Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160AB7/460B980C5C1611EBB3954D22C4F9AE02/SADX-QWY09wA47R__9LbBRrFHWE.mft
File:                     SADX-QWY09wA47R__9LbBRrFHWE.mft (raw, json)
Hash identifier:          PbEfrvTsg86JSkXFc1N74/asedFyYxt+MwrRoTXjC/o=
Subject key identifier:   FA:DC:0D:8D:10:12:40:43:D8:54:E0:92:EC:23:A2:1B:79:CA:BA:63
Authority key identifier: 48:00:D7:F9:05:98:D3:DC:00:E3:B4:7F:FF:D2:DB:05:1A:C5:1D:61
Certificate issuer:       /CN=A9160AB7/serialNumber=4800D7F90598D3DC00E3B47FFFD2DB051AC51D61
Certificate serial:       0538
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SADX-QWY09wA47R__9LbBRrFHWE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160AB7/460B980C5C1611EBB3954D22C4F9AE02/SADX-QWY09wA47R__9LbBRrFHWE.mft
Manifest number:          0535
Signing time:             Mon 17 Apr 2023 02:21:40 +0000
Manifest this update:     Mon 17 Apr 2023 02:21:39 +0000
Manifest next update:     Mon 24 Apr 2023 02:21:39 +0000
Files and hashes:         1: SADX-QWY09wA47R__9LbBRrFHWE.crl (hash: ytyuNj0ghipS8AAX8nbI7HLqxR8/ZGiJ3CBbJ2RcXqg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1336 (0x538)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160AB7/serialNumber=4800D7F90598D3DC00E3B47FFFD2DB051AC51D61
        Validity
            Not Before: Apr 17 02:21:39 2023 GMT
            Not After : Apr 24 02:21:39 2023 GMT
        Subject: CN=643cad33-4abe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:36:78:e5:3a:2f:28:56:c3:c9:f3:81:a6:34:
                    98:86:c5:76:c6:40:ac:e6:97:8d:91:d6:7c:26:1f:
                    e8:95:e5:0d:40:52:25:a9:b2:0e:03:1e:90:86:59:
                    36:0e:00:07:e2:ca:51:74:3f:32:c1:ba:e7:dc:b9:
                    bb:9a:25:78:85:ea:19:32:2e:4c:16:5a:4c:f9:d5:
                    7f:95:48:0c:6e:d8:61:67:c6:34:74:f7:41:60:8a:
                    ce:96:18:2f:c3:c2:bc:90:64:76:df:8f:90:c5:94:
                    f9:60:74:30:cd:61:85:9f:92:c4:1e:2c:0d:00:d1:
                    43:a1:41:2b:a8:b0:17:5c:ea:77:8a:46:69:5e:51:
                    15:2f:1f:2e:e7:4c:e6:0d:2c:95:2c:9c:de:3d:9b:
                    6f:e3:38:d5:57:ff:b4:2d:e7:5b:82:00:51:a2:6e:
                    7c:c6:f9:1e:2c:43:84:1c:f9:34:52:d4:a4:2e:d5:
                    7f:29:1e:50:93:c1:c4:4a:2f:77:cf:ae:49:37:4a:
                    60:ba:7e:bd:bc:ad:ae:04:c4:40:46:ef:13:1c:b6:
                    c4:84:fa:51:4a:ab:bc:7a:1b:a9:e4:2d:27:0e:bf:
                    96:b5:77:4f:c9:47:8b:d2:7d:5b:f8:89:3a:6c:30:
                    f5:91:65:83:86:7d:8a:19:2e:13:bc:85:99:4c:2e:
                    a5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:DC:0D:8D:10:12:40:43:D8:54:E0:92:EC:23:A2:1B:79:CA:BA:63
            X509v3 Authority Key Identifier:
                keyid:48:00:D7:F9:05:98:D3:DC:00:E3:B4:7F:FF:D2:DB:05:1A:C5:1D:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160AB7/460B980C5C1611EBB3954D22C4F9AE02/SADX-QWY09wA47R__9LbBRrFHWE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SADX-QWY09wA47R__9LbBRrFHWE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160AB7/460B980C5C1611EBB3954D22C4F9AE02/SADX-QWY09wA47R__9LbBRrFHWE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:fb:b8:e4:1a:4e:f7:96:b8:3a:f2:fb:67:7d:b8:a4:ae:e4:
         4e:49:99:75:bd:ff:8c:33:1e:32:6a:8d:f2:4a:a6:7a:da:b8:
         ef:16:f5:5b:2a:a5:f2:06:73:7c:eb:86:b8:68:85:7b:0a:81:
         a7:a4:93:e6:fe:2d:4f:9b:fd:b9:72:ce:e2:53:c3:7a:19:a0:
         0a:5b:a5:6b:ab:f3:4a:39:9d:ae:63:34:08:4c:ec:66:b3:5f:
         b9:d7:dd:81:62:d9:41:6f:0a:ef:b0:9e:1f:52:e1:35:a7:80:
         3b:d9:8d:31:b7:5a:29:e1:9f:e8:e0:25:2d:64:e0:2d:ac:ee:
         12:c6:25:06:73:35:7f:e8:29:f7:4c:14:b4:a6:da:2a:a0:7c:
         56:10:ec:04:fd:7e:5e:8f:65:58:af:f3:c0:fd:8c:19:75:57:
         11:3d:99:95:4e:60:41:52:cd:db:ab:df:4a:53:02:9e:c6:f4:
         75:4d:22:a3:4f:d5:85:fe:4c:01:16:70:9b:57:ed:2b:a8:f1:
         c4:44:01:43:c4:a2:16:5a:42:e5:22:e3:fc:53:b2:7d:be:19:
         73:d1:3f:a9:46:9d:11:97:b9:c2:df:18:53:ad:8a:c1:9d:99:
         21:8c:88:1e:ea:0e:5c:02:fb:81:77:3d:53:8c:d6:3c:09:5a:
         90:62:2c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----