Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91401B1/7BCD48581DAB11E2A4EEA1A908B02CD2/giYmVpLd75Ic2YEnX620N_Cwdro.mft
File:                     giYmVpLd75Ic2YEnX620N_Cwdro.mft (raw, json)
Hash identifier:          Rp/e8CoT/ZfYHtTb2+uQb1Xyib3zeqUax3PpDC20Xoo=
Subject key identifier:   DB:89:2E:4C:1D:BE:6B:B3:7E:F5:03:FC:2F:B2:08:32:77:38:62:70
Authority key identifier: 82:26:26:56:92:DD:EF:92:1C:D9:81:27:5F:AD:B4:37:F0:B0:76:BA
Certificate issuer:       /CN=A91401B1/serialNumber=8226265692DDEF921CD981275FADB437F0B076BA
Certificate serial:       3157
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giYmVpLd75Ic2YEnX620N_Cwdro.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91401B1/7BCD48581DAB11E2A4EEA1A908B02CD2/giYmVpLd75Ic2YEnX620N_Cwdro.mft
Manifest number:          314F
Signing time:             Wed 20 Apr 2022 06:57:57 +0000
Manifest this update:     Wed 20 Apr 2022 06:57:56 +0000
Manifest next update:     Fri 22 Apr 2022 06:57:56 +0000
Files and hashes:         1: giYmVpLd75Ic2YEnX620N_Cwdro.crl (hash: MvrakPtcgWwR0d3n8k5rHkpROuW7gI2qyi7jI9X6UTE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12631 (0x3157)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91401B1/serialNumber=8226265692DDEF921CD981275FADB437F0B076BA
        Validity
            Not Before: Apr 20 06:57:56 2022 GMT
            Not After : Apr 22 06:57:56 2022 GMT
        Subject: CN=625faef5-3a5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b3:6f:10:e8:7f:75:1b:c2:c4:7c:7c:67:2b:
                    ea:cb:62:74:8e:82:f0:7f:d9:16:9f:bd:a5:e8:61:
                    4c:aa:b9:f6:b6:b9:99:0f:6d:eb:b4:ff:af:8e:d1:
                    76:74:ae:95:fb:6c:22:e8:9d:bd:6a:2e:86:38:8c:
                    1b:e6:e7:84:10:62:18:7b:68:59:61:4f:c8:02:02:
                    d5:4c:33:35:73:05:d4:0d:a7:5d:d8:6e:75:2a:80:
                    52:65:d7:82:ac:84:a8:7c:42:e5:1f:b9:52:ca:6f:
                    4d:a2:e8:69:16:d6:ca:fa:bc:d0:f9:52:c8:37:75:
                    0c:d0:f9:6e:15:b2:65:28:17:c1:19:07:37:ac:e9:
                    16:bb:2f:16:91:75:f2:be:b4:5a:1e:f9:df:c2:6b:
                    29:de:f8:a7:6c:3b:18:e0:f5:c5:88:c0:91:ae:95:
                    24:ae:3a:47:9a:6a:32:c2:2e:17:87:3b:89:23:be:
                    d4:e2:f7:4c:53:c2:7c:05:52:9e:70:26:9e:6a:bb:
                    d1:21:97:37:d6:3c:51:f8:61:02:b3:59:a7:34:9f:
                    46:23:0f:8b:fe:3c:16:47:36:eb:f8:e1:b1:39:64:
                    b5:dd:97:32:c4:e9:bd:bc:f8:97:66:c3:e0:9e:91:
                    d7:94:31:5a:e3:11:81:8a:a5:11:22:34:17:6d:2d:
                    bf:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:89:2E:4C:1D:BE:6B:B3:7E:F5:03:FC:2F:B2:08:32:77:38:62:70
            X509v3 Authority Key Identifier:
                keyid:82:26:26:56:92:DD:EF:92:1C:D9:81:27:5F:AD:B4:37:F0:B0:76:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91401B1/7BCD48581DAB11E2A4EEA1A908B02CD2/giYmVpLd75Ic2YEnX620N_Cwdro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giYmVpLd75Ic2YEnX620N_Cwdro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91401B1/7BCD48581DAB11E2A4EEA1A908B02CD2/giYmVpLd75Ic2YEnX620N_Cwdro.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:44:fc:0c:03:5a:d8:50:bb:4f:eb:e8:3a:63:da:2c:1f:a0:
         e7:16:c9:fd:33:b7:f6:df:9b:e7:7f:20:8e:19:2c:cc:39:f8:
         a8:91:81:cd:f5:64:78:43:d9:86:69:cd:b0:6f:3a:52:ed:71:
         b2:90:58:41:aa:20:3d:b5:7f:17:1e:07:35:e9:ef:46:dc:76:
         73:67:7c:8a:6c:f7:43:af:31:88:d5:71:0d:8f:6c:2f:e9:d0:
         ad:04:44:fb:ed:54:e9:3f:de:70:72:01:05:11:6c:78:03:82:
         4c:67:27:7f:1d:81:09:38:10:28:dc:58:dc:a3:87:6f:4d:3d:
         0a:a8:8f:99:49:8b:cd:ff:5e:45:55:c8:e0:ab:dc:8c:5b:16:
         2a:cc:37:b2:ea:5a:5e:10:d0:93:d8:12:f2:09:98:0b:ed:ff:
         25:95:d6:31:b5:40:39:12:4d:ec:1b:cf:6e:ae:d4:97:14:83:
         f9:fe:4e:3f:8b:c3:8e:7d:c7:ca:16:25:3a:34:92:13:f7:19:
         c0:b1:ad:21:ca:87:94:35:a9:66:5a:48:5c:ff:eb:91:78:a2:
         7a:46:23:26:80:32:12:87:06:1b:49:25:88:fe:ce:7b:7a:71:
         86:24:6d:42:6b:b6:93:da:60:7a:b6:be:ae:5a:28:70:ed:7d:
         7c:0a:9c:41
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICMVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDAxQjExMTAvBgNVBAUTKDgyMjYyNjU2OTJEREVGOTIxQ0Q5ODEyNzVGQURCNDM3
RjBCMDc2QkEwHhcNMjIwNDIwMDY1NzU2WhcNMjIwNDIyMDY1NzU2WjAYMRYwFAYD
VQQDEw02MjVmYWVmNS0zYTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1LNvEOh/dRvCxHx8Zyvqy2J0joLwf9kWn72l6GFMqrn2trmZD23rtP+vjtF2
dK6V+2wi6J29ai6GOIwb5ueEEGIYe2hZYU/IAgLVTDM1cwXUDadd2G51KoBSZdeC
rISofELlH7lSym9NouhpFtbK+rzQ+VLIN3UM0PluFbJlKBfBGQc3rOkWuy8WkXXy
vrRaHvnfwmsp3vinbDsY4PXFiMCRrpUkrjpHmmoywi4XhzuJI77U4vdMU8J8BVKe
cCaearvRIZc31jxR+GECs1mnNJ9GIw+L/jwWRzbr+OGxOWS13ZcyxOm9vPiXZsPg
npHXlDFa4xGBiqURIjQXbS2/WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNuJLkwd
vmuzfvUD/C+yCDJ3OGJwMB8GA1UdIwQYMBaAFIImJlaS3e+SHNmBJ1+ttDfwsHa6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDFCMS83QkNENDg1ODFE
QUIxMUUyQTRFRUExQTkwOEIwMkNEMi9naVltVnBMZDc1SWMyWUVuWDYyME5fQ3dk
cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dpWW1WcExkNzVJYzJZRW5YNjIwTl9Dd2Ryby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MDFCMS83QkNENDg1ODFEQUIxMUUyQTRFRUExQTkwOEIwMkNEMi9naVltVnBMZDc1
SWMyWUVuWDYyME5fQ3dkcm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBvRPwMA1rYULtP6+g6Y9osH6DnFsn9M7f235vnfyCOGSzMOfiokYHN
9WR4Q9mGac2wbzpS7XGykFhBqiA9tX8XHgc16e9G3HZzZ3yKbPdDrzGI1XENj2wv
6dCtBET77VTpP95wcgEFEWx4A4JMZyd/HYEJOBAo3Fjco4dvTT0KqI+ZSYvN/15F
Vcjgq9yMWxYqzDey6lpeENCT2BLyCZgL7f8lldYxtUA5Ek3sG89urtSXFIP5/k4/
i8OOfcfKFiU6NJIT9xnAsa0hyoeUNalmWkhc/+uReKJ6RiMmgDIShwYbSSWI/s57
enGGJG1Ca7aT2mB6tr6uWihw7X18CpxB
-----END CERTIFICATE-----