Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CEA/75B59FA49CC311EDBE6D1F70C4F9AE02/TGamZng2gcoW2OtUCYIDmTPh1lM.mft
File:                     TGamZng2gcoW2OtUCYIDmTPh1lM.mft (raw, json)
Hash identifier:          SGKvza4+1giJx0V2dCzvRf7NCzOKPSThxu8VNRjxJcA=
Subject key identifier:   F6:62:FA:01:3E:25:4B:DD:A5:12:EA:41:5A:AB:47:87:FB:BB:A5:B0
Authority key identifier: 4C:66:A6:66:78:36:81:CA:16:D8:EB:54:09:82:03:99:33:E1:D6:53
Certificate issuer:       /CN=A9147CEA/serialNumber=4C66A666783681CA16D8EB540982039933E1D653
Certificate serial:       0120
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGamZng2gcoW2OtUCYIDmTPh1lM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147CEA/75B59FA49CC311EDBE6D1F70C4F9AE02/TGamZng2gcoW2OtUCYIDmTPh1lM.mft
Manifest number:          011D
Signing time:             Tue 23 Jul 2024 04:21:16 +0000
Manifest this update:     Tue 23 Jul 2024 04:21:15 +0000
Manifest next update:     Tue 30 Jul 2024 04:21:15 +0000
Files and hashes:         1: TGamZng2gcoW2OtUCYIDmTPh1lM.crl (hash: 3GaIPb3LEEx5ifh8KstMvEY+nJkH7BBerl7RkveSDTs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 288 (0x120)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147CEA/serialNumber=4C66A666783681CA16D8EB540982039933E1D653
        Validity
            Not Before: Jul 23 04:21:15 2024 GMT
            Not After : Jul 30 04:21:15 2024 GMT
        Subject: CN=669f2fbb-5db4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6d:bb:64:70:5c:b4:e3:9d:8d:49:73:c9:7b:
                    c0:84:80:07:f5:18:8e:dc:3e:fd:d1:4d:f8:4e:5e:
                    54:6f:33:e9:90:c6:c1:7c:f3:ae:67:7b:fb:0d:6f:
                    c4:10:c4:86:74:7d:a7:1c:3f:7a:3c:18:be:15:39:
                    92:03:3e:73:c5:f1:d7:68:1e:17:5b:dd:9b:41:8f:
                    99:a3:db:cc:0a:e8:8b:11:84:7f:82:f6:63:af:4b:
                    31:9a:81:e0:39:d1:25:12:e6:0d:61:da:a9:4f:03:
                    af:ab:af:42:9e:89:4f:ef:bc:2a:16:3e:6c:bb:89:
                    39:ca:5a:99:dd:8e:06:5f:1b:f5:bb:e7:8f:bd:a2:
                    c5:9f:c1:3b:7b:a5:7c:43:81:bf:5a:70:e8:8f:63:
                    55:1f:8a:f8:b5:d1:17:2d:9b:8e:59:27:09:fd:a5:
                    26:1f:5c:b5:f5:05:53:bc:33:1c:e5:e2:7b:6c:68:
                    ad:5d:9f:50:86:f6:2e:34:ca:68:7c:98:e6:99:39:
                    f7:28:c2:70:ae:4f:b5:36:8c:9a:be:ea:9f:0d:13:
                    eb:93:2e:29:ae:47:6e:5f:46:cf:8f:44:29:c1:55:
                    3a:a9:bd:92:e6:7b:fb:69:a8:4a:12:52:cd:71:d1:
                    d2:3d:dc:b5:1b:09:ec:2c:c5:ea:ef:0d:46:0d:6d:
                    ef:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:62:FA:01:3E:25:4B:DD:A5:12:EA:41:5A:AB:47:87:FB:BB:A5:B0
            X509v3 Authority Key Identifier:
                keyid:4C:66:A6:66:78:36:81:CA:16:D8:EB:54:09:82:03:99:33:E1:D6:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147CEA/75B59FA49CC311EDBE6D1F70C4F9AE02/TGamZng2gcoW2OtUCYIDmTPh1lM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGamZng2gcoW2OtUCYIDmTPh1lM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CEA/75B59FA49CC311EDBE6D1F70C4F9AE02/TGamZng2gcoW2OtUCYIDmTPh1lM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:b7:1f:74:18:62:ed:f7:8f:39:aa:86:81:d2:6f:fd:81:28:
         37:97:23:1a:9c:4c:0e:99:88:c5:03:da:89:11:d7:07:f1:7c:
         e5:fd:98:87:7f:49:1f:96:e9:eb:e6:b5:c8:45:3f:f4:9a:29:
         b0:b3:12:bb:1a:21:84:09:77:97:0b:06:1f:e0:07:76:1c:ad:
         a7:79:cd:32:66:70:3c:eb:58:5a:99:5f:34:ae:16:15:08:79:
         d8:c1:a5:5f:98:4d:a1:72:9e:cc:8e:66:f7:39:f7:5b:5e:2e:
         ba:2e:0e:92:31:20:6b:02:a2:5b:08:3a:bf:69:f1:ea:61:17:
         9d:56:cb:9d:ec:dd:17:8e:4b:c1:1f:29:28:a2:39:f9:89:72:
         98:b4:44:a9:37:1c:e5:68:3a:6f:0e:9a:db:72:7f:30:52:f5:
         08:5e:25:8e:56:ca:90:a9:d2:02:d8:5b:75:d1:8f:a0:76:e3:
         27:76:4f:6e:f9:f8:7d:3d:7c:fd:c9:6d:be:00:c2:3f:02:95:
         cf:19:bf:d4:b5:de:00:99:88:40:dd:5c:10:1f:0f:f2:de:fa:
         89:b5:c4:fc:3f:54:02:aa:16:e5:f1:1b:dd:4c:01:61:f4:3d:
         f0:96:3d:35:0c:58:c8:95:95:56:8b:43:5c:21:32:4b:bf:ff:
         d2:8c:08:f8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDdDRUExMTAvBgNVBAUTKDRDNjZBNjY2NzgzNjgxQ0ExNkQ4RUI1NDA5ODIwMzk5
MzNFMUQ2NTMwHhcNMjQwNzIzMDQyMTE1WhcNMjQwNzMwMDQyMTE1WjAYMRYwFAYD
VQQDEw02NjlmMmZiYi01ZGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxm27ZHBctOOdjUlzyXvAhIAH9RiO3D790U34Tl5UbzPpkMbBfPOuZ3v7DW/E
EMSGdH2nHD96PBi+FTmSAz5zxfHXaB4XW92bQY+Zo9vMCuiLEYR/gvZjr0sxmoHg
OdElEuYNYdqpTwOvq69CnolP77wqFj5su4k5ylqZ3Y4GXxv1u+ePvaLFn8E7e6V8
Q4G/WnDoj2NVH4r4tdEXLZuOWScJ/aUmH1y19QVTvDMc5eJ7bGitXZ9QhvYuNMpo
fJjmmTn3KMJwrk+1NoyavuqfDRPrky4prkduX0bPj0QpwVU6qb2S5nv7aahKElLN
cdHSPdy1GwnsLMXq7w1GDW3v9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPZi+gE+
JUvdpRLqQVqrR4f7u6WwMB8GA1UdIwQYMBaAFExmpmZ4NoHKFtjrVAmCA5kz4dZT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0NFQS83NUI1OUZBNDlD
QzMxMUVEQkU2RDFGNzBDNEY5QUUwMi9UR2FtWm5nMmdjb1cyT3RVQ1lJRG1UUGgx
bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RHYW1abmcyZ2NvVzJPdFVDWUlEbVRQaDFsTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
N0NFQS83NUI1OUZBNDlDQzMxMUVEQkU2RDFGNzBDNEY5QUUwMi9UR2FtWm5nMmdj
b1cyT3RVQ1lJRG1UUGgxbE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDHtx90GGLt9485qoaB0m/9gSg3lyManEwOmYjFA9qJEdcH8Xzl/ZiH
f0kflunr5rXIRT/0mimwsxK7GiGECXeXCwYf4Ad2HK2nec0yZnA861hamV80rhYV
CHnYwaVfmE2hcp7Mjmb3OfdbXi66Lg6SMSBrAqJbCDq/afHqYRedVsud7N0XjkvB
Hykoojn5iXKYtESpNxzlaDpvDprbcn8wUvUIXiWOVsqQqdIC2Ft10Y+gduMndk9u
+fh9PXz9yW2+AMI/ApXPGb/Utd4AmYhA3VwQHw/y3vqJtcT8P1QCqhbl8RvdTAFh
9D3wlj01DFjIlZVWi0NcITJLv//SjAj4
-----END CERTIFICATE-----