Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155A78/531EA1301D8411E289BB24DA08B02CD2/IPA2zVcYfKKab6qaaiKOIJYP3k8.mft
File:                     IPA2zVcYfKKab6qaaiKOIJYP3k8.mft (raw, json)
Hash identifier:          lKHc4BYyAriq1H+4Yqz3X02bcXJZRQ0ytXdq9YQeW7I=
Subject key identifier:   D7:38:98:1F:79:88:73:74:BA:94:BC:06:26:55:E3:4B:C5:A5:BE:EB
Authority key identifier: 20:F0:36:CD:57:18:7C:A2:9A:6F:AA:9A:6A:22:8E:20:96:0F:DE:4F
Certificate issuer:       /CN=A9155A78/serialNumber=20F036CD57187CA29A6FAA9A6A228E20960FDE4F
Certificate serial:       3349
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPA2zVcYfKKab6qaaiKOIJYP3k8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155A78/531EA1301D8411E289BB24DA08B02CD2/IPA2zVcYfKKab6qaaiKOIJYP3k8.mft
Manifest number:          3341
Signing time:             Tue 15 Aug 2023 22:15:44 +0000
Manifest this update:     Tue 15 Aug 2023 22:15:43 +0000
Manifest next update:     Tue 22 Aug 2023 22:15:43 +0000
Files and hashes:         1: IPA2zVcYfKKab6qaaiKOIJYP3k8.crl (hash: Fy7S6D+8wgB3lEvwkND8ndywjHiWyJz2Fbk1ylEccKo=)
                          2: 3A86FF323BB911EEAB2AE50FC4F9AE02.roa (hash: eoTMCJg82khC1In60GQ8ePZD7RmU6swJLccPSS6O9QA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13129 (0x3349)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155A78/serialNumber=20F036CD57187CA29A6FAA9A6A228E20960FDE4F
        Validity
            Not Before: Aug 15 22:15:43 2023 GMT
            Not After : Aug 22 22:15:43 2023 GMT
        Subject: CN=64dbf910-113a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:9e:71:3b:c3:12:a3:b9:fb:72:16:57:61:57:
                    7d:16:8f:ca:01:30:44:95:72:a0:e4:65:6e:ff:5d:
                    e3:06:eb:7c:e3:27:59:e5:cb:01:61:ff:fb:cb:fd:
                    3a:dc:2f:75:a7:ff:11:06:1e:59:dd:36:d4:d0:a6:
                    ab:65:45:02:2f:fe:76:88:16:d6:6c:ac:e5:7d:f9:
                    aa:52:30:d8:b8:e6:3c:31:36:d4:d6:e3:51:5d:da:
                    06:fa:ee:6e:8b:69:f8:81:b6:49:c7:ae:58:ef:d4:
                    10:95:22:a1:b6:69:e4:74:4a:0a:48:8d:b2:4f:33:
                    f7:a3:69:90:77:81:2b:c1:a4:39:c7:2b:bd:b0:c3:
                    ec:c2:6a:96:cc:7b:66:b8:01:ec:f2:b8:d4:af:2e:
                    a9:b5:db:ed:62:21:dc:b7:bf:4a:87:e6:9b:49:70:
                    01:fb:16:61:e8:25:d1:86:e7:11:b1:3f:a5:5a:3a:
                    34:47:a2:4b:06:3e:77:3a:22:c9:6c:37:21:09:11:
                    d5:79:09:de:c7:bd:c1:7f:45:08:38:46:fd:44:85:
                    1f:d0:ef:99:33:f7:ad:75:fb:52:65:ae:6f:a9:f8:
                    c7:47:4f:29:b6:98:f2:93:27:83:c3:3b:5c:b6:9a:
                    49:ff:6e:d1:aa:91:44:ef:c3:b9:2a:b7:3a:75:b0:
                    93:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:38:98:1F:79:88:73:74:BA:94:BC:06:26:55:E3:4B:C5:A5:BE:EB
            X509v3 Authority Key Identifier:
                keyid:20:F0:36:CD:57:18:7C:A2:9A:6F:AA:9A:6A:22:8E:20:96:0F:DE:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155A78/531EA1301D8411E289BB24DA08B02CD2/IPA2zVcYfKKab6qaaiKOIJYP3k8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPA2zVcYfKKab6qaaiKOIJYP3k8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155A78/531EA1301D8411E289BB24DA08B02CD2/IPA2zVcYfKKab6qaaiKOIJYP3k8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:37:1a:7c:19:bd:8a:79:71:a7:0f:56:68:89:00:ef:f3:68:
         be:8a:3b:21:98:f2:91:2a:67:bf:53:86:9e:ef:b0:4c:e3:f0:
         24:b8:34:01:9b:6e:8b:f2:b3:18:d7:9a:a8:7e:46:17:8b:28:
         ab:3d:98:dd:ff:8b:8f:5c:75:0e:ef:fc:eb:3b:18:9f:e0:52:
         92:08:c5:fe:07:f3:e4:63:05:c3:18:d7:22:79:ad:cf:48:f5:
         6a:6e:ea:82:3e:56:ea:13:f5:8d:ce:77:7a:3f:45:a8:73:94:
         fd:6d:c5:83:04:d7:42:bf:66:c8:ac:6e:70:d3:c7:79:cf:19:
         a2:81:52:54:f7:8c:16:de:d2:d7:42:80:72:9f:fa:d5:6c:ae:
         fe:02:c2:c4:39:01:17:d6:5f:dc:04:e8:cd:0a:d9:46:50:a1:
         44:d4:03:7c:1e:e6:59:ce:e9:33:29:3b:44:01:19:9c:64:af:
         fe:73:2c:c7:4b:85:0f:55:52:f8:b6:54:bd:d9:01:cb:b7:5b:
         37:93:15:1a:0e:a2:11:75:74:9b:c4:35:12:f0:c9:e6:08:e0:
         44:19:0b:52:9f:45:32:45:9a:ca:3f:cf:57:c6:fd:36:62:73:
         44:03:67:79:c8:dc:fe:84:d0:35:af:40:08:15:62:3b:ff:3f:
         15:98:bf:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----