Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft
File:                     F_XLSRgEUqiWf5wPZjdatwnQ52g.mft (raw, json)
Hash identifier:          /SYDu+xXimoiXegEzwpcDIriQht6Bk6mjq1CVIMMdhM=
Subject key identifier:   52:60:1A:44:7C:39:3F:E4:BF:53:4B:84:98:D1:8B:65:73:FB:52:2A
Authority key identifier: 17:F5:CB:49:18:04:52:A8:96:7F:9C:0F:66:37:5A:B7:09:D0:E7:68
Certificate issuer:       /CN=A917FD40/serialNumber=17F5CB49180452A8967F9C0F66375AB709D0E768
Certificate serial:       0491
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_XLSRgEUqiWf5wPZjdatwnQ52g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft
Manifest number:          0491
Signing time:             Mon 21 Oct 2024 02:14:57 +0000
Manifest this update:     Mon 21 Oct 2024 02:14:56 +0000
Manifest next update:     Mon 28 Oct 2024 02:14:56 +0000
Files and hashes:         1: F_XLSRgEUqiWf5wPZjdatwnQ52g.crl (hash: WG71nFgRRrtpg7bIGcL7tuAsMa6tok4c9YOdmpKyitI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1169 (0x491)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FD40/serialNumber=17F5CB49180452A8967F9C0F66375AB709D0E768
        Validity
            Not Before: Oct 21 02:14:56 2024 GMT
            Not After : Oct 28 02:14:56 2024 GMT
        Subject: CN=6715b920-a983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:90:16:4f:ac:4a:f8:40:38:53:ce:84:4a:9a:
                    3f:64:81:65:7f:ef:ea:36:50:21:f5:ac:32:ca:af:
                    f8:b5:8a:a8:fc:32:58:ad:e7:57:82:67:7a:b5:ed:
                    48:70:55:e1:4e:1a:cf:02:cb:8a:1e:6a:da:bd:91:
                    3a:ba:70:85:f6:4c:36:1a:14:5c:87:01:b9:9c:40:
                    6c:15:03:c4:33:d5:56:57:3a:77:8c:51:e1:75:dc:
                    62:d4:c7:70:cf:f8:cf:08:50:00:b2:c5:1a:e2:fa:
                    9e:28:8d:c2:eb:18:21:9d:ce:1a:f3:7c:ba:93:f7:
                    91:58:4a:9d:06:65:01:26:19:20:19:34:ed:54:44:
                    b0:2e:bd:04:f5:42:b8:25:9c:d1:a1:56:1c:b4:ec:
                    dd:28:a0:a4:0d:fa:1c:07:7e:21:81:a0:0a:c4:73:
                    6a:dd:9b:d2:cf:21:70:8f:92:9a:f1:bf:f7:9d:c6:
                    97:e6:25:e8:a3:0a:b3:8a:39:62:9b:6b:45:c6:7d:
                    7a:41:28:1f:1d:73:7a:2d:3c:ef:cc:55:14:05:b4:
                    a8:52:b6:a2:28:59:3b:85:2b:0b:4c:c2:8d:da:55:
                    0c:6b:0d:04:83:ca:d2:a0:1e:2b:e7:b1:93:48:64:
                    3f:55:4d:be:af:33:da:fa:d9:e0:ad:2f:c4:05:16:
                    9c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:60:1A:44:7C:39:3F:E4:BF:53:4B:84:98:D1:8B:65:73:FB:52:2A
            X509v3 Authority Key Identifier:
                keyid:17:F5:CB:49:18:04:52:A8:96:7F:9C:0F:66:37:5A:B7:09:D0:E7:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_XLSRgEUqiWf5wPZjdatwnQ52g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:8b:9b:8f:76:3e:26:e1:7a:aa:12:50:e9:7a:ef:bb:ef:80:
         00:93:f9:d2:02:9f:04:88:5c:79:fd:88:a5:77:32:21:33:7d:
         1c:86:a3:45:ab:17:52:7d:2f:af:69:b6:d4:5e:fc:34:32:16:
         01:d9:6c:ff:ef:e2:30:6a:df:e2:a0:43:ac:d5:71:56:90:08:
         94:cc:ee:52:f3:5a:06:b5:66:ec:c9:ce:63:c4:83:f4:2c:cb:
         26:de:fb:2d:5b:4b:bc:5b:1a:52:f4:c2:b5:f9:14:63:41:dc:
         45:e3:4f:bb:88:f7:7a:e0:ac:74:75:80:57:34:8f:19:b6:87:
         3e:ff:14:ae:da:d7:da:5b:eb:e5:8a:60:be:fb:f9:0b:cf:b6:
         9c:89:c3:9a:08:91:13:21:38:8a:3d:04:67:ca:e4:1e:ed:c8:
         43:2f:24:8a:95:de:44:06:4d:ad:f9:8d:58:67:42:94:a9:af:
         55:2a:12:30:5f:2d:d3:74:0d:f1:a1:e0:f7:99:04:e8:0a:75:
         48:38:48:20:c6:79:12:d3:f3:2b:69:e9:3f:5c:71:ae:0c:44:
         29:3c:a4:91:74:a6:d1:48:fe:d0:3d:c9:88:18:b4:97:39:bb:
         7b:99:95:f8:56:9a:d9:be:40:f0:d3:b4:32:ca:14:42:e2:c5:
         b6:d4:67:90
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0ZENDAxMTAvBgNVBAUTKDE3RjVDQjQ5MTgwNDUyQTg5NjdGOUMwRjY2Mzc1QUI3
MDlEMEU3NjgwHhcNMjQxMDIxMDIxNDU2WhcNMjQxMDI4MDIxNDU2WjAYMRYwFAYD
VQQDEw02NzE1YjkyMC1hOTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5ZAWT6xK+EA4U86ESpo/ZIFlf+/qNlAh9awyyq/4tYqo/DJYredXgmd6te1I
cFXhThrPAsuKHmravZE6unCF9kw2GhRchwG5nEBsFQPEM9VWVzp3jFHhddxi1Mdw
z/jPCFAAssUa4vqeKI3C6xghnc4a83y6k/eRWEqdBmUBJhkgGTTtVESwLr0E9UK4
JZzRoVYctOzdKKCkDfocB34hgaAKxHNq3ZvSzyFwj5Ka8b/3ncaX5iXoowqzijli
m2tFxn16QSgfHXN6LTzvzFUUBbSoUraiKFk7hSsLTMKN2lUMaw0Eg8rSoB4r57GT
SGQ/VU2+rzPa+tngrS/EBRacVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJgGkR8
OT/kv1NLhJjRi2Vz+1IqMB8GA1UdIwQYMBaAFBf1y0kYBFKoln+cD2Y3WrcJ0Odo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkQ0MC9GQzIxOTU1RTBC
RDYxMUVDOEY5OUQwNjNDNEY5QUUwMi9GX1hMU1JnRVVxaVdmNXdQWmpkYXR3blE1
MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZfWExTUmdFVXFpV2Y1d1BaamRhdHduUTUyZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RkQ0MC9GQzIxOTU1RTBCRDYxMUVDOEY5OUQwNjNDNEY5QUUwMi9GX1hMU1JnRVVx
aVdmNXdQWmpkYXR3blE1MmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAQi5uPdj4m4XqqElDpeu+774AAk/nSAp8EiFx5/YildzIhM30chqNF
qxdSfS+vabbUXvw0MhYB2Wz/7+Iwat/ioEOs1XFWkAiUzO5S81oGtWbsyc5jxIP0
LMsm3vstW0u8WxpS9MK1+RRjQdxF40+7iPd64Kx0dYBXNI8Ztoc+/xSu2tfaW+vl
imC++/kLz7acicOaCJETITiKPQRnyuQe7chDLySKld5EBk2t+Y1YZ0KUqa9VKhIw
Xy3TdA3xoeD3mQToCnVIOEggxnkS0/Mraek/XHGuDEQpPKSRdKbRSP7QPcmIGLSX
Obt7mZX4VprZvkDw07QyyhRC4sW21GeQ
-----END CERTIFICATE-----