Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135A70/1A986F7CF9D011EAAB7F4251C4F9AE02/zPoKshTbhuFmkzblIPsC_LB1u-Y.mft
File:                     zPoKshTbhuFmkzblIPsC_LB1u-Y.mft (raw, json)
Hash identifier:          VZZc0zWr6GWFMdxbwuSeQ1gce5rs1cGh+1/QQtXa9qk=
Subject key identifier:   00:41:5E:80:27:1D:6E:12:00:95:2D:F6:41:31:B2:52:8F:6E:DA:D4
Authority key identifier: CC:FA:0A:B2:14:DB:86:E1:66:93:36:E5:20:FB:02:FC:B0:75:BB:E6
Certificate issuer:       /CN=A9135A70/serialNumber=CCFA0AB214DB86E1669336E520FB02FCB075BBE6
Certificate serial:       06A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPoKshTbhuFmkzblIPsC_LB1u-Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135A70/1A986F7CF9D011EAAB7F4251C4F9AE02/zPoKshTbhuFmkzblIPsC_LB1u-Y.mft
Manifest number:          06A0
Signing time:             Tue 14 Nov 2023 22:27:07 +0000
Manifest this update:     Tue 14 Nov 2023 22:27:07 +0000
Manifest next update:     Tue 21 Nov 2023 22:27:07 +0000
Files and hashes:         1: zPoKshTbhuFmkzblIPsC_LB1u-Y.crl (hash: ABEmS2+aE3U1QhQSeMciuUyrskQAfLQqhASGz5ZH/Xs=)
                          2: 14B4CA1EF9D111EA96000A52C4F9AE02.roa (hash: thpaJHc+2lYT+21mCz77kE+qwSLtFyPV/jWTFzNMG04=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1700 (0x6a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135A70/serialNumber=CCFA0AB214DB86E1669336E520FB02FCB075BBE6
        Validity
            Not Before: Nov 14 22:27:07 2023 GMT
            Not After : Nov 21 22:27:07 2023 GMT
        Subject: CN=6553f43b-f72b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f0:8a:a7:c5:70:f1:8e:46:76:fd:ba:b9:98:
                    82:2f:1b:98:d0:7f:cf:42:00:07:b8:e3:28:e5:8c:
                    46:82:71:63:fa:93:d7:08:d1:93:f2:76:1f:cc:98:
                    f7:ce:25:03:9b:eb:12:fc:cf:12:38:ec:92:d7:b2:
                    b0:95:83:1c:fa:45:59:20:5c:10:ed:6a:e0:14:69:
                    91:7d:ed:95:7d:2a:23:69:5a:83:da:69:79:b5:18:
                    bb:b3:23:f0:b3:62:5a:e7:1a:81:0c:2c:cf:32:a4:
                    0e:43:8d:59:6b:a5:bb:47:ce:ea:4f:19:f2:49:65:
                    81:72:44:4e:a6:c0:69:2d:d8:67:68:93:84:81:71:
                    bb:2d:e3:3e:bf:9b:52:fd:ad:c9:16:51:96:a8:8c:
                    6d:cb:f8:01:63:8e:78:a5:39:2a:26:bf:69:51:2c:
                    c4:ee:f7:b3:94:5c:a7:08:dd:37:2a:ab:75:df:08:
                    ef:14:bd:b2:99:81:0b:a3:82:7e:f7:ad:e5:8b:b4:
                    74:4b:11:2f:74:dd:3a:fa:bd:ca:e0:16:e1:0d:36:
                    1a:ae:09:f2:00:4a:1b:37:db:34:fe:65:75:96:eb:
                    1f:91:0e:f3:ed:61:23:88:81:15:23:97:22:61:bd:
                    eb:0d:d6:a6:60:8a:2c:ce:fa:0a:64:75:b9:e1:51:
                    da:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:41:5E:80:27:1D:6E:12:00:95:2D:F6:41:31:B2:52:8F:6E:DA:D4
            X509v3 Authority Key Identifier:
