Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1022/670D3896FFF211EBB827163DC4F9AE02/lKx6HO4ZszQ92TSiRhoS1vUW3Ec.mft
File:                     lKx6HO4ZszQ92TSiRhoS1vUW3Ec.mft (raw, json)
Hash identifier:          d6ZEgJRfb1oT9p+V2wLd/tmJ+EGvmww+ZMrhniP2SaY=
Subject key identifier:   2F:85:23:A4:D8:35:EE:1A:1B:68:D1:04:9F:4C:63:77:9D:9D:97:41
Authority key identifier: 94:AC:7A:1C:EE:19:B3:34:3D:D9:34:A2:46:1A:12:D6:F5:16:DC:47
Certificate issuer:       /CN=A91A1022/serialNumber=94AC7A1CEE19B3343DD934A2461A12D6F516DC47
Certificate serial:       03A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKx6HO4ZszQ92TSiRhoS1vUW3Ec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1022/670D3896FFF211EBB827163DC4F9AE02/lKx6HO4ZszQ92TSiRhoS1vUW3Ec.mft
Manifest number:          03A1
Signing time:             Tue 09 May 2023 01:03:25 +0000
Manifest this update:     Tue 09 May 2023 01:03:24 +0000
Manifest next update:     Tue 16 May 2023 01:03:24 +0000
Files and hashes:         1: lKx6HO4ZszQ92TSiRhoS1vUW3Ec.crl (hash: /WK9027enU7kid3UvC4sn7y24poEHVLVN6em9bsYIlc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 932 (0x3a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1022/serialNumber=94AC7A1CEE19B3343DD934A2461A12D6F516DC47
        Validity
            Not Before: May  9 01:03:24 2023 GMT
            Not After : May 16 01:03:24 2023 GMT
        Subject: CN=64599bdd-a09d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f1:b9:7b:b6:4e:fb:2b:81:f9:5b:01:c3:a9:
                    a8:54:8e:5f:13:dc:be:ed:fa:da:57:b6:27:09:27:
                    51:8c:3a:6b:2e:54:95:e5:21:de:ce:c4:1e:4e:a4:
                    43:4f:0d:ef:c6:32:62:bf:ce:15:7a:ee:cd:f3:d4:
                    f6:f1:88:5a:3d:16:6d:39:c0:4d:57:9a:53:f7:ec:
                    27:1e:ad:c1:e3:f5:24:3c:ad:8b:81:e9:3b:6d:01:
                    67:0c:2f:41:5c:16:32:0d:fc:ca:98:c3:c5:7a:88:
                    5c:11:dd:d0:89:71:a5:ba:b4:f7:cf:c7:9b:09:74:
                    b3:3b:d7:3e:fd:7f:60:86:38:bb:a1:5f:bf:85:f1:
                    dc:55:fa:05:45:ae:e7:27:fc:95:e8:85:c9:4f:a9:
                    dc:ac:77:20:ec:8e:91:75:73:7e:be:15:9d:a3:38:
                    9d:9a:ee:45:08:6a:ec:52:6e:70:d9:1c:a0:16:05:
                    eb:4f:46:b2:31:6b:99:fc:c9:d0:9b:9b:01:ef:f7:
                    a2:3a:da:42:d6:84:c8:70:01:f4:94:1a:0f:b5:56:
                    2c:37:fe:b7:b2:e7:97:d2:98:d4:ce:49:b9:18:4c:
                    f7:ca:f1:60:ed:2d:69:fb:f2:f8:8a:52:55:da:75:
                    e1:ba:4c:ff:2d:1b:cc:05:91:79:81:59:79:c7:16:
                    fa:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:85:23:A4:D8:35:EE:1A:1B:68:D1:04:9F:4C:63:77:9D:9D:97:41
            X509v3 Authority Key Identifier:
