Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AD8E/7E788D441D9F11E283B52B9008B02CD2/-cVzoxUawn60z_eQdwDtziSBDDs.mft
File:                     -cVzoxUawn60z_eQdwDtziSBDDs.mft (raw, json)
Hash identifier:          YmnGdY82LJLTLwj0uRsa8WT5hqW5draHg6DKpkV71C0=
Subject key identifier:   DA:D9:01:05:70:4A:1E:1C:E1:18:B8:94:87:4B:A2:85:2C:4A:2A:C9
Authority key identifier: F9:C5:73:A3:15:1A:C2:7E:B4:CF:F7:90:77:00:ED:CE:24:81:0C:3B
Certificate issuer:       /CN=A912AD8E/serialNumber=F9C573A3151AC27EB4CFF7907700EDCE24810C3B
Certificate serial:       3344
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cVzoxUawn60z_eQdwDtziSBDDs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AD8E/7E788D441D9F11E283B52B9008B02CD2/-cVzoxUawn60z_eQdwDtziSBDDs.mft
Manifest number:          3344
Signing time:             Tue 12 Sep 2023 06:49:12 +0000
Manifest this update:     Tue 12 Sep 2023 06:49:11 +0000
Manifest next update:     Tue 19 Sep 2023 06:49:11 +0000
Files and hashes:         1: -cVzoxUawn60z_eQdwDtziSBDDs.crl (hash: ytNdCpkvPvCEdJzF7B2VoEeWcTSJHjXvKxI1yZxskOU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13124 (0x3344)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AD8E/serialNumber=F9C573A3151AC27EB4CFF7907700EDCE24810C3B
        Validity
            Not Before: Sep 12 06:49:11 2023 GMT
            Not After : Sep 19 06:49:11 2023 GMT
        Subject: CN=650009e8-0f0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a1:af:99:19:59:52:ed:aa:ea:4c:52:f8:73:
                    ea:b9:01:16:e6:77:29:9e:ab:c9:e8:09:ff:46:67:
                    43:7c:76:9a:92:09:ee:4d:b8:5d:e7:4c:18:65:a1:
                    35:5a:e9:3a:13:c4:1d:05:35:c0:e8:2b:27:1f:18:
                    f7:d1:57:d6:a2:a4:2f:e5:9b:b5:ff:eb:ef:1a:86:
                    29:50:2d:fa:f4:13:0f:45:69:c4:9e:5e:4d:c7:f7:
                    0d:84:81:75:9a:8c:2a:60:5b:f8:b5:78:75:48:27:
                    46:fe:ab:5f:93:07:f4:c7:c0:70:e4:10:64:41:fe:
                    59:1f:26:b5:ad:85:14:aa:67:96:77:45:5a:f2:42:
                    16:7c:f7:c1:23:54:9d:5c:9f:c5:3e:b9:68:35:25:
                    d1:35:d3:d1:76:06:ec:91:be:ae:00:3d:f7:ee:3b:
                    67:0d:f9:d9:cd:38:98:c8:3c:e3:71:63:29:9b:1b:
                    b5:a0:3e:b8:7a:73:e2:d9:b0:33:83:24:f9:63:65:
                    e2:5f:ef:5c:3b:eb:c3:4a:07:49:40:73:7a:25:9e:
                    36:91:e5:74:10:5c:52:34:46:76:1e:1d:32:cb:50:
                    a3:b4:43:2f:b1:73:1d:ac:48:5b:bd:4d:9d:e7:82:
                    9d:1e:bd:eb:31:b8:29:11:27:9d:57:91:73:30:db:
                    06:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D9:01:05:70:4A:1E:1C:E1:18:B8:94:87:4B:A2:85:2C:4A:2A:C9
            X509v3 Authority Key Identifier:
