Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91187A6/9EBE69608E7C11EA9833105EC4F9AE02/MIixerfplmRXm2wX2pICu3op9vQ.mft
File:                     MIixerfplmRXm2wX2pICu3op9vQ.mft (raw, json)
Hash identifier:          Xj9+8AJiqivQlkz1xWHaebLIcwjnfD/a+58hecXfFt8=
Subject key identifier:   2F:02:21:2E:A9:41:21:B0:D6:64:9A:7F:63:F4:5E:8C:64:55:C7:7A
Authority key identifier: 30:88:B1:7A:B7:E9:96:64:57:9B:6C:17:DA:92:02:BB:7A:29:F6:F4
Certificate issuer:       /CN=A91187A6/serialNumber=3088B17AB7E99664579B6C17DA9202BB7A29F6F4
Certificate serial:       08B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MIixerfplmRXm2wX2pICu3op9vQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91187A6/9EBE69608E7C11EA9833105EC4F9AE02/MIixerfplmRXm2wX2pICu3op9vQ.mft
Manifest number:          08B0
Signing time:             Tue 16 Apr 2024 21:29:54 +0000
Manifest this update:     Tue 16 Apr 2024 21:29:54 +0000
Manifest next update:     Tue 23 Apr 2024 21:29:54 +0000
Files and hashes:         1: MIixerfplmRXm2wX2pICu3op9vQ.crl (hash: tRhhbotFfVxfvDSAcFVkNc0ubVDgReJFocacHogKL9E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2229 (0x8b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91187A6/serialNumber=3088B17AB7E99664579B6C17DA9202BB7A29F6F4
        Validity
            Not Before: Apr 16 21:29:54 2024 GMT
            Not After : Apr 23 21:29:54 2024 GMT
        Subject: CN=661eedd2-dc03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:de:3a:54:ae:32:56:f6:ed:cc:2d:1f:e2:bd:
                    ec:cc:13:a8:9a:84:12:c3:2a:0a:7d:f8:e9:5b:98:
                    fb:30:38:7d:a3:0a:b4:d1:4d:2f:bf:37:3b:2e:35:
                    7c:7b:89:80:e5:0b:fd:a2:9a:ea:09:08:28:6b:ff:
                    54:bd:33:b9:26:99:5b:22:f0:70:f7:d0:13:b8:39:
                    8b:07:bc:a5:ab:5b:52:45:41:fb:7d:2e:4c:6d:54:
                    8b:9e:bc:89:49:6a:01:46:d3:f6:94:bf:61:ae:3b:
                    19:7d:0a:bc:3f:0a:f7:69:44:1e:6f:d2:88:71:27:
                    a9:57:e7:23:9a:f6:c0:62:60:95:0b:71:2f:dd:c4:
                    c8:4f:0c:b4:21:13:00:81:9e:67:9a:75:87:45:8a:
                    4c:9b:1f:90:49:79:44:89:81:fa:03:95:23:e0:7c:
                    28:35:bb:82:d6:c5:e0:9e:74:f9:d3:a3:70:20:78:
                    45:de:37:4f:48:65:c5:fc:7b:34:c9:41:9f:8b:0a:
                    62:04:06:4e:59:ce:d6:d5:ca:bf:f5:30:e5:5f:47:
                    3c:b1:a9:38:21:91:fe:1a:a4:16:d1:50:7e:f8:05:
                    ab:7e:ed:04:91:eb:1e:61:c8:85:17:58:17:d9:39:
                    3c:98:85:d1:96:7e:23:26:aa:f2:3c:20:c9:b7:3c:
                    db:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:02:21:2E:A9:41:21:B0:D6:64:9A:7F:63:F4:5E:8C:64:55:C7:7A
            X509v3 Authority Key Identifier:
