Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AD89/535B4312CF3211E9B4D5AD1EC4F9AE02/nEFb_h6vbmjY62h56kVzhfJUkUY.mft
File:                     nEFb_h6vbmjY62h56kVzhfJUkUY.mft (raw, json)
Hash identifier:          K1k+2aSkhtHtGeyVBH5vJnY3U7ox4GYyTT/2veGJ9r8=
Subject key identifier:   CA:97:45:78:4F:9F:44:4E:79:0A:E6:5C:70:9B:E1:5C:26:76:75:4D
Authority key identifier: 9C:41:5B:FE:1E:AF:6E:68:D8:EB:68:79:EA:45:73:85:F2:54:91:46
Certificate issuer:       /CN=A919AD89/serialNumber=9C415BFE1EAF6E68D8EB6879EA457385F2549146
Certificate serial:       0C4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nEFb_h6vbmjY62h56kVzhfJUkUY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AD89/535B4312CF3211E9B4D5AD1EC4F9AE02/nEFb_h6vbmjY62h56kVzhfJUkUY.mft
Manifest number:          0C40
Signing time:             Wed 15 Nov 2023 06:46:14 +0000
Manifest this update:     Wed 15 Nov 2023 06:46:14 +0000
Manifest next update:     Wed 22 Nov 2023 06:46:14 +0000
Files and hashes:         1: nEFb_h6vbmjY62h56kVzhfJUkUY.crl (hash: RW5uxhOfEilA8mdWnHhNPAQZjB/C68Znu4tpPy8kw7E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3146 (0xc4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AD89/serialNumber=9C415BFE1EAF6E68D8EB6879EA457385F2549146
        Validity
            Not Before: Nov 15 06:46:14 2023 GMT
            Not After : Nov 22 06:46:14 2023 GMT
        Subject: CN=65546936-7b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0b:71:0c:c7:98:01:d9:53:24:ff:7a:48:f3:
                    91:86:a6:41:81:ec:eb:eb:a7:1d:5a:8b:08:3f:b4:
                    22:02:7e:86:13:61:e2:88:9d:49:7c:f1:f9:d1:f2:
                    f7:09:83:f4:91:d5:2a:09:66:21:9e:d8:a0:51:c0:
                    ef:f4:ec:7a:99:66:54:08:2a:52:60:2e:f7:ca:3e:
                    de:d3:0a:d4:58:58:04:5f:9c:1c:74:1e:16:ef:75:
                    e9:54:3f:9c:31:30:d3:3a:dc:eb:0c:7b:f2:e8:c0:
                    4e:21:30:48:e4:ff:53:b5:7e:39:c5:30:53:c2:08:
                    30:2e:5c:f3:db:3c:3d:5e:d3:57:a2:c6:34:e1:08:
                    a8:cc:b5:89:41:23:7a:2d:ab:55:f1:a4:76:29:61:
                    8e:27:3e:85:0d:d4:84:d2:cc:9b:b1:b7:01:0f:0b:
                    dc:68:0f:e6:b4:9d:51:44:30:53:4a:db:bb:e3:eb:
                    a7:db:ff:75:2a:e0:6f:0b:6f:61:51:a8:4a:fa:47:
                    d3:e5:5d:7b:a4:e1:e3:c5:fe:3a:da:8a:18:95:94:
                    00:b0:31:c3:ca:3b:bf:83:98:bb:3d:0e:60:ba:6e:
                    30:89:38:1d:76:37:4c:88:e0:f6:31:8f:56:33:cd:
                    c6:6b:92:a1:1e:ce:4c:e7:f3:b2:8d:7f:ba:e0:89:
                    4c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:97:45:78:4F:9F:44:4E:79:0A:E6:5C:70:9B:E1:5C:26:76:75:4D
            X509v3 Authority Key Identifier:
                keyid:9C:41:5B:FE:1E:AF:6E:68:D8:EB:68:79:EA:45:73:85:F2:54:91:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AD89/535B4312CF3211E9B4D5AD1EC4F9AE02/nEFb_h6vbmjY62h56kVzhfJUkUY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nEFb_h6vbmjY62h56kVzhfJUkUY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AD89/535B4312CF3211E9B4D5AD1EC4F9AE02/nEFb_h6vbmjY62h56kVzhfJUkUY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:71:2a:46:8c:74:36:ca:46:2d:43:34:fa:9d:99:1d:35:a8:
         29:10:b9:22:89:d0:60:80:74:e7:1f:26:03:82:dc:a8:c5:81:
         02:7a:95:ff:aa:6e:77:3b:22:3a:f0:a7:60:77:44:ae:06:e4:
         3c:a3:49:10:b0:d7:97:ea:36:d4:ee:22:cb:ea:09:6d:87:e6:
         31:dc:c6:da:02:4a:50:b7:0c:28:3c:52:c5:9f:d3:0c:e8:53:
         f6:a2:c4:5d:a5:72:8a:51:bf:9f:72:a5:e8:42:a6:ff:f8:2d:
         8e:72:19:f0:86:85:1d:bf:8c:ee:2e:2f:8d:33:5f:6f:e2:06:
         3c:f5:62:f3:3c:f5:a2:e2:70:79:0b:a8:f6:4b:39:ea:18:83:
         36:e9:66:7c:44:d4:8e:96:3c:b0:c3:72:6a:8a:85:7f:e4:dc:
         be:a6:91:48:4d:c4:42:74:5f:4b:75:b9:90:f0:99:11:59:34:
         a8:f5:c1:b9:b5:10:d7:70:05:c1:d0:67:cd:b9:6c:5b:2f:fd:
         72:35:2d:34:28:5b:c2:be:cf:2e:f6:59:86:10:1e:95:c0:43:
         31:4c:6d:5f:d9:83:d2:c2:3f:ed:7e:48:e6:d9:75:c9:02:03:
         59:92:b3:fd:08:a8:82:a6:2f:02:ed:04:64:ad:f6:73:03:6a:
         21:85:66:b2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUFEODkxMTAvBgNVBAUTKDlDNDE1QkZFMUVBRjZFNjhEOEVCNjg3OUVBNDU3Mzg1
RjI1NDkxNDYwHhcNMjMxMTE1MDY0NjE0WhcNMjMxMTIyMDY0NjE0WjAYMRYwFAYD
VQQDEw02NTU0NjkzNi03YjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1QtxDMeYAdlTJP96SPORhqZBgezr66cdWosIP7QiAn6GE2HiiJ1JfPH50fL3
CYP0kdUqCWYhntigUcDv9Ox6mWZUCCpSYC73yj7e0wrUWFgEX5wcdB4W73XpVD+c
MTDTOtzrDHvy6MBOITBI5P9TtX45xTBTwggwLlzz2zw9XtNXosY04QiozLWJQSN6
LatV8aR2KWGOJz6FDdSE0sybsbcBDwvcaA/mtJ1RRDBTStu74+un2/91KuBvC29h
UahK+kfT5V17pOHjxf462ooYlZQAsDHDyju/g5i7PQ5gum4wiTgddjdMiOD2MY9W
M83Ga5KhHs5M5/OyjX+64IlM6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMqXRXhP
n0ROeQrmXHCb4VwmdnVNMB8GA1UdIwQYMBaAFJxBW/4er25o2OtoeepFc4XyVJFG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QUQ4OS81MzVCNDMxMkNG
MzIxMUU5QjRENUFEMUVDNEY5QUUwMi9uRUZiX2g2dmJtalk2Mmg1NmtWemhmSlVr
VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25FRmJfaDZ2Ym1qWTYyaDU2a1Z6aGZKVWtVWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QUQ4OS81MzVCNDMxMkNGMzIxMUU5QjRENUFEMUVDNEY5QUUwMi9uRUZiX2g2dmJt
alk2Mmg1NmtWemhmSlVrVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAkcSpGjHQ2ykYtQzT6nZkdNagpELkiidBggHTnHyYDgtyoxYECepX/
qm53OyI68Kdgd0SuBuQ8o0kQsNeX6jbU7iLL6glth+Yx3MbaAkpQtwwoPFLFn9MM
6FP2osRdpXKKUb+fcqXoQqb/+C2OchnwhoUdv4zuLi+NM19v4gY89WLzPPWi4nB5
C6j2SznqGIM26WZ8RNSOljyww3JqioV/5Ny+ppFITcRCdF9LdbmQ8JkRWTSo9cG5
tRDXcAXB0GfNuWxbL/1yNS00KFvCvs8u9lmGEB6VwEMxTG1f2YPSwj/tfkjm2XXJ
AgNZkrP9CKiCpi8C7QRkrfZzA2ohhWay
-----END CERTIFICATE-----