Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157F58/DFB27DACF0A011E7BC7E8D5FC4F9AE02/KAzCD_UHrGj6MtMo8tGjYoVEfX8.mft
File:                     KAzCD_UHrGj6MtMo8tGjYoVEfX8.mft (raw, json)
Hash identifier:          ec1EYIiaumnEK65Jog6Y/tw12DncyV/R8XtvVqnRYws=
Subject key identifier:   17:B5:25:36:11:9C:FD:99:B0:8E:27:B6:D7:FB:FE:64:27:8F:F8:EB
Authority key identifier: 28:0C:C2:0F:F5:07:AC:68:FA:32:D3:28:F2:D1:A3:62:85:44:7D:7F
Certificate issuer:       /CN=A9157F58/serialNumber=280CC20FF507AC68FA32D328F2D1A36285447D7F
Certificate serial:       1597
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KAzCD_UHrGj6MtMo8tGjYoVEfX8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157F58/DFB27DACF0A011E7BC7E8D5FC4F9AE02/KAzCD_UHrGj6MtMo8tGjYoVEfX8.mft
Manifest number:          1595
Signing time:             Wed 06 Sep 2023 05:56:03 +0000
Manifest this update:     Wed 06 Sep 2023 05:56:02 +0000
Manifest next update:     Wed 13 Sep 2023 05:56:02 +0000
Files and hashes:         1: KAzCD_UHrGj6MtMo8tGjYoVEfX8.crl (hash: frQ6y065Rw4Pn60xuBgUF6WE6F9jGTGffuU1DMQ4vPo=)
                          2: EA1CCD9ADFBD11EC8E203126C4F9AE02.roa (hash: nXQ6KDkag69+MkzgymZ8bq7OYMDYsC4btiAeWCCKbjU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5527 (0x1597)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157F58/serialNumber=280CC20FF507AC68FA32D328F2D1A36285447D7F
        Validity
            Not Before: Sep  6 05:56:02 2023 GMT
            Not After : Sep 13 05:56:02 2023 GMT
        Subject: CN=64f81472-86d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d5:8f:6c:a9:06:4b:ec:00:cf:40:39:91:de:
                    87:e0:f3:1b:fc:8a:f2:9d:63:3b:bc:da:3b:f6:f5:
                    83:a1:c0:48:63:47:70:d0:41:c2:bf:dc:24:9b:83:
                    39:9d:59:68:78:94:24:aa:55:9d:ed:61:94:db:6d:
                    0c:d6:9a:9d:7b:10:ab:69:31:67:ea:c5:07:c2:84:
                    d1:84:f7:5f:4f:77:dd:77:ba:c2:bb:ee:84:25:14:
                    ee:0a:01:e5:57:9a:cb:e6:03:3b:d4:61:6a:67:09:
                    4c:0a:a8:11:51:16:c5:83:85:d0:e9:66:15:5e:4e:
                    67:8c:02:20:73:05:53:b0:13:5c:e4:30:58:f4:88:
                    ce:cb:c1:63:a2:44:62:6c:08:cd:79:a1:06:6a:39:
                    6b:7a:fc:0c:c7:6f:00:d7:7f:83:f6:cf:d8:49:c5:
                    34:2b:7b:55:94:ed:a5:3d:f6:24:e1:50:e0:ad:0f:
                    82:e0:22:0b:20:8f:31:e5:81:14:45:a1:2a:8d:5a:
                    62:73:f2:aa:de:11:2b:0a:b3:20:d9:0c:aa:0a:db:
                    6c:a7:0c:66:36:ab:62:51:21:5b:44:4b:3e:e3:a7:
                    79:b7:e4:fa:43:fb:d5:3a:60:5c:4d:9e:5f:2b:b4:
                    8a:ea:a4:c6:65:de:55:2e:b8:db:50:8a:78:fb:81:
                    22:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B5:25:36:11:9C:FD:99:B0:8E:27:B6:D7:FB:FE:64:27:8F:F8:EB
            X509v3 Authority Key Identifier:
                keyid:28:0C:C2:0F:F5:07:AC:68:FA:32:D3:28:F2:D1:A3:62:85:44:7D:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157F58/DFB27DACF0A011E7BC7E8D5FC4F9AE02/KAzCD_UHrGj6MtMo8tGjYoVEfX8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KAzCD_UHrGj6MtMo8tGjYoVEfX8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157F58/DFB27DACF0A011E7BC7E8D5FC4F9AE02/KAzCD_UHrGj6MtMo8tGjYoVEfX8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:e7:2e:4e:42:22:56:31:19:77:59:72:94:66:40:33:90:22:
         0c:8a:a5:04:49:d9:36:92:3c:89:02:7e:8f:3d:be:1c:06:b6:
         b8:f5:92:21:e1:a9:41:5a:08:b5:bc:dd:25:d0:85:7d:f2:37:
         8b:c1:2a:e8:15:f0:72:6c:f5:fd:a2:4d:27:d5:92:8e:c0:a9:
         85:50:69:b3:45:81:bf:c5:c6:9f:9d:1b:9f:ee:47:ba:d1:d6:
         4f:c9:c9:af:12:f8:3f:2d:34:bd:ac:ab:63:11:6d:43:02:ca:
         2c:8e:52:6f:9b:27:57:63:a5:88:30:e8:27:40:6a:41:c8:49:
         af:36:54:03:30:76:31:b0:60:8f:2d:6d:70:88:36:69:7c:ed:
         ba:4a:40:d4:39:10:04:d6:08:49:38:2e:5c:16:61:4e:89:9c:
         be:ce:ca:14:bf:b3:86:08:3e:66:79:f7:a9:47:fe:2b:14:44:
         e7:34:dd:b2:d1:3a:cf:8f:37:8b:19:64:f4:90:30:a5:c0:d1:
         0e:fe:da:78:0f:0e:81:d4:27:29:86:59:0f:a3:28:6d:f2:3e:
         8e:24:dd:66:2a:b8:98:a0:50:cd:d4:36:9a:23:5c:7d:1a:1e:
         1d:68:1d:b3:26:15:ad:64:92:e8:e8:bb:79:36:ba:a8:7b:1a:
         50:43:82:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----