Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91676EB/343F95301D8E11E295876FEC08B02CD2/DcCXzCjMJjIqLKc71L8SDd0cDGc.mft
File:                     DcCXzCjMJjIqLKc71L8SDd0cDGc.mft (raw, json)
Hash identifier:          e7/Q/9XxqbkDv/hJazPyWPMPoO4j1n5u7qsCZEA+nWM=
Subject key identifier:   55:3F:9C:7C:36:64:B5:94:4E:A5:77:56:6F:50:CF:63:62:7D:91:99
Authority key identifier: 0D:C0:97:CC:28:CC:26:32:2A:2C:A7:3B:D4:BF:12:0D:DD:1C:0C:67
Certificate issuer:       /CN=A91676EB/serialNumber=0DC097CC28CC26322A2CA73BD4BF120DDD1C0C67
Certificate serial:       30FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcCXzCjMJjIqLKc71L8SDd0cDGc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91676EB/343F95301D8E11E295876FEC08B02CD2/DcCXzCjMJjIqLKc71L8SDd0cDGc.mft
Manifest number:          30FE
Signing time:             Tue 15 Mar 2022 01:53:00 +0000
Manifest this update:     Tue 15 Mar 2022 01:52:59 +0000
Manifest next update:     Thu 17 Mar 2022 01:52:59 +0000
Files and hashes:         1: DcCXzCjMJjIqLKc71L8SDd0cDGc.crl (hash: N/kgOBJDEF0h4wkjgoILb4AlVHHgXjjBTgaJBBF2k94=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12542 (0x30fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91676EB/serialNumber=0DC097CC28CC26322A2CA73BD4BF120DDD1C0C67
        Validity
            Not Before: Mar 15 01:52:59 2022 GMT
            Not After : Mar 17 01:52:59 2022 GMT
        Subject: CN=622ff17c-7b3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:db:8b:74:5f:94:0c:43:9b:94:70:71:52:2f:
                    a6:e7:39:b2:15:6f:bf:6d:b7:4c:e3:35:2d:e7:b9:
                    fa:53:15:90:29:08:cf:b9:c0:5d:e7:61:4d:9e:28:
                    ce:16:b1:7f:22:f8:c9:ba:b0:91:5d:67:7f:7e:e6:
                    cb:60:1c:b4:73:e9:ae:e5:7b:6a:31:68:13:cb:da:
                    2e:09:b2:b1:d9:30:8b:8c:2a:13:62:3b:aa:5e:40:
                    9b:16:21:a2:2d:44:7a:b3:36:1b:03:5c:a8:0d:34:
                    8a:98:39:23:59:3e:a3:2e:a6:5e:0d:67:01:3f:92:
                    2b:d6:a4:45:af:94:36:48:0e:ea:7f:ee:09:43:71:
                    92:c7:01:20:8b:94:3e:47:c0:fa:74:8b:d5:7e:75:
                    2c:d0:9e:5f:38:19:b1:df:ff:70:b6:a7:be:cf:65:
                    ab:24:7d:4f:a1:80:43:27:80:78:5c:62:02:12:c5:
                    24:a1:50:19:11:21:77:b0:68:7a:95:88:0c:02:2f:
                    b0:bf:ba:e4:d0:ea:9b:f7:c6:93:48:aa:9a:03:d3:
                    a7:88:02:9e:cd:8d:66:77:f0:6c:3a:e9:13:3e:b3:
                    e2:f5:67:a9:f0:8b:c2:3b:4b:4d:11:20:fd:2e:81:
                    d4:b7:1e:8c:b2:29:94:d4:13:b9:0e:68:e0:ef:35:
                    9d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:3F:9C:7C:36:64:B5:94:4E:A5:77:56:6F:50:CF:63:62:7D:91:99
            X509v3 Authority Key Identifier:
                keyid:0D:C0:97:CC:28:CC:26:32:2A:2C:A7:3B:D4:BF:12:0D:DD:1C:0C:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91676EB/343F95301D8E11E295876FEC08B02CD2/DcCXzCjMJjIqLKc71L8SDd0cDGc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcCXzCjMJjIqLKc71L8SDd0cDGc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91676EB/343F95301D8E11E295876FEC08B02CD2/DcCXzCjMJjIqLKc71L8SDd0cDGc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:5f:26:14:84:fd:87:f4:26:5d:35:1d:41:42:f6:f0:d6:60:
         9e:89:33:a5:f9:2b:f4:8d:38:a5:0d:4d:7e:12:1b:4c:1b:c1:
         bd:d7:45:c2:76:a8:c4:93:d8:f6:c4:79:c6:af:f9:1a:88:cb:
         98:76:7b:1c:0e:c8:68:94:5b:c7:9c:06:61:e9:22:74:f5:8c:
         b5:69:a2:5b:e7:c6:bc:f8:23:01:c4:9e:a0:33:da:d7:f1:8b:
         e3:ac:c4:2f:34:57:68:90:4b:7a:d9:f6:51:26:7b:69:d5:7b:
         64:f8:5a:0c:19:c6:56:fb:2c:70:c8:4b:f4:07:93:2a:6f:d5:
         5f:ee:0a:a2:4b:e8:b9:7a:72:6c:5c:33:47:2f:45:fe:07:19:
         5d:98:51:aa:3c:50:20:1b:c4:ee:7d:df:c7:ae:f7:8d:a1:dd:
         8a:ce:7a:04:9b:fd:43:db:5c:20:a3:27:8e:d4:ec:3b:85:57:
         1d:e2:e5:9a:7b:0d:3c:b2:af:76:43:7b:b6:99:4f:df:d0:21:
         57:2d:6c:85:48:b1:94:3c:0c:6e:d4:2c:38:eb:26:02:7b:b0:
         37:11:ee:dc:56:3b:a3:0e:55:4e:1b:cd:77:dc:81:0f:e2:3a:
         87:bb:07:18:69:66:81:1c:ec:06:96:c9:84:51:f2:19:7d:29:
         e9:90:74:54
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICMP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njc2RUIxMTAvBgNVBAUTKDBEQzA5N0NDMjhDQzI2MzIyQTJDQTczQkQ0QkYxMjBE
REQxQzBDNjcwHhcNMjIwMzE1MDE1MjU5WhcNMjIwMzE3MDE1MjU5WjAYMRYwFAYD
VQQDEw02MjJmZjE3Yy03YjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtduLdF+UDEOblHBxUi+m5zmyFW+/bbdM4zUt57n6UxWQKQjPucBd52FNnijO
FrF/IvjJurCRXWd/fubLYBy0c+mu5XtqMWgTy9ouCbKx2TCLjCoTYjuqXkCbFiGi
LUR6szYbA1yoDTSKmDkjWT6jLqZeDWcBP5Ir1qRFr5Q2SA7qf+4JQ3GSxwEgi5Q+
R8D6dIvVfnUs0J5fOBmx3/9wtqe+z2WrJH1PoYBDJ4B4XGICEsUkoVAZESF3sGh6
lYgMAi+wv7rk0Oqb98aTSKqaA9OniAKezY1md/BsOukTPrPi9Wep8IvCO0tNESD9
LoHUtx6MsimU1BO5Dmjg7zWdVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFU/nHw2
ZLWUTqV3Vm9Qz2NifZGZMB8GA1UdIwQYMBaAFA3Al8wozCYyKiynO9S/Eg3dHAxn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzZFQi8zNDNGOTUzMDFE
OEUxMUUyOTU4NzZGRUMwOEIwMkNEMi9EY0NYekNqTUpqSXFMS2M3MUw4U0RkMGNE
R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RjQ1h6Q2pNSmpJcUxLYzcxTDhTRGQwY0RHYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NzZFQi8zNDNGOTUzMDFEOEUxMUUyOTU4NzZGRUMwOEIwMkNEMi9EY0NYekNqTUpq
SXFMS2M3MUw4U0RkMGNER2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBwXyYUhP2H9CZdNR1BQvbw1mCeiTOl+Sv0jTilDU1+EhtMG8G910XC
dqjEk9j2xHnGr/kaiMuYdnscDsholFvHnAZh6SJ09Yy1aaJb58a8+CMBxJ6gM9rX
8YvjrMQvNFdokEt62fZRJntp1Xtk+FoMGcZW+yxwyEv0B5Mqb9Vf7gqiS+i5enJs
XDNHL0X+BxldmFGqPFAgG8Tufd/HrveNod2KznoEm/1D21wgoyeO1Ow7hVcd4uWa
ew08sq92Q3u2mU/f0CFXLWyFSLGUPAxu1Cw46yYCe7A3Ee7cVjujDlVOG8133IEP
4jqHuwcYaWaBHOwGlsmEUfIZfSnpkHRU
-----END CERTIFICATE-----