Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150E4D/49715B7A337E11EEA310AF83C4F9AE02/wIxUO8jKkZYhZq8ScwzuS-Wytv0.mft
File:                     wIxUO8jKkZYhZq8ScwzuS-Wytv0.mft (raw, json)
Hash identifier:          chQ9XJXlW360Jxe+udvuRkQ+NnzSqM9Z1HVfM/Snvxc=
Subject key identifier:   A3:8D:A9:8D:7A:2C:D3:60:56:F4:0E:BC:E1:41:86:23:2F:C4:28:BC
Authority key identifier: C0:8C:54:3B:C8:CA:91:96:21:66:AF:12:73:0C:EE:4B:E5:B2:B6:FD
Certificate issuer:       /CN=A9150E4D/serialNumber=C08C543BC8CA91962166AF12730CEE4BE5B2B6FD
Certificate serial:       4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wIxUO8jKkZYhZq8ScwzuS-Wytv0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150E4D/49715B7A337E11EEA310AF83C4F9AE02/wIxUO8jKkZYhZq8ScwzuS-Wytv0.mft
Manifest number:          44
Signing time:             Mon 27 Nov 2023 06:08:18 +0000
Manifest this update:     Mon 27 Nov 2023 06:08:18 +0000
Manifest next update:     Mon 04 Dec 2023 06:08:17 +0000
Files and hashes:         1: wIxUO8jKkZYhZq8ScwzuS-Wytv0.crl (hash: z8BfUrW6xkOpOB534pWiNaSjjURf6pedlAQZ4wW50qg=)
                          2: E82BA4F4812711EEA110346EC4F9AE02.roa (hash: T+hlDrINQPkSf/VLeIqt3YRBt24dh3Yv9o5XZ+kv65o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150E4D/serialNumber=C08C543BC8CA91962166AF12730CEE4BE5B2B6FD
        Validity
            Not Before: Nov 27 06:08:18 2023 GMT
            Not After : Dec  4 06:08:17 2023 GMT
        Subject: CN=65643252-ab5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e3:eb:0f:8b:77:19:49:5e:ee:20:f6:96:86:
                    13:23:9a:ff:84:ae:de:6c:10:ff:d9:4f:0e:dd:a6:
                    95:d9:29:6e:24:0f:a8:e1:d8:ca:87:a3:43:45:64:
                    bc:5a:78:5b:61:ed:7f:26:77:17:1a:f2:1a:d8:64:
                    75:c7:12:d6:3f:b7:ba:a0:5d:bb:d3:48:37:c7:c7:
                    ed:52:e5:c8:c7:ca:c9:45:27:03:11:9a:8e:13:a4:
                    4d:a8:55:f7:64:93:b0:08:e5:4a:b3:ee:8d:de:01:
                    c3:25:79:1e:6d:9e:72:91:b8:9a:54:54:dd:9f:65:
                    62:9c:a0:60:27:e7:42:d4:a0:c2:bd:fc:2d:27:bd:
                    b6:d4:25:13:1b:97:7f:2c:5a:d1:30:1a:18:24:c1:
                    b7:84:8a:22:47:13:3c:42:c5:33:21:c5:62:06:d9:
                    f4:e7:61:b5:08:0a:25:0f:21:5f:86:9e:88:aa:04:
                    f6:5f:fe:70:50:cc:e8:b4:af:7c:eb:37:6c:94:c9:
                    1e:a9:75:eb:25:ae:58:a8:82:11:d3:85:cf:ef:56:
                    f2:9a:8a:85:1d:45:ab:c3:e8:3b:ce:0f:36:94:7a:
                    7d:0d:87:c9:bd:dd:f5:e9:53:c8:f9:c8:fa:eb:c5:
                    96:fc:fa:62:b3:c0:1f:87:6d:43:dd:69:84:8c:b2:
                    ca:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:8D:A9:8D:7A:2C:D3:60:56:F4:0E:BC:E1:41:86:23:2F:C4:28:BC
            X509v3 Authority Key Identifier:
