Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917473D/527594769EDA11E99674B877C4F9AE02/nGj0u5j1-K6dVjJ99ZmzwRgHlfE.mft
File:                     nGj0u5j1-K6dVjJ99ZmzwRgHlfE.mft (raw, json)
Hash identifier:          w16L88PTxp3OxlhVcS1KJbjmKjpkK6k2HBaeNptrixg=
Subject key identifier:   8A:92:BE:69:86:48:37:BE:10:E3:9F:17:2D:A6:18:2F:D4:57:2B:B7
Authority key identifier: 9C:68:F4:BB:98:F5:F8:AE:9D:56:32:7D:F5:99:B3:C1:18:07:95:F1
Certificate issuer:       /CN=A917473D/serialNumber=9C68F4BB98F5F8AE9D56327DF599B3C1180795F1
Certificate serial:       0D03
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0u5j1-K6dVjJ99ZmzwRgHlfE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917473D/527594769EDA11E99674B877C4F9AE02/nGj0u5j1-K6dVjJ99ZmzwRgHlfE.mft
Manifest number:          0CFF
Signing time:             Fri 01 Sep 2023 01:03:43 +0000
Manifest this update:     Fri 01 Sep 2023 01:03:42 +0000
Manifest next update:     Fri 08 Sep 2023 01:03:42 +0000
Files and hashes:         1: nGj0u5j1-K6dVjJ99ZmzwRgHlfE.crl (hash: QP5a51zovZ/irR6GcWeKpXMMrv+eMxOnHBMZsIy725k=)
                          2: DA630906AB3211EC9DC2A854C4F9AE02.roa (hash: 2dNgJ6WuwiiQ66LyRiopPmmfxwaH8ei0RYKAQibTv5w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3331 (0xd03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917473D/serialNumber=9C68F4BB98F5F8AE9D56327DF599B3C1180795F1
        Validity
            Not Before: Sep  1 01:03:42 2023 GMT
            Not After : Sep  8 01:03:42 2023 GMT
        Subject: CN=64f1386e-af49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:64:5f:7c:97:6a:13:3b:d2:54:81:be:cd:85:
                    e5:c3:4e:7b:64:1f:a7:bd:16:43:d1:f4:7d:a1:66:
                    e7:ff:e9:2c:0d:49:b7:88:82:4a:fc:c4:e1:a8:89:
                    ae:28:a1:c9:af:e6:93:95:9f:a9:2f:43:1c:4e:98:
                    47:b7:49:00:3c:18:34:b7:74:d5:c7:27:c8:36:37:
                    4a:5c:b9:79:6b:6f:d9:cc:8c:b7:92:53:db:e0:5f:
                    70:7d:19:03:41:02:47:43:a6:7b:f3:15:89:52:94:
                    0b:c1:36:39:5d:88:51:bc:b0:a8:de:61:a8:3d:36:
                    4e:7d:36:b8:1c:61:7b:58:41:c2:2a:5d:29:46:76:
                    e8:1a:93:e1:3a:b3:20:a0:4c:3a:92:c7:92:bf:6b:
                    a9:6a:8a:9e:ac:0c:33:46:88:4a:a5:c8:4e:4a:7b:
                    80:55:46:e1:cd:09:8d:0b:0c:de:e6:49:bc:d3:69:
                    a8:79:49:93:ad:3a:f3:6f:1e:87:61:0b:1c:2d:79:
                    d7:00:b7:94:81:c9:7f:ce:1e:56:d5:bd:ac:8f:9a:
                    1f:e2:6d:50:fb:44:f5:b9:6b:ab:4b:d1:e7:03:a9:
                    43:60:29:7f:0c:4b:ea:1a:07:54:91:c5:46:92:62:
                    3f:bc:c0:da:b6:d7:2a:ea:68:7e:53:af:f6:55:68:
                    bd:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:92:BE:69:86:48:37:BE:10:E3:9F:17:2D:A6:18:2F:D4:57:2B:B7
            X509v3 Authority Key Identifier:
