Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF2B3/E7C2CB7E668B11EA90FC0422C4F9AE02/987d-xjrOQtCG1gHC_IQIp8OOjc.mft
File:                     987d-xjrOQtCG1gHC_IQIp8OOjc.mft (raw, json)
Hash identifier:          bYlSHx0C7NKNhd1Zd0GdI2MxN47iMgfn2uf2E70w/ss=
Subject key identifier:   06:31:4C:C1:03:49:3D:5E:77:29:09:15:B0:EA:1E:7C:76:C8:A1:FF
Authority key identifier: F7:CE:DD:FB:18:EB:39:0B:42:1B:58:07:0B:F2:10:22:9F:0E:3A:37
Certificate issuer:       /CN=A91CF2B3/serialNumber=F7CEDDFB18EB390B421B58070BF210229F0E3A37
Certificate serial:       08E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/987d-xjrOQtCG1gHC_IQIp8OOjc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF2B3/E7C2CB7E668B11EA90FC0422C4F9AE02/987d-xjrOQtCG1gHC_IQIp8OOjc.mft
Manifest number:          08D0
Signing time:             Tue 18 Apr 2023 21:45:26 +0000
Manifest this update:     Tue 18 Apr 2023 21:45:25 +0000
Manifest next update:     Tue 25 Apr 2023 21:45:25 +0000
Files and hashes:         1: 987d-xjrOQtCG1gHC_IQIp8OOjc.crl (hash: +2SijgIIGQQ82Ilfx43bgtGI8pcV/sly86A6U/674C4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2275 (0x8e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF2B3/serialNumber=F7CEDDFB18EB390B421B58070BF210229F0E3A37
        Validity
            Not Before: Apr 18 21:45:25 2023 GMT
            Not After : Apr 25 21:45:25 2023 GMT
        Subject: CN=643f0f76-0aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:25:8e:af:43:f5:e1:06:82:c3:5b:a6:21:c0:
                    2b:1c:f2:ff:75:26:5e:05:ac:27:85:27:bb:07:e5:
                    71:29:f9:96:5e:95:90:c0:9a:51:6e:f9:5b:8d:2f:
                    69:f2:7c:e1:b0:cf:09:62:23:dd:ca:e6:7b:ee:26:
                    14:5b:2f:a2:dc:96:f1:ad:fe:14:3b:af:75:ec:0a:
                    60:3c:6b:bb:e1:57:5e:5a:11:1c:58:83:ca:31:cf:
                    24:27:af:9f:c8:2f:0b:9a:c0:2d:16:aa:a9:29:61:
                    46:23:83:a4:57:51:6d:5d:e4:2e:1f:fa:56:63:bf:
                    9b:48:e5:bb:d0:94:3e:a6:11:7c:4c:6b:52:6c:f4:
                    25:33:bd:00:34:89:5c:db:e9:60:00:b4:69:3d:b0:
                    c4:57:5f:69:35:aa:1b:c8:a2:be:3b:fb:30:1f:0d:
                    2b:d8:63:08:33:ec:5c:75:63:60:d6:97:b5:1e:57:
                    cb:94:56:a4:d8:b2:48:60:e6:8e:cf:9d:d8:bc:c8:
                    94:68:a1:37:24:aa:bb:d7:36:c9:5a:53:a7:c5:39:
                    fb:84:9b:41:b7:06:e3:d6:fe:d4:34:f9:2b:a4:b0:
                    b0:bd:07:d4:89:7e:3a:d7:e5:4c:77:72:a8:ce:a5:
                    50:c5:02:4c:0a:4e:cd:8d:27:6a:9c:79:b6:64:5b:
                    d6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:31:4C:C1:03:49:3D:5E:77:29:09:15:B0:EA:1E:7C:76:C8:A1:FF
            X509v3 Authority Key Identifier:
                keyid:F7:CE:DD:FB:18:EB:39:0B:42:1B:58:07:0B:F2:10:22:9F:0E:3A:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF2B3/E7C2CB7E668B11EA90FC0422C4F9AE02/987d-xjrOQtCG1gHC_IQIp8OOjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/987d-xjrOQtCG1gHC_IQIp8OOjc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF2B3/E7C2CB7E668B11EA90FC0422C4F9AE02/987d-xjrOQtCG1gHC_IQIp8OOjc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:08:3e:14:7d:19:c7:f3:2e:37:e6:7f:7a:9e:b9:ac:07:8d:
         92:f4:be:1f:1a:41:d0:ab:c9:22:88:8a:64:02:39:9a:c5:c5:
         7d:32:1c:fb:3e:7e:8b:15:a4:e9:59:be:5c:80:57:f0:6d:b4:
         db:5c:b7:3e:3b:d4:95:ba:0f:ca:5b:39:93:b2:84:c7:19:56:
         33:52:fd:e2:95:2e:ce:f4:14:78:ea:bc:a8:12:39:73:da:ae:
         f3:ab:63:3b:ce:5e:87:d5:b8:d2:cc:b0:96:71:5e:ae:ea:ae:
         0e:7c:73:39:a6:78:0a:59:9a:6d:1b:f9:86:4d:45:91:17:0e:
         d5:6d:a6:91:bc:bf:8f:9d:ad:03:47:49:78:78:cd:34:89:b1:
         bc:4a:42:ee:20:ad:e9:94:c7:ee:e2:98:ee:d7:aa:e1:e1:de:
         62:ba:e1:09:79:e7:4d:64:71:5d:c9:ef:dc:44:25:4e:b7:45:
         2d:65:b2:a2:f0:44:6a:98:1c:9c:ec:39:bb:93:dd:dd:ae:ee:
         a7:1d:5c:20:1d:f7:0c:48:a7:18:d6:b1:6c:b8:eb:f7:60:36:
         ea:e7:8a:b6:7b:73:ff:e6:18:16:a4:f8:33:56:ee:f8:4c:c8:
         93:a4:91:fb:7f:97:00:e0:6f:03:4a:d8:4c:98:bd:7d:9d:32:
         ec:44:81:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----