Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B256/2AC7B03018A511EB8D422172C4F9AE02/rTrmMCSG4m1zhdwVRXOg52udcpI.mft
File:                     rTrmMCSG4m1zhdwVRXOg52udcpI.mft (raw, json)
Hash identifier:          oCFb8aigNgXxUrlaXzJryg8hA9yMeLNiqf859WTBBUY=
Subject key identifier:   2C:2A:D5:E3:5D:65:36:1E:92:BF:FF:39:8A:50:57:7B:5E:21:38:F5
Authority key identifier: AD:3A:E6:30:24:86:E2:6D:73:85:DC:15:45:73:A0:E7:6B:9D:72:92
Certificate issuer:       /CN=A912B256/serialNumber=AD3AE6302486E26D7385DC154573A0E76B9D7292
Certificate serial:       0633
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTrmMCSG4m1zhdwVRXOg52udcpI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B256/2AC7B03018A511EB8D422172C4F9AE02/rTrmMCSG4m1zhdwVRXOg52udcpI.mft
Manifest number:          062B
Signing time:             Fri 01 Sep 2023 06:27:13 +0000
Manifest this update:     Fri 01 Sep 2023 06:27:13 +0000
Manifest next update:     Fri 08 Sep 2023 06:27:13 +0000
Files and hashes:         1: rTrmMCSG4m1zhdwVRXOg52udcpI.crl (hash: XhmJ23Ae+R92yS1vwlE+Bo6HDA4dWL2+SdYcj0PBNqY=)
                          2: E8C6B7361FF111EBA7130B29C4F9AE02.roa (hash: wpTtr81NMoHPGQIrJkLMEjjcHuD1J6YaU01C8P88+w8=)
                          3: ECABEB6A168A11EC805BB20BC4F9AE02.roa (hash: qnxjUNJRu3pFVdvLyXuxgW5IIMqsGwHhpNHLj3Gsszk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1587 (0x633)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B256/serialNumber=AD3AE6302486E26D7385DC154573A0E76B9D7292
        Validity
            Not Before: Sep  1 06:27:13 2023 GMT
            Not After : Sep  8 06:27:13 2023 GMT
        Subject: CN=64f18441-6b39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8f:01:42:53:1f:15:09:51:81:32:4e:39:ed:
                    12:c9:3d:c6:64:c5:9f:fb:83:62:02:96:54:5a:2d:
                    cf:ad:41:26:cf:d4:b4:ed:22:3f:da:66:98:a3:b2:
                    bd:41:9b:92:3a:d5:9c:ba:6e:f1:f4:1d:27:72:f8:
                    95:1f:e5:90:6a:77:23:98:ca:2b:55:45:e3:d5:61:
                    fc:be:8f:2b:62:2e:52:b9:0e:8f:4e:e1:9c:3a:62:
                    ec:1e:cc:c5:ba:55:c6:88:7a:13:fb:8b:a6:a8:17:
                    de:ef:c9:bc:76:a2:2e:e2:99:de:b2:19:c4:69:64:
                    2f:55:05:fe:31:e0:92:27:64:6f:60:00:aa:2f:28:
                    5e:56:38:47:dc:97:e9:38:ce:2c:5d:8d:8f:0f:1a:
                    ac:b0:12:73:c3:a0:c1:d8:ed:2f:6e:b2:54:2b:03:
                    7f:f0:1e:2b:1f:2e:a0:fd:ca:96:4f:d7:27:25:e7:
                    82:34:3e:af:a3:07:65:36:d3:a3:33:9d:b4:c8:72:
                    3d:9a:89:ef:aa:a4:18:dc:4a:d5:77:34:3d:0c:9c:
                    03:f6:d4:c8:9b:2b:26:b2:31:b8:cc:f5:d7:ab:d9:
                    f5:16:81:35:e5:5d:e4:e9:73:e3:fd:4a:ff:2b:66:
                    24:f8:84:19:ae:cb:f2:37:5d:e5:cf:0e:65:1e:b3:
                    fc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:2A:D5:E3:5D:65:36:1E:92:BF:FF:39:8A:50:57:7B:5E:21:38:F5
