Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191B70/96119F9C8EFE11EC87A6EA17C4F9AE02/3hzrj4KZQ9nzOkcKiG44OcPqcV0.mft
File:                     3hzrj4KZQ9nzOkcKiG44OcPqcV0.mft (raw, json)
Hash identifier:          EwWMOoHkUowBJRg+JnT4HfSbq4W2KVnmHGQVZp6PkK0=
Subject key identifier:   58:CA:6E:90:82:56:A9:42:66:E1:2E:02:BB:6F:D6:1A:FA:51:A6:A7
Authority key identifier: DE:1C:EB:8F:82:99:43:D9:F3:3A:47:0A:88:6E:38:39:C3:EA:71:5D
Certificate issuer:       /CN=A9191B70/serialNumber=DE1CEB8F829943D9F33A470A886E3839C3EA715D
Certificate serial:       01DB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3hzrj4KZQ9nzOkcKiG44OcPqcV0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191B70/96119F9C8EFE11EC87A6EA17C4F9AE02/3hzrj4KZQ9nzOkcKiG44OcPqcV0.mft
Manifest number:          01D9
Signing time:             Thu 03 Nov 2022 04:13:24 +0000
Manifest this update:     Thu 03 Nov 2022 04:13:23 +0000
Manifest next update:     Thu 10 Nov 2022 04:13:23 +0000
Files and hashes:         1: 3hzrj4KZQ9nzOkcKiG44OcPqcV0.crl (hash: LrM8iRnVvhOuBcyJx7DkIFRj7Vt8evb6DL1J5Gd/axY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 475 (0x1db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191B70/serialNumber=DE1CEB8F829943D9F33A470A886E3839C3EA715D
        Validity
            Not Before: Nov  3 04:13:23 2022 GMT
            Not After : Nov 10 04:13:23 2022 GMT
        Subject: CN=63633fe4-0aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:59:36:d0:05:04:8f:d8:11:55:c3:46:64:79:
                    7c:cb:b2:af:c1:58:ec:ed:fc:b0:53:f3:48:c6:bb:
                    85:55:5d:9c:1a:b2:65:99:b7:e0:27:aa:65:17:4c:
                    51:a5:11:c8:20:1d:26:cf:b9:24:25:34:b4:72:53:
                    b4:1d:1c:2c:94:c4:8a:9c:12:a4:52:a5:a2:cf:f0:
                    15:d5:39:91:de:9e:44:c5:9f:81:60:ce:34:61:82:
                    cb:79:72:45:03:50:8d:96:82:95:b6:80:49:5e:c2:
                    55:bd:2d:60:b5:b1:d2:dc:00:fe:57:56:6d:4f:fb:
                    ed:df:3c:db:fb:e4:9f:ce:ae:0f:9d:54:d2:cc:ee:
                    e4:b4:96:27:06:2d:ca:a4:5a:bb:95:d1:fc:82:cb:
                    9c:68:3f:29:dd:dc:0d:8b:26:2d:91:a6:90:27:a3:
                    ed:57:cf:29:d5:14:c3:b4:dd:de:0b:7f:3b:2d:06:
                    dc:9d:fb:72:af:8f:68:2e:6c:eb:3c:f6:70:88:09:
                    5b:ef:37:ac:b3:40:7f:91:dc:0f:fb:b1:a3:b6:ba:
                    82:33:f1:6f:49:59:82:aa:cb:11:c6:3a:1a:40:38:
                    59:53:55:c1:67:d4:7c:70:41:a4:39:bb:1b:6b:2c:
                    dd:b3:63:81:c2:20:22:fd:95:76:b8:da:96:cc:86:
                    2f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:CA:6E:90:82:56:A9:42:66:E1:2E:02:BB:6F:D6:1A:FA:51:A6:A7
            X509v3 Authority Key Identifier:
                keyid:DE:1C:EB:8F:82:99:43:D9:F3:3A:47:0A:88:6E:38:39:C3:EA:71:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191B70/96119F9C8EFE11EC87A6EA17C4F9AE02/3hzrj4KZQ9nzOkcKiG44OcPqcV0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3hzrj4KZQ9nzOkcKiG44OcPqcV0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191B70/96119F9C8EFE11EC87A6EA17C4F9AE02/3hzrj4KZQ9nzOkcKiG44OcPqcV0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:52:e7:c1:cc:64:a5:e4:ad:14:51:70:f2:ce:c0:a9:ee:9c:
         37:03:55:06:bb:8c:29:a9:76:3f:58:b7:1b:af:c4:8d:82:cf:
         f5:16:62:e3:a6:33:32:f6:48:d5:4a:d2:95:31:70:50:30:4b:
         66:bd:c4:a6:81:b8:f1:5e:62:11:50:4e:53:9a:86:64:39:5c:
         d6:1b:1c:98:bb:8d:26:5d:4e:83:bb:9b:d0:0a:11:97:09:dc:
         7e:46:66:43:f3:96:b3:d6:d6:42:7e:39:a0:60:1b:ac:10:c8:
         64:61:ac:9c:72:66:74:3e:6c:87:7c:9f:13:9d:99:15:38:db:
         c7:b3:d0:6e:b2:1b:b3:2a:ce:f1:4d:87:09:22:fd:70:a3:dd:
         a0:9c:db:b1:37:07:ce:f4:a7:32:38:9c:a4:01:14:32:e0:6d:
         fb:84:71:70:f6:7a:0a:88:6c:03:07:fd:99:7a:d7:40:30:35:
         1a:19:51:52:73:9a:0a:90:da:3b:c7:59:f0:83:86:a5:0f:04:
         b7:dd:8f:50:b9:4e:d5:9f:0f:4a:71:be:25:11:b9:7f:15:34:
         51:44:e1:1b:de:f2:2c:db:54:c1:cd:91:43:45:34:ef:c5:87:
         d5:51:fc:22:30:c9:05:a5:d2:43:99:ae:ff:0f:72:11:da:38:
         de:c6:bf:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----