Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B1F3/A81875666D4011EBA667E02DC4F9AE02/H8FSUFPj4CfE2Rnr-B2VJYStt1c.mft
File:                     H8FSUFPj4CfE2Rnr-B2VJYStt1c.mft (raw, json)
Hash identifier:          bRJxZ2L3wwD0hEZpyIiX9vew5zzq/ByRGFhC+ust6MU=
Subject key identifier:   E3:CD:6B:65:C3:CF:91:C5:B6:34:85:7F:34:F3:F4:40:78:95:9B:42
Authority key identifier: 1F:C1:52:50:53:E3:E0:27:C4:D9:19:EB:F8:1D:95:25:84:AD:B7:57
Certificate issuer:       /CN=A918B1F3/serialNumber=1FC1525053E3E027C4D919EBF81D952584ADB757
Certificate serial:       041F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8FSUFPj4CfE2Rnr-B2VJYStt1c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B1F3/A81875666D4011EBA667E02DC4F9AE02/H8FSUFPj4CfE2Rnr-B2VJYStt1c.mft
Manifest number:          041C
Signing time:             Tue 26 Jul 2022 00:00:43 +0000
Manifest this update:     Tue 26 Jul 2022 00:00:42 +0000
Manifest next update:     Thu 28 Jul 2022 00:00:42 +0000
Files and hashes:         1: H8FSUFPj4CfE2Rnr-B2VJYStt1c.crl (hash: wle0+9Ial3TIA5Q3swYXLEYxhR5lmL+h86JnmnXmUVg=)
                          2: 99A8ADF06D4211EB9F314A30C4F9AE02.roa (hash: mjBt78U6sNF+rg2pCt2AWg43+wrw3ttIg6Yd2zGBNXA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1055 (0x41f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B1F3/serialNumber=1FC1525053E3E027C4D919EBF81D952584ADB757
        Validity
            Not Before: Jul 26 00:00:42 2022 GMT
            Not After : Jul 28 00:00:42 2022 GMT
        Subject: CN=62df2eab-54a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:fb:73:36:e7:98:a4:d1:01:66:32:a0:96:6f:
                    97:42:a6:b2:6b:75:9b:81:14:ba:77:75:d6:1a:c4:
                    be:d4:0b:e5:78:5c:26:37:5b:8d:97:f4:0f:f1:c9:
                    9a:21:72:dd:49:6f:bb:b9:fb:65:9b:55:56:26:38:
                    54:5c:e4:f5:8e:f4:dc:6b:2e:69:b7:9f:96:93:b0:
                    cb:00:b1:a3:32:3a:a5:d2:8a:8a:b8:37:0f:0b:75:
                    c4:aa:fd:02:39:27:cc:fa:16:c5:23:f4:8c:3b:48:
                    d8:7a:12:7e:76:be:c6:0e:e1:b1:fa:3d:e7:57:a4:
                    02:75:43:6c:45:90:82:7b:ac:22:29:8a:68:0e:17:
                    32:a6:d2:f5:97:ee:ea:d5:ea:cf:08:18:16:6c:27:
                    5b:21:fa:0a:32:cf:f9:ce:62:cc:64:96:d1:be:f2:
                    79:56:e2:18:66:a3:95:04:c6:c4:65:fb:78:89:9e:
                    78:df:ac:a6:c3:32:45:37:cd:b8:e6:6c:81:9b:a0:
                    fd:73:b7:ad:d7:71:32:3e:a3:ec:f2:91:20:b8:0b:
                    75:9b:6c:76:ab:2e:17:27:1f:af:51:80:ef:e2:4b:
                    db:18:cf:3b:5b:53:ff:57:27:b0:70:65:3e:76:9f:
                    6f:af:2d:dc:c7:c5:7b:2a:0f:b2:c0:d0:30:36:b2:
                    21:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CD:6B:65:C3:CF:91:C5:B6:34:85:7F:34:F3:F4:40:78:95:9B:42
            X509v3 Authority Key Identifier:
                keyid:1F:C1:52:50:53:E3:E0:27:C4:D9:19:EB:F8:1D:95:25:84:AD:B7:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B1F3/A81875666D4011EBA667E02DC4F9AE02/H8FSUFPj4CfE2Rnr-B2VJYStt1c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8FSUFPj4CfE2Rnr-B2VJYStt1c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B1F3/A81875666D4011EBA667E02DC4F9AE02/H8FSUFPj4CfE2Rnr-B2VJYStt1c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:9d:4f:3c:de:5b:b0:d9:59:f0:89:cf:67:72:e9:3f:b5:73:
         72:23:b6:58:92:2e:f1:61:64:ef:c1:75:7f:78:b0:89:8f:71:
         4a:fc:cd:7a:e7:ac:24:18:f6:bb:53:b9:9f:9a:8a:60:0e:70:
         d3:18:de:8d:2f:99:f7:13:fe:8c:4c:2c:ed:98:b2:3a:8a:03:
         b0:10:d9:70:8b:87:53:e0:1f:d5:10:a0:ab:6e:b4:ca:de:f3:
         ad:0c:8c:f7:d4:07:67:1d:70:fe:c1:40:78:54:1d:6e:0c:b8:
         84:3b:60:3d:bb:30:3f:b2:8b:b1:78:1d:1b:f8:87:b3:24:d5:
         46:bd:cd:0c:82:4e:61:6c:28:b2:fe:5d:c3:54:f8:d6:3c:92:
         c1:37:38:ec:39:bc:49:39:46:d2:78:05:6a:7d:0b:f0:91:9d:
         0b:9a:85:42:dc:36:88:68:58:d5:48:5d:e8:88:3d:ad:68:e7:
         d5:84:aa:f5:d5:34:8b:3b:b8:19:cf:44:0b:b9:80:38:62:1d:
         b8:64:27:bb:13:c2:0e:71:5d:49:58:1d:41:01:7d:59:27:dd:
         81:44:28:86:e3:2e:1a:ee:a9:fc:69:92:cf:eb:00:6b:41:7b:
         dd:f8:4d:c6:d3:68:d7:03:af:fb:f8:d9:ce:ca:07:e4:27:db:
         36:af:88:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----