Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFDFF/14DF6CF65FC011EBBEA22859C4F9AE02/fPZSOjBpgd0-zzOrxoUaoexipXA.mft
File:                     fPZSOjBpgd0-zzOrxoUaoexipXA.mft (raw, json)
Hash identifier:          6kHdIwLsrr1Qqh19Zkdy+6ZnFIrsYve7JhQcjVtYqDI=
Subject key identifier:   3F:C5:3D:20:AC:86:78:6A:AC:40:6F:02:CB:04:63:A3:AB:8E:8D:05
Authority key identifier: 7C:F6:52:3A:30:69:81:DD:3E:CF:33:AB:C6:85:1A:A1:EC:62:A5:70
Certificate issuer:       /CN=A91DFDFF/serialNumber=7CF6523A306981DD3ECF33ABC6851AA1EC62A570
Certificate serial:       03C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPZSOjBpgd0-zzOrxoUaoexipXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFDFF/14DF6CF65FC011EBBEA22859C4F9AE02/fPZSOjBpgd0-zzOrxoUaoexipXA.mft
Manifest number:          03C3
Signing time:             Fri 20 May 2022 12:45:43 +0000
Manifest this update:     Fri 20 May 2022 12:45:43 +0000
Manifest next update:     Sun 22 May 2022 12:45:43 +0000
Files and hashes:         1: fPZSOjBpgd0-zzOrxoUaoexipXA.crl (hash: 5vbdyZyU1WyttJChRtZQnKQiAa6n0F3yE3YlSiMBePM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 969 (0x3c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFDFF/serialNumber=7CF6523A306981DD3ECF33ABC6851AA1EC62A570
        Validity
            Not Before: May 20 12:45:43 2022 GMT
            Not After : May 22 12:45:43 2022 GMT
        Subject: CN=62878d77-bf90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3b:1b:2e:ae:3a:fe:55:25:e5:6b:4b:b0:d8:
                    33:ec:15:4c:93:75:e8:64:8d:0e:29:7e:4f:2f:d6:
                    35:4c:60:25:12:e6:39:ab:32:c4:9b:42:a4:34:6c:
                    b5:67:72:89:a9:91:11:d8:82:0a:c7:7f:a5:03:32:
                    94:c9:10:b6:cc:4e:11:08:4e:4c:30:c1:86:a6:8f:
                    d9:4f:b6:a1:d6:4a:1a:c1:96:9b:d8:36:40:c5:e3:
                    48:2b:4d:97:ac:95:8d:af:70:34:58:11:fd:9b:60:
                    14:b3:c6:7f:e9:6d:b7:83:c5:77:f9:a7:59:c9:1f:
                    bb:dd:05:97:84:ad:94:c1:86:8e:bf:58:c2:92:86:
                    d1:94:2e:85:83:9c:99:a9:dc:be:c4:d9:08:50:29:
                    a6:ee:0a:a3:5f:64:84:70:13:f4:ec:f3:77:64:08:
                    f6:02:16:03:c9:00:f3:1c:74:3b:3a:b2:0f:d5:31:
                    70:92:a1:70:3f:75:2d:ea:c9:ed:d1:7e:a3:b5:b8:
                    5a:b1:cc:93:6f:cb:40:10:91:a4:6c:58:8c:da:57:
                    43:45:84:5c:b0:ac:ea:37:86:be:4c:6e:82:62:05:
                    5a:6a:07:53:04:1c:f1:c1:a0:be:1e:5a:ed:45:16:
                    e5:2b:87:2e:80:08:03:65:31:61:58:2c:32:64:6d:
                    4a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C5:3D:20:AC:86:78:6A:AC:40:6F:02:CB:04:63:A3:AB:8E:8D:05
            X509v3 Authority Key Identifier:
                keyid:7C:F6:52:3A:30:69:81:DD:3E:CF:33:AB:C6:85:1A:A1:EC:62:A5:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFDFF/14DF6CF65FC011EBBEA22859C4F9AE02/fPZSOjBpgd0-zzOrxoUaoexipXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPZSOjBpgd0-zzOrxoUaoexipXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFDFF/14DF6CF65FC011EBBEA22859C4F9AE02/fPZSOjBpgd0-zzOrxoUaoexipXA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:5c:65:66:b8:98:6a:6a:3e:e9:42:0a:fc:ae:cb:30:fc:a2:
         81:e6:89:ce:c2:23:02:d2:ef:0f:ba:99:d2:6e:7e:5f:c3:49:
         c9:e1:07:13:d8:2a:4e:2a:4e:ec:6e:74:59:5a:16:2b:4d:17:
         ad:32:61:10:48:5e:16:19:c1:93:5e:73:ee:63:15:94:a4:4f:
         5c:d4:91:73:66:28:a5:53:39:67:60:d0:67:5f:68:42:5b:ed:
         7a:98:44:ec:bf:2b:d1:96:e3:91:96:ab:21:97:24:ec:87:c0:
         70:43:f5:2b:fe:ae:c0:97:2c:46:dd:7c:e4:8d:68:0d:26:87:
         46:bd:20:97:d4:58:36:42:eb:53:be:84:4e:b6:b1:43:7a:98:
         e7:08:07:30:30:d6:73:7e:6f:8e:29:07:3d:fc:01:ca:ed:eb:
         17:09:08:84:62:c6:93:ec:6d:d3:72:72:cc:a9:b4:d1:b2:76:
         db:e1:d1:b5:69:14:66:cb:64:06:c2:fc:b0:23:bf:e1:3d:f9:
         e2:08:10:86:d4:ff:7c:e3:24:56:0c:c6:73:d5:17:1e:33:14:
         c7:95:78:68:6e:f7:1f:54:a2:2b:51:32:39:13:15:c5:c8:25:
         02:ac:ac:88:3a:77:ab:41:35:bd:c0:56:47:b5:78:4e:23:4f:
         55:83:13:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----