Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111C04/723A88E6D9A911EBA417F745C4F9AE02/NAy-uvMwe0SgtwGXbjwjt5pM0dc.mft
File:                     NAy-uvMwe0SgtwGXbjwjt5pM0dc.mft (raw, json)
Hash identifier:          VMO7OUr9AbsS0K5KapoMatqs8fh1g4U9nCtBJdU1lyU=
Subject key identifier:   A5:04:63:14:54:E0:9A:D4:19:23:F0:63:E4:AE:D5:B7:B9:46:6F:50
Authority key identifier: 34:0C:BE:BA:F3:30:7B:44:A0:B7:01:97:6E:3C:23:B7:9A:4C:D1:D7
Certificate issuer:       /CN=A9111C04/serialNumber=340CBEBAF3307B44A0B701976E3C23B79A4CD1D7
Certificate serial:       0477
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAy-uvMwe0SgtwGXbjwjt5pM0dc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111C04/723A88E6D9A911EBA417F745C4F9AE02/NAy-uvMwe0SgtwGXbjwjt5pM0dc.mft
Manifest number:          0474
Signing time:             Tue 12 Dec 2023 08:00:38 +0000
Manifest this update:     Tue 12 Dec 2023 08:00:38 +0000
Manifest next update:     Tue 19 Dec 2023 08:00:38 +0000
Files and hashes:         1: NAy-uvMwe0SgtwGXbjwjt5pM0dc.crl (hash: 79GAV87VHB5e4iUP+fFUq4nuyrGtZwWjb6hKmcIOxFM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1143 (0x477)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111C04/serialNumber=340CBEBAF3307B44A0B701976E3C23B79A4CD1D7
        Validity
            Not Before: Dec 12 08:00:38 2023 GMT
            Not After : Dec 19 08:00:38 2023 GMT
        Subject: CN=65781326-217c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:36:9b:ba:ad:b8:96:9e:27:7f:06:92:0d:f7:
                    48:3b:b3:f9:38:4b:f7:42:f5:65:48:5a:c9:71:0e:
                    a3:e4:75:48:e7:5a:4f:b7:d2:fd:81:60:3d:b2:5b:
                    10:e7:61:17:95:3d:7c:c0:93:c7:7c:e6:51:99:15:
                    cc:eb:39:62:6b:a3:69:29:81:a3:c7:50:91:99:12:
                    1a:bb:4f:4b:21:86:8e:7f:b2:1b:04:28:63:36:25:
                    d8:6c:ff:f9:f9:65:5d:ba:34:0f:d6:8a:a7:2b:26:
                    ab:d0:38:9f:43:17:d8:2e:87:64:2e:1e:65:26:9b:
                    6c:fd:ff:02:07:71:34:0c:76:1f:01:a1:b9:a5:da:
                    12:c7:76:51:0c:1e:ce:6d:1c:d2:46:b4:f6:71:41:
                    b9:c6:9d:8c:0c:c6:b3:5f:74:e9:7e:d3:3f:4f:97:
                    29:3c:d4:a5:f0:6b:26:b4:ea:83:f1:38:e7:96:a9:
                    34:14:92:69:de:c1:ee:80:be:bb:e9:f6:19:a4:91:
                    84:85:77:7c:ec:b3:e6:27:14:ac:13:35:b6:54:72:
                    af:6c:aa:f9:b1:a1:f9:b9:e2:27:e1:46:e5:ae:2e:
                    c3:50:2e:90:aa:2b:b9:ab:6d:cd:28:11:66:dc:5e:
                    5c:f8:11:e7:0f:6a:67:a4:21:82:7e:ae:d2:99:cf:
                    ac:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:04:63:14:54:E0:9A:D4:19:23:F0:63:E4:AE:D5:B7:B9:46:6F:50
            X509v3 Authority Key Identifier:
                keyid:34:0C:BE:BA:F3:30:7B:44:A0:B7:01:97:6E:3C:23:B7:9A:4C:D1:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111C04/723A88E6D9A911EBA417F745C4F9AE02/NAy-uvMwe0SgtwGXbjwjt5pM0dc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAy-uvMwe0SgtwGXbjwjt5pM0dc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111C04/723A88E6D9A911EBA417F745C4F9AE02/NAy-uvMwe0SgtwGXbjwjt5pM0dc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:1e:21:9a:41:14:f0:9b:e8:a8:b1:89:80:c4:8b:9b:c9:11:
         22:9f:8c:71:0f:9c:db:6b:3b:d2:d6:94:62:55:a2:df:49:93:
         4a:5b:e7:b6:cd:99:8a:63:98:a1:fa:86:a2:a2:f2:2a:00:18:
         8b:71:86:aa:bf:90:fe:2f:f0:92:7b:f3:f1:7a:7b:8b:28:0e:
         b0:fb:1f:3e:0a:44:ab:34:cb:59:44:04:4b:dd:d0:02:af:7e:
         91:d5:70:67:2f:b5:46:9d:3e:86:6a:16:f2:0d:1c:b5:61:18:
         91:95:11:e8:50:56:2f:9f:55:4a:4f:66:df:bd:3f:c0:cb:7b:
         7c:d2:07:ee:32:52:9b:7a:2e:cd:37:49:6a:9c:1e:24:cc:57:
         66:23:0d:f1:92:e8:8c:83:b8:eb:fe:84:66:19:23:c8:ae:45:
         4e:ef:dc:ca:0a:01:bc:01:2b:ca:2a:0a:75:7c:f9:b2:cf:2b:
         09:09:4a:ca:61:08:b5:cc:8c:c2:a3:10:1a:2b:6a:83:8f:24:
         9e:7b:2a:b2:62:b9:b4:6e:69:18:12:0f:23:02:93:ef:d4:b4:
         11:c6:0d:85:92:de:2c:d0:3f:79:93:e4:13:74:d3:fe:81:73:
         93:35:9f:c9:cc:56:81:dd:9d:0a:b1:b3:ee:b3:bf:95:79:0b:
         73:42:10:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----