Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9128963/986B18648DFC11E990231648C4F9AE02/e1-2lw03S_91hy64fbtAMEN6YYg.mft
File:                     e1-2lw03S_91hy64fbtAMEN6YYg.mft (raw, json)
Hash identifier:          aVoTmuHVFBGxxXrXb54WZiWavv+I+3Gu5efG662Bl5Q=
Subject key identifier:   B4:77:78:92:03:D6:4C:9D:FE:4A:51:16:55:5A:DC:53:E4:C7:FA:E2
Authority key identifier: 7B:5F:B6:97:0D:37:4B:FF:75:87:2E:B8:7D:BB:40:30:43:7A:61:88
Certificate issuer:       /CN=A9128963/serialNumber=7B5FB6970D374BFF75872EB87DBB4030437A6188
Certificate serial:       0D76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1-2lw03S_91hy64fbtAMEN6YYg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128963/986B18648DFC11E990231648C4F9AE02/e1-2lw03S_91hy64fbtAMEN6YYg.mft
Manifest number:          0D61
Signing time:             Thu 31 Aug 2023 05:13:13 +0000
Manifest this update:     Thu 31 Aug 2023 05:13:12 +0000
Manifest next update:     Thu 07 Sep 2023 05:13:12 +0000
Files and hashes:         1: e1-2lw03S_91hy64fbtAMEN6YYg.crl (hash: uEv1JrgJjljsx4lCULJJTEm7iD2G0cUiBOFHNIH8SCM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3446 (0xd76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128963/serialNumber=7B5FB6970D374BFF75872EB87DBB4030437A6188
        Validity
            Not Before: Aug 31 05:13:12 2023 GMT
            Not After : Sep  7 05:13:12 2023 GMT
        Subject: CN=64f02168-3d03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0c:5e:1f:1c:3a:0b:26:d6:d9:d2:7e:11:f9:
                    8a:85:86:f3:ee:e1:3c:4b:85:cc:9b:13:5f:91:eb:
                    30:77:e5:10:27:35:fd:8a:01:46:50:03:0f:b4:cd:
                    74:21:e7:1f:2f:af:1f:a3:b3:93:3c:17:37:a1:4e:
                    22:c1:85:13:06:79:9d:05:84:1e:be:b5:7a:6c:05:
                    13:bc:a4:fb:6b:5a:79:63:81:31:4a:71:2d:77:4d:
                    f1:f3:3a:1a:d5:81:e2:33:4c:df:a9:de:d0:a5:b0:
                    e4:0d:27:68:63:99:34:85:cd:36:f9:e8:75:59:84:
                    4a:8e:e2:e3:2a:59:3e:9d:5a:80:c6:7b:4d:9b:8d:
                    c1:a0:27:d3:51:a1:8f:27:87:4e:a0:f6:72:55:13:
                    e6:b8:6d:00:52:b1:3a:fc:dc:a0:36:96:d0:dc:82:
                    6a:1b:47:43:57:7c:64:1a:b0:28:48:be:b9:0c:49:
                    26:36:eb:c5:2f:51:3f:d9:ec:8a:2b:83:d7:a9:b8:
                    c4:3f:ac:40:d0:83:f4:4e:e4:6b:b5:a5:45:40:4b:
                    4b:6e:77:9d:5e:69:bb:ca:62:94:7e:43:35:5b:73:
                    53:90:c4:7c:08:a4:e1:bb:11:cb:c4:ba:96:82:75:
                    da:f3:e0:4f:94:1e:c7:03:30:99:83:ba:3f:42:84:
                    e1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:77:78:92:03:D6:4C:9D:FE:4A:51:16:55:5A:DC:53:E4:C7:FA:E2
            X509v3 Authority Key Identifier:
                keyid:7B:5F:B6:97:0D:37:4B:FF:75:87:2E:B8:7D:BB:40:30:43:7A:61:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128963/986B18648DFC11E990231648C4F9AE02/e1-2lw03S_91hy64fbtAMEN6YYg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1-2lw03S_91hy64fbtAMEN6YYg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128963/986B18648DFC11E990231648C4F9AE02/e1-2lw03S_91hy64fbtAMEN6YYg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:f0:7c:17:49:34:de:20:78:60:fd:d1:24:43:a4:fd:14:9d:
         c6:dd:a1:46:a9:52:fc:01:3e:a3:25:84:19:9f:4c:b9:12:d1:
         91:08:3c:31:14:45:eb:fc:ce:62:15:87:31:7f:7b:4d:73:82:
         a7:53:2c:88:77:dd:f3:93:96:8f:42:4b:11:d0:7e:e5:ca:58:
         b1:54:e1:9d:80:a9:ed:66:1b:87:af:b8:9e:94:8a:c1:0f:b2:
         4a:cb:8b:e7:f9:d4:03:80:0f:bd:5a:ee:93:f0:b4:1d:f7:99:
         0b:30:f5:76:db:1e:62:cd:63:42:87:9d:29:06:57:49:11:ba:
         0a:16:41:a1:83:f0:89:3e:51:b0:81:4a:f1:6d:55:93:2a:41:
         17:ac:bd:32:89:65:ef:8c:0f:cf:46:a7:a7:9a:d3:5b:9f:fd:
         59:5a:15:ce:f0:7c:39:f8:ef:9b:9b:36:a2:9f:89:28:d8:f9:
         8f:a2:32:df:4f:b7:8f:30:3b:2b:12:7c:6e:85:82:dd:88:e1:
         3e:32:22:0e:2c:b5:93:44:85:e9:1c:f3:0f:5e:32:28:eb:dd:
         31:39:2d:49:59:17:51:22:f7:80:d1:a2:32:0a:0b:74:f4:d0:
         1d:67:91:7a:14:a6:fc:fd:b0:58:f4:ec:bf:8d:c6:b1:c3:27:
         a1:44:7a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----