Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170E90/0F1D2FBC8F7111EAB411537EC4F9AE02/l9ZVKLqxtYFOsQZCls9IqF5eKk8.mft
File:                     l9ZVKLqxtYFOsQZCls9IqF5eKk8.mft (raw, json)
Hash identifier:          QvL8k1JcUp7eSve3f9pho31I9UeAmRu7JnPYA8MZTGg=
Subject key identifier:   2D:82:0E:78:51:9B:88:ED:E2:CD:60:6C:55:B0:4D:63:CE:92:C3:92
Authority key identifier: 97:D6:55:28:BA:B1:B5:81:4E:B1:06:42:96:CF:48:A8:5E:5E:2A:4F
Certificate issuer:       /CN=A9170E90/serialNumber=97D65528BAB1B5814EB1064296CF48A85E5E2A4F
Certificate serial:       01F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9ZVKLqxtYFOsQZCls9IqF5eKk8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170E90/0F1D2FBC8F7111EAB411537EC4F9AE02/l9ZVKLqxtYFOsQZCls9IqF5eKk8.mft
Manifest number:          0819
Signing time:             Sun 03 Apr 2022 22:19:52 +0000
Manifest this update:     Sun 03 Apr 2022 22:19:52 +0000
Manifest next update:     Tue 05 Apr 2022 22:19:52 +0000
Files and hashes:         1: l9ZVKLqxtYFOsQZCls9IqF5eKk8.crl (hash: Ad1jd8FIwwYr8hzuZoB1A88eoXKN4Eej0PRdc3vVGL0=)
                          2: 7ABA123EF02911EB9ECAFF63C4F9AE02.roa (hash: 4u/u0tPqC6qgjGieirLLsFstgY7FBWt5ME2tbt1trf4=)
                          3: 913D53C4B1A611EC997A0F5AC4F9AE02.roa (hash: lA8dszeTaNnXdcuUWeuTvj+yGhsAbik98V3Rb0R3DTg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 504 (0x1f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170E90/serialNumber=97D65528BAB1B5814EB1064296CF48A85E5E2A4F
        Validity
            Not Before: Apr  3 22:19:52 2022 GMT
            Not After : Apr  5 22:19:52 2022 GMT
        Subject: CN=624a1d88-4df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0e:41:8e:0b:9e:74:ac:6c:39:57:af:2c:ee:
                    12:87:43:78:27:d7:0e:1b:e9:0f:4d:40:46:ce:5c:
                    44:e1:33:b3:6a:3f:10:e0:76:65:1a:48:69:26:f3:
                    64:50:21:a0:53:49:f4:12:82:59:ba:4c:6a:00:ac:
                    ae:4c:a0:3e:56:99:4b:8e:29:db:42:fe:b2:8e:c7:
                    14:4c:bb:7b:2e:0b:ec:a0:9e:ff:3c:5b:b9:69:56:
                    bf:f4:52:11:a4:63:39:f5:17:7f:8a:34:82:82:cd:
                    f9:58:5c:ea:4a:93:0b:2d:49:ba:e6:5a:2a:80:8c:
                    bd:a5:7d:0d:18:c2:01:bf:19:fd:0b:9a:3c:13:00:
                    2f:2a:43:71:e2:85:a0:7d:40:6b:85:92:94:b7:41:
                    5f:5d:26:73:59:24:92:d1:46:d8:6f:8c:a7:92:52:
                    1b:06:0a:ed:3b:c5:0f:1b:c8:53:d1:fc:68:28:fb:
                    1d:d9:2b:2d:3a:72:20:6e:17:3b:38:9e:d5:5f:a1:
                    29:0d:d5:af:d3:d5:d7:28:8b:eb:30:d7:37:8c:a9:
                    23:c6:f0:08:f0:76:36:e3:45:a4:26:76:3d:42:74:
                    c5:86:a0:8b:50:4c:07:31:d4:13:49:53:2c:3c:a9:
                    dd:00:84:f2:89:d6:a1:a2:e1:ba:2f:67:e2:8d:3f:
                    3d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:82:0E:78:51:9B:88:ED:E2:CD:60:6C:55:B0:4D:63:CE:92:C3:92
            X509v3 Authority Key Identifier:
                keyid:97:D6:55:28:BA:B1:B5:81:4E:B1:06:42:96:CF:48:A8:5E:5E:2A:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170E90/0F1D2FBC8F7111EAB411537EC4F9AE02/l9ZVKLqxtYFOsQZCls9IqF5eKk8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9ZVKLqxtYFOsQZCls9IqF5eKk8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170E90/0F1D2FBC8F7111EAB411537EC4F9AE02/l9ZVKLqxtYFOsQZCls9IqF5eKk8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:3e:04:d8:ea:5a:74:e1:84:35:ec:51:f4:77:68:23:a3:6e:
         44:cd:e7:31:5d:91:c5:50:7f:10:aa:c0:69:ba:71:38:69:f0:
         68:27:e9:01:86:fb:37:73:84:e8:30:70:50:6f:9a:bf:3f:81:
         5d:87:69:1d:af:17:08:0c:42:d2:70:b2:76:17:15:1c:a6:4c:
         55:2c:22:24:e9:d6:28:b5:66:73:5d:49:5e:2c:8c:4d:7a:c7:
         4e:f9:92:38:e2:22:cb:76:f7:7d:09:73:98:46:c9:b7:b1:1b:
         b7:91:af:0c:a3:78:13:88:7c:26:fd:9a:46:9b:21:6f:20:01:
         62:57:af:07:d1:ee:ed:05:a3:57:2a:89:4b:ae:11:3c:58:c3:
         f1:83:e4:d7:db:9a:1b:c9:57:88:bd:9a:11:e1:12:6f:98:f0:
         d7:a0:de:40:0c:ae:e9:e3:06:ee:fc:cc:88:49:42:ea:99:e1:
         75:6d:4e:53:00:54:4b:6a:f7:f7:51:45:ff:68:74:3f:22:5e:
         07:a3:9c:b9:cc:fc:b7:15:ae:22:f4:f0:f8:50:18:bf:35:33:
         0f:15:6f:37:55:3e:f2:26:24:06:40:88:ac:aa:68:c5:8d:31:
         73:90:74:97:2a:dc:29:8b:a4:78:98:6f:e7:00:87:6f:85:9a:
         d9:c4:22:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----