Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ZQpqqbUcPym3BOl10vsbsTCTL6Q.mft
File:                     ZQpqqbUcPym3BOl10vsbsTCTL6Q.mft (raw, json)
Hash identifier:          8yQwaC39GfnK7r6Jn06ficdljT+SfwtaR5Pr8Pp9l/c=
Subject key identifier:   33:D7:EB:EF:EE:52:C8:BC:88:29:55:6E:A5:76:CC:E8:80:11:72:98
Authority key identifier: 65:0A:6A:A9:B5:1C:3F:29:B7:04:E9:75:D2:FB:1B:B1:30:93:2F:A4
Certificate issuer:       /CN=A918D808/serialNumber=650A6AA9B51C3F29B704E975D2FB1BB130932FA4
Certificate serial:       0986
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQpqqbUcPym3BOl10vsbsTCTL6Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ZQpqqbUcPym3BOl10vsbsTCTL6Q.mft
Manifest number:          1562
Signing time:             Sun 14 Jan 2024 18:48:35 +0000
Manifest this update:     Sun 14 Jan 2024 18:48:35 +0000
Manifest next update:     Sun 21 Jan 2024 18:48:34 +0000
Files and hashes:         1: ZQpqqbUcPym3BOl10vsbsTCTL6Q.crl (hash: hJEvfUPgtGkFM8ruRbw8+VQilDnUuANzvQ1xz+SgvZE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2438 (0x986)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D808/serialNumber=650A6AA9B51C3F29B704E975D2FB1BB130932FA4
        Validity
            Not Before: Jan 14 18:48:35 2024 GMT
            Not After : Jan 21 18:48:34 2024 GMT
        Subject: CN=65a42c83-a28b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:45:ad:67:12:f3:1e:62:17:10:e3:12:b2:d7:
                    75:49:2f:19:74:71:cb:60:4a:f5:bb:3b:cd:d2:fa:
                    c4:6b:a6:1f:60:2c:b7:9f:6e:d4:39:58:0b:9a:81:
                    78:36:68:e0:2e:fc:f1:02:9f:0f:38:8e:ed:ca:11:
                    4e:70:35:11:c4:0b:a5:a6:ec:d8:8b:e3:19:19:c6:
                    4e:94:86:46:02:35:4a:d5:71:16:f5:80:e7:3e:2d:
                    19:dc:de:d3:03:0e:86:a2:3e:0f:2d:9b:91:8b:83:
                    92:a5:03:74:5a:c4:b1:b0:69:4f:9a:40:55:5c:b7:
                    d4:e6:df:f5:61:de:98:c9:90:04:e1:c7:ba:d3:b0:
                    f4:25:dd:aa:36:d4:d0:52:68:d6:55:f9:66:dd:1d:
                    15:70:44:cd:b2:24:be:f3:71:f5:9b:19:de:2f:39:
                    90:25:71:f8:9c:e7:47:4c:e0:1a:ed:85:ec:73:e3:
                    14:07:ee:48:b1:79:4b:51:dc:9a:a2:16:c4:e9:d2:
                    fb:6d:75:cd:ad:1b:cc:a0:d6:03:61:94:b8:e1:35:
                    7c:11:71:47:02:cf:b3:9e:5a:88:b9:42:f5:21:4d:
                    2b:32:4d:6f:5e:2d:c8:c3:68:cf:fc:f9:56:ba:e9:
                    96:9c:d9:ea:a2:61:1f:b6:b9:f3:55:54:5b:48:13:
                    a1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:D7:EB:EF:EE:52:C8:BC:88:29:55:6E:A5:76:CC:E8:80:11:72:98
            X509v3 Authority Key Identifier:
                keyid:65:0A:6A:A9:B5:1C:3F:29:B7:04:E9:75:D2:FB:1B:B1:30:93:2F:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ZQpqqbUcPym3BOl10vsbsTCTL6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQpqqbUcPym3BOl10vsbsTCTL6Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ZQpqqbUcPym3BOl10vsbsTCTL6Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:ca:a5:bc:7b:d6:65:7e:cf:71:51:e5:1e:bc:9b:fb:98:01:
         b4:62:c4:5e:5a:66:cb:9b:25:d2:4e:f8:84:64:1e:8d:6c:3b:
         22:8f:f9:c8:37:ac:30:55:3b:2d:07:73:b0:8c:8d:d5:8d:0f:
         1f:21:79:b5:93:1a:76:93:39:66:bf:6a:81:a9:ac:eb:f9:60:
         24:ae:da:b9:5f:20:49:37:4f:71:4f:cb:60:3e:53:44:7b:fe:
         0f:96:8d:bc:2f:9d:63:9d:39:f2:eb:6a:68:db:63:40:78:ae:
         dc:c3:fd:08:6b:0d:8d:be:16:32:40:fd:82:f1:42:7b:12:6e:
         cb:af:e7:87:4f:7c:28:6a:38:05:e5:33:19:ce:5c:33:f1:5d:
         7f:06:75:fc:80:8a:b4:21:22:e4:1a:f6:27:68:05:e8:01:15:
         53:23:48:d1:e8:b1:7b:7d:62:6f:ac:af:8e:61:57:49:3f:0f:
         98:0f:df:78:d2:21:98:35:54:b7:0a:8e:f3:d6:bc:62:b4:81:
         14:f0:2e:98:f6:1b:73:e1:07:3a:bc:dc:96:67:0f:89:52:b9:
         87:d2:03:6e:d1:e6:a4:09:bb:7c:8a:80:2f:1a:f5:88:55:e1:
         59:54:27:ff:65:63:f0:37:07:42:bb:d8:1e:2c:5d:49:74:c6:
         b8:3c:47:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----