Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160175/73AC65BE33FC11EEA9FE4137C4F9AE02/5hM5QgJLVCeD8TvukITIwQbB6lA.mft
File:                     5hM5QgJLVCeD8TvukITIwQbB6lA.mft (raw, json)
Hash identifier:          4KS624kCYqcvclQcCnQmNHpbCn4cnkr7FVm0ke6Q/8E=
Subject key identifier:   38:D0:E5:63:28:97:CD:DC:D2:77:38:19:87:9A:C4:38:3D:D5:51:13
Authority key identifier: E6:13:39:42:02:4B:54:27:83:F1:3B:EE:90:84:C8:C1:06:C1:EA:50
Certificate issuer:       /CN=A9160175/serialNumber=E6133942024B542783F13BEE9084C8C106C1EA50
Certificate serial:       4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hM5QgJLVCeD8TvukITIwQbB6lA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160175/73AC65BE33FC11EEA9FE4137C4F9AE02/5hM5QgJLVCeD8TvukITIwQbB6lA.mft
Manifest number:          49
Signing time:             Fri 22 Dec 2023 00:51:30 +0000
Manifest this update:     Fri 22 Dec 2023 00:51:29 +0000
Manifest next update:     Fri 29 Dec 2023 00:51:29 +0000
Files and hashes:         1: 5hM5QgJLVCeD8TvukITIwQbB6lA.crl (hash: MlWQjUOE8ZHHmfN5gqbqROqrgE5XyGqmy1lPtqT1cwg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160175/serialNumber=E6133942024B542783F13BEE9084C8C106C1EA50
        Validity
            Not Before: Dec 22 00:51:29 2023 GMT
            Not After : Dec 29 00:51:29 2023 GMT
        Subject: CN=6584dd92-a466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7a:fc:2f:58:ed:63:fd:f0:13:ed:01:81:ee:
                    5c:a5:88:2a:6b:aa:61:d5:b2:bd:6b:41:eb:62:28:
                    e1:39:b7:be:94:87:87:02:c2:5d:43:a8:ec:c9:c6:
                    2d:52:cb:e6:d1:14:1c:d9:6b:fd:21:22:fc:7c:8e:
                    16:0e:fe:51:f6:59:cd:5b:ef:57:2a:6b:d8:1d:24:
                    ef:a9:a7:81:eb:de:0a:76:53:55:c3:b5:5e:b1:bf:
                    3a:d0:f3:50:c4:e3:1c:2a:4d:2c:41:67:98:fc:f1:
                    6c:fa:99:5c:8c:fb:6c:d7:93:1a:d9:4e:60:25:c1:
                    e3:18:b9:d7:20:bf:2d:42:64:fb:4b:12:32:e7:f3:
                    bd:63:1b:44:25:eb:5b:f9:b9:66:eb:50:5f:ae:52:
                    07:00:11:c4:87:4e:e0:01:db:14:1a:48:16:34:0c:
                    b3:19:4d:a3:0d:cc:c3:c4:df:3a:25:9c:d7:b0:5d:
                    d9:cc:be:4f:15:38:c7:d1:ff:ea:54:bd:df:3b:ce:
                    ba:00:71:dd:6e:12:4a:15:e7:69:30:b7:31:bb:07:
                    b9:c9:f9:21:1e:2c:49:d3:8c:bd:de:2e:d0:2d:95:
                    b6:93:02:41:9b:25:72:5c:35:7d:46:95:b8:38:b2:
                    8a:f0:bb:c5:ae:94:57:79:bf:e7:08:b9:87:c0:ce:
                    59:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D0:E5:63:28:97:CD:DC:D2:77:38:19:87:9A:C4:38:3D:D5:51:13
            X509v3 Authority Key Identifier:
