Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A517/1F40DCA2F50011E8A93A8E63C4F9AE02/2Myn78n4da6c6SCbelhR_xugsiY.mft
File:                     2Myn78n4da6c6SCbelhR_xugsiY.mft (raw, json)
Hash identifier:          4qRDyb7fTMCMRBmYor5qIbXvCaIZjXP3fVaBkx05XQg=
Subject key identifier:   A4:81:16:93:35:37:7A:2E:C9:EA:B2:1E:B6:B4:61:AD:92:64:BB:00
Authority key identifier: D8:CC:A7:EF:C9:F8:75:AE:9C:E9:20:9B:7A:58:51:FF:1B:A0:B2:26
Certificate issuer:       /CN=A912A517/serialNumber=D8CCA7EFC9F875AE9CE9209B7A5851FF1BA0B226
Certificate serial:       0EA9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Myn78n4da6c6SCbelhR_xugsiY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A517/1F40DCA2F50011E8A93A8E63C4F9AE02/2Myn78n4da6c6SCbelhR_xugsiY.mft
Manifest number:          0E9F
Signing time:             Sun 08 May 2022 18:27:27 +0000
Manifest this update:     Sun 08 May 2022 18:27:26 +0000
Manifest next update:     Tue 10 May 2022 18:27:26 +0000
Files and hashes:         1: 2Myn78n4da6c6SCbelhR_xugsiY.crl (hash: Txl9rsm75lP3LftwmDrESZTLS7ErccomQd1Artv2Zw4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3753 (0xea9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A517/serialNumber=D8CCA7EFC9F875AE9CE9209B7A5851FF1BA0B226
        Validity
            Not Before: May  8 18:27:26 2022 GMT
            Not After : May 10 18:27:26 2022 GMT
        Subject: CN=62780b8e-784a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:87:a9:2a:ae:50:32:83:24:59:38:9e:a9:22:
                    fe:1b:12:69:c8:27:80:b8:f4:df:6b:05:8e:8c:8d:
                    2c:da:13:1f:f9:76:f7:02:5c:69:81:d8:b5:bf:5e:
                    29:07:21:64:cb:10:ee:c4:17:2d:17:7c:b6:cf:ac:
                    c6:ba:a8:65:8a:e1:51:59:97:c5:45:63:84:59:bf:
                    4e:ff:be:9d:36:1a:c3:24:5c:c7:74:8c:43:ef:73:
                    c1:2c:e2:3b:6e:9e:48:33:4b:fe:81:29:dc:f5:13:
                    43:bd:9b:08:08:1e:e6:d4:81:a4:77:2a:e9:a7:e1:
                    e0:c2:b3:12:df:1c:fa:00:49:a1:46:52:41:03:28:
                    50:b7:ad:71:1e:61:33:93:a2:18:b3:89:7c:6b:5b:
                    b6:21:c9:19:87:5b:43:b5:c3:9b:99:a7:85:78:d1:
                    5f:17:45:d0:92:a0:b8:97:2b:6d:19:2d:95:82:67:
                    d6:3d:00:ad:a6:b0:47:36:b2:d7:09:b4:d4:3c:7a:
                    b9:55:a6:58:74:7a:cc:b4:9f:ee:64:da:32:c7:89:
                    b3:aa:5a:12:a0:11:26:ee:8d:f6:d8:5f:21:8e:d7:
                    20:04:fb:78:e7:24:7a:af:29:13:2b:ac:1c:ea:52:
                    5a:ce:74:cf:06:7a:be:e0:f7:27:22:d5:64:42:0c:
                    9a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:81:16:93:35:37:7A:2E:C9:EA:B2:1E:B6:B4:61:AD:92:64:BB:00
            X509v3 Authority Key Identifier:
