Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A129B/4033C1D4343E11E680B1E72CC4F9AE02/a7bH_f9aacj-73MvrV0bCkkMa30.mft
File:                     a7bH_f9aacj-73MvrV0bCkkMa30.mft (raw, json)
Hash identifier:          H6fmqMt6dwyFpNfI49mQoxLG7stJn51o5obGlSlWMWE=
Subject key identifier:   CB:05:FF:BC:12:A0:7C:9A:97:AB:BC:89:DB:49:D0