Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1F39/A4F72F321D9C11E281D34E8B08B02CD2/8m72CR8RWmbzctsYAOVm_k1chTs.mft
File:                     8m72CR8RWmbzctsYAOVm_k1chTs.mft (raw, json)
Hash identifier:          hVYWStvwapHtemfFkKwzubqf/aCXK7JT+pbPoL2WAV0=
Subject key identifier:   E2:CF:B9:49:6A:D5:EB:B5:00:A7:D5:EF:9D:46:39:70:E2:CC:10:47
Authority key identifier: F2:6E:F6:09:1F:11:5A:66:F3:72:DB:18:00:E5:66:FE:4D:5C:85:3B
Certificate issuer:       /CN=A91D1F39/serialNumber=F26EF6091F115A66F372DB1800E566FE4D5C853B
Certificate serial:       3370
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8m72CR8RWmbzctsYAOVm_k1chTs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1F39/A4F72F321D9C11E281D34E8B08B02CD2/8m72CR8RWmbzctsYAOVm_k1chTs.mft
Manifest number:          335C
Signing time:             Thu 14 Sep 2023 15:05:51 +0000
Manifest this update:     Thu 14 Sep 2023 15:05:51 +0000
Manifest next update:     Thu 21 Sep 2023 15:05:51 +0000
Files and hashes:         1: 8m72CR8RWmbzctsYAOVm_k1chTs.crl (hash: AZ93MNaQFziaiqAplUolM66aBbR4yUHd7BnuZ4GVCSo=)
                          2: C11EB45241B511E9AF030E63C4F9AE02.roa (hash: RiLilp0zBIlqXf+Dc/JtxMVb/SxvdmilSbqSlDG8ocQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13168 (0x3370)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1F39/serialNumber=F26EF6091F115A66F372DB1800E566FE4D5C853B
        Validity
            Not Before: Sep 14 15:05:51 2023 GMT
            Not After : Sep 21 15:05:51 2023 GMT
        Subject: CN=6503214f-3c72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d9:c5:cc:ac:34:96:1f:1b:71:84:78:54:72:
                    79:bf:69:7f:68:48:9b:93:9d:82:09:8e:c8:4f:cb:
                    5a:82:75:08:b0:3e:9d:ef:25:2b:09:9c:dc:12:cb:
                    09:a1:b7:60:52:3d:e7:02:58:61:1a:90:20:43:10:
                    f1:ac:73:cd:26:49:b3:4d:58:bd:40:e6:d2:db:59:
                    b2:76:bb:00:97:0a:75:33:d9:57:4f:45:1d:6f:00:
                    e3:a7:c4:47:99:5e:22:a5:ac:61:ad:2f:c5:41:75:
                    03:d3:bb:45:24:01:de:4d:cc:23:4f:32:4a:5b:74:
                    c9:f3:1a:3a:87:86:89:ee:a0:de:26:6f:fd:28:ef:
                    74:9c:2f:1b:9f:96:20:e8:b0:8b:ae:46:4e:d9:f7:
                    45:7e:60:36:25:7a:5e:72:1b:a1:0f:3a:aa:1d:19:
                    42:01:01:46:83:59:6c:43:2d:0d:39:31:3a:60:f4:
                    ce:27:87:48:3c:97:98:e1:b9:2d:29:ab:d0:20:39:
                    4e:8f:0f:48:25:e0:e7:ae:58:79:49:10:08:eb:82:
                    10:22:0e:1a:4f:09:80:9e:10:72:6c:e5:48:8a:76:
                    fb:98:f5:40:b3:f2:57:fe:f8:77:c7:1d:e1:f8:38:
                    04:4d:c2:97:ee:96:5f:4d:5f:51:25:01:88:6a:8e:
                    f0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:CF:B9:49:6A:D5:EB:B5:00:A7:D5:EF:9D:46:39:70:E2:CC:10:47
            X509v3 Authority Key Identifier:
                keyid:F2:6E:F6:09:1F:11:5A:66:F3:72:DB:18:00:E5:66:FE:4D:5C:85:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1F39/A4F72F321D9C11E281D34E8B08B02CD2/8m72CR8RWmbzctsYAOVm_k1chTs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8m72CR8RWmbzctsYAOVm_k1chTs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1F39/A4F72F321D9C11E281D34E8B08B02CD2/8m72CR8RWmbzctsYAOVm_k1chTs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:7d:17:ae:86:c3:f4:1e:4c:01:54:3b:78:77:85:10:f2:83:
         88:63:b8:f5:ae:ea:20:48:36:51:16:c4:bb:88:ed:bd:ae:65:
         f9:4f:fb:24:39:01:99:18:54:e7:6a:bd:73:c8:fa:ab:25:13:
         2e:39:c6:60:cc:20:dc:84:3c:05:3a:ed:5d:41:b2:46:37:b4:
         5e:a4:70:67:ba:e0:f1:ab:42:80:7c:db:f8:16:a4:dd:a5:6d:
         92:f3:dc:6e:02:3d:95:45:a7:0f:50:c4:5d:f9:27:75:1d:dd:
         ce:43:ed:85:ca:91:8d:08:3c:ec:5c:57:b4:12:b4:5c:d7:4b:
         9b:f4:ca:00:d9:25:bf:5f:a3:8d:d1:19:77:51:f8:68:e1:d3:
         4d:17:0d:e9:ed:e3:82:ab:63:19:fe:54:1b:29:99:8f:47:42:
         8d:8c:9b:11:6e:f4:4a:11:c4:b1:ec:cc:b6:9b:e9:66:99:8a:
         68:c1:0f:6e:96:00:62:9e:59:da:7c:3e:c6:4c:68:13:00:b3:
         dd:8e:dc:b1:a4:92:59:45:16:44:6c:94:f3:26:6b:96:a1:f2:
         2c:42:a2:41:71:50:6a:d6:5f:a5:9e:78:fa:a5:2f:7f:26:e8:
         2e:fe:e7:08:7b:b0:c2:76:94:15:e3:9b:4e:a7:ac:62:68:1a:
         7b:e3:19:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----