Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D8FC/3465A0769C8011EA98010976C4F9AE02/QYhJykgpvVrsZZLMk6-jdTWJcV8.mft
File:                     QYhJykgpvVrsZZLMk6-jdTWJcV8.mft (raw, json)
Hash identifier:          rCMUdGGt+7QRF5v5BEAoAAfdjk7g9ihLj45UMqCkstg=
Subject key identifier:   8E:DF:46:FD:26:46:87:AC:B9:CA:88:70:E7:59:C4:A9:BB:F7:1E:2F
Authority key identifier: 41:88:49:CA:48:29:BD:5A:EC:65:92:CC:93:AF:A3:75:35:89:71:5F
Certificate issuer:       /CN=A919D8FC/serialNumber=418849CA4829BD5AEC6592CC93AFA3753589715F
Certificate serial:       84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QYhJykgpvVrsZZLMk6-jdTWJcV8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D8FC/3465A0769C8011EA98010976C4F9AE02/QYhJykgpvVrsZZLMk6-jdTWJcV8.mft
Manifest number:          08D7
Signing time:             Mon 19 Feb 2024 09:11:27 +0000
Manifest this update:     Mon 19 Feb 2024 09:11:26 +0000
Manifest next update:     Mon 26 Feb 2024 09:11:26 +0000
Files and hashes:         1: QYhJykgpvVrsZZLMk6-jdTWJcV8.crl (hash: nv1uOSqz3Dse54I2C7GhZjrGwqb+y++MRxQ09cnWfM8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D8FC/serialNumber=418849CA4829BD5AEC6592CC93AFA3753589715F
        Validity
            Not Before: Feb 19 09:11:26 2024 GMT
            Not After : Feb 26 09:11:26 2024 GMT
        Subject: CN=65d31b3e-41e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:8f:b2:e4:ae:c5:a1:3b:36:9b:78:92:b1:84:
                    0e:a0:65:ed:7b:a6:63:68:c4:e6:43:53:16:a7:df:
                    dd:01:dd:d3:ad:18:37:37:b3:78:ea:38:ff:ce:41:
                    d1:bc:e8:50:9a:c4:0a:0a:a1:86:7c:af:85:01:7b:
                    37:87:53:c8:6c:e5:75:b0:7b:92:14:e6:86:c2:ed:
                    5c:47:03:15:ce:95:02:1c:c9:51:79:f7:32:11:73:
                    cb:1e:42:c6:b6:57:76:59:21:94:a1:d6:26:e5:95:
                    e1:02:b6:f2:29:73:c8:de:47:19:85:93:09:a3:a2:
                    6e:3e:70:1d:a4:06:b6:8d:b7:cc:f6:1f:73:0d:d5:
                    0c:5c:0b:95:bc:ba:9e:02:11:55:63:85:9c:9d:08:
                    d4:e6:3c:ca:41:f0:ce:16:41:77:15:2b:e8:dc:01:
                    ac:1c:25:a7:77:be:d6:68:19:b5:96:77:1b:84:d1:
                    16:e1:42:90:bc:b9:9d:b9:55:1d:56:c5:4c:fd:bf:
                    b6:df:01:9d:56:26:da:07:36:22:d8:c2:a8:11:d4:
                    45:ad:d5:1c:4f:28:8e:00:ba:b3:dd:78:51:83:f5:
                    c4:26:ec:3f:66:a9:cd:b0:07:d3:70:92:64:94:78:
                    50:b4:3d:cd:f9:fb:2c:f4:f7:19:2e:21:7e:07:e8:
                    84:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:DF:46:FD:26:46:87:AC:B9:CA:88:70:E7:59:C4:A9:BB:F7:1E:2F
            X509v3 Authority Key Identifier:
                keyid:41:88:49:CA:48:29:BD:5A:EC:65:92:CC:93:AF:A3:75:35:89:71:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D8FC/3465A0769C8011EA98010976C4F9AE02/QYhJykgpvVrsZZLMk6-jdTWJcV8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QYhJykgpvVrsZZLMk6-jdTWJcV8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D8FC/3465A0769C8011EA98010976C4F9AE02/QYhJykgpvVrsZZLMk6-jdTWJcV8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:25:aa:75:ba:78:2f:3e:ec:9c:a8:0f:9d:9d:be:e6:0c:ce:
         37:44:a9:1c:82:95:cc:1a:05:19:6c:11:ad:5e:e5:08:2e:53:
         2b:01:ca:29:26:b9:9e:1e:75:da:16:a9:78:d9:d3:f2:db:b0:
         bc:7e:6b:0c:bb:15:1c:76:18:2d:fd:2a:dd:7b:f7:d1:10:80:
         93:30:64:32:4e:a1:8f:d7:b0:65:a0:0a:96:20:38:55:31:f8:
         21:74:88:b0:2a:08:33:a6:00:7a:4d:d3:09:9d:b9:49:37:f1:
         63:dc:89:13:18:b8:33:35:51:14:07:a5:de:11:9a:b1:8b:c3:
         cb:9b:07:73:e5:d4:e3:16:f6:7e:20:da:55:12:5c:7a:e5:e1:
         a7:af:4b:be:40:43:5c:fa:8e:b4:83:13:ad:30:da:c7:16:83:
         1f:7b:15:b7:68:d2:7b:76:24:0f:60:e6:9c:1d:d3:74:16:3e:
         30:1f:86:77:dd:8b:ae:ea:d1:91:bd:3d:bd:c2:78:55:cc:c0:
         e1:fe:a3:d0:d1:31:3a:3c:76:29:39:37:9c:6e:31:c8:76:92:
         e8:0c:4a:31:21:65:ba:a2:f7:78:96:b3:cd:ff:3c:cb:b0:4e:
         ea:89:c5:51:f4:86:f6:3c:dc:f8:e0:b1:cd:41:f8:c3:79:13:
         ce:6b:98:4f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUQ4RkMxMTAvBgNVBAUTKDQxODg0OUNBNDgyOUJENUFFQzY1OTJDQzkzQUZBMzc1
MzU4OTcxNUYwHhcNMjQwMjE5MDkxMTI2WhcNMjQwMjI2MDkxMTI2WjAYMRYwFAYD
VQQDEw02NWQzMWIzZS00MWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6Y+y5K7FoTs2m3iSsYQOoGXte6ZjaMTmQ1MWp9/dAd3TrRg3N7N46jj/zkHR
vOhQmsQKCqGGfK+FAXs3h1PIbOV1sHuSFOaGwu1cRwMVzpUCHMlRefcyEXPLHkLG
tld2WSGUodYm5ZXhArbyKXPI3kcZhZMJo6JuPnAdpAa2jbfM9h9zDdUMXAuVvLqe
AhFVY4WcnQjU5jzKQfDOFkF3FSvo3AGsHCWnd77WaBm1lncbhNEW4UKQvLmduVUd
VsVM/b+23wGdVibaBzYi2MKoEdRFrdUcTyiOALqz3XhRg/XEJuw/ZqnNsAfTcJJk
lHhQtD3N+fss9PcZLiF+B+iEnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7fRv0m
RoesucqIcOdZxKm79x4vMB8GA1UdIwQYMBaAFEGIScpIKb1a7GWSzJOvo3U1iXFf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDhGQy8zNDY1QTA3NjlD
ODAxMUVBOTgwMTA5NzZDNEY5QUUwMi9RWWhKeWtncHZWcnNaWkxNazYtamRUV0pj
VjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FZaEp5a2dwdlZyc1paTE1rNi1qZFRXSmNWOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RDhGQy8zNDY1QTA3NjlDODAxMUVBOTgwMTA5NzZDNEY5QUUwMi9RWWhKeWtncHZW
cnNaWkxNazYtamRUV0pjVjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAkJap1ungvPuycqA+dnb7mDM43RKkcgpXMGgUZbBGtXuUILlMrAcop
JrmeHnXaFql42dPy27C8fmsMuxUcdhgt/Srde/fREICTMGQyTqGP17BloAqWIDhV
MfghdIiwKggzpgB6TdMJnblJN/Fj3IkTGLgzNVEUB6XeEZqxi8PLmwdz5dTjFvZ+
INpVElx65eGnr0u+QENc+o60gxOtMNrHFoMfexW3aNJ7diQPYOacHdN0Fj4wH4Z3
3Yuu6tGRvT29wnhVzMDh/qPQ0TE6PHYpOTecbjHIdpLoDEoxIWW6ovd4lrPN/zzL
sE7qicVR9Ib2PNz44LHNQfjDeRPOa5hP
-----END CERTIFICATE-----