            X509v3 Authority Key Identifier:
                keyid:AD:3A:E6:30:24:86:E2:6D:73:85:DC:15:45:73:A0:E7:6B:9D:72:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B256/2AC7B03018A511EB8D422172C4F9AE02/rTrmMCSG4m1zhdwVRXOg52udcpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTrmMCSG4m1zhdwVRXOg52udcpI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B256/2AC7B03018A511EB8D422172C4F9AE02/rTrmMCSG4m1zhdwVRXOg52udcpI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:f9:10:30:a4:42:f9:fb:26:5a:31:65:b5:1a:18:52:3c:38:
         50:98:8b:bf:cc:d2:a1:56:f8:16:ec:8a:cb:fc:ee:bc:b1:6a:
         ec:1c:4d:28:d7:74:8c:70:29:90:d1:dd:6e:b1:fe:87:b0:f7:
         b6:a5:fa:76:70:23:4a:e1:0e:e6:bd:cf:a4:3d:5d:e1:5c:bf:
         fd:98:55:51:ca:4f:4e:aa:3f:61:6e:d8:2f:65:c6:64:45:c2:
         bc:72:af:0e:4f:91:10:08:c1:b3:99:b8:bf:9b:18:bb:8f:8b:
         fc:ba:b3:de:a9:3a:06:23:2d:52:6f:78:22:4b:f7:ec:04:06:
         ea:24:43:fa:18:3b:97:07:d2:98:31:bb:0e:de:fb:85:b5:58:
         2a:1f:b5:07:2c:9b:a7:e5:b0:54:ca:5c:8e:9b:bd:4a:d0:64:
         7c:b0:e0:5d:c7:f3:f5:87:7e:47:c5:28:a3:3c:cc:83:da:24:
         a4:87:8b:c5:14:8d:dd:54:74:0b:8f:b7:d2:d7:6c:b2:22:17:
         39:fa:10:20:0f:1b:e1:e5:3c:1b:94:d0:d3:03:cf:31:95:ce:
         45:7a:86:5e:73:59:a5:01:3b:dd:05:e9:0a:61:3b:e3:47:79:
         bb:c4:6c:02:d9:89:ba:e8:90:54:69:84:ea:11:a6:3d:4c:7d:
         3a:be:07:f9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkIyNTYxMTAvBgNVBAUTKEFEM0FFNjMwMjQ4NkUyNkQ3Mzg1REMxNTQ1NzNBMEU3
NkI5RDcyOTIwHhcNMjMwOTAxMDYyNzEzWhcNMjMwOTA4MDYyNzEzWjAYMRYwFAYD
VQQDEw02NGYxODQ0MS02YjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA148BQlMfFQlRgTJOOe0SyT3GZMWf+4NiApZUWi3PrUEmz9S07SI/2maYo7K9
QZuSOtWcum7x9B0ncviVH+WQancjmMorVUXj1WH8vo8rYi5SuQ6PTuGcOmLsHszF
ulXGiHoT+4umqBfe78m8dqIu4pneshnEaWQvVQX+MeCSJ2RvYACqLyheVjhH3Jfp
OM4sXY2PDxqssBJzw6DB2O0vbrJUKwN/8B4rHy6g/cqWT9cnJeeCND6vowdlNtOj
M520yHI9monvqqQY3ErVdzQ9DJwD9tTImysmsjG4zPXXq9n1FoE15V3k6XPj/Ur/
K2Yk+IQZrsvyN13lzw5lHrP82QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCwq1eNd
ZTYekr//OYpQV3teITj1MB8GA1UdIwQYMBaAFK065jAkhuJtc4XcFUVzoOdrnXKS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjI1Ni8yQUM3QjAzMDE4
QTUxMUVCOEQ0MjIxNzJDNEY5QUUwMi9yVHJtTUNTRzRtMXpoZHdWUlhPZzUydWRj
cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3JUcm1NQ1NHNG0xemhkd1ZSWE9nNTJ1ZGNwSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QjI1Ni8yQUM3QjAzMDE4QTUxMUVCOEQ0MjIxNzJDNEY5QUUwMi9yVHJtTUNTRzRt
MXpoZHdWUlhPZzUydWRjcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB1+RAwpEL5+yZaMWW1GhhSPDhQmIu/zNKhVvgW7IrL/O68sWrsHE0o
13SMcCmQ0d1usf6HsPe2pfp2cCNK4Q7mvc+kPV3hXL/9mFVRyk9Oqj9hbtgvZcZk
RcK8cq8OT5EQCMGzmbi/mxi7j4v8urPeqToGIy1Sb3giS/fsBAbqJEP6GDuXB9KY
MbsO3vuFtVgqH7UHLJun5bBUylyOm71K0GR8sOBdx/P1h35HxSijPMyD2iSkh4vF
FI3dVHQLj7fS12yyIhc5+hAgDxvh5TwblNDTA88xlc5FeoZec1mlATvdBekKYTvj
R3m7xGwC2Ym66JBUaYTqEaY9TH06vgf5
-----END CERTIFICATE-----