Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91270E6/75648ECED63511E896631322C4F9AE02/IqL6xGH_1SNkWmgRblXCLY6YbJk.mft
File:                     IqL6xGH_1SNkWmgRblXCLY6YbJk.mft (raw, json)
Hash identifier:          Eyh1zyt0cn+dpmwV8DfwTH7YnJdLdDKugpFSJLFhqFM=
Subject key identifier:   78:D7:D2:B0:96:5F:4E:FD:CC:89:E4:F9:DF:54:53:0E:3D:9B:15:D6
Authority key identifier: 22:A2:FA:C4:61:FF:D5:23:64:5A:68:11:6E:55:C2:2D:8E:98:6C:99
Certificate issuer:       /CN=A91270E6/serialNumber=22A2FAC461FFD523645A68116E55C22D8E986C99
Certificate serial:       04CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqL6xGH_1SNkWmgRblXCLY6YbJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91270E6/75648ECED63511E896631322C4F9AE02/IqL6xGH_1SNkWmgRblXCLY6YbJk.mft
Manifest number:          2095
Signing time:             Wed 24 May 2023 06:21:47 +0000
Manifest this update:     Wed 24 May 2023 06:21:46 +0000
Manifest next update:     Wed 31 May 2023 06:21:46 +0000
Files and hashes:         1: IqL6xGH_1SNkWmgRblXCLY6YbJk.crl (hash: 6HASfaBa45zkzX0YiQ7P7wMxL2XQBxKE0U75b0USXgc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1231 (0x4cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91270E6/serialNumber=22A2FAC461FFD523645A68116E55C22D8E986C99
        Validity
            Not Before: May 24 06:21:46 2023 GMT
            Not After : May 31 06:21:46 2023 GMT
        Subject: CN=646dacfb-0649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a2:fc:42:50:ad:81:82:7d:bb:78:d3:35:23:
                    b8:4d:0a:86:fd:69:8d:23:77:9b:bc:f4:4a:7b:6e:
                    26:92:9f:df:3c:b0:de:dc:85:87:33:6b:1f:79:a9:
                    db:f6:24:8f:10:75:30:a8:89:81:9c:00:b5:0a:f6:
                    b9:e1:ad:7a:f8:f0:81:c9:96:92:10:97:d6:24:75:
                    3b:18:7f:e1:df:42:d0:f7:b7:d5:0a:7f:56:1a:ba:
                    d7:42:6a:4e:c7:53:4d:f5:8f:1f:36:5e:8f:74:14:
                    46:7b:f4:22:0b:f3:f5:03:be:ec:ae:13:8d:f7:ef:
                    08:93:b7:90:7b:a0:0e:f4:21:16:60:2a:46:a8:c5:
                    f8:26:80:50:a7:96:6d:ac:f4:6c:dc:88:37:dd:3e:
                    40:c1:3d:0a:da:b3:5c:93:e6:90:99:00:bd:aa:8e:
                    86:d7:f8:ae:13:7d:a9:62:a2:b3:31:0f:ab:e9:70:
                    4f:f6:e6:7d:df:2d:f7:4d:18:a5:74:01:22:f9:45:
                    bb:b6:6e:52:65:94:fc:6f:29:9c:ce:4f:56:c5:5a:
                    d1:6f:59:66:cc:e3:51:1a:1b:d4:98:44:e2:33:b1:
                    39:16:55:f9:60:66:0a:bd:a6:af:64:45:54:50:bb:
                    b7:37:2f:dd:70:6d:8f:0e:2e:a7:65:9f:0c:33:91:
                    7a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D7:D2:B0:96:5F:4E:FD:CC:89:E4:F9:DF:54:53:0E:3D:9B:15:D6
            X509v3 Authority Key Identifier:
                keyid:22:A2:FA:C4:61:FF:D5:23:64:5A:68:11:6E:55:C2:2D:8E:98:6C:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91270E6/75648ECED63511E896631322C4F9AE02/IqL6xGH_1SNkWmgRblXCLY6YbJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqL6xGH_1SNkWmgRblXCLY6YbJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91270E6/75648ECED63511E896631322C4F9AE02/IqL6xGH_1SNkWmgRblXCLY6YbJk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:f8:73:76:60:5c:cc:78:c7:bd:e8:04:f8:5c:c7:d8:96:94:
         3a:98:c0:78:a9:1e:b3:60:70:56:b1:01:da:57:cc:e1:03:e6:
         a8:80:ef:07:49:18:6c:ef:6e:3a:1e:26:b1:1b:04:50:b9:15:
         a6:ed:a6:27:4a:41:34:fb:bf:98:ee:0c:14:31:8b:c3:d6:9f:
         06:84:10:78:ad:bc:66:2f:56:7a:03:2a:15:ff:4d:81:43:0c:
         98:d7:84:fd:e0:72:d1:62:78:8d:4d:0d:53:5e:9a:f3:f8:dc:
         0d:a5:fa:4c:fd:67:ec:46:89:d4:d0:14:8b:dc:9f:bd:c3:ac:
         7e:ab:98:54:20:ae:a1:26:7f:b7:7f:1e:77:83:b8:70:68:62:
         5e:b5:3e:d1:2c:88:d1:6d:69:4f:18:cc:05:da:61:12:42:60:
         f1:4a:7a:01:17:66:e9:dc:98:c8:73:e3:90:67:fb:b2:de:d4:
         09:bb:cb:5f:1f:08:c8:12:26:9e:48:38:7a:d2:61:c4:06:1d:
         d8:12:fe:c4:e0:ef:e5:78:e2:64:ec:62:d5:54:f6:7f:ae:5f:
         3c:a8:9d:87:3b:55:6d:e1:04:4a:74:ba:40:55:4a:78:42:62:
         38:ea:18:46:3f:0f:e1:b4:45:b0:58:4d:c6:26:ea:cd:91:54:
         a8:e6:26:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----