                keyid:30:88:B1:7A:B7:E9:96:64:57:9B:6C:17:DA:92:02:BB:7A:29:F6:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91187A6/9EBE69608E7C11EA9833105EC4F9AE02/MIixerfplmRXm2wX2pICu3op9vQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MIixerfplmRXm2wX2pICu3op9vQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187A6/9EBE69608E7C11EA9833105EC4F9AE02/MIixerfplmRXm2wX2pICu3op9vQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:eb:c2:db:a8:0a:50:2f:75:b7:7b:dd:c0:4c:0a:fb:12:e4:
         a4:68:2f:b3:13:06:95:ce:8f:67:f2:c9:7c:fc:74:c8:25:69:
         8d:2e:70:59:1e:50:03:58:5d:03:65:78:82:9e:fc:5a:ab:5b:
         93:86:0d:5a:a1:73:13:2e:0f:21:1d:a3:b6:fc:a5:b5:3f:73:
         97:91:bd:82:5f:3a:ba:85:21:cd:14:90:53:39:b3:dd:cf:df:
         dc:74:6f:fc:d4:b0:70:21:fc:cf:32:c0:e9:d0:f6:ec:8b:90:
         fe:79:7e:d1:a2:c6:0c:c6:df:69:06:61:52:fe:a7:f9:7c:4b:
         3f:44:21:3b:15:1a:79:92:c1:36:13:76:26:5d:e9:cd:ed:aa:
         30:5b:95:00:87:36:08:6b:91:f2:45:13:c4:86:92:da:2a:24:
         de:57:3f:af:6c:9f:52:d2:a5:63:bd:41:7d:ec:62:a5:6d:25:
         80:2d:c9:09:4e:cc:a3:e1:5c:d6:ad:79:37:32:c6:1e:66:77:
         2e:14:26:c8:ba:8c:c9:4b:08:98:3e:fc:ed:36:bc:71:4f:cb:
         bb:00:69:63:f7:78:2f:dd:a8:37:7b:81:b3:49:1a:76:8f:37:
         06:33:e2:8c:2f:d0:db:23:a6:3d:38:3b:52:a8:35:54:97:a8:
         b8:86:2c:65
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTg3QTYxMTAvBgNVBAUTKDMwODhCMTdBQjdFOTk2NjQ1NzlCNkMxN0RBOTIwMkJC
N0EyOUY2RjQwHhcNMjQwNDE2MjEyOTU0WhcNMjQwNDIzMjEyOTU0WjAYMRYwFAYD
VQQDEw02NjFlZWRkMi1kYzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy946VK4yVvbtzC0f4r3szBOomoQSwyoKffjpW5j7MDh9owq00U0vvzc7LjV8
e4mA5Qv9oprqCQgoa/9UvTO5JplbIvBw99ATuDmLB7ylq1tSRUH7fS5MbVSLnryJ
SWoBRtP2lL9hrjsZfQq8Pwr3aUQeb9KIcSepV+cjmvbAYmCVC3Ev3cTITwy0IRMA
gZ5nmnWHRYpMmx+QSXlEiYH6A5Uj4HwoNbuC1sXgnnT506NwIHhF3jdPSGXF/Hs0
yUGfiwpiBAZOWc7W1cq/9TDlX0c8sak4IZH+GqQW0VB++AWrfu0EkeseYciFF1gX
2Tk8mIXRln4jJqryPCDJtzzbEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC8CIS6p
QSGw1mSaf2P0XoxkVcd6MB8GA1UdIwQYMBaAFDCIsXq36ZZkV5tsF9qSArt6Kfb0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODdBNi85RUJFNjk2MDhF
N0MxMUVBOTgzMzEwNUVDNEY5QUUwMi9NSWl4ZXJmcGxtUlhtMndYMnBJQ3Uzb3A5
dlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01JaXhlcmZwbG1SWG0yd1gycElDdTNvcDl2US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
ODdBNi85RUJFNjk2MDhFN0MxMUVBOTgzMzEwNUVDNEY5QUUwMi9NSWl4ZXJmcGxt
UlhtMndYMnBJQ3Uzb3A5dlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAc68LbqApQL3W3e93ATAr7EuSkaC+zEwaVzo9n8sl8/HTIJWmNLnBZ
HlADWF0DZXiCnvxaq1uThg1aoXMTLg8hHaO2/KW1P3OXkb2CXzq6hSHNFJBTObPd
z9/cdG/81LBwIfzPMsDp0Pbsi5D+eX7RosYMxt9pBmFS/qf5fEs/RCE7FRp5ksE2
E3YmXenN7aowW5UAhzYIa5HyRRPEhpLaKiTeVz+vbJ9S0qVjvUF97GKlbSWALckJ
Tsyj4VzWrXk3MsYeZncuFCbIuozJSwiYPvztNrxxT8u7AGlj93gv3ag3e4GzSRp2
jzcGM+KML9DbI6Y9ODtSqDVUl6i4hixl
-----END CERTIFICATE-----