                keyid:CC:FA:0A:B2:14:DB:86:E1:66:93:36:E5:20:FB:02:FC:B0:75:BB:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135A70/1A986F7CF9D011EAAB7F4251C4F9AE02/zPoKshTbhuFmkzblIPsC_LB1u-Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPoKshTbhuFmkzblIPsC_LB1u-Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135A70/1A986F7CF9D011EAAB7F4251C4F9AE02/zPoKshTbhuFmkzblIPsC_LB1u-Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:7f:6d:13:79:95:8c:c3:65:41:bc:5e:58:d7:cd:36:51:60:
         0b:45:2f:3d:60:db:4b:cd:96:e1:64:65:93:2e:b5:21:46:93:
         3e:7a:ce:b4:cf:48:57:36:6d:c6:14:d8:91:6d:3f:60:d3:4b:
         36:08:76:39:a6:3b:0a:fb:08:b1:a8:a9:1c:ef:26:a9:10:d9:
         bd:1c:6b:e9:c5:94:49:e7:da:f1:58:1b:b7:ff:d4:44:e7:6e:
         82:f9:3c:d0:2b:ca:b5:b6:4d:43:da:8b:bb:db:7b:7f:55:3d:
         0d:24:a4:39:8c:52:86:7c:bb:71:38:3d:c9:81:bf:6e:d6:b1:
         fb:e9:ce:be:9e:69:74:63:43:4a:70:ce:8a:d5:a3:00:da:1d:
         3a:8b:4f:11:a2:4e:4d:52:1a:c9:c3:2c:12:a5:6f:e7:0e:48:
         f1:6f:bd:1f:50:97:99:13:60:4a:76:52:e0:dc:ec:71:8f:c7:
         51:77:e5:e7:81:a3:9b:74:a9:81:6e:1e:53:97:2a:68:15:16:
         07:98:86:a0:50:d5:f6:82:f5:89:8d:86:46:93:e1:ac:7b:91:
         7c:87:dd:ff:0f:7e:af:26:23:ea:1e:81:a2:cf:2f:ae:06:e2:
         4d:58:7a:30:a6:f7:e8:ac:0e:c0:75:0b:62:f0:f9:38:c4:a7:
         1c:27:06:b4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzVBNzAxMTAvBgNVBAUTKENDRkEwQUIyMTREQjg2RTE2NjkzMzZFNTIwRkIwMkZD
QjA3NUJCRTYwHhcNMjMxMTE0MjIyNzA3WhcNMjMxMTIxMjIyNzA3WjAYMRYwFAYD
VQQDEw02NTUzZjQzYi1mNzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvvCKp8Vw8Y5Gdv26uZiCLxuY0H/PQgAHuOMo5YxGgnFj+pPXCNGT8nYfzJj3
ziUDm+sS/M8SOOyS17KwlYMc+kVZIFwQ7WrgFGmRfe2VfSojaVqD2ml5tRi7syPw
s2Ja5xqBDCzPMqQOQ41Za6W7R87qTxnySWWBckROpsBpLdhnaJOEgXG7LeM+v5tS
/a3JFlGWqIxty/gBY454pTkqJr9pUSzE7vezlFynCN03Kqt13wjvFL2ymYELo4J+
963li7R0SxEvdN06+r3K4BbhDTYargnyAEobN9s0/mV1lusfkQ7z7WEjiIEVI5ci
Yb3rDdamYIoszvoKZHW54VHa6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFABBXoAn
HW4SAJUt9kExslKPbtrUMB8GA1UdIwQYMBaAFMz6CrIU24bhZpM25SD7Avywdbvm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUE3MC8xQTk4NkY3Q0Y5
RDAxMUVBQUI3RjQyNTFDNEY5QUUwMi96UG9Lc2hUYmh1Rm1remJsSVBzQ19MQjF1
LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pQb0tzaFRiaHVGbWt6YmxJUHNDX0xCMXUtWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NUE3MC8xQTk4NkY3Q0Y5RDAxMUVBQUI3RjQyNTFDNEY5QUUwMi96UG9Lc2hUYmh1
Rm1remJsSVBzQ19MQjF1LVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBWf20TeZWMw2VBvF5Y1802UWALRS89YNtLzZbhZGWTLrUhRpM+es60
z0hXNm3GFNiRbT9g00s2CHY5pjsK+wixqKkc7yapENm9HGvpxZRJ59rxWBu3/9RE
526C+TzQK8q1tk1D2ou723t/VT0NJKQ5jFKGfLtxOD3Jgb9u1rH76c6+nml0Y0NK
cM6K1aMA2h06i08Rok5NUhrJwywSpW/nDkjxb70fUJeZE2BKdlLg3Oxxj8dRd+Xn
gaObdKmBbh5TlypoFRYHmIagUNX2gvWJjYZGk+Gse5F8h93/D36vJiPqHoGizy+u
BuJNWHowpvforA7AdQti8Pk4xKccJwa0
-----END CERTIFICATE-----