                keyid:E6:13:39:42:02:4B:54:27:83:F1:3B:EE:90:84:C8:C1:06:C1:EA:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160175/73AC65BE33FC11EEA9FE4137C4F9AE02/5hM5QgJLVCeD8TvukITIwQbB6lA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hM5QgJLVCeD8TvukITIwQbB6lA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160175/73AC65BE33FC11EEA9FE4137C4F9AE02/5hM5QgJLVCeD8TvukITIwQbB6lA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:0d:f2:54:cb:64:1b:18:ae:3d:ab:2c:44:bd:df:d5:2f:09:
         6c:e0:b3:63:e1:af:3e:f8:eb:46:c7:5a:7c:1f:2d:9b:2e:70:
         dc:f3:49:f8:44:92:85:96:40:b0:a8:60:78:c1:1c:d7:f3:d9:
         14:af:1c:2e:b6:9f:63:1d:33:2b:de:92:06:57:56:fd:91:95:
         4e:f6:03:51:dd:d6:d8:03:9a:46:b8:63:68:80:da:80:00:d7:
         37:06:eb:2b:d2:f8:04:58:7d:8a:ea:1b:ff:73:74:b4:dc:ba:
         39:60:18:73:1a:0f:6d:64:61:a1:48:ad:53:7d:51:5d:88:23:
         99:02:33:5c:4b:8b:77:a6:d0:c7:5b:b3:fe:0c:35:02:b6:5b:
         37:aa:78:18:d9:bf:b2:95:10:df:03:d8:8a:50:12:6c:4a:09:
         83:33:18:06:ff:66:59:a5:dd:1e:c1:19:37:a4:ee:da:3b:f1:
         6a:72:f9:03:fa:31:04:99:e3:cd:ff:a4:66:eb:92:d6:38:a7:
         d8:87:9e:94:5d:15:a7:f9:26:21:f5:09:f3:58:1b:b1:54:d5:
         ca:71:ad:c7:1a:23:a8:b1:a7:9b:a5:ca:fa:b9:8a:01:6e:ad:
         ce:9d:85:68:2e:a3:0f:73:68:9c:3d:bd:02:f4:03:3f:e0:c1:
         df:dc:ec:4f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
MDE3NTExMC8GA1UEBRMoRTYxMzM5NDIwMjRCNTQyNzgzRjEzQkVFOTA4NEM4QzEw
NkMxRUE1MDAeFw0yMzEyMjIwMDUxMjlaFw0yMzEyMjkwMDUxMjlaMBgxFjAUBgNV
BAMTDTY1ODRkZDkyLWE0NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDLevwvWO1j/fAT7QGB7lyliCprqmHVsr1rQetiKOE5t76Uh4cCwl1DqOzJxi1S
y+bRFBzZa/0hIvx8jhYO/lH2Wc1b71cqa9gdJO+pp4Hr3gp2U1XDtV6xvzrQ81DE
4xwqTSxBZ5j88Wz6mVyM+2zXkxrZTmAlweMYudcgvy1CZPtLEjLn871jG0Ql61v5
uWbrUF+uUgcAEcSHTuAB2xQaSBY0DLMZTaMNzMPE3zolnNewXdnMvk8VOMfR/+pU
vd87zroAcd1uEkoV52kwtzG7B7nJ+SEeLEnTjL3eLtAtlbaTAkGbJXJcNX1Glbg4
sorwu8WulFd5v+cIuYfAzlm5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUONDlYyiX
zdzSdzgZh5rEOD3VURMwHwYDVR0jBBgwFoAU5hM5QgJLVCeD8TvukITIwQbB6lAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwMTc1LzczQUM2NUJFMzNG
QzExRUVBOUZFNDEzN0M0RjlBRTAyLzVoTTVRZ0pMVkNlRDhUdnVrSVRJd1FiQjZs
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNWhNNVFnSkxWQ2VEOFR2dWtJVEl3UWJCNmxBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw
MTc1LzczQUM2NUJFMzNGQzExRUVBOUZFNDEzN0M0RjlBRTAyLzVoTTVRZ0pMVkNl
RDhUdnVrSVRJd1FiQjZsQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAHEN8lTLZBsYrj2rLES939UvCWzgs2Phrz7460bHWnwfLZsucNzzSfhE
koWWQLCoYHjBHNfz2RSvHC62n2MdMyvekgZXVv2RlU72A1Hd1tgDmka4Y2iA2oAA
1zcG6yvS+ARYfYrqG/9zdLTcujlgGHMaD21kYaFIrVN9UV2II5kCM1xLi3em0Mdb
s/4MNQK2WzeqeBjZv7KVEN8D2IpQEmxKCYMzGAb/Zlml3R7BGTek7to78Wpy+QP6
MQSZ483/pGbrktY4p9iHnpRdFaf5JiH1CfNYG7FU1cpxrccaI6ixp5ulyvq5igFu
rc6dhWguow9zaJw9vQL0Az/gwd/c7E8=
-----END CERTIFICATE-----