Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7AC7/F413D708A64911EAB3DB0C6EC4F9AE02/5icn8ZirjyLPOPTQP2o98mbugPI.mft
File:                     5icn8ZirjyLPOPTQP2o98mbugPI.mft (raw, json)
Hash identifier:          g6HE+ELu2yMpnQZi7GahwoNiDeaDgmTV1U2UgF7k2Ws=
Subject key identifier:   92:3E:88:E5:31:0C:4B:A2:7B:2B:60:73:4B:FE:5E:4B:1F:4A:FE:D2
Authority key identifier: E6:27:27:F1:98:AB:8F:22:CF:38:F4:D0:3F:6A:3D:F2:66:EE:80:F2
Certificate issuer:       /CN=A91E7AC7/serialNumber=E62727F198AB8F22CF38F4D03F6A3DF266EE80F2
Certificate serial:       07A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5icn8ZirjyLPOPTQP2o98mbugPI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7AC7/F413D708A64911EAB3DB0C6EC4F9AE02/5icn8ZirjyLPOPTQP2o98mbugPI.mft
Manifest number:          079A
Signing time:             Wed 14 Jun 2023 21:44:13 +0000
Manifest this update:     Wed 14 Jun 2023 21:44:12 +0000
Manifest next update:     Wed 21 Jun 2023 21:44:12 +0000
Files and hashes:         1: 5icn8ZirjyLPOPTQP2o98mbugPI.crl (hash: d95XRMNATx9t9nKmJwVrejFpHeszPaQgAgljMFsesy8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1952 (0x7a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7AC7/serialNumber=E62727F198AB8F22CF38F4D03F6A3DF266EE80F2
        Validity
            Not Before: Jun 14 21:44:12 2023 GMT
            Not After : Jun 21 21:44:12 2023 GMT
        Subject: CN=648a34ad-8a1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ca:b2:e1:1b:24:ed:ba:0b:be:2a:bb:48:d4:
                    31:09:09:c6:97:a1:6b:b5:7c:6f:c9:49:e6:f9:22:
                    43:61:6c:dd:cb:aa:e2:b4:ed:f4:f1:77:01:17:4b:
                    8d:64:be:19:02:f7:c4:b3:68:e4:bd:4c:39:28:41:
                    a2:a4:81:ed:20:c8:05:4c:e5:0b:f6:8a:ed:57:25:
                    85:4f:1f:57:5a:d8:f8:78:60:d4:ad:f6:fd:f4:16:
                    9d:cd:1e:39:e9:c8:f6:e2:2c:58:58:6f:fd:85:e3:
                    4e:64:47:dd:0d:71:b4:c2:df:84:6c:61:91:7f:b4:
                    76:aa:54:ec:2b:46:23:b8:ca:8b:20:d4:8f:1c:fc:
                    0e:25:62:f8:e4:8c:5e:df:a6:dc:d0:4a:56:4c:7e:
                    46:9d:99:50:09:7c:8d:cc:7b:37:95:83:b0:1a:30:
                    84:e9:0d:98:b1:1d:4e:57:8d:ca:40:d5:3c:fb:92:
                    79:4c:83:c8:d1:69:f0:97:10:bc:46:44:d8:79:19:
                    ac:42:99:29:d4:ea:1e:38:55:ab:6d:d6:68:33:96:
                    3f:1b:34:14:12:ca:66:d5:87:36:ab:9e:3b:1f:51:
                    4a:f0:53:fb:27:35:ad:49:87:e5:df:50:bf:ca:f5:
                    91:d3:c6:9a:ac:14:9e:89:f5:94:0e:fe:e6:dc:fc:
                    28:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:3E:88:E5:31:0C:4B:A2:7B:2B:60:73:4B:FE:5E:4B:1F:4A:FE:D2
            X509v3 Authority Key Identifier:
                keyid:E6:27:27:F1:98:AB:8F:22:CF:38:F4:D0:3F:6A:3D:F2:66:EE:80:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7AC7/F413D708A64911EAB3DB0C6EC4F9AE02/5icn8ZirjyLPOPTQP2o98mbugPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5icn8ZirjyLPOPTQP2o98mbugPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7AC7/F413D708A64911EAB3DB0C6EC4F9AE02/5icn8ZirjyLPOPTQP2o98mbugPI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:b9:b2:39:1a:47:98:3b:36:4c:1e:4b:76:c9:75:71:f6:6a:
         d2:65:8a:fb:7b:53:02:45:fa:ef:53:c2:74:c9:d1:cc:ed:33:
         a0:f4:af:4a:3f:70:5f:82:38:9f:e0:f3:69:24:0d:58:03:00:
         36:bb:4c:05:cb:42:49:39:c7:20:0f:b2:09:dc:e2:90:41:1a:
         7b:57:32:8b:23:6a:5e:cf:ed:8e:81:23:62:23:e1:89:3a:58:
         84:8e:81:ea:09:6b:83:05:99:35:ca:40:b2:d3:f7:25:53:dc:
         76:ea:78:f0:16:30:cf:8f:c0:88:34:3a:8e:7a:15:7f:25:ac:
         d3:52:16:88:33:62:9f:5f:c8:68:4a:e7:fd:6c:b5:30:37:1a:
         6c:45:16:09:13:5a:2c:97:13:c9:bd:6f:13:cc:2b:74:a4:fd:
         cd:04:0e:b4:78:9d:05:ee:df:0d:cf:f3:10:ea:de:86:5b:6c:
         02:21:24:89:76:66:0e:1f:4c:04:46:0f:c7:2b:7d:d7:04:bc:
         18:75:92:86:6f:77:d9:68:3a:04:14:c1:69:bc:d7:ef:33:33:
         5c:ef:b2:ad:ed:b2:ef:a9:e1:09:5c:3c:f7:16:84:26:93:88:
         cd:e6:c0:62:4c:13:59:a0:e7:d9:50:5e:54:d4:93:7b:5f:b9:
         ee:90:6e:26
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTdBQzcxMTAvBgNVBAUTKEU2MjcyN0YxOThBQjhGMjJDRjM4RjREMDNGNkEzREYy
NjZFRTgwRjIwHhcNMjMwNjE0MjE0NDEyWhcNMjMwNjIxMjE0NDEyWjAYMRYwFAYD
VQQDEw02NDhhMzRhZC04YTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt8qy4Rsk7boLviq7SNQxCQnGl6FrtXxvyUnm+SJDYWzdy6ritO308XcBF0uN
ZL4ZAvfEs2jkvUw5KEGipIHtIMgFTOUL9ortVyWFTx9XWtj4eGDUrfb99BadzR45
6cj24ixYWG/9heNOZEfdDXG0wt+EbGGRf7R2qlTsK0YjuMqLINSPHPwOJWL45Ixe
36bc0EpWTH5GnZlQCXyNzHs3lYOwGjCE6Q2YsR1OV43KQNU8+5J5TIPI0WnwlxC8
RkTYeRmsQpkp1OoeOFWrbdZoM5Y/GzQUEspm1Yc2q547H1FK8FP7JzWtSYfl31C/
yvWR08aarBSeifWUDv7m3PwoKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJI+iOUx
DEuieytgc0v+XksfSv7SMB8GA1UdIwQYMBaAFOYnJ/GYq48izzj00D9qPfJm7oDy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0FDNy9GNDEzRDcwOEE2
NDkxMUVBQjNEQjBDNkVDNEY5QUUwMi81aWNuOFppcmp5TFBPUFRRUDJvOThtYnVn
UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVpY244WmlyanlMUE9QVFFQMm85OG1idWdQSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
N0FDNy9GNDEzRDcwOEE2NDkxMUVBQjNEQjBDNkVDNEY5QUUwMi81aWNuOFppcmp5
TFBPUFRRUDJvOThtYnVnUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCKubI5GkeYOzZMHkt2yXVx9mrSZYr7e1MCRfrvU8J0ydHM7TOg9K9K
P3Bfgjif4PNpJA1YAwA2u0wFy0JJOccgD7IJ3OKQQRp7VzKLI2pez+2OgSNiI+GJ
OliEjoHqCWuDBZk1ykCy0/clU9x26njwFjDPj8CINDqOehV/JazTUhaIM2KfX8ho
Suf9bLUwNxpsRRYJE1oslxPJvW8TzCt0pP3NBA60eJ0F7t8Nz/MQ6t6GW2wCISSJ
dmYOH0wERg/HK33XBLwYdZKGb3fZaDoEFMFpvNfvMzNc77Kt7bLvqeEJXDz3FoQm
k4jN5sBiTBNZoOfZUF5U1JN7X7nukG4m
-----END CERTIFICATE-----