Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185483/9C16E068BCA011EBB5EB800CC4F9AE02/2lOl3FkFoUt9jbtUQaCUXs6zwpM.mft
File:                     2lOl3FkFoUt9jbtUQaCUXs6zwpM.mft (raw, json)
Hash identifier:          XoLW8O1hmunBB30/+tyeMLKryn5EsMKJhpKmUDwPhLw=
Subject key identifier:   6C:C5:35:B5:94:FF:B9:D8:55:C7:41:76:B6:E7:96:5C:A6:55:3A:3C
Authority key identifier: DA:53:A5:DC:59:05:A1:4B:7D:8D:BB:54:41:A0:94:5E:CE:B3:C2:93
Certificate issuer:       /CN=A9185483/serialNumber=DA53A5DC5905A14B7D8DBB5441A0945ECEB3C293
Certificate serial:       0558
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lOl3FkFoUt9jbtUQaCUXs6zwpM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185483/9C16E068BCA011EBB5EB800CC4F9AE02/2lOl3FkFoUt9jbtUQaCUXs6zwpM.mft
Manifest number:          0551
Signing time:             Mon 09 Sep 2024 10:54:59 +0000
Manifest this update:     Mon 09 Sep 2024 10:54:58 +0000
Manifest next update:     Mon 16 Sep 2024 10:54:58 +0000
Files and hashes:         1: 2lOl3FkFoUt9jbtUQaCUXs6zwpM.crl (hash: kxb79FAvapEt4rhOZU+dEyLc3oMB1UrTbMHxi4VFcYI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1368 (0x558)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185483/serialNumber=DA53A5DC5905A14B7D8DBB5441A0945ECEB3C293
        Validity
            Not Before: Sep  9 10:54:58 2024 GMT
            Not After : Sep 16 10:54:58 2024 GMT
        Subject: CN=66ded403-b356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f9:30:4b:2b:9c:27:1e:b0:db:b5:ac:7d:44:
                    ba:c4:b2:6e:e8:c9:b7:2e:57:4d:b1:6d:61:d7:03:
                    1e:8c:71:b7:bf:7b:ac:95:ba:18:7a:39:f0:7a:93:
                    b1:61:49:4b:5c:b3:a1:1b:e6:ac:5d:8c:71:e8:ce:
                    a2:29:f3:6f:59:49:37:81:50:db:ab:97:aa:28:2c:
                    44:20:85:26:bc:fd:60:df:8e:b3:88:bc:42:d9:bb:
                    c2:14:08:1a:47:10:2d:b4:71:7c:a3:53:6a:35:b8:
                    a0:07:7f:b9:0f:ae:14:92:7f:db:57:62:f5:d4:86:
                    e9:9e:d6:48:03:e2:4f:31:05:e2:24:4e:3e:5f:90:
                    2d:99:4b:f2:1a:2b:5b:55:de:9a:1a:b9:82:6f:86:
                    ac:35:ff:cb:76:27:42:65:07:f1:55:4b:07:df:fa:
                    69:a2:e1:14:0b:77:69:3b:82:84:f7:22:46:0b:f6:
                    b7:be:00:65:b1:9f:76:27:b0:94:49:27:aa:23:04:
                    c3:75:b3:74:14:90:09:58:e9:70:cb:3e:a0:eb:c1:
                    2d:06:77:db:ec:8e:47:98:fe:21:41:47:8f:35:1d:
                    b3:c1:b2:1a:98:f8:6e:1b:2c:8d:39:d7:61:c1:8a:
                    e4:8b:c7:1b:4c:85:a4:7f:14:57:be:b0:1f:89:7b:
                    5f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C5:35:B5:94:FF:B9:D8:55:C7:41:76:B6:E7:96:5C:A6:55:3A:3C
            X509v3 Authority Key Identifier:
                keyid:DA:53:A5:DC:59:05:A1:4B:7D:8D:BB:54:41:A0:94:5E:CE:B3:C2:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185483/9C16E068BCA011EBB5EB800CC4F9AE02/2lOl3FkFoUt9jbtUQaCUXs6zwpM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lOl3FkFoUt9jbtUQaCUXs6zwpM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185483/9C16E068BCA011EBB5EB800CC4F9AE02/2lOl3FkFoUt9jbtUQaCUXs6zwpM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:55:e3:93:b2:d2:12:b2:99:b2:34:5b:00:b8:4d:cf:5c:53:
         aa:40:23:1f:90:8c:7b:14:92:ac:69:06:0a:73:40:8f:0e:cc:
         46:27:1a:dc:3d:bd:c8:4a:65:e5:62:76:7e:a9:2a:17:9c:11:
         eb:99:8f:77:a2:a9:ac:d3:cf:39:6d:63:ac:07:fe:31:ca:71:
         9d:78:56:64:f0:68:e3:91:65:a0:65:45:91:ec:07:10:8f:4f:
         87:fb:7f:9c:c5:dc:fb:0d:69:3a:08:98:46:f3:5a:5a:51:43:
         17:7c:78:66:59:e5:94:0e:8f:7f:c5:85:d6:97:d9:7a:ab:98:
         06:bc:5a:19:5d:33:2a:fe:72:de:af:93:1c:f5:d6:b9:29:a4:
         e0:13:df:4a:b2:52:7b:52:e7:1e:03:63:e7:a3:b8:98:14:9f:
         48:29:59:94:ed:0b:a1:bd:9c:32:a2:33:88:7f:cb:45:4b:23:
         96:12:ae:d9:a2:8e:f9:70:6f:0c:9f:92:1b:da:6b:e9:3c:e0:
         79:50:9b:ca:83:30:4e:a0:55:54:d1:00:da:b1:55:d9:01:c6:
         ff:da:f8:1a:e7:5b:41:61:08:62:ef:3b:00:fc:be:ac:e8:5f:
         4e:17:3f:02:10:ec:21:3e:a4:f8:ec:46:31:27:9d:6a:a0:38:
         12:07:45:dc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODU0ODMxMTAvBgNVBAUTKERBNTNBNURDNTkwNUExNEI3RDhEQkI1NDQxQTA5NDVF
Q0VCM0MyOTMwHhcNMjQwOTA5MTA1NDU4WhcNMjQwOTE2MTA1NDU4WjAYMRYwFAYD
VQQDEw02NmRlZDQwMy1iMzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0vkwSyucJx6w27WsfUS6xLJu6Mm3LldNsW1h1wMejHG3v3uslboYejnwepOx
YUlLXLOhG+asXYxx6M6iKfNvWUk3gVDbq5eqKCxEIIUmvP1g346ziLxC2bvCFAga
RxAttHF8o1NqNbigB3+5D64Ukn/bV2L11IbpntZIA+JPMQXiJE4+X5AtmUvyGitb
Vd6aGrmCb4asNf/LdidCZQfxVUsH3/ppouEUC3dpO4KE9yJGC/a3vgBlsZ92J7CU
SSeqIwTDdbN0FJAJWOlwyz6g68EtBnfb7I5HmP4hQUePNR2zwbIamPhuGyyNOddh
wYrki8cbTIWkfxRXvrAfiXtfJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGzFNbWU
/7nYVcdBdrbnllymVTo8MB8GA1UdIwQYMBaAFNpTpdxZBaFLfY27VEGglF7Os8KT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTQ4My85QzE2RTA2OEJD
QTAxMUVCQjVFQjgwMENDNEY5QUUwMi8ybE9sM0ZrRm9VdDlqYnRVUWFDVVhzNnp3
cE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJsT2wzRmtGb1V0OWpidFVRYUNVWHM2endwTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NTQ4My85QzE2RTA2OEJDQTAxMUVCQjVFQjgwMENDNEY5QUUwMi8ybE9sM0ZrRm9V
dDlqYnRVUWFDVVhzNnp3cE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCvVeOTstISspmyNFsAuE3PXFOqQCMfkIx7FJKsaQYKc0CPDsxGJxrc
Pb3ISmXlYnZ+qSoXnBHrmY93oqms0885bWOsB/4xynGdeFZk8GjjkWWgZUWR7AcQ
j0+H+3+cxdz7DWk6CJhG81paUUMXfHhmWeWUDo9/xYXWl9l6q5gGvFoZXTMq/nLe
r5Mc9da5KaTgE99KslJ7UuceA2Pno7iYFJ9IKVmU7QuhvZwyojOIf8tFSyOWEq7Z
oo75cG8Mn5Ib2mvpPOB5UJvKgzBOoFVU0QDasVXZAcb/2vga51tBYQhi7zsA/L6s
6F9OFz8CEOwhPqT47EYxJ51qoDgSB0Xc
-----END CERTIFICATE-----