Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C287/D5D31784BF8A11ECADAA8E54C4F9AE02/bdUILchSk70uaSvQ-qq1wlZnjMg.mft
File:                     bdUILchSk70uaSvQ-qq1wlZnjMg.mft (raw, json)
Hash identifier:          Bc8sYIkkm3k8vHV6icMAHSyioPUfkKdLTeF9ATgLIoU=
Subject key identifier:   E7:AC:90:F9:28:4F:D2:93:4B:FB:3E:8A:00:6A:EB:F5:32:C2:EC:8B
Authority key identifier: 6D:D5:08:2D:C8:52:93:BD:2E:69:2B:D0:FA:AA:B5:C2:56:67:8C:C8
Certificate issuer:       /CN=A918C287/serialNumber=6DD5082DC85293BD2E692BD0FAAAB5C256678CC8
Certificate serial:       10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bdUILchSk70uaSvQ-qq1wlZnjMg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C287/D5D31784BF8A11ECADAA8E54C4F9AE02/bdUILchSk70uaSvQ-qq1wlZnjMg.mft
Manifest number:          0F
Signing time:             Tue 26 Apr 2022 05:02:57 +0000
Manifest this update:     Tue 26 Apr 2022 05:02:56 +0000
Manifest next update:     Thu 28 Apr 2022 05:02:56 +0000
Files and hashes:         1: bdUILchSk70uaSvQ-qq1wlZnjMg.crl (hash: TSzhfPyv+fv3pPt7x9WPI5GWUBFVlXW/QKIhhnxRolY=)
                          2: D6E09D46BF8E11ECBFAAA95DC4F9AE02.roa (hash: UmM/I/qJY1vCn1plga+4E5keBT2AQVu+fgdR5qKCbUs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C287/serialNumber=6DD5082DC85293BD2E692BD0FAAAB5C256678CC8
        Validity
            Not Before: Apr 26 05:02:56 2022 GMT
            Not After : Apr 28 05:02:56 2022 GMT
        Subject: CN=62677d01-53d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b3:38:b3:f6:0d:e4:0b:3b:5d:f5:b1:6c:ec:
                    7f:69:6f:77:e0:db:a0:a0:b0:8d:f4:71:f2:4d:4a:
                    54:da:68:9e:b4:f0:b9:f2:16:25:3d:8d:d7:1d:99:
                    69:5f:63:93:24:3c:f1:fd:ac:a0:eb:0a:fa:4b:aa:
                    e9:00:e3:f9:af:17:51:24:11:8c:97:71:37:73:86:
                    00:81:f7:ab:a1:55:cc:57:ce:2a:4a:0c:1e:6f:d2:
                    a2:1d:00:fb:70:67:e5:2c:66:44:8c:0e:7b:99:cb:
                    2c:4b:d2:e9:b1:fb:aa:38:75:a2:75:2d:84:36:b4:
                    0c:c2:88:79:66:14:b9:5f:17:8a:90:3b:cc:96:91:
                    f2:db:b6:20:9a:d7:1d:51:60:17:7b:76:73:5a:5c:
                    d8:b7:b5:c5:23:d7:45:70:ee:16:2e:c5:57:30:2a:
                    f7:9f:25:e2:d5:a2:4f:91:00:a2:5a:1d:04:27:b7:
                    7d:b5:0e:01:b9:60:2c:99:4c:dd:72:96:4c:17:22:
                    cb:de:8f:b3:e9:19:53:da:0f:40:4e:9f:72:32:a8:
                    b6:ed:9c:e1:a8:a0:6f:bb:a8:e4:ce:f8:ed:aa:8b:
                    5d:e1:2a:f6:be:d4:67:65:a9:5d:16:bb:95:bb:ba:
                    8c:af:95:c9:b9:fb:43:e1:b9:5f:cc:1f:ec:61:3c:
                    fa:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:AC:90:F9:28:4F:D2:93:4B:FB:3E:8A:00:6A:EB:F5:32:C2:EC:8B
            X509v3 Authority Key Identifier:
                keyid:6D:D5:08:2D:C8:52:93:BD:2E:69:2B:D0:FA:AA:B5:C2:56:67:8C:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C287/D5D31784BF8A11ECADAA8E54C4F9AE02/bdUILchSk70uaSvQ-qq1wlZnjMg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bdUILchSk70uaSvQ-qq1wlZnjMg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C287/D5D31784BF8A11ECADAA8E54C4F9AE02/bdUILchSk70uaSvQ-qq1wlZnjMg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:2d:4c:12:26:db:31:7e:6c:50:57:a2:29:43:cc:f1:6d:4c:
         50:c1:2a:96:48:83:ab:9e:f1:09:32:12:95:5e:e3:32:d7:15:
         b6:9a:86:3e:08:9a:04:1d:2a:96:e1:91:16:ea:8c:9a:64:04:
         7f:b2:a2:5a:12:e6:23:47:ce:de:4b:da:b4:02:18:d3:1a:63:
         27:0c:68:89:b2:d5:79:62:6b:ef:d3:22:11:f5:e3:d1:fb:f8:
         88:d2:da:fc:9a:ab:2f:6a:d3:be:6d:f6:b0:58:82:5f:4e:3f:
         b4:f7:56:61:a3:28:64:9e:ce:18:23:89:b9:43:c8:04:33:c8:
         21:dd:c1:73:d0:aa:00:60:39:63:88:34:24:66:10:19:87:cf:
         33:ee:65:fd:18:05:3d:8c:31:d8:d9:5a:78:03:52:84:5e:9b:
         23:9a:bd:df:7b:74:54:74:79:d3:65:ca:91:86:b6:40:2e:df:
         a4:7c:79:41:35:6b:43:c5:da:47:d6:f5:26:be:67:04:ea:58:
         39:33:b6:d4:91:e1:a6:e1:8a:f6:6d:a9:39:2d:ac:c9:09:bf:
         5f:f9:2e:70:b8:cc:df:c3:17:05:e7:05:58:bc:60:59:32:f7:
         00:fa:ef:95:c6:9e:c7:ff:96:47:c3:bc:46:bd:d0:8c:83:1a:
         b8:9a:45:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----