Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D930D/E4D28FA4110B11EC8E66081CC4F9AE02/4t1isb0lDbYjLmTxJnHQNItsaHY.mft
File:                     4t1isb0lDbYjLmTxJnHQNItsaHY.mft (raw, json)
Hash identifier:          Ve7CvKOmQFPj3Lz68hY73YrFBwz6ysjDym/K5+fVKw0=
Subject key identifier:   31:12:0B:A7:73:A9:BA:6F:E4:4B:77:4D:C4:59:4B:D3:94:A3:CB:E7
Authority key identifier: E2:DD:62:B1:BD:25:0D:B6:23:2E:64:F1:26:71:D0:34:8B:6C:68:76
Certificate issuer:       /CN=A91D930D/serialNumber=E2DD62B1BD250DB6232E64F12671D0348B6C6876
Certificate serial:       0395
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4t1isb0lDbYjLmTxJnHQNItsaHY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D930D/E4D28FA4110B11EC8E66081CC4F9AE02/4t1isb0lDbYjLmTxJnHQNItsaHY.mft
Manifest number:          0393
Signing time:             Thu 06 Jul 2023 07:51:41 +0000
Manifest this update:     Thu 06 Jul 2023 07:51:41 +0000
Manifest next update:     Thu 13 Jul 2023 07:51:41 +0000
Files and hashes:         1: 4t1isb0lDbYjLmTxJnHQNItsaHY.crl (hash: ZNWwxXWC+nOyPbR7tywF5V13VOPG2QPv4zLNnt3K4S4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 917 (0x395)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D930D/serialNumber=E2DD62B1BD250DB6232E64F12671D0348B6C6876
        Validity
            Not Before: Jul  6 07:51:41 2023 GMT
            Not After : Jul 13 07:51:41 2023 GMT
        Subject: CN=64a6728d-9bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:90:2a:78:9f:64:d2:89:54:e6:63:5b:7d:33:
                    16:35:c4:f9:11:4d:4e:e8:18:26:23:34:ef:2f:13:
                    29:23:f8:bd:08:6f:3a:15:9c:44:e2:c1:14:1f:49:
                    6c:66:b1:c6:46:52:9d:4e:79:5b:49:5e:b7:67:82:
                    50:10:2d:9e:92:00:d9:2e:38:0c:4f:55:68:f7:6c:
                    20:c8:81:9c:4a:ea:c8:07:42:fc:1f:37:cf:c1:da:
                    6c:a7:53:5e:6b:42:b8:b6:2c:a3:32:f1:05:32:91:
                    81:4a:fb:6d:e8:e9:0d:7a:bf:30:2f:10:bb:35:d7:
                    5e:ee:ca:ad:03:7b:d8:d2:13:44:03:53:bb:d1:23:
                    4a:a6:29:34:0d:38:e9:c6:14:e0:fa:25:b7:32:ce:
                    d1:a7:38:5d:5b:de:7a:06:cd:52:ef:96:a7:78:b5:
                    70:a6:90:db:66:a6:b9:fb:6e:5e:33:3e:c6:56:97:
                    b4:3a:12:c9:6a:a4:7d:5d:73:11:74:01:b0:ce:f2:
                    67:5f:7b:e2:0b:45:5a:2e:c0:7a:37:4a:4c:f4:9b:
                    83:ef:ca:41:39:ca:c3:a3:b1:d2:05:a8:d2:a9:c8:
                    c2:02:d0:5a:33:bf:76:08:8b:b1:64:e3:9e:f7:f7:
                    6e:60:af:01:7f:43:ed:66:f0:02:4d:3a:7b:e0:db:
                    3a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:12:0B:A7:73:A9:BA:6F:E4:4B:77:4D:C4:59:4B:D3:94:A3:CB:E7
            X509v3 Authority Key Identifier:
                keyid:E2:DD:62:B1:BD:25:0D:B6:23:2E:64:F1:26:71:D0:34:8B:6C:68:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D930D/E4D28FA4110B11EC8E66081CC4F9AE02/4t1isb0lDbYjLmTxJnHQNItsaHY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4t1isb0lDbYjLmTxJnHQNItsaHY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D930D/E4D28FA4110B11EC8E66081CC4F9AE02/4t1isb0lDbYjLmTxJnHQNItsaHY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:72:af:71:4e:ac:6b:7b:f3:d9:56:31:b4:e7:f4:02:12:f2:
         b0:19:16:90:9e:e3:8b:3f:ee:b4:b1:16:d9:90:cd:5f:2d:4f:
         05:40:1f:20:e4:49:72:76:10:3e:d5:5b:e9:7b:8e:13:66:c4:
         31:22:e6:7f:21:76:b6:1a:ed:41:1b:18:b9:e1:8b:53:c2:ac:
         70:8a:1a:21:d2:0e:a0:b6:2e:70:4c:ea:d0:8a:1c:7e:dc:4e:
         e1:10:3b:4b:29:a5:cb:41:24:50:4b:2e:bb:e8:62:3f:b9:b7:
         e6:4a:d7:a0:d6:1d:05:59:76:3e:fa:8e:97:f5:ee:d6:80:5d:
         de:b0:5a:3c:d7:45:22:a8:3f:c1:72:80:2d:95:92:e6:a7:b4:
         39:42:6c:af:7e:df:48:56:ab:cc:5e:ff:5e:d1:2e:d1:a2:4c:
         2f:3a:91:bd:43:f3:ec:d3:32:a8:24:19:fc:fd:6a:00:0f:09:
         b4:9b:0d:83:a3:d9:e4:f4:85:d8:fe:bf:1d:42:8c:81:ec:2a:
         b7:13:89:24:47:58:af:67:9f:19:1e:1e:c1:8a:fb:b3:98:f8:
         d6:a1:02:ea:fb:59:49:f1:a4:d5:41:5e:7b:db:d1:e6:b2:7b:
         ec:eb:0c:df:83:f1:9f:d3:1d:3b:96:31:b9:c1:5b:59:09:90:
         b2:57:ec:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----