Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134956/021D42DC5EEE11EB8413C285C4F9AE02/hZ73dobXOmQ5yyGjKKFEvx899p8.mft
File:                     hZ73dobXOmQ5yyGjKKFEvx899p8.mft (raw, json)
Hash identifier:          jGp9Dp5Xg4t5P20cajUhqW2bMxKMSC+3YHhnZ7nJliM=
Subject key identifier:   A6:11:81:F1:2B:BA:A8:32:39:6D:89:15:BB:45:BA:D7:09:40:B3:85
Authority key identifier: 85:9E:F7:76:86:D7:3A:64:39:CB:21:A3:28:A1:44:BF:1F:3D:F6:9F
Certificate issuer:       /CN=A9134956/serialNumber=859EF77686D73A6439CB21A328A144BF1F3DF69F
Certificate serial:       03CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ73dobXOmQ5yyGjKKFEvx899p8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134956/021D42DC5EEE11EB8413C285C4F9AE02/hZ73dobXOmQ5yyGjKKFEvx899p8.mft
Manifest number:          03CA
Signing time:             Thu 26 May 2022 00:55:58 +0000
Manifest this update:     Thu 26 May 2022 00:55:57 +0000
Manifest next update:     Sat 28 May 2022 00:55:57 +0000
Files and hashes:         1: hZ73dobXOmQ5yyGjKKFEvx899p8.crl (hash: +gDrQj7Hh01Ex167BOzEZYxZe/YX4oVYKgEyv20PviQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 972 (0x3cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134956/serialNumber=859EF77686D73A6439CB21A328A144BF1F3DF69F
        Validity
            Not Before: May 26 00:55:57 2022 GMT
            Not After : May 28 00:55:57 2022 GMT
        Subject: CN=628ed01d-b17c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0a:93:4e:b4:45:c5:b0:34:fa:a6:2d:3e:e6:
                    09:11:d5:f3:04:99:98:8a:be:8d:94:1f:02:48:d5:
                    eb:d9:e8:61:11:87:0a:47:e9:23:79:0a:b1:5f:d8:
                    a0:41:b8:c9:50:00:25:62:d8:88:6d:36:e4:b3:52:
                    1e:0d:5c:17:2a:24:20:a6:74:67:c9:79:89:de:4c:
                    a1:ff:75:19:fe:fe:dd:11:d3:12:cc:15:67:35:26:
                    e2:e5:79:c6:3d:89:0f:36:c2:52:de:53:3f:c2:e3:
                    50:07:f6:8b:e7:af:14:c2:d7:b6:a0:99:b4:8e:27:
                    42:f3:46:1c:27:a4:72:5b:da:e3:30:21:7b:cc:61:
                    e4:2d:f9:c2:ce:9a:9b:9e:16:f2:db:5e:03:a1:1b:
                    08:e5:43:25:02:aa:66:ba:4a:d9:35:46:65:58:e9:
                    9c:95:c2:81:0c:55:97:48:e1:f4:3e:45:bf:80:65:
                    c2:98:b6:0e:57:42:d8:06:28:f1:22:df:78:f9:2c:
                    e4:d7:8c:3f:2a:27:ba:8e:0c:0f:b9:a9:f7:76:27:
                    ef:f7:2d:50:dc:50:69:06:c2:f5:0c:d0:e5:e2:7d:
                    68:1b:7a:3f:b7:fd:05:35:a4:a8:5b:34:48:64:5f:
                    8e:75:80:8b:81:c0:16:43:d9:b0:61:9c:9f:cd:ee:
                    78:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:11:81:F1:2B:BA:A8:32:39:6D:89:15:BB:45:BA:D7:09:40:B3:85
            X509v3 Authority Key Identifier:
                keyid:85:9E:F7:76:86:D7:3A:64:39:CB:21:A3:28:A1:44:BF:1F:3D:F6:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134956/021D42DC5EEE11EB8413C285C4F9AE02/hZ73dobXOmQ5yyGjKKFEvx899p8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ73dobXOmQ5yyGjKKFEvx899p8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134956/021D42DC5EEE11EB8413C285C4F9AE02/hZ73dobXOmQ5yyGjKKFEvx899p8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:fe:ec:b5:b9:4e:3f:02:0b:af:a4:f9:a4:07:e9:b7:0e:94:
         c0:eb:80:03:33:6c:b5:d7:05:19:98:b2:a8:d3:8d:c3:79:2b:
         db:05:13:d4:24:3d:bd:2f:2c:9f:45:b0:0f:e6:f4:40:44:cd:
         d2:02:6f:f8:30:70:90:a7:15:f1:c9:66:c7:84:3e:77:b9:b7:
         a1:85:6f:18:b0:a8:c9:e4:66:26:08:be:1a:50:18:33:f4:c7:
         d2:ff:97:15:4b:4c:93:25:70:43:6a:f5:8f:1c:af:bc:02:ad:
         55:75:78:73:92:e5:ed:42:7d:1e:af:6b:f7:5a:f3:15:d6:36:
         14:0a:04:15:1a:65:11:19:c7:49:8a:3b:dd:be:58:ea:54:93:
         04:f9:4f:64:ab:04:63:93:fa:ea:76:df:c1:8b:fb:f4:31:cd:
         36:ed:4e:c0:7c:20:7e:60:f2:24:63:04:45:2d:41:25:70:54:
         6a:90:fb:47:67:f2:2c:18:26:49:07:6c:d2:37:85:f9:7d:9a:
         27:73:db:3b:0a:97:2c:db:d4:43:fc:31:7c:b5:1b:56:49:ec:
         03:d2:99:02:70:b5:b0:4a:30:1d:02:3d:0f:2a:cd:76:3c:c8:
         9b:57:b6:1f:0f:bb:20:6d:7a:35:24:6d:df:c9:24:27:dc:4e:
         da:fa:2b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----