Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B217/8F8CA80AD98311EBB2BE9123C4F9AE02/qYZesoKSxYj9ILRkAjLJf7wrA38.mft
File:                     qYZesoKSxYj9ILRkAjLJf7wrA38.mft (raw, json)
Hash identifier:          hbp8JEWwJ7wYfx0slf4ddzTLnb3LLSrtEcmUwObVSc4=
Subject key identifier:   D7:8E:BA:53:94:90:CF:E2:5A:51:07:82:A3:F8:91:4A:61:07:1C:EB
Authority key identifier: A9:86:5E:B2:82:92:C5:88:FD:20:B4:64:02:32:C9:7F:BC:2B:03:7F
Certificate issuer:       /CN=A918B217/serialNumber=A9865EB28292C588FD20B4640232C97FBC2B037F
Certificate serial:       0476
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYZesoKSxYj9ILRkAjLJf7wrA38.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B217/8F8CA80AD98311EBB2BE9123C4F9AE02/qYZesoKSxYj9ILRkAjLJf7wrA38.mft
Manifest number:          0474
Signing time:             Tue 12 Dec 2023 08:53:29 +0000
Manifest this update:     Tue 12 Dec 2023 08:53:29 +0000
Manifest next update:     Tue 19 Dec 2023 08:53:29 +0000
Files and hashes:         1: qYZesoKSxYj9ILRkAjLJf7wrA38.crl (hash: czsYntHEPopZBvYln7MGh0xx+/IqyLsfjTjesdIVD3c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1142 (0x476)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B217/serialNumber=A9865EB28292C588FD20B4640232C97FBC2B037F
        Validity
            Not Before: Dec 12 08:53:29 2023 GMT
            Not After : Dec 19 08:53:29 2023 GMT
        Subject: CN=65781f89-ddc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:60:aa:2f:e6:d7:17:73:a9:96:bf:c3:5a:f4:
                    e2:e6:e4:46:75:58:1d:66:35:d8:4e:f9:dd:6d:66:
                    1f:48:f5:7c:03:a6:fa:e8:d3:1b:94:1e:7d:77:45:
                    28:91:a2:37:c1:86:55:5d:9e:52:f3:7d:13:85:1f:
                    b1:9a:df:3d:48:4a:e2:3c:43:0b:29:d8:b3:57:f5:
                    b9:95:f3:3b:0d:73:80:1a:d9:84:f9:e5:0d:84:34:
                    01:a2:97:00:50:20:1c:d3:02:5f:2b:e0:d6:ee:79:
                    8a:5a:78:ff:fa:7f:37:71:cc:cb:21:9d:a2:00:36:
                    0e:b5:ea:8e:52:d7:40:2e:eb:4e:f0:f3:e5:9c:e0:
                    94:ea:4c:7f:68:03:62:3b:b1:c0:c2:15:ae:1e:49:
                    ae:a4:a9:98:38:a0:e0:86:93:a8:93:a6:52:80:fb:
                    76:a2:3b:b0:e6:f7:48:1e:91:dc:d1:f7:87:c8:39:
                    f5:a0:ca:e4:33:19:31:8f:6f:b4:5c:f9:24:64:02:
                    6d:11:0c:a1:71:52:3c:74:59:dd:32:81:8e:4a:c6:
                    25:98:d8:b9:4c:cc:41:a7:f3:f3:29:e9:48:b5:f1:
                    0e:4c:dd:6a:81:40:b5:23:7a:5e:c3:00:73:2c:b3:
                    b1:16:0b:cf:96:be:fb:e1:70:54:6d:ed:e3:5e:4a:
                    85:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:8E:BA:53:94:90:CF:E2:5A:51:07:82:A3:F8:91:4A:61:07:1C:EB
            X509v3 Authority Key Identifier:
                keyid:A9:86:5E:B2:82:92:C5:88:FD:20:B4:64:02:32:C9:7F:BC:2B:03:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B217/8F8CA80AD98311EBB2BE9123C4F9AE02/qYZesoKSxYj9ILRkAjLJf7wrA38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYZesoKSxYj9ILRkAjLJf7wrA38.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B217/8F8CA80AD98311EBB2BE9123C4F9AE02/qYZesoKSxYj9ILRkAjLJf7wrA38.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:7e:24:f4:80:4b:d8:fd:c2:5a:bd:2e:a6:61:8a:9b:a8:32:
         89:7e:d2:3b:35:8a:9e:3e:33:fe:b6:36:d1:88:ee:85:a6:7a:
         ab:36:f4:4e:fc:52:03:29:2b:c9:34:21:94:ed:f0:78:61:44:
         0e:45:ca:4b:45:c3:68:31:e2:64:97:1d:25:9a:aa:aa:30:84:
         25:3b:e5:db:f3:e6:0d:a2:f4:5e:5e:ef:52:3e:30:4c:d9:0b:
         b6:2b:2d:93:09:66:b7:f7:5b:02:b2:6c:ac:99:0c:d1:82:5f:
         63:79:a0:03:07:25:f1:de:40:bc:3a:7c:ef:c5:c9:b9:a1:4c:
         5d:d8:e1:dd:fb:de:53:ec:8a:d4:d8:4b:a3:65:51:64:bc:74:
         22:89:b7:61:f8:bd:63:97:9f:30:0c:02:6c:78:e0:85:96:d7:
         6e:e4:1f:aa:63:36:84:2f:7a:5e:f6:21:d7:b2:a3:e0:2c:cf:
         9f:12:96:b1:6e:e8:08:a4:d3:4f:2b:57:77:69:36:08:2e:aa:
         60:6b:4b:21:2c:51:b3:82:2b:32:e0:19:e8:c6:a8:b8:39:33:
         6a:1f:e0:40:a0:ed:71:6e:e4:2e:b1:ed:c9:73:51:01:63:ac:
         c6:73:c6:6f:ca:86:e2:6d:86:52:3d:60:e6:c8:d3:42:e0:bb:
         5d:15:35:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----