Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDA0E/BF94AB6C0AD711E7AD6FE621C4F9AE02/GLh564GG80kgaGrOi9uPPBQ8hQE.mft
File:                     GLh564GG80kgaGrOi9uPPBQ8hQE.mft (raw, json)
Hash identifier:          NFiAEB3oCzMxn+Blm7gOaPX/VDjBxcCjoN0OFdsnRxc=
Subject key identifier:   C2:B0:BC:C0:CC:80:BF:11:C3:04:FA:FE:81:F0:1B:B4:18:E6:ED:AA
Authority key identifier: 18:B8:79:EB:81:86:F3:49:20:68:6A:CE:8B:DB:8F:3C:14:3C:85:01
Certificate issuer:       /CN=A91BDA0E/serialNumber=18B879EB8186F34920686ACE8BDB8F3C143C8501
Certificate serial:       1AAC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLh564GG80kgaGrOi9uPPBQ8hQE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDA0E/BF94AB6C0AD711E7AD6FE621C4F9AE02/GLh564GG80kgaGrOi9uPPBQ8hQE.mft
Manifest number:          1A80
Signing time:             Tue 26 Dec 2023 16:37:07 +0000
Manifest this update:     Tue 26 Dec 2023 16:37:06 +0000
Manifest next update:     Tue 02 Jan 2024 16:37:06 +0000
Files and hashes:         1: GLh564GG80kgaGrOi9uPPBQ8hQE.crl (hash: 1zMEaaPwXTyrBferuzb4Cc0JRIwVS1ysBGH7t+ASzdw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6828 (0x1aac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDA0E/serialNumber=18B879EB8186F34920686ACE8BDB8F3C143C8501
        Validity
            Not Before: Dec 26 16:37:06 2023 GMT
            Not After : Jan  2 16:37:06 2024 GMT
        Subject: CN=658b0133-7c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3c:0a:49:f7:8c:7c:0f:bd:a1:4a:ed:f5:c3:
                    d7:5d:c3:a1:91:b4:92:5d:ea:19:86:c8:39:b2:3d:
                    5d:e9:9f:cd:82:64:59:0e:18:a5:d4:c8:d1:d7:63:
                    d5:10:2c:ce:a7:c3:73:00:33:6c:d8:02:e9:cb:08:
                    29:89:62:b0:5b:73:f4:b4:7d:8a:01:e2:48:1f:69:
                    20:65:44:78:ce:52:fb:8b:53:b7:92:df:92:64:99:
                    52:ec:07:86:f7:f6:93:85:6e:1e:33:df:b5:7f:d5:
                    58:88:c5:4e:24:c5:58:2e:d9:5f:31:a9:fa:85:bd:
                    26:39:00:96:97:ba:42:59:7b:18:46:d8:b9:25:f7:
                    db:57:28:ea:df:d0:06:0b:d9:a4:58:f7:02:ac:0a:
                    c2:ca:c7:7d:b4:5a:5c:b4:20:71:a8:10:7c:2f:d0:
                    f7:35:df:2c:86:9a:ff:5f:43:2a:ac:37:52:d0:b0:
                    d5:3d:5f:27:42:82:92:84:79:ba:b9:2e:c7:f2:a7:
                    9f:e3:a0:c3:e3:f1:97:41:2f:88:d4:4e:3a:46:02:
                    d1:a1:e6:c5:d1:e4:b9:5f:7a:7b:86:17:72:2b:20:
                    79:0c:4f:c6:0d:ad:45:e0:db:8f:d9:0f:a3:b6:f6:
                    64:ac:1b:26:5c:c6:66:2b:e2:98:cd:f3:d4:d9:ab:
                    da:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B0:BC:C0:CC:80:BF:11:C3:04:FA:FE:81:F0:1B:B4:18:E6:ED:AA
            X509v3 Authority Key Identifier:
                keyid:18:B8:79:EB:81:86:F3:49:20:68:6A:CE:8B:DB:8F:3C:14:3C:85:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDA0E/BF94AB6C0AD711E7AD6FE621C4F9AE02/GLh564GG80kgaGrOi9uPPBQ8hQE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLh564GG80kgaGrOi9uPPBQ8hQE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDA0E/BF94AB6C0AD711E7AD6FE621C4F9AE02/GLh564GG80kgaGrOi9uPPBQ8hQE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:0a:3f:77:32:dc:f4:40:df:21:b4:2c:4f:1c:23:cb:eb:17:
         52:83:a7:65:9e:ae:f1:c6:3b:38:2d:2e:96:bb:65:0e:05:88:
         25:a7:4c:99:f4:96:de:b5:5e:6c:98:ae:a4:ba:97:6a:6b:6a:
         51:ab:5d:68:86:b0:cb:3d:d1:bb:0c:70:c1:e5:52:da:64:04:
         88:ae:43:98:0a:9d:35:3a:30:c9:f4:8f:c2:6e:4d:46:58:24:
         da:45:ef:6a:42:41:6b:ba:ac:d7:d7:ea:3c:ab:56:01:95:29:
         4e:b7:34:be:47:1b:bd:df:3e:74:ec:9c:73:fe:d1:26:09:2d:
         93:89:0a:50:8a:84:16:90:2f:3b:0f:a7:35:db:69:91:3a:2e:
         81:e5:4c:45:05:df:42:ee:e8:6b:d5:8b:5a:3a:37:c5:47:55:
         8a:7d:8d:97:03:b8:c5:b3:ea:3b:15:6f:2a:c7:d3:f8:75:9b:
         30:b2:cc:67:fa:2c:30:45:ef:53:14:09:a5:e9:b8:8d:3e:1d:
         5b:26:3e:4f:69:5e:c9:e8:6b:b8:2e:33:60:9f:c7:1b:7d:a0:
         56:ad:bd:8f:1e:b6:35:3f:c9:67:b5:ff:bb:c5:1b:8c:cf:70:
         3e:84:04:0b:a8:8a:18:66:76:85:3f:30:13:ba:7d:f8:e7:c2:
         d1:70:69:a0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkRBMEUxMTAvBgNVBAUTKDE4Qjg3OUVCODE4NkYzNDkyMDY4NkFDRThCREI4RjND
MTQzQzg1MDEwHhcNMjMxMjI2MTYzNzA2WhcNMjQwMTAyMTYzNzA2WjAYMRYwFAYD
VQQDEw02NThiMDEzMy03YzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqzwKSfeMfA+9oUrt9cPXXcOhkbSSXeoZhsg5sj1d6Z/NgmRZDhil1MjR12PV
ECzOp8NzADNs2ALpywgpiWKwW3P0tH2KAeJIH2kgZUR4zlL7i1O3kt+SZJlS7AeG
9/aThW4eM9+1f9VYiMVOJMVYLtlfMan6hb0mOQCWl7pCWXsYRti5JffbVyjq39AG
C9mkWPcCrArCysd9tFpctCBxqBB8L9D3Nd8shpr/X0MqrDdS0LDVPV8nQoKShHm6
uS7H8qef46DD4/GXQS+I1E46RgLRoebF0eS5X3p7hhdyKyB5DE/GDa1F4NuP2Q+j
tvZkrBsmXMZmK+KYzfPU2avaeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMKwvMDM
gL8RwwT6/oHwG7QY5u2qMB8GA1UdIwQYMBaAFBi4eeuBhvNJIGhqzovbjzwUPIUB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREEwRS9CRjk0QUI2QzBB
RDcxMUU3QUQ2RkU2MjFDNEY5QUUwMi9HTGg1NjRHRzgwa2dhR3JPaTl1UFBCUTho
UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dMaDU2NEdHODBrZ2FHck9pOXVQUEJROGhRRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
REEwRS9CRjk0QUI2QzBBRDcxMUU3QUQ2RkU2MjFDNEY5QUUwMi9HTGg1NjRHRzgw
a2dhR3JPaTl1UFBCUThoUUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCYCj93Mtz0QN8htCxPHCPL6xdSg6dlnq7xxjs4LS6Wu2UOBYglp0yZ
9JbetV5smK6kupdqa2pRq11ohrDLPdG7DHDB5VLaZASIrkOYCp01OjDJ9I/Cbk1G
WCTaRe9qQkFruqzX1+o8q1YBlSlOtzS+Rxu93z507Jxz/tEmCS2TiQpQioQWkC87
D6c122mROi6B5UxFBd9C7uhr1YtaOjfFR1WKfY2XA7jFs+o7FW8qx9P4dZswssxn
+iwwRe9TFAml6biNPh1bJj5PaV7J6Gu4LjNgn8cbfaBWrb2PHrY1P8lntf+7xRuM
z3A+hAQLqIoYZnaFPzATun3458LRcGmg
-----END CERTIFICATE-----