Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BC84/903C80A649B711EB8372D95BC4F9AE02/gbbdH7iuuthk0CrcQP8nDHi0pZ8.mft
File:                     gbbdH7iuuthk0CrcQP8nDHi0pZ8.mft (raw, json)
Hash identifier:          33jknJ0l+hdCWKXFd/AwAF4SPN91d4grIPuhfPNtwKk=
Subject key identifier:   75:60:DB:B7:1D:18:F2:63:D2:80:6E:6A:98:FE:CF:08:A0:A1:DB:8A
Authority key identifier: 81:B6:DD:1F:B8:AE:BA:D8:64:D0:2A:DC:40:FF:27:0C:78:B4:A5:9F
Certificate issuer:       /CN=A917BC84/serialNumber=81B6DD1FB8AEBAD864D02ADC40FF270C78B4A59F
Certificate serial:       0527
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gbbdH7iuuthk0CrcQP8nDHi0pZ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BC84/903C80A649B711EB8372D95BC4F9AE02/gbbdH7iuuthk0CrcQP8nDHi0pZ8.mft
Manifest number:          0524
Signing time:             Mon 12 Dec 2022 05:10:22 +0000
Manifest this update:     Mon 12 Dec 2022 05:10:21 +0000
Manifest next update:     Mon 19 Dec 2022 05:10:21 +0000
Files and hashes:         1: gbbdH7iuuthk0CrcQP8nDHi0pZ8.crl (hash: ZPfFTYPLUCVJHHnHLyHXBj2u837FwQrtEmXLGH2j7iM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1319 (0x527)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BC84/serialNumber=81B6DD1FB8AEBAD864D02ADC40FF270C78B4A59F
        Validity
            Not Before: Dec 12 05:10:21 2022 GMT
            Not After : Dec 19 05:10:21 2022 GMT
        Subject: CN=6396b7bd-7c5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:65:39:39:0c:b5:b2:85:f5:ba:20:b1:5f:8e:
                    5b:64:a5:0e:55:0c:f7:7f:0f:15:1f:fc:55:11:36:
                    24:aa:b8:88:7a:1d:f8:97:61:f8:ab:69:29:30:56:
                    73:74:83:cf:e1:e0:eb:63:60:3c:1b:42:29:3d:28:
                    fa:0a:9f:ea:4c:6a:c1:8b:39:cc:19:c1:8b:2c:7e:
                    66:ab:51:d4:88:9e:ce:7b:4d:b6:68:16:22:a8:98:
                    8f:db:ab:90:ba:34:e2:94:c7:41:7a:3e:8b:62:f6:
                    ea:4b:cd:29:23:75:7e:e8:e2:2f:40:43:88:a1:8f:
                    da:17:6d:b6:60:18:f8:dc:28:45:18:a4:77:5f:54:
                    39:22:42:15:da:a7:99:06:d7:e4:0f:44:9b:8c:b7:
                    0e:66:c6:c3:57:23:67:e5:58:b4:e5:00:c5:e5:85:
                    31:57:ec:91:23:e4:e8:bb:0f:11:53:6a:3f:2c:79:
                    9e:43:12:c5:4e:59:fc:37:e7:e7:86:66:ee:d4:24:
                    6a:5c:d1:76:79:01:b7:ec:92:c8:06:9f:5e:c0:32:
                    36:ca:92:6f:94:85:fe:74:f0:02:06:db:ea:27:87:
                    fe:8e:55:a6:73:9b:85:22:2b:30:8c:0b:08:a8:3e:
                    85:80:dc:9d:c4:7e:b9:23:4a:ef:3a:9d:4c:59:4f:
                    67:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:60:DB:B7:1D:18:F2:63:D2:80:6E:6A:98:FE:CF:08:A0:A1:DB:8A
            X509v3 Authority Key Identifier:
                keyid:81:B6:DD:1F:B8:AE:BA:D8:64:D0:2A:DC:40:FF:27:0C:78:B4:A5:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BC84/903C80A649B711EB8372D95BC4F9AE02/gbbdH7iuuthk0CrcQP8nDHi0pZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gbbdH7iuuthk0CrcQP8nDHi0pZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BC84/903C80A649B711EB8372D95BC4F9AE02/gbbdH7iuuthk0CrcQP8nDHi0pZ8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:46:12:e6:e1:ea:46:2a:f8:0f:2f:b9:3f:66:87:19:3c:79:
         ae:e4:7b:0e:4e:e2:32:46:11:40:18:fc:5d:fd:75:c5:d4:95:
         9e:27:4b:39:26:c4:b8:61:01:ad:19:17:d7:3c:ec:45:e0:1d:
         1c:f4:bd:de:cd:37:af:7c:03:e0:30:6f:42:e3:9b:f7:b8:98:
         f3:09:38:d5:34:c4:38:9b:6d:de:05:f1:5d:bb:5e:4f:fe:10:
         14:fd:b3:a0:9c:e9:83:17:e6:3e:a6:39:39:ae:8d:13:8e:7d:
         4d:aa:01:48:dd:ea:9e:ed:1f:a5:a4:3a:03:3e:1c:bb:94:e8:
         81:ed:29:62:87:63:7a:78:1c:86:da:a4:ae:fb:8e:1a:64:67:
         a2:68:f7:71:d5:d8:e6:6c:85:a1:f6:cf:03:0c:ae:28:cc:6a:
         c1:4f:a2:83:9f:65:8f:86:e6:73:e7:47:0b:ef:f3:40:7b:fc:
         4c:57:21:cb:c4:18:55:6d:72:ce:f5:6d:9b:ba:40:c6:3e:86:
         ec:03:5f:f2:5c:98:04:6b:70:8c:db:a4:36:9f:df:7b:7b:b6:
         3c:e8:42:e3:62:68:f6:d4:86:6c:d2:e5:b1:d5:eb:df:df:da:
         28:4f:81:75:a4:0a:70:98:87:f1:92:04:53:9a:d4:73:e4:5c:
         a3:18:ef:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----