                keyid:F9:C5:73:A3:15:1A:C2:7E:B4:CF:F7:90:77:00:ED:CE:24:81:0C:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AD8E/7E788D441D9F11E283B52B9008B02CD2/-cVzoxUawn60z_eQdwDtziSBDDs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cVzoxUawn60z_eQdwDtziSBDDs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AD8E/7E788D441D9F11E283B52B9008B02CD2/-cVzoxUawn60z_eQdwDtziSBDDs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:4e:91:94:22:57:fd:fc:79:a2:8c:73:f3:7e:a2:1f:10:38:
         83:d4:41:c3:85:63:fd:2b:94:64:e2:f3:aa:93:2c:76:72:28:
         74:9b:69:0a:98:45:26:b1:63:47:ad:68:da:91:7e:63:33:ef:
         8b:93:b3:05:5f:13:62:d9:2d:fb:a6:dd:8e:45:5a:4d:da:63:
         3f:50:a1:64:b8:69:d6:90:5b:5d:e9:89:76:5b:24:4c:3b:63:
         79:09:c1:4a:13:4d:4a:f3:de:78:65:f3:9c:fc:be:e8:9f:47:
         1a:cf:fd:06:0e:b5:46:62:d6:4f:f2:b8:70:5d:2a:5f:95:2f:
         df:51:2c:01:cc:b1:23:e7:bf:65:ec:5b:5f:e2:d3:1c:91:09:
         04:c0:b8:28:bf:dc:bc:1f:bd:7e:d5:24:7b:ee:61:4e:ad:93:
         26:e4:af:fe:c9:c8:fb:0f:b1:b2:1c:3f:dc:6f:a8:77:18:cc:
         7e:37:9d:65:61:3c:1d:42:62:ad:12:14:9a:4a:a7:46:de:01:
         b7:ca:6b:c9:69:e9:d1:cf:ac:c2:e1:69:c6:60:bb:3a:86:db:
         ef:3d:42:f7:d9:b5:3b:94:61:b3:bc:02:7f:d5:28:c5:82:97:
         cb:07:b2:93:67:bc:64:9a:6d:ff:52:77:d7:f2:f6:95:3e:88:
         1a:3a:24:14
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICM0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkFEOEUxMTAvBgNVBAUTKEY5QzU3M0EzMTUxQUMyN0VCNENGRjc5MDc3MDBFRENF
MjQ4MTBDM0IwHhcNMjMwOTEyMDY0OTExWhcNMjMwOTE5MDY0OTExWjAYMRYwFAYD
VQQDEw02NTAwMDllOC0wZjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm6GvmRlZUu2q6kxS+HPquQEW5ncpnqvJ6An/RmdDfHaakgnuTbhd50wYZaE1
Wuk6E8QdBTXA6CsnHxj30VfWoqQv5Zu1/+vvGoYpUC369BMPRWnEnl5Nx/cNhIF1
mowqYFv4tXh1SCdG/qtfkwf0x8Bw5BBkQf5ZHya1rYUUqmeWd0Va8kIWfPfBI1Sd
XJ/FPrloNSXRNdPRdgbskb6uAD337jtnDfnZzTiYyDzjcWMpmxu1oD64enPi2bAz
gyT5Y2XiX+9cO+vDSgdJQHN6JZ42keV0EFxSNEZ2Hh0yy1CjtEMvsXMdrEhbvU2d
54KdHr3rMbgpESedV5FzMNsGEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNrZAQVw
Sh4c4Ri4lIdLooUsSirJMB8GA1UdIwQYMBaAFPnFc6MVGsJ+tM/3kHcA7c4kgQw7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUQ4RS83RTc4OEQ0NDFE
OUYxMUUyODNCNTJCOTAwOEIwMkNEMi8tY1Z6b3hVYXduNjB6X2VRZHdEdHppU0JE
RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1jVnpveFVhd242MHpfZVFkd0R0emlTQkREcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QUQ4RS83RTc4OEQ0NDFEOUYxMUUyODNCNTJCOTAwOEIwMkNEMi8tY1Z6b3hVYXdu
NjB6X2VRZHdEdHppU0JERHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB1TpGUIlf9/HmijHPzfqIfEDiD1EHDhWP9K5Rk4vOqkyx2cih0m2kK
mEUmsWNHrWjakX5jM++Lk7MFXxNi2S37pt2ORVpN2mM/UKFkuGnWkFtd6Yl2WyRM
O2N5CcFKE01K8954ZfOc/L7on0caz/0GDrVGYtZP8rhwXSpflS/fUSwBzLEj579l
7Ftf4tMckQkEwLgov9y8H71+1SR77mFOrZMm5K/+ycj7D7GyHD/cb6h3GMx+N51l
YTwdQmKtEhSaSqdG3gG3ymvJaenRz6zC4WnGYLs6htvvPUL32bU7lGGzvAJ/1SjF
gpfLB7KTZ7xkmm3/UnfX8vaVPogaOiQU
-----END CERTIFICATE-----