:c6:0a:65:ce:af:30:7a:c3:e6:30:56:e5:e2:9d:35:22:ba:
         4d:13:4e:a0:bf:2a:b4:ae:08:26:3f:31:46:7a:79:8f:c4:7a:
         6e:b7:3c:60:b1:96:88:11:ac:b5:83:16:df:fb:d4:93:84:b0:
         99:db:67:7d:40:f0:14:b9:e9:c7:d2:0c:2d:cc:49:f7:98:c5:
         97:90:37:8e:ff:9f:f4:28:8c:49:39:86:6d:a6:a5:5b:89:f8:
         bc:3e:53:60:03:2c:10:e8:42:85:d1:9d:a9:8b:28:d1:b9:73:
         e4:30:22:64:c8:c1:81:e9:1c:61:b5:72:ba:30:79:7b:5c:8b:
         9f:15:f1:8c:b0:31:a3:27:b5:dc:0d:21:67:5f:61:4d:5a:2b:
         4a:9e:9c:4b:91:3a:04:6f:d8:2d:bf:e6:18:89:b8:65:b5:cd:
         27:c0:95:70
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDIxRTUxMTAvBgNVBAUTKDkzMzRDNjNBNUI0MUUxQTU2NzIyODMzOEY1NDIyMjdC
N0RBOTY4RTIwHhcNMjQwMjIwMDM0OTExWhcNMjQwMjI3MDM0OTExWjAYMRYwFAYD
VQQDEw02NWQ0MjEzNy0xMmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2UZJ1D3uSMh8zBhYMnSNYV+V6oLmBr4JT6sPEqF6iU4f32V2Is14QSp/lD8t
S+3kLRlJhRA02X4zqKr93aP+5eb8kQKgvJffSJ+AKFYYL1Uy6H1JbYdoETaMwu5o
+BG/UCuarZP3Ytx2wXiCW5T2VmrKxwfAps9TgZWgzvROhdXEry9l0B/ykLdOYcRt
woQmQP9GXsmH6BxnmOnuXa8cjODvptyYaDlTrfanfdYhNkKFySpoBJCSsN2l+bHS
htoXYisyTh757iaTk21UBuVgRfhJYjjJ83WflwCvzjdQCxcCF5AeFhsoaprxotvI
ooTVzZmbFvWM4TDM7+N3atlNywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLy2Etvy
WFcgDZrP4pXaqulCk4lBMB8GA1UdIwQYMBaAFJM0xjpbQeGlZyKDOPVCInt9qWji
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjFFNS8wMEJGQTUxMkFD
OUExMUVBOTIzRjg1NDlDNEY5QUUwMi9relRHT2x0QjRhVm5Jb000OVVJaWUzMnBh
T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2t6VEdPbHRCNGFWbklvTTQ5VUlpZTMycGFPSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjFFNS8wMEJGQTUxMkFDOUExMUVBOTIzRjg1NDlDNEY5QUUwMi9relRHT2x0QjRh
Vm5Jb000OVVJaWUzMnBhT0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBn+3eGoo29Z2xGt7gHgftDKqoZQzeUc8ijJWWmd4+qxS5gauzFHOXW
T1uhO7sqlNwgCHNaOQT+SSjdLUCDrIRFb2FtuA4pdtWQf7lLg2goov1bKHJXmC/8
4vAixgplzq8wesPmMFbl4p01IrpNE06gvyq0rggmPzFGenmPxHputzxgsZaIEay1
gxbf+9SThLCZ22d9QPAUuenH0gwtzEn3mMWXkDeO/5/0KIxJOYZtpqVbifi8PlNg
AywQ6EKF0Z2piyjRuXPkMCJkyMGB6RxhtXK6MHl7XIufFfGMsDGjJ7XcDSFnX2FN
WitKnpxLkToEb9gtv+YYibhltc0nwJVw
-----END CERTIFICATE-----