                keyid:9C:68:F4:BB:98:F5:F8:AE:9D:56:32:7D:F5:99:B3:C1:18:07:95:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917473D/527594769EDA11E99674B877C4F9AE02/nGj0u5j1-K6dVjJ99ZmzwRgHlfE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0u5j1-K6dVjJ99ZmzwRgHlfE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917473D/527594769EDA11E99674B877C4F9AE02/nGj0u5j1-K6dVjJ99ZmzwRgHlfE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:cf:f2:83:0e:41:c3:67:b0:db:00:5d:df:85:54:e3:a7:4e:
         a0:3b:78:8b:c3:52:37:27:d6:ae:51:8e:07:98:8d:e8:95:da:
         7e:25:e7:42:f5:38:08:7a:6a:85:e9:f2:c2:55:ca:cd:5f:04:
         fe:d2:24:ce:ac:3d:93:91:fe:e6:85:fc:a3:39:78:c9:93:22:
         a2:53:b7:54:96:fc:d3:e5:8b:75:0a:7f:5c:09:78:3a:88:98:
         c4:85:92:f7:99:c9:37:d2:bc:c7:79:b3:8f:f3:52:65:b9:f4:
         3f:4e:70:eb:3e:da:d9:ec:c9:8f:f1:e4:94:b9:b7:8c:13:e9:
         cc:ac:2b:c5:44:72:dd:d1:3e:2f:f0:d7:65:10:bd:3c:ad:01:
         af:e0:49:0b:30:f8:b1:f4:f7:92:86:aa:99:9d:c5:bf:0e:69:
         b6:e8:17:e7:51:a8:59:fa:5d:f7:74:9e:3a:f8:b4:88:4f:39:
         0a:47:40:7f:ad:8c:69:de:c6:5a:12:10:1c:e9:41:e6:76:41:
         1d:8b:8e:00:29:75:1f:9b:53:de:27:7b:fa:cf:e0:ee:d7:2b:
         28:94:da:42:2c:1e:a6:04:5a:f1:0c:74:61:44:80:ed:55:d1:
         6f:7d:35:50:0b:50:c5:5e:93:8d:b8:6f:bd:69:85:6d:b1:95:
         3f:8c:88:f7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzQ3M0QxMTAvBgNVBAUTKDlDNjhGNEJCOThGNUY4QUU5RDU2MzI3REY1OTlCM0Mx
MTgwNzk1RjEwHhcNMjMwOTAxMDEwMzQyWhcNMjMwOTA4MDEwMzQyWjAYMRYwFAYD
VQQDEw02NGYxMzg2ZS1hZjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvWRffJdqEzvSVIG+zYXlw057ZB+nvRZD0fR9oWbn/+ksDUm3iIJK/MThqImu
KKHJr+aTlZ+pL0McTphHt0kAPBg0t3TVxyfINjdKXLl5a2/ZzIy3klPb4F9wfRkD
QQJHQ6Z78xWJUpQLwTY5XYhRvLCo3mGoPTZOfTa4HGF7WEHCKl0pRnboGpPhOrMg
oEw6kseSv2upaoqerAwzRohKpchOSnuAVUbhzQmNCwze5km802moeUmTrTrzbx6H
YQscLXnXALeUgcl/zh5W1b2sj5of4m1Q+0T1uWurS9HnA6lDYCl/DEvqGgdUkcVG
kmI/vMDattcq6mh+U6/2VWi9LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIqSvmmG
SDe+EOOfFy2mGC/UVyu3MB8GA1UdIwQYMBaAFJxo9LuY9fiunVYyffWZs8EYB5Xx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDczRC81Mjc1OTQ3NjlF
REExMUU5OTY3NEI4NzdDNEY5QUUwMi9uR2owdTVqMS1LNmRWako5OVptendSZ0hs
ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL25HajB1NWoxLUs2ZFZqSjk5Wm16d1JnSGxmRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NDczRC81Mjc1OTQ3NjlFREExMUU5OTY3NEI4NzdDNEY5QUUwMi9uR2owdTVqMS1L
NmRWako5OVptendSZ0hsZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBnz/KDDkHDZ7DbAF3fhVTjp06gO3iLw1I3J9auUY4HmI3oldp+JedC
9TgIemqF6fLCVcrNXwT+0iTOrD2Tkf7mhfyjOXjJkyKiU7dUlvzT5Yt1Cn9cCXg6
iJjEhZL3mck30rzHebOP81JlufQ/TnDrPtrZ7MmP8eSUubeME+nMrCvFRHLd0T4v
8NdlEL08rQGv4EkLMPix9PeShqqZncW/Dmm26BfnUahZ+l33dJ46+LSITzkKR0B/
rYxp3sZaEhAc6UHmdkEdi44AKXUfm1PeJ3v6z+Du1ysolNpCLB6mBFrxDHRhRIDt
VdFvfTVQC1DFXpONuG+9aYVtsZU/jIj3
-----END CERTIFICATE-----