Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181827/2EDDCAE279D511EBA8C6EA4EC4F9AE02/hqovEhMUHDvAhdhJIDgRhZtxlPQ.mft
File:                     hqovEhMUHDvAhdhJIDgRhZtxlPQ.mft (raw, json)
Hash identifier:          DadVfH07DmiFY7mv+mSwoPG1t9yvVZ25IbgijJG0m94=
Subject key identifier:   6F:89:F6:F8:FE:9B:EC:56:BF:F3:23:02:FD:47:FB:DF:5D:9C:B3:3B
Authority key identifier: 86:AA:2F:12:13:14:1C:3B:C0:85:D8:49:20:38:11:85:9B:71:94:F4
Certificate issuer:       /CN=A9181827/serialNumber=86AA2F1213141C3BC085D849203811859B7194F4
Certificate serial:       0579
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqovEhMUHDvAhdhJIDgRhZtxlPQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181827/2EDDCAE279D511EBA8C6EA4EC4F9AE02/hqovEhMUHDvAhdhJIDgRhZtxlPQ.mft
Manifest number:          0566
Signing time:             Tue 28 Nov 2023 09:16:54 +0000
Manifest this update:     Tue 28 Nov 2023 09:16:54 +0000
Manifest next update:     Tue 05 Dec 2023 09:16:54 +0000
Files and hashes:         1: hqovEhMUHDvAhdhJIDgRhZtxlPQ.crl (hash: PUmr3YP8SdV5UDcddvYL/ZWe69eNLEZ4jRXJ2NIxj/8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1401 (0x579)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181827/serialNumber=86AA2F1213141C3BC085D849203811859B7194F4
        Validity
            Not Before: Nov 28 09:16:54 2023 GMT
            Not After : Dec  5 09:16:54 2023 GMT
        Subject: CN=6565b006-5bbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1f:6e:26:19:3e:72:bd:ef:83:e9:23:88:1e:
                    e6:9a:4a:28:4e:cd:d8:8b:b3:22:c1:2d:cd:c2:3a:
                    b4:d0:5c:1c:36:e1:02:84:67:a4:56:b0:e3:65:bd:
                    05:53:95:06:ab:2f:fe:32:6a:67:2e:12:e5:c7:08:
                    32:0e:6b:e2:b5:d8:09:b0:62:74:dd:ed:d9:2d:3d:
                    63:bf:f4:39:0c:d3:15:49:f8:2a:0d:67:63:0d:d5:
                    6c:6f:e1:b9:d9:7f:3c:5c:a3:ba:ee:80:3e:a2:ec:
                    c8:a0:d2:23:50:9c:9c:b0:aa:b7:46:38:47:cb:e5:
                    a0:a4:3c:55:05:a0:b3:8d:a7:ab:af:6d:24:5e:87:
                    1a:a5:09:5c:c7:65:14:3a:74:6c:db:cd:26:f4:86:
                    37:ee:89:38:78:0a:83:2b:73:cd:d2:5d:ce:75:82:
                    bb:2f:c2:9f:27:34:da:2c:31:3b:55:9a:da:b1:e1:
                    b3:ff:c0:0f:8c:d6:48:24:2c:26:ec:27:9d:13:9f:
                    40:07:74:c8:ec:f3:31:dc:e1:68:98:ec:bd:ff:a6:
                    47:bb:78:02:45:42:7c:e7:75:af:03:cd:ed:05:32:
                    23:b8:cb:e1:0a:87:e1:5a:63:e3:5a:c5:5f:c7:f7:
                    ca:bc:87:38:c0:0f:f3:69:32:7a:ee:2e:bd:ae:71:
                    b5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:89:F6:F8:FE:9B:EC:56:BF:F3:23:02:FD:47:FB:DF:5D:9C:B3:3B
            X509v3 Authority Key Identifier:
                keyid:86:AA:2F:12:13:14:1C:3B:C0:85:D8:49:20:38:11:85:9B:71:94:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181827/2EDDCAE279D511EBA8C6EA4EC4F9AE02/hqovEhMUHDvAhdhJIDgRhZtxlPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqovEhMUHDvAhdhJIDgRhZtxlPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181827/2EDDCAE279D511EBA8C6EA4EC4F9AE02/hqovEhMUHDvAhdhJIDgRhZtxlPQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:7d:9e:e5:d7:00:28:0b:ea:60:bf:c6:cd:e4:a7:bf:aa:6f:
         be:4d:c6:8b:79:67:6c:f3:73:1c:a2:ec:00:ad:a1:94:cb:ee:
         cb:d9:60:ff:5d:53:f5:d8:0b:26:a0:8c:4d:62:a3:d0:05:1b:
         e2:5e:1b:66:fd:a0:2d:38:49:ab:ec:08:91:2b:25:63:b9:ac:
         78:19:3d:6b:b2:7a:44:5e:3e:95:a6:0d:ac:6d:e4:48:de:54:
         11:91:37:a8:39:12:30:18:7f:9b:a1:81:e7:88:0a:77:f3:09:
         9b:66:11:dd:7d:09:02:78:3b:d0:0f:7e:12:70:93:8d:0a:1f:
         b0:a9:4d:e9:64:5e:a0:72:4b:11:19:7f:c4:8a:0b:d1:2b:f0:
         38:a1:75:81:8c:13:22:d6:60:0f:e0:fe:9a:13:c6:33:d8:0d:
         49:5b:f8:97:b7:32:3e:cc:ae:0b:ef:8b:76:ec:5f:d8:d4:9f:
         d2:3c:25:71:dd:60:66:d7:7a:ff:16:e4:0f:8c:c1:d1:9e:9b:
         9c:b9:81:5e:2d:03:55:3a:08:0e:c3:1f:c7:b7:4f:0f:48:f5:
         a9:3b:1c:1a:38:6e:92:00:f1:fd:bc:28:30:83:94:8a:95:4e:
         95:fc:98:b1:50:3a:71:8d:09:40:4e:01:b5:64:a0:51:2d:83:
         a9:b7:76:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----