Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915AEFC/BF7C80E41AE611EDA1AE8340C4F9AE02/3M4kpHTI-ezyqDTxVp3QIyh6Ez8.mft
File:                     3M4kpHTI-ezyqDTxVp3QIyh6Ez8.mft (raw, json)
Hash identifier:          MlitNS1rajMpE4kjw9p1ldeXcLOLhOYvAKR+hsaA1jo=
Subject key identifier:   E7:D3:5F:A4:CE:7F:B6:30:F1:3D:98:BE:6B:EB:77:4C:B9:D2:71:AF
Authority key identifier: DC:CE:24:A4:74:C8:F9:EC:F2:A8:34:F1:56:9D:D0:23:28:7A:13:3F
Certificate issuer:       /CN=A915AEFC/serialNumber=DCCE24A474C8F9ECF2A834F1569DD023287A133F
Certificate serial:       DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M4kpHTI-ezyqDTxVp3QIyh6Ez8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915AEFC/BF7C80E41AE611EDA1AE8340C4F9AE02/3M4kpHTI-ezyqDTxVp3QIyh6Ez8.mft
Manifest number:          DE
Signing time:             Mon 29 May 2023 06:50:57 +0000
Manifest this update:     Mon 29 May 2023 06:50:56 +0000
Manifest next update:     Mon 05 Jun 2023 06:50:56 +0000
Files and hashes:         1: 3M4kpHTI-ezyqDTxVp3QIyh6Ez8.crl (hash: hTzteQglYmpbGYZXydKi8mgD6Lq9atrGrc6I7W5lb3M=)
                          2: FDF7A30E1AEA11EDBA62BA4AC4F9AE02.roa (hash: PPxp6nKvOdjV8qdDcCycvz47YLuu9YDXhcRA3150LRU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915AEFC/serialNumber=DCCE24A474C8F9ECF2A834F1569DD023287A133F
        Validity
            Not Before: May 29 06:50:56 2023 GMT
            Not After : Jun  5 06:50:56 2023 GMT
        Subject: CN=64744b51-daba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:85:1f:80:01:ba:f9:a1:1b:95:cc:83:46:46:
                    78:cd:51:0d:29:fb:c9:2a:35:ec:bf:b5:34:78:7b:
                    c5:16:68:78:fe:1a:25:1c:df:d1:80:15:4f:44:67:
                    ea:e4:d5:a1:0e:8b:a4:66:ad:d4:2f:ac:1c:22:8f:
                    fe:24:b4:bb:1a:d8:e2:08:3a:b0:9b:64:94:81:29:
                    e3:14:48:6d:78:73:98:64:5c:35:c6:ce:60:e6:f5:
                    a0:c3:e0:3f:56:b7:0b:70:ff:43:01:d0:41:71:e1:
                    f0:d2:35:43:65:ac:29:45:24:fd:5d:22:09:4c:cc:
                    71:fa:37:12:23:e3:9b:99:94:82:49:b8:de:c3:29:
                    b5:ee:d1:50:c6:60:5c:cb:cc:7c:34:80:96:55:d7:
                    37:07:2e:5a:49:49:a7:27:d5:2e:d7:c9:b4:be:fe:
                    27:fc:f7:3f:aa:47:18:33:f5:76:cb:e4:c8:bc:a3:
                    e8:38:de:72:ee:05:cc:41:2e:8e:45:72:62:6b:21:
                    0b:49:94:36:9a:60:dc:29:72:d1:a0:21:03:cc:ef:
                    60:5e:b6:db:ff:8f:6e:61:90:aa:5a:14:ed:c0:8f:
                    79:25:77:40:b0:21:3b:85:16:e3:8c:ca:9b:98:48:
                    96:af:60:97:d5:98:bf:4f:18:12:22:1b:97:bb:fd:
                    63:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D3:5F:A4:CE:7F:B6:30:F1:3D:98:BE:6B:EB:77:4C:B9:D2:71:AF
            X509v3 Authority Key Identifier:
                keyid:DC:CE:24:A4:74:C8:F9:EC:F2:A8:34:F1:56:9D:D0:23:28:7A:13:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915AEFC/BF7C80E41AE611EDA1AE8340C4F9AE02/3M4kpHTI-ezyqDTxVp3QIyh6Ez8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M4kpHTI-ezyqDTxVp3QIyh6Ez8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AEFC/BF7C80E41AE611EDA1AE8340C4F9AE02/3M4kpHTI-ezyqDTxVp3QIyh6Ez8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:6b:60:32:2c:45:d5:fc:45:8d:a7:0c:c0:c0:3e:1f:2c:19:
         71:fc:2e:43:f0:ec:6e:9a:5f:af:21:cb:31:c1:93:16:e9:78:
         d7:55:84:e7:68:ee:1f:7c:07:43:37:7c:5b:d0:1d:d1:fc:1e:
         05:54:c9:48:a6:84:83:00:24:87:f3:45:de:eb:3a:21:75:79:
         05:0b:23:19:08:e5:e3:f2:70:ad:4a:f7:04:d1:8a:47:f4:16:
         16:4e:e9:62:20:6f:46:35:f3:48:8d:9c:ac:47:82:b1:df:32:
         ae:88:c0:34:90:5c:9b:83:2b:64:f9:dc:58:94:37:4f:28:60:
         48:57:ad:a1:57:a2:9e:b5:88:7c:8c:fe:d7:28:47:e5:ed:a8:
         73:67:7e:cd:77:8c:ca:24:d1:64:aa:9b:11:85:72:96:1f:ad:
         03:b8:56:6b:1b:c8:92:16:db:cc:77:9b:f7:ce:2e:8c:bd:33:
         f7:88:e0:6e:e2:ad:d4:9c:32:7b:32:51:8c:4b:70:f3:7f:2c:
         fd:71:de:6c:4d:ed:f7:ca:77:d0:4f:45:b4:a5:8e:1d:ea:97:
         cb:76:56:cd:68:24:ea:45:86:62:3f:0b:9c:e8:8e:08:59:1b:
         d7:90:5d:2f:35:05:be:3e:c2:38:8a:cf:dd:90:c0:3c:a6:e1:
         dc:17:06:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----