Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91437CC/67719554E02B11E9B42BA85BC4F9AE02/pwGX-cCJDfApH60WxvHeT_vGwKc.mft
File:                     pwGX-cCJDfApH60WxvHeT_vGwKc.mft (raw, json)
Hash identifier:          nLpjDOgY+2h1H70YzPbY/3KFIZEukXggI74UGP41Nfk=
Subject key identifier:   8F:3A:2D:A4:74:66:A9:B7:96:63:32:81:8D:E6:EC:22:DC:82:F0:0F
Authority key identifier: A7:01:97:F9:C0:89:0D:F0:29:1F:AD:16:C6:F1:DE:4F:FB:C6:C0:A7
Certificate issuer:       /CN=A91437CC/serialNumber=A70197F9C0890DF0291FAD16C6F1DE4FFBC6C0A7
Certificate serial:       0BD5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwGX-cCJDfApH60WxvHeT_vGwKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91437CC/67719554E02B11E9B42BA85BC4F9AE02/pwGX-cCJDfApH60WxvHeT_vGwKc.mft
Manifest number:          0BCE
Signing time:             Wed 27 Sep 2023 01:56:21 +0000
Manifest this update:     Wed 27 Sep 2023 01:56:21 +0000
Manifest next update:     Wed 04 Oct 2023 01:56:21 +0000
Files and hashes:         1: pwGX-cCJDfApH60WxvHeT_vGwKc.crl (hash: 4sSirP256l9ZO6UKGORw9Y/wQWS/weqlKkELMl3HpLk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3029 (0xbd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91437CC/serialNumber=A70197F9C0890DF0291FAD16C6F1DE4FFBC6C0A7
        Validity
            Not Before: Sep 27 01:56:21 2023 GMT
            Not After : Oct  4 01:56:21 2023 GMT
        Subject: CN=65138bc5-bb31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:74:ba:cf:50:75:e2:89:a0:5a:6b:99:6a:aa:
                    e7:f5:50:4f:8b:7a:5d:0e:b1:ea:8e:b9:8e:f9:bf:
                    0c:e8:ff:5c:a4:47:b3:5f:3d:f7:e7:bf:b7:ee:2a:
                    9c:58:50:a6:da:dd:7e:43:68:84:3f:63:dd:23:1d:
                    12:c4:49:b4:3f:c5:4d:30:99:36:fb:53:7b:9d:cc:
                    97:c3:54:ea:12:c8:da:11:1a:e4:bc:d6:98:b2:54:
                    3c:d6:35:ab:23:74:d8:b6:19:60:d0:39:10:37:36:
                    16:93:12:57:d5:87:df:c7:49:de:8e:7c:54:cb:0c:
                    b0:3e:f5:14:a2:dd:29:87:44:ce:c7:60:41:13:ed:
                    67:5a:a9:81:ab:85:fe:cf:d6:bb:68:74:19:03:9c:
                    4b:20:97:ae:d5:e1:93:70:36:f0:44:8c:de:10:cb:
                    51:0a:33:55:45:7b:b1:df:97:bb:a5:ac:91:9d:46:
                    c9:6a:76:fc:93:2a:ec:a8:ee:a1:9a:bb:02:8e:31:
                    1d:7c:7d:0d:f1:06:2b:33:60:c7:aa:55:c9:16:e1:
                    87:e8:f6:a6:e9:c7:e6:50:0b:b8:2d:af:22:95:b3:
                    19:e8:94:9b:68:d2:8f:34:5f:46:a7:6e:24:dd:18:
                    98:73:27:69:d0:0a:5b:34:b7:46:c0:69:6f:17:f5:
                    35:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:3A:2D:A4:74:66:A9:B7:96:63:32:81:8D:E6:EC:22:DC:82:F0:0F
            X509v3 Authority Key Identifier:
                keyid:A7:01:97:F9:C0:89:0D:F0:29:1F:AD:16:C6:F1:DE:4F:FB:C6:C0:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91437CC/67719554E02B11E9B42BA85BC4F9AE02/pwGX-cCJDfApH60WxvHeT_vGwKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwGX-cCJDfApH60WxvHeT_vGwKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91437CC/67719554E02B11E9B42BA85BC4F9AE02/pwGX-cCJDfApH60WxvHeT_vGwKc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:55:5d:04:d0:af:40:a6:df:ab:0a:cf:17:44:90:c9:b6:68:
         2f:d5:d3:81:a4:1f:7b:06:05:33:72:7a:5e:ff:32:3b:c4:25:
         b4:5f:bf:0c:89:d7:90:27:04:a3:53:ab:26:69:ad:99:25:41:
         18:96:3a:a4:b0:85:e3:6b:b4:cb:40:1a:ea:68:45:d6:d2:e6:
         4e:f4:5f:0e:f2:17:03:71:e5:61:60:2b:e7:89:70:ae:aa:33:
         65:f1:76:d6:c5:96:32:15:28:68:fd:f4:38:61:de:f6:60:45:
         15:84:8f:c3:b8:10:fe:aa:5a:be:c5:07:d3:7c:64:ea:dd:04:
         83:13:0a:21:e0:7f:e0:44:64:e7:bd:50:0b:da:3d:1f:b3:d8:
         bc:6f:2c:d3:59:f9:d9:45:d5:f5:7a:aa:29:bb:5f:1a:a3:15:
         a8:ca:61:87:23:8f:f1:02:f9:03:26:d3:94:13:b8:b7:67:79:
         d6:3f:3b:9b:bd:f0:75:3b:f8:a3:e3:f2:3e:63:42:c1:95:7a:
         54:00:75:7f:52:b6:79:08:65:eb:0d:18:5c:d4:76:f7:11:74:
         e1:38:4a:a9:61:7d:0c:9c:8a:ff:f3:80:12:6c:47:3e:39:4a:
         6b:fb:5d:21:29:49:23:ae:23:d1:43:2e:11:06:0a:f1:52:88:
         02:78:14:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----