                keyid:94:AC:7A:1C:EE:19:B3:34:3D:D9:34:A2:46:1A:12:D6:F5:16:DC:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1022/670D3896FFF211EBB827163DC4F9AE02/lKx6HO4ZszQ92TSiRhoS1vUW3Ec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKx6HO4ZszQ92TSiRhoS1vUW3Ec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1022/670D3896FFF211EBB827163DC4F9AE02/lKx6HO4ZszQ92TSiRhoS1vUW3Ec.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:01:27:95:65:d0:b0:16:4b:4b:4e:e8:40:3e:91:8b:10:24:
         6f:4a:99:84:24:18:6a:59:4d:23:25:09:9c:e5:9c:c8:fe:fe:
         73:0b:a7:0b:31:d7:0e:06:c8:ab:a3:22:3d:13:03:ac:8a:b8:
         17:a4:e8:6c:4d:57:bd:71:03:5d:33:96:b2:ec:fb:64:36:8d:
         e4:75:20:14:e3:cb:0e:2c:bf:07:fa:fa:0d:2f:78:e3:7c:5d:
         f1:94:65:91:6f:8c:75:84:ef:c0:d4:73:72:f5:ee:ef:d1:63:
         ef:69:f7:c6:fa:2f:c8:36:15:5c:09:46:84:46:69:03:41:82:
         e7:0d:82:21:bb:0d:b7:69:90:b9:12:67:1e:f1:c3:10:97:75:
         75:9a:12:ab:85:85:4c:c6:59:f1:92:5d:5b:29:37:d4:ca:a2:
         e3:55:21:cf:92:55:2f:fd:57:d0:49:6b:e1:d6:6f:13:a7:44:
         c4:db:c0:a9:dc:da:f9:bd:1e:89:76:dc:44:51:3d:09:70:d4:
         72:e3:be:3b:a9:63:95:26:61:fa:2a:f3:ab:ae:bd:3d:bf:7e:
         b1:1e:2e:e1:06:00:ee:0b:a4:b8:f3:d6:95:6a:79:48:6e:6b:
         9c:b1:82:a9:49:e7:59:c9:2c:35:ea:77:e2:ce:34:12:16:f5:
         04:73:da:b0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTEwMjIxMTAvBgNVBAUTKDk0QUM3QTFDRUUxOUIzMzQzREQ5MzRBMjQ2MUExMkQ2
RjUxNkRDNDcwHhcNMjMwNTA5MDEwMzI0WhcNMjMwNTE2MDEwMzI0WjAYMRYwFAYD
VQQDEw02NDU5OWJkZC1hMDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwPG5e7ZO+yuB+VsBw6moVI5fE9y+7fraV7YnCSdRjDprLlSV5SHezsQeTqRD
Tw3vxjJiv84Veu7N89T28YhaPRZtOcBNV5pT9+wnHq3B4/UkPK2Lgek7bQFnDC9B
XBYyDfzKmMPFeohcEd3QiXGlurT3z8ebCXSzO9c+/X9ghji7oV+/hfHcVfoFRa7n
J/yV6IXJT6ncrHcg7I6RdXN+vhWdozidmu5FCGrsUm5w2RygFgXrT0ayMWuZ/MnQ
m5sB7/eiOtpC1oTIcAH0lBoPtVYsN/63sueX0pjUzkm5GEz3yvFg7S1p+/L4ilJV
2nXhukz/LRvMBZF5gVl5xxb6CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+FI6TY
Ne4aG2jRBJ9MY3ednZdBMB8GA1UdIwQYMBaAFJSsehzuGbM0Pdk0okYaEtb1FtxH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTAyMi82NzBEMzg5NkZG
RjIxMUVCQjgyNzE2M0RDNEY5QUUwMi9sS3g2SE80WnN6UTkyVFNpUmhvUzF2VVcz
RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xLeDZITzRac3pROTJUU2lSaG9TMXZVVzNFYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MTAyMi82NzBEMzg5NkZGRjIxMUVCQjgyNzE2M0RDNEY5QUUwMi9sS3g2SE80WnN6
UTkyVFNpUmhvUzF2VVczRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB4ASeVZdCwFktLTuhAPpGLECRvSpmEJBhqWU0jJQmc5ZzI/v5zC6cL
MdcOBsiroyI9EwOsirgXpOhsTVe9cQNdM5ay7PtkNo3kdSAU48sOLL8H+voNL3jj
fF3xlGWRb4x1hO/A1HNy9e7v0WPvaffG+i/INhVcCUaERmkDQYLnDYIhuw23aZC5
Emce8cMQl3V1mhKrhYVMxlnxkl1bKTfUyqLjVSHPklUv/VfQSWvh1m8Tp0TE28Cp
3Nr5vR6JdtxEUT0JcNRy4747qWOVJmH6KvOrrr09v36xHi7hBgDuC6S489aVanlI
bmucsYKpSedZySw16nfizjQSFvUEc9qw
-----END CERTIFICATE-----