Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915537D/9D415D74B37511E8A104AE69C4F9AE02/Fmgn0xEZq76D_HVUqUGkl5N_dZI.mft
File:                     Fmgn0xEZq76D_HVUqUGkl5N_dZI.mft (raw, json)
Hash identifier:          ER62/B1pUuFvfwQwv+o/WJVClnwKoHSAidgVCPZbl8E=
Subject key identifier:   EC:AA:1F:A4:25:29:5A:8E:CD:A9:D2:AF:60:E9:7B:B0:1C:DB:4B:3B
Authority key identifier: 16:68:27:D3:11:19:AB:BE:83:FC:75:54:A9:41:A4:97:93:7F:75:92
Certificate issuer:       /CN=A915537D/serialNumber=166827D31119ABBE83FC7554A941A497937F7592
Certificate serial:       119D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fmgn0xEZq76D_HVUqUGkl5N_dZI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915537D/9D415D74B37511E8A104AE69C4F9AE02/Fmgn0xEZq76D_HVUqUGkl5N_dZI.mft
Manifest number:          1190
Signing time:             Mon 12 Jun 2023 18:02:50 +0000
Manifest this update:     Mon 12 Jun 2023 18:02:49 +0000
Manifest next update:     Mon 19 Jun 2023 18:02:49 +0000
Files and hashes:         1: Fmgn0xEZq76D_HVUqUGkl5N_dZI.crl (hash: 7sUdr4CNJqx22YxiQjPI46SkAMfhM+ByoXGqH0A5Axk=)
                          2: 5CD5E05A4F1711E991873829C4F9AE02.roa (hash: voKMMF8EpfRStjji/xLc75+DlcSrI51wbzsCRCewlqw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4509 (0x119d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915537D/serialNumber=166827D31119ABBE83FC7554A941A497937F7592
        Validity
            Not Before: Jun 12 18:02:49 2023 GMT
            Not After : Jun 19 18:02:49 2023 GMT
        Subject: CN=64875dc9-5a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:90:da:fa:45:4c:dc:23:5d:49:8b:a8:c9:ce:
                    49:b1:30:05:6d:60:66:cc:ac:ea:bd:90:d8:5d:b3:
                    07:ad:71:79:a7:96:47:56:a9:5b:df:45:71:24:05:
                    14:b5:c0:d9:5e:cb:25:a1:d7:bc:e1:4f:9f:d6:c0:
                    5e:4a:de:aa:df:97:c3:93:38:c5:06:6d:e0:86:96:
                    36:58:b4:1f:f6:f3:f9:bb:49:fd:f9:d4:be:a0:28:
                    62:d7:8b:dc:13:6f:93:c4:c2:f5:98:ac:f8:f5:a8:
                    3e:f9:24:a9:ae:b7:fd:8b:27:13:a3:f7:d6:e8:7c:
                    9f:bb:01:33:5d:93:18:2a:8e:c2:22:3a:8a:3f:bf:
                    db:97:8e:fc:b1:5f:82:ee:ed:78:34:15:b1:a9:6c:
                    cb:6f:a8:39:5c:13:12:65:a4:f0:c2:85:e3:02:f8:
                    8c:8b:7a:9f:03:73:da:27:22:c0:67:f4:3d:d7:67:
                    f3:3f:ab:d1:f5:bd:17:77:9a:bb:cb:f9:f5:de:03:
                    14:35:43:55:49:0a:ec:07:85:92:78:0f:19:3d:8c:
                    d3:16:32:49:19:c0:09:89:b5:45:73:5e:6f:bb:80:
                    7a:cb:39:3c:19:aa:92:3d:0b:e1:fa:9a:15:74:40:
                    a0:74:95:75:19:03:77:de:ce:15:f3:4e:cb:f0:da:
                    18:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AA:1F:A4:25:29:5A:8E:CD:A9:D2:AF:60:E9:7B:B0:1C:DB:4B:3B
            X509v3 Authority Key Identifier:
                keyid:16:68:27:D3:11:19:AB:BE:83:FC:75:54:A9:41:A4:97:93:7F:75:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915537D/9D415D74B37511E8A104AE69C4F9AE02/Fmgn0xEZq76D_HVUqUGkl5N_dZI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fmgn0xEZq76D_HVUqUGkl5N_dZI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915537D/9D415D74B37511E8A104AE69C4F9AE02/Fmgn0xEZq76D_HVUqUGkl5N_dZI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:29:07:e0:92:27:0a:d9:49:d5:71:57:bb:b2:39:6e:f7:71:
         cb:82:30:93:eb:bb:d8:a3:a3:10:23:14:12:ae:70:40:4d:af:
         94:68:9f:ad:bc:12:4e:00:1f:ef:1a:58:59:2f:6b:c4:a1:eb:
         6b:06:57:18:d9:26:e2:a3:0f:75:9c:32:9b:39:89:40:1e:7b:
         27:96:83:96:43:18:1e:ce:5c:df:e6:24:e1:ba:1b:c4:51:9a:
         7e:ec:df:ab:2b:5a:06:c3:1a:72:5a:51:8d:80:17:e4:e0:ec:
         ae:60:7c:ae:10:0f:5a:28:c8:c1:8c:7d:a1:e0:3b:8e:2d:76:
         c3:18:db:49:e0:28:06:dd:fe:ba:3f:55:62:a7:89:57:13:3d:
         c2:b5:25:95:b4:4a:79:3f:a0:2f:19:83:8a:18:fc:19:67:47:
         4d:aa:4b:77:cc:46:6f:1e:2f:1f:40:3a:61:95:be:ea:75:61:
         46:18:19:45:0c:a6:36:83:b0:49:fc:ad:33:94:2f:3c:8c:5c:
         74:f6:2a:94:20:62:9e:c7:0f:fa:59:2b:f2:31:30:48:a0:5e:
         8a:a4:fe:b9:8c:c1:22:af:b0:69:53:8c:f9:0c:9b:b0:97:e3:
         67:82:e4:a8:39:a0:66:80:c2:3c:60:14:d5:f5:82:72:87:92:
         c8:1d:55:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----