                keyid:C0:8C:54:3B:C8:CA:91:96:21:66:AF:12:73:0C:EE:4B:E5:B2:B6:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150E4D/49715B7A337E11EEA310AF83C4F9AE02/wIxUO8jKkZYhZq8ScwzuS-Wytv0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wIxUO8jKkZYhZq8ScwzuS-Wytv0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150E4D/49715B7A337E11EEA310AF83C4F9AE02/wIxUO8jKkZYhZq8ScwzuS-Wytv0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:0d:f3:0f:2c:cd:4c:64:84:c1:47:ad:b0:c3:4b:1d:68:73:
         21:c8:c5:b1:c6:2d:22:fc:f5:fa:53:32:8d:0f:60:18:32:e7:
         a8:1c:41:8c:2e:a9:d3:30:fd:c2:27:a9:67:bb:33:05:70:62:
         9d:ce:a8:da:b3:8a:bf:cd:42:99:cf:06:44:4c:c8:0e:aa:ab:
         d7:e9:ce:ea:fe:67:d8:04:fd:01:78:a1:3f:32:79:3b:3b:18:
         33:d1:a8:69:93:0d:33:a3:f8:12:90:1a:39:29:7b:dd:b5:b0:
         8d:a0:2e:5d:4d:38:69:c4:0f:c8:bd:16:f9:38:61:59:02:e4:
         6e:f6:67:bf:6a:f2:08:b6:13:6e:8d:fb:c9:ec:1b:49:7b:3d:
         03:41:f8:e7:90:8b:a7:88:e4:7a:b6:7f:2e:4f:4e:f0:f1:1a:
         ef:12:c0:f5:1a:ba:5e:23:51:ba:94:66:ad:dd:08:b0:89:cb:
         6b:bd:ba:72:43:8e:a4:0d:29:c7:9d:6e:db:e7:c0:37:91:cd:
         61:d9:bf:ff:e7:98:0f:16:8a:1b:49:44:08:99:4e:4d:b2:57:
         cd:29:10:bc:c6:fd:0c:a7:9a:c9:a8:5b:68:29:f2:20:35:7b:
         9e:56:93:e2:6c:62:a3:13:a9:e3:87:0b:09:5e:02:46:81:e9:
         77:ee:70:f7
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
MEU0RDExMC8GA1UEBRMoQzA4QzU0M0JDOENBOTE5NjIxNjZBRjEyNzMwQ0VFNEJF
NUIyQjZGRDAeFw0yMzExMjcwNjA4MThaFw0yMzEyMDQwNjA4MTdaMBgxFjAUBgNV
BAMTDTY1NjQzMjUyLWFiNWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDg4+sPi3cZSV7uIPaWhhMjmv+Ert5sEP/ZTw7dppXZKW4kD6jh2MqHo0NFZLxa
eFth7X8mdxca8hrYZHXHEtY/t7qgXbvTSDfHx+1S5cjHyslFJwMRmo4TpE2oVfdk
k7AI5Uqz7o3eAcMleR5tnnKRuJpUVN2fZWKcoGAn50LUoMK9/C0nvbbUJRMbl38s
WtEwGhgkwbeEiiJHEzxCxTMhxWIG2fTnYbUICiUPIV+GnoiqBPZf/nBQzOi0r3zr
N2yUyR6pdeslrlioghHThc/vVvKaioUdRavD6DvODzaUen0Nh8m93fXpU8j5yPrr
xZb8+mKzwB+HbUPdaYSMssr1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUo42pjXos
02BW9A684UGGIy/EKLwwHwYDVR0jBBgwFoAUwIxUO8jKkZYhZq8ScwzuS+Wytv0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUwRTRELzQ5NzE1QjdBMzM3
RTExRUVBMzEwQUY4M0M0RjlBRTAyL3dJeFVPOGpLa1pZaFpxOFNjd3p1Uy1XeXR2
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvd0l4VU84aktrWlloWnE4U2N3enVTLVd5dHYwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUw
RTRELzQ5NzE1QjdBMzM3RTExRUVBMzEwQUY4M0M0RjlBRTAyL3dJeFVPOGpLa1pZ
aFpxOFNjd3p1Uy1XeXR2MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAHAN8w8szUxkhMFHrbDDSx1ocyHIxbHGLSL89fpTMo0PYBgy56gcQYwu
qdMw/cInqWe7MwVwYp3OqNqzir/NQpnPBkRMyA6qq9fpzur+Z9gE/QF4oT8yeTs7
GDPRqGmTDTOj+BKQGjkpe921sI2gLl1NOGnED8i9Fvk4YVkC5G72Z79q8gi2E26N
+8nsG0l7PQNB+OeQi6eI5Hq2fy5PTvDxGu8SwPUaul4jUbqUZq3dCLCJy2u9unJD
jqQNKcedbtvnwDeRzWHZv//nmA8WihtJRAiZTk2yV80pELzG/QynmsmoW2gp8iA1
e55Wk+JsYqMTqeOHCwleAkaB6XfucPc=
-----END CERTIFICATE-----