Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C00F/CD025EA05D8511E89B87527FC4F9AE02/Ii9RR-CHb2fKgtkBdFapgViXMTU.mft
File:                     Ii9RR-CHb2fKgtkBdFapgViXMTU.mft (raw, json)
Hash identifier:          vus3SG7CwCzC+p/TRpKlqxnq+40m01ZFtaHBlLO/xxw=
Subject key identifier:   B0:CA:5E:DB:FF:EE:25:BB:E6:4F:1B:0D:22:A8:F4:1C:A5:C3:1C:D4
Authority key identifier: 22:2F:51:47:E0:87:6F:67:CA:82:D9:01:74:56:A9:81:58:97:31:35
Certificate issuer:       /CN=A913C00F/serialNumber=222F5147E0876F67CA82D9017456A98158973135
Certificate serial:       1392
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ii9RR-CHb2fKgtkBdFapgViXMTU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C00F/CD025EA05D8511E89B87527FC4F9AE02/Ii9RR-CHb2fKgtkBdFapgViXMTU.mft
Manifest number:          1392
Signing time:             Sat 02 Dec 2023 17:27:02 +0000
Manifest this update:     Sat 02 Dec 2023 17:27:02 +0000
Manifest next update:     Sat 09 Dec 2023 17:27:02 +0000
Files and hashes:         1: Ii9RR-CHb2fKgtkBdFapgViXMTU.crl (hash: izYqgSqs1RtAuOxizbTAaKk4/+UFBFIZ7lupdUyzt60=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5010 (0x1392)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C00F/serialNumber=222F5147E0876F67CA82D9017456A98158973135
        Validity
            Not Before: Dec  2 17:27:02 2023 GMT
            Not After : Dec  9 17:27:02 2023 GMT
        Subject: CN=656b68e6-c002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:50:fd:74:d1:67:11:ea:54:63:d3:d9:f2:a3:
                    4f:72:c0:65:0a:8c:3d:8a:8c:4b:eb:c0:44:ff:6e:
                    64:9c:af:d0:45:c0:ef:ba:00:2e:39:f2:37:aa:69:
                    69:56:38:01:1d:c0:a4:41:55:24:ab:26:10:d0:4a:
                    f7:6d:09:4a:a1:3b:bd:90:1e:cc:b2:f9:a6:5f:48:
                    96:eb:77:2d:1c:a4:ee:36:5b:e3:df:6e:b2:02:4c:
                    3d:16:97:28:b3:3c:3e:e2:e4:f3:00:a1:8d:bd:4c:
                    ec:84:41:e0:fa:e6:47:cf:75:72:5d:99:0d:0f:03:
                    90:ca:1c:48:e9:4b:9e:89:02:05:82:90:25:ee:f2:
                    2e:7f:24:c3:b1:77:28:34:58:91:26:97:cc:a0:dd:
                    c0:30:8d:ec:37:43:a7:30:26:7d:06:33:7c:d7:5c:
                    39:82:90:de:16:58:67:b1:e8:4e:29:45:39:2a:ac:
                    fa:64:c4:e4:81:47:5f:26:da:5f:b5:a9:0b:1e:6d:
                    1e:b4:e9:f1:4b:98:d5:84:ee:cc:ee:71:07:25:02:
                    87:1b:ec:4a:95:f2:98:b1:62:7d:dc:27:62:e5:c7:
                    12:82:90:35:20:e8:25:a1:bd:d7:29:ac:78:f2:a7:
                    e3:35:e0:ea:1b:ab:11:33:ab:f5:c1:23:31:86:61:
                    ce:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:CA:5E:DB:FF:EE:25:BB:E6:4F:1B:0D:22:A8:F4:1C:A5:C3:1C:D4
            X509v3 Authority Key Identifier:
                keyid:22:2F:51:47:E0:87:6F:67:CA:82:D9:01:74:56:A9:81:58:97:31:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C00F/CD025EA05D8511E89B87527FC4F9AE02/Ii9RR-CHb2fKgtkBdFapgViXMTU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ii9RR-CHb2fKgtkBdFapgViXMTU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C00F/CD025EA05D8511E89B87527FC4F9AE02/Ii9RR-CHb2fKgtkBdFapgViXMTU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:c0:d4:5d:33:8b:96:bc:8e:7c:df:4b:90:ff:36:5e:65:9e:
         a3:15:61:85:55:6c:4c:91:71:1b:cf:be:89:0f:c2:cc:5e:f7:
         44:e9:ee:4f:76:a4:7f:40:3c:cb:c8:39:d7:ae:c2:41:74:96:
         4b:9b:ff:c2:74:f3:1e:b4:3f:6a:1b:bc:22:2a:3c:9d:ef:23:
         11:d9:7c:0e:4e:64:b5:8c:19:64:08:0b:97:b1:13:74:97:b6:
         21:92:b2:4d:ce:35:2f:81:f0:a4:47:52:ba:09:a6:b6:da:e1:
         41:75:7c:ed:a7:36:9d:17:9a:73:4e:1b:e7:4f:79:b8:81:09:
         dd:77:89:4c:ae:d3:a1:24:2e:cd:88:40:9a:4c:4a:23:22:72:
         9f:43:a1:fc:22:fc:e4:13:2e:00:ee:a1:76:e1:ac:77:a9:5e:
         88:ea:6b:74:4b:2c:8a:f1:68:49:b5:1a:dd:92:f1:ca:f2:f6:
         1e:9a:81:ee:6b:2a:13:dc:b0:c1:03:f9:9b:60:d3:78:85:73:
         31:f7:11:d6:1f:21:2d:f9:4e:c1:4e:2f:02:05:a0:b6:f7:9a:
         29:9f:16:89:c0:e4:07:6d:58:60:37:cd:14:e5:64:0b:c8:69:
         7d:6d:ba:95:c5:8b:74:61:c7:9a:72:5d:41:4d:ff:c2:45:5c:
         04:43:fb:a5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICE5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0MwMEYxMTAvBgNVBAUTKDIyMkY1MTQ3RTA4NzZGNjdDQTgyRDkwMTc0NTZBOTgx
NTg5NzMxMzUwHhcNMjMxMjAyMTcyNzAyWhcNMjMxMjA5MTcyNzAyWjAYMRYwFAYD
VQQDEw02NTZiNjhlNi1jMDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlVD9dNFnEepUY9PZ8qNPcsBlCow9ioxL68BE/25knK/QRcDvugAuOfI3qmlp
VjgBHcCkQVUkqyYQ0Er3bQlKoTu9kB7MsvmmX0iW63ctHKTuNlvj326yAkw9Fpco
szw+4uTzAKGNvUzshEHg+uZHz3VyXZkNDwOQyhxI6UueiQIFgpAl7vIufyTDsXco
NFiRJpfMoN3AMI3sN0OnMCZ9BjN811w5gpDeFlhnsehOKUU5Kqz6ZMTkgUdfJtpf
takLHm0etOnxS5jVhO7M7nEHJQKHG+xKlfKYsWJ93Cdi5ccSgpA1IOglob3XKax4
8qfjNeDqG6sRM6v1wSMxhmHO+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLDKXtv/
7iW75k8bDSKo9BylwxzUMB8GA1UdIwQYMBaAFCIvUUfgh29nyoLZAXRWqYFYlzE1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzAwRi9DRDAyNUVBMDVE
ODUxMUU4OUI4NzUyN0ZDNEY5QUUwMi9JaTlSUi1DSGIyZktndGtCZEZhcGdWaVhN
VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lpOVJSLUNIYjJmS2d0a0JkRmFwZ1ZpWE1UVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QzAwRi9DRDAyNUVBMDVEODUxMUU4OUI4NzUyN0ZDNEY5QUUwMi9JaTlSUi1DSGIy
ZktndGtCZEZhcGdWaVhNVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCmwNRdM4uWvI5830uQ/zZeZZ6jFWGFVWxMkXEbz76JD8LMXvdE6e5P
dqR/QDzLyDnXrsJBdJZLm//CdPMetD9qG7wiKjyd7yMR2XwOTmS1jBlkCAuXsRN0
l7YhkrJNzjUvgfCkR1K6Caa22uFBdXztpzadF5pzThvnT3m4gQndd4lMrtOhJC7N
iECaTEojInKfQ6H8IvzkEy4A7qF24ax3qV6I6mt0SyyK8WhJtRrdkvHK8vYemoHu
ayoT3LDBA/mbYNN4hXMx9xHWHyEt+U7BTi8CBaC295opnxaJwOQHbVhgN80U5WQL
yGl9bbqVxYt0Yceacl1BTf/CRVwEQ/ul
-----END CERTIFICATE-----