Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F635F/B87B64FC6F4811E8B1585164C4F9AE02/k2oPrvem_YPCbO4eXPs6Qv9I4YA.mft
File:                     k2oPrvem_YPCbO4eXPs6Qv9I4YA.mft (raw, json)
Hash identifier:          vOwF6aEK6bMowWnL/1H6lTWHxmCmLsLKhLHX3cyCFQw=
Subject key identifier:   C4:12:23:43:28:B7:1D:CA:0B:CE:F8:16:75:AD:9A:B5:0D:5C:BF:84
Authority key identifier: 93:6A:0F:AE:F7:A6:FD:83:C2:6C:EE:1E:5C:FB:3A:42:FF:48:E1:80
Certificate issuer:       /CN=A91F635F/serialNumber=936A0FAEF7A6FD83C26CEE1E5CFB3A42FF48E180
Certificate serial:       134C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k2oPrvem_YPCbO4eXPs6Qv9I4YA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F635F/B87B64FC6F4811E8B1585164C4F9AE02/k2oPrvem_YPCbO4eXPs6Qv9I4YA.mft
Manifest number:          12E8
Signing time:             Sun 22 Jan 2023 17:53:27 +0000
Manifest this update:     Sun 22 Jan 2023 17:53:26 +0000
Manifest next update:     Sun 29 Jan 2023 17:53:26 +0000
Files and hashes:         1: k2oPrvem_YPCbO4eXPs6Qv9I4YA.crl (hash: 2dN/aGpdUsCS05d0KbPVVHv3puQsMooPudfO1NSN3Hg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4940 (0x134c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F/serialNumber=936A0FAEF7A6FD83C26CEE1E5CFB3A42FF48E180
        Validity
            Not Before: Jan 22 17:53:26 2023 GMT
            Not After : Jan 29 17:53:26 2023 GMT
        Subject: CN=63cd7817-5fb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3c:d0:c2:bb:db:0d:ae:47:4b:80:85:8e:3e:
                    53:df:d8:11:07:82:5c:eb:33:bb:fe:0b:c5:4d:85:
                    d7:b3:49:c1:0a:62:e1:92:57:2b:9a:57:6c:e5:33:
                    e3:cc:3f:fb:29:04:06:13:75:50:4c:6c:03:be:5d:
                    c7:32:c9:87:71:44:56:30:d4:fc:02:25:67:4c:79:
                    7c:a2:90:ea:56:82:e9:c8:ec:25:bf:c8:fe:94:96:
                    49:99:d4:3d:fe:13:7a:89:72:37:3e:dc:d8:83:7b:
                    38:6c:ef:44:8f:c8:60:07:10:2f:64:7f:9e:cb:35:
                    28:2c:e9:89:b5:60:6e:a4:b9:1c:03:c2:ad:b9:96:
                    04:5a:b7:35:ed:95:77:e1:6f:ee:ed:ef:1e:5a:36:
                    32:df:16:e3:18:6b:14:6b:f0:e1:c6:3e:9d:52:b2:
                    35:2e:a7:cd:08:6a:8e:0c:3d:ab:13:55:ac:f9:19:
                    75:13:9d:18:51:58:24:61:a4:f9:81:7c:ca:0f:c6:
                    69:49:c3:30:6b:54:76:dd:0d:9b:59:5a:90:e3:a1:
                    b6:49:52:d9:d0:d2:1a:5d:2a:91:66:1d:44:02:97:
                    57:90:bb:d5:f8:72:05:7a:70:dd:ac:95:37:90:23:
                    45:9c:ae:0c:53:44:28:95:f6:8d:e1:ed:fc:97:40:
                    19:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:12:23:43:28:B7:1D:CA:0B:CE:F8:16:75:AD:9A:B5:0D:5C:BF:84
            X509v3 Authority Key Identifier:
                keyid:93:6A:0F:AE:F7:A6:FD:83:C2:6C:EE:1E:5C:FB:3A:42:FF:48:E1:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F635F/B87B64FC6F4811E8B1585164C4F9AE02/k2oPrvem_YPCbO4eXPs6Qv9I4YA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k2oPrvem_YPCbO4eXPs6Qv9I4YA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F635F/B87B64FC6F4811E8B1585164C4F9AE02/k2oPrvem_YPCbO4eXPs6Qv9I4YA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:f2:72:4d:92:26:65:a3:ed:03:31:c5:91:ce:43:5a:be:d4:
         7f:b9:d3:d0:47:a2:d3:63:9c:07:14:ca:be:fa:3d:43:57:aa:
         cc:c5:a4:cd:60:ad:69:8e:67:b7:a4:ba:2e:09:e4:97:3e:6f:
         79:0c:79:5c:cf:87:72:aa:fa:1f:d4:17:59:07:f4:e3:8d:ce:
         11:88:52:19:5f:33:4a:2e:ff:41:28:f3:d8:a2:68:48:97:bb:
         92:ca:79:98:7f:36:fb:51:0c:f9:f7:93:2f:2d:6e:64:8e:41:
         2b:65:6e:7d:19:f5:c4:95:e4:da:e6:b8:bd:55:3a:60:0b:48:
         66:19:01:ca:24:b5:cc:7e:54:90:67:3f:dc:2e:4f:63:8c:5b:
         3a:29:f0:09:31:23:5c:a1:70:df:71:6b:80:12:dd:31:c6:67:
         f7:04:d9:db:72:9e:65:68:9e:30:67:02:3c:ea:8c:dc:9e:64:
         08:8e:1b:de:05:a5:1a:13:e4:dd:fa:d2:d1:d3:08:2b:7e:8a:
         b2:cf:b3:93:a8:0f:4b:9b:f6:a0:1d:0a:d8:d3:e9:fc:59:3a:
         f9:50:ed:59:ad:79:4c:97:1e:54:7d:73:4e:8a:34:b0:b0:85:
         74:da:8d:2b:68:20:2f:1c:68:2a:73:e3:f7:9e:80:89:82:3a:
         10:df:9e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----