                keyid:D8:CC:A7:EF:C9:F8:75:AE:9C:E9:20:9B:7A:58:51:FF:1B:A0:B2:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A517/1F40DCA2F50011E8A93A8E63C4F9AE02/2Myn78n4da6c6SCbelhR_xugsiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Myn78n4da6c6SCbelhR_xugsiY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A517/1F40DCA2F50011E8A93A8E63C4F9AE02/2Myn78n4da6c6SCbelhR_xugsiY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:17:8f:b0:7e:d7:cf:f4:0e:fa:05:60:76:ba:11:06:fd:fe:
         1c:9f:8f:97:7c:cf:50:32:f3:7d:51:af:f4:7e:b2:a2:49:ec:
         09:a7:8f:be:ec:f6:3b:fe:03:29:99:e9:89:f5:c7:aa:fc:c8:
         4f:ee:aa:5a:fa:30:ad:56:ca:9e:b3:3a:29:d1:fa:e0:c4:8b:
         91:19:8b:50:7e:47:fb:46:73:4f:3d:44:66:d7:3d:af:99:8c:
         cc:56:f8:30:19:3d:2c:eb:36:4a:3f:1f:e8:ea:66:53:a2:c8:
         c2:f5:33:00:a9:ea:45:c9:6a:01:62:34:79:73:87:c6:af:47:
         fd:b8:89:27:1c:a4:cc:fc:14:6d:0a:83:92:e8:4f:98:79:44:
         33:6b:86:c0:d2:b2:89:45:7e:91:3b:6b:07:ba:45:74:5f:8a:
         6d:db:09:18:6c:88:7b:69:45:f9:35:6b:4b:b1:f5:b7:45:4e:
         12:1f:e8:d5:a7:73:47:d6:71:41:22:61:5b:3f:a7:7b:ff:42:
         d7:02:af:ce:8d:f6:cf:6d:f1:77:0d:fd:9d:f8:8a:b8:4c:fa:
         42:71:f9:b1:de:ef:2b:f3:e6:f4:37:89:d6:22:90:97:4e:d5:
         b9:c7:bf:bb:b0:da:95:88:dd:44:4f:65:9e:3d:3d:67:01:a9:
         8e:de:4e:ac
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkE1MTcxMTAvBgNVBAUTKEQ4Q0NBN0VGQzlGODc1QUU5Q0U5MjA5QjdBNTg1MUZG
MUJBMEIyMjYwHhcNMjIwNTA4MTgyNzI2WhcNMjIwNTEwMTgyNzI2WjAYMRYwFAYD
VQQDEw02Mjc4MGI4ZS03ODRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAooepKq5QMoMkWTieqSL+GxJpyCeAuPTfawWOjI0s2hMf+Xb3Alxpgdi1v14p
ByFkyxDuxBctF3y2z6zGuqhliuFRWZfFRWOEWb9O/76dNhrDJFzHdIxD73PBLOI7
bp5IM0v+gSnc9RNDvZsICB7m1IGkdyrpp+HgwrMS3xz6AEmhRlJBAyhQt61xHmEz
k6IYs4l8a1u2IckZh1tDtcObmaeFeNFfF0XQkqC4lyttGS2VgmfWPQCtprBHNrLX
CbTUPHq5VaZYdHrMtJ/uZNoyx4mzqloSoBEm7o322F8hjtcgBPt45yR6rykTK6wc
6lJaznTPBnq+4PcnItVkQgyaiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKSBFpM1
N3ouyeqyHra0Ya2SZLsAMB8GA1UdIwQYMBaAFNjMp+/J+HWunOkgm3pYUf8boLIm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTUxNy8xRjQwRENBMkY1
MDAxMUU4QTkzQThFNjNDNEY5QUUwMi8yTXluNzhuNGRhNmM2U0NiZWxoUl94dWdz
aVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzJNeW43OG40ZGE2YzZTQ2JlbGhSX3h1Z3NpWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QTUxNy8xRjQwRENBMkY1MDAxMUU4QTkzQThFNjNDNEY5QUUwMi8yTXluNzhuNGRh
NmM2U0NiZWxoUl94dWdzaVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCkF4+wftfP9A76BWB2uhEG/f4cn4+XfM9QMvN9Ua/0frKiSewJp4++
7PY7/gMpmemJ9ceq/MhP7qpa+jCtVsqeszop0frgxIuRGYtQfkf7RnNPPURm1z2v
mYzMVvgwGT0s6zZKPx/o6mZTosjC9TMAqepFyWoBYjR5c4fGr0f9uIknHKTM/BRt
CoOS6E+YeUQza4bA0rKJRX6RO2sHukV0X4pt2wkYbIh7aUX5NWtLsfW3RU4SH+jV
p3NH1nFBImFbP6d7/0LXAq/OjfbPbfF3Df2d+Iq4TPpCcfmx3u8r8+b0N4nWIpCX
TtW5x7+7sNqViN1ET2WePT1nAamO3k6s
-----END CERTIFICATE-----