Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/2/84587BF67D2ADA31FC7E0FF93DE2E266D33164C0.mft
File:                     84587BF67D2ADA31FC7E0FF93DE2E266D33164C0.mft (raw, json)
Hash identifier:          84y5I8WyWDM2NZDi+BprMlGNjG18xIv+UnwAS8IpcAg=
Subject key identifier:   40:75:A8:AC:FD:E0:09:9C:82:A4:F8:47:FE:35:DC:D5:7B:80:A4:B1
Authority key identifier: 84:58:7B:F6:7D:2A:DA:31:FC:7E:0F:F9:3D:E2:E2:66:D3:31:64:C0
Certificate issuer:       /CN=69277d0a9b474673c9d19f36418a5bd347fb8bd3d827cad52f
Certificate serial:       28FAACF083788F180215F8EA44F1E4DB96C09D2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9b474673c9d19f36418a5bd347fb8bd3d827cad52f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/2/84587BF67D2ADA31FC7E0FF93DE2E266D33164C0.mft
Manifest number:          039D
Signing time:             Sun 01 Jan 2023 03:43:40 +0000
Manifest this update:     Sun 01 Jan 2023 03:38:40 +0000
Manifest next update:     Mon 02 Jan 2023 06:51:40 +0000
Files and hashes:         1: 3139392e3138322e3133322e302f32322d3234203d3e20323039323432.roa (hash: JVvYqjHIt+V8L2hha6FVIpMK1l0hDLDN5F9bA4UyRJg=)
                          2: 3139392e3138322e3133322e302f32322d3234203d3e203534313130.roa (hash: ZDaVP7GCD/XZq8+qEm1duU7HstXXa1mQp4IoKB7T6Wk=)
                          3: 84587BF67D2ADA31FC7E0FF93DE2E266D33164C0.crl (hash: hNc9JhhgffOWdr3gl3n6o0/116N4MXRuoJS7ocLr4oQ=)
                          4: 3139392e3138322e3133322e302f32322d3234203d3e20333936393832.roa (hash: STqxAir5LH/PLU4RifGL914Tl6TGJ/6MK1L5XNYitbE=)
                          5: 3139392e3138322e3133322e302f32322d3234203d3e2039343439.roa (hash: KkiBrPk8Axi2z5ipI5S5topc9w88D/tiduGcK/jTDXE=)
                          6: 3139392e3138322e3133322e302f32322d3234203d3e203231353534.roa (hash: l6vJu/3mXA9fJbf+zzeOz+JDOXN3qfLoAy3QMT+EMTw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:fa:ac:f0:83:78:8f:18:02:15:f8:ea:44:f1:e4:db:96:c0:9d:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69277d0a9b474673c9d19f36418a5bd347fb8bd3d827cad52f
        Validity
            Not Before: Jan  1 03:38:40 2023 GMT
            Not After : Jan  2 06:51:40 2023 GMT
        Subject: CN=4075A8ACFDE0099C82A4F847FE35DCD57B80A4B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e7:92:a2:75:83:ec:34:4a:e8:7e:5b:4c:da:
                    fb:b0:7d:94:0f:06:a6:a9:a0:33:6d:86:f6:b2:19:
                    99:bd:be:d8:8b:4f:8c:e8:43:0c:5c:b6:83:1c:42:
                    98:d2:3e:8b:df:67:5c:04:de:ec:6c:54:56:d4:0c:
                    d8:04:57:80:a2:36:8b:f4:9b:d6:4c:bc:4d:e4:27:
                    f2:0b:1b:72:4a:0a:bb:c9:9f:a4:a4:1f:cc:fc:7e:
                    b7:f3:5e:4b:ff:2c:65:70:db:15:88:8f:7d:14:d8:
                    ce:16:a1:e2:09:f5:4a:d1:a6:1c:74:41:4a:fd:56:
                    97:57:8d:ac:a2:5d:a8:6c:2c:bb:91:1a:1b:2c:8d:
                    d1:fd:82:44:ab:25:44:6f:9d:6e:9e:3a:b8:6e:7a:
                    bf:c3:05:43:4c:46:94:dc:38:68:0f:da:2c:e3:2e:
                    52:f7:8e:ac:8f:1d:61:78:80:02:18:8f:e7:d9:9e:
                    c7:c2:c1:70:7f:34:25:f4:e9:6a:c7:17:2b:d7:1e:
                    dc:ec:06:5f:43:3c:bd:ae:80:fc:19:96:d5:39:d7:
                    15:29:18:4c:28:f9:6c:9f:c5:1e:5b:4d:8d:09:03:
                    3d:25:12:a7:61:67:90:19:65:05:79:c4:75:1f:fa:
                    f3:b2:18:0d:9e:aa:bc:2b:1d:59:d6:47:18:79:73:
                    ca:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:75:A8:AC:FD:E0:09:9C:82:A4:F8:47:FE:35:DC:D5:7B:80:A4:B1
            X509v3 Authority Key Identifier:
                keyid:84:58:7B:F6:7D:2A:DA:31:FC:7E:0F:F9:3D:E2:E2:66:D3:31:64:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/2/84587BF67D2ADA31FC7E0FF93DE2E266D33164C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9b474673c9d19f36418a5bd347fb8bd3d827cad52f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/2/84587BF67D2ADA31FC7E0FF93DE2E266D33164C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:5e:18:f9:97:24:50:83:90:4e:cd:ad:ef:aa:9c:2a:44:83:
         11:7c:f7:03:2c:f4:f6:d1:51:c6:00:0c:5e:43:28:cb:a2:3e:
         03:9e:16:96:3e:63:ad:f0:9d:6b:0a:14:e6:48:e2:1e:ac:5c:
         fe:2d:34:ff:f0:9c:73:12:15:16:d1:98:66:96:e1:fe:6c:bd:
         43:e1:8b:9c:a2:0f:1b:27:8b:f0:60:04:56:4b:fc:96:59:27:
         3f:7b:d9:4b:db:09:43:84:e6:c4:40:a3:71:8b:59:a2:2c:2a:
         ed:59:48:d8:6a:9d:34:51:2c:d6:20:e7:e6:59:96:b5:50:a9:
         5d:09:80:80:fb:f6:09:4f:22:b0:04:ee:6d:d0:b0:1e:9b:6b:
         a6:3b:5e:c9:13:3a:e1:7e:14:4e:41:f4:96:10:3e:18:b1:86:
         3a:45:42:47:9d:16:ba:e8:0d:73:71:92:11:cc:ed:c9:e0:9f:
         87:1a:24:bb:04:f1:e4:1c:0a:65:89:2d:b8:87:50:e7:6d:0e:
         2d:3e:2a:ce:4f:1c:58:2a:32:5d:09:92:ce:65:9c:70:4b:de:
         7b:82:8f:04:cf:a6:2c:fa:59:b9:fe:76:57:e4:a2:24:65:41:
         bf:cf:3f:49:84:b4:bc:2c:1d:de:27:f4:07:9c:27:71:32:f6:
         28:28:be:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----