Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154E7F/78CFFD7E295811EA958A7F1EC4F9AE02/pl4AblNPWHprgcgsjYwA9KEN_6w.mft
File:                     pl4AblNPWHprgcgsjYwA9KEN_6w.mft (raw, json)
Hash identifier:          CuvkUEtuSBilirfs1kGmmLpUATgGG3h/ln1m5yNLVTg=
Subject key identifier:   80:39:53:DC:38:00:A4:11:D4:C4:5C:42:AA:ED:60:A0:8C:1C:AC:47
Authority key identifier: A6:5E:00:6E:53:4F:58:7A:6B:81:C8:2C:8D:8C:00:F4:A1:0D:FF:AC
Certificate issuer:       /CN=A9154E7F/serialNumber=A65E006E534F587A6B81C82C8D8C00F4A10DFFAC
Certificate serial:       0A2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pl4AblNPWHprgcgsjYwA9KEN_6w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154E7F/78CFFD7E295811EA958A7F1EC4F9AE02/pl4AblNPWHprgcgsjYwA9KEN_6w.mft
Manifest number:          0A27
Signing time:             Mon 03 Jul 2023 00:00:30 +0000
Manifest this update:     Mon 03 Jul 2023 00:00:29 +0000
Manifest next update:     Mon 10 Jul 2023 00:00:29 +0000
Files and hashes:         1: pl4AblNPWHprgcgsjYwA9KEN_6w.crl (hash: rZSCYVFbOLJYWRG7BQYJ9L/L0FsuxOyOrpyKuG2FdJU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2607 (0xa2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154E7F/serialNumber=A65E006E534F587A6B81C82C8D8C00F4A10DFFAC
        Validity
            Not Before: Jul  3 00:00:29 2023 GMT
            Not After : Jul 10 00:00:29 2023 GMT
        Subject: CN=64a20f9e-5dfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6d:8b:90:69:0b:5d:11:b1:c0:6f:cb:1c:26:
                    70:ac:63:b5:53:21:c8:4e:1b:6d:19:61:e3:60:de:
                    fc:d8:7b:18:22:a4:9c:e4:df:39:ac:d1:59:ef:49:
                    1d:b0:9b:54:96:b0:99:25:e0:15:07:7a:ca:dd:d4:
                    0b:89:e0:69:b8:35:88:74:8a:2c:46:b9:a9:f1:6b:
                    ad:28:ee:a5:99:68:3c:14:3d:fd:08:1e:dc:cc:46:
                    ff:79:c8:d3:9e:50:82:21:72:88:87:4a:4c:d2:39:
                    50:09:61:f0:73:d8:3b:cd:8c:0f:d2:d8:ef:7f:c3:
                    b4:5e:1b:46:67:ac:e9:26:9d:87:c5:fa:2d:ae:0d:
                    bf:19:69:04:60:a8:82:0d:eb:2a:d7:37:68:e4:f4:
                    d0:3e:5e:78:1e:e9:84:ec:f8:4c:74:3f:2e:a6:38:
                    f7:74:39:75:62:06:25:1a:b3:12:7f:6f:61:72:86:
                    40:e3:ae:1e:83:63:1b:ff:71:7f:63:b5:94:79:c7:
                    1c:7e:30:28:8f:7b:12:aa:6f:5a:f6:99:47:46:28:
                    09:9c:e9:c0:c9:f2:1c:76:1e:44:1e:d1:4d:b2:0f:
                    71:28:f1:c8:e0:ee:40:45:03:93:a5:64:d9:df:72:
                    a9:b2:42:9a:9b:f0:87:7c:33:0a:84:b8:2f:bc:93:
                    07:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:39:53:DC:38:00:A4:11:D4:C4:5C:42:AA:ED:60:A0:8C:1C:AC:47
            X509v3 Authority Key Identifier:
                keyid:A6:5E:00:6E:53:4F:58:7A:6B:81:C8:2C:8D:8C:00:F4:A1:0D:FF:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154E7F/78CFFD7E295811EA958A7F1EC4F9AE02/pl4AblNPWHprgcgsjYwA9KEN_6w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pl4AblNPWHprgcgsjYwA9KEN_6w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154E7F/78CFFD7E295811EA958A7F1EC4F9AE02/pl4AblNPWHprgcgsjYwA9KEN_6w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:c7:4a:9a:cc:2b:d0:d1:60:64:e1:28:ea:6d:5d:81:57:6c:
         1c:d3:eb:ba:e4:88:cb:dc:0b:26:31:e2:ea:84:15:d1:66:36:
         db:7a:37:70:ae:7f:2b:dc:97:16:6d:a9:3a:6c:0c:bd:1e:b2:
         ba:c5:f9:da:b1:47:88:c4:51:96:fe:70:33:02:04:a7:fe:da:
         14:b6:be:af:ec:b2:86:d4:be:53:1f:e8:09:33:91:a2:71:60:
         8b:3a:ba:8a:5d:49:27:a7:b8:83:93:29:3e:99:58:98:db:dd:
         f1:ff:c6:8c:c4:63:0f:f0:98:51:21:2d:b9:2d:55:18:c4:f3:
         e1:02:5c:9e:62:e5:6c:45:e5:6c:7d:8b:86:e9:d2:11:e3:50:
         f6:83:79:36:00:df:52:12:c4:92:18:ad:a3:36:4a:c8:c8:b4:
         13:d0:29:45:58:7b:d6:93:93:c6:26:a6:a2:46:bf:3f:bf:2b:
         38:9f:70:30:8a:ed:97:49:87:27:9a:75:6d:e5:b3:db:e1:b5:
         f7:e4:44:d6:50:c8:1e:2d:8e:6a:59:eb:6a:9b:92:c4:01:a6:
         3b:44:c8:56:d3:c9:d8:bf:b2:98:ba:60:3a:24:a8:92:73:f4:
         cc:d7:31:78:6e:cf:97:57:81:67:9e:cc:f4:2e:81:7c:ca:a3:
         8f:21:e2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----