Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112A43/B9AA3646B00611EEAE1F5E87C4F9AE02/KVuEBN51oz6Oh7AQ5mo7EK9A6Dw.mft
File:                     KVuEBN51oz6Oh7AQ5mo7EK9A6Dw.mft (raw, json)
Hash identifier:          /svoWydjn+GF2uDeg1dKsayRGqrQq/elK2MXqIT5SDE=
Subject key identifier:   34:22:11:68:D4:3E:78:84:78:B3:A7:B8:59:83:B1:AB:1F:1E:B9:E4
Authority key identifier: 29:5B:84:04:DE:75:A3:3E:8E:87:B0:10:E6:6A:3B:10:AF:40:E8:3C
Certificate issuer:       /CN=A9112A43/serialNumber=295B8404DE75A33E8E87B010E66A3B10AF40E83C
Certificate serial:       3A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KVuEBN51oz6Oh7AQ5mo7EK9A6Dw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112A43/B9AA3646B00611EEAE1F5E87C4F9AE02/KVuEBN51oz6Oh7AQ5mo7EK9A6Dw.mft
Manifest number:          3A
Signing time:             Mon 29 Apr 2024 08:04:34 +0000
Manifest this update:     Mon 29 Apr 2024 08:04:34 +0000
Manifest next update:     Mon 06 May 2024 08:04:34 +0000
Files and hashes:         1: KVuEBN51oz6Oh7AQ5mo7EK9A6Dw.crl (hash: qj3wOnCBQSK4HDploJoWl1jcp8wTOn8fq+HLYNkquAs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112A43/serialNumber=295B8404DE75A33E8E87B010E66A3B10AF40E83C
        Validity
            Not Before: Apr 29 08:04:34 2024 GMT
            Not After : May  6 08:04:34 2024 GMT
        Subject: CN=662f5492-e69e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:58:b0:ee:0e:e0:4e:a1:c5:7e:44:60:73:5e:
                    40:ed:2f:ad:55:14:6c:f7:63:c2:b2:43:a6:f6:9a:
                    d7:c7:03:ea:fd:cd:60:03:bb:0c:00:c0:c9:09:a2:
                    fb:a1:14:13:5c:4d:1a:9f:f5:da:ef:39:db:93:97:
                    94:71:65:33:ac:73:f3:ca:2f:b1:0e:52:29:ad:99:
                    0a:a5:2f:96:4c:52:32:9c:c7:fe:fe:63:74:74:c9:
                    ee:4c:9d:eb:c9:12:47:b9:48:3b:2f:7c:ca:32:4e:
                    d8:91:b2:ac:bd:30:2c:1d:b8:b6:76:86:8c:44:db:
                    f6:f0:a0:15:20:9a:f8:17:af:d0:09:9e:24:f8:f5:
                    00:3b:7f:9d:c1:fb:0a:59:9b:f0:b6:0e:72:6d:78:
                    7d:7c:86:c5:e2:ed:8d:16:bc:12:c5:bd:21:05:9c:
                    ca:cc:2a:f6:c6:01:c2:55:05:0d:ec:6d:69:9f:57:
                    06:64:50:5a:31:67:28:43:7b:93:8f:c2:3e:b8:f8:
                    52:8d:5d:a5:25:c6:64:37:97:68:1c:4d:02:65:cb:
                    a8:ff:24:bb:1a:af:d2:2a:5b:94:c5:f4:3b:28:94:
                    19:53:6c:24:f2:47:9c:f0:3f:76:c6:53:27:a0:64:
                    01:38:51:e1:55:36:13:44:c8:e5:6f:da:f8:23:e7:
                    4c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:22:11:68:D4:3E:78:84:78:B3:A7:B8:59:83:B1:AB:1F:1E:B9:E4
            X509v3 Authority Key Identifier:
                keyid:29:5B:84:04:DE:75:A3:3E:8E:87:B0:10:E6:6A:3B:10:AF:40:E8:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112A43/B9AA3646B00611EEAE1F5E87C4F9AE02/KVuEBN51oz6Oh7AQ5mo7EK9A6Dw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KVuEBN51oz6Oh7AQ5mo7EK9A6Dw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112A43/B9AA3646B00611EEAE1F5E87C4F9AE02/KVuEBN51oz6Oh7AQ5mo7EK9A6Dw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:f9:06:7f:3c:f4:d8:55:53:5e:a8:41:82:fa:7d:21:bb:8c:
         66:69:e5:74:27:84:e5:d8:e0:f8:7d:9b:b2:6a:2b:8f:a6:72:
         25:ec:20:fb:1e:60:b5:c0:03:4d:bd:c9:a4:17:b1:de:dd:d9:
         15:a9:09:81:23:b4:01:7c:8e:b8:d2:c7:f3:58:90:c9:83:28:
         82:bd:9a:ca:1f:60:bb:a2:b8:7c:56:01:f6:d5:fa:1d:89:51:
         82:f1:70:64:19:58:1f:9e:03:5d:4b:14:b9:be:f3:fe:e0:7b:
         51:3a:4e:9c:1a:47:fd:fa:f5:fe:de:7b:33:33:de:d5:ca:2a:
         85:fe:57:04:6d:9e:8b:cd:4c:c6:b0:82:46:93:ed:77:b4:b7:
         a3:ac:c5:15:05:1a:01:7d:ef:2e:a1:d8:cb:93:1c:dd:19:dd:
         e6:b5:66:ea:73:57:25:e2:e9:92:c1:07:ec:fe:bc:fc:42:bb:
         d7:fb:3d:d4:08:ec:dd:e3:b2:28:07:9e:00:c2:11:79:b9:e3:
         a7:7b:82:a8:91:98:2a:46:4f:5b:28:08:06:5b:04:f7:b2:07:
         b8:df:76:af:4c:b8:98:ab:de:38:19:71:87:6b:c1:fc:85:67:
         29:e8:ec:d1:50:41:3a:c1:c8:60:75:a0:df:e2:56:7d:16:dd:
         0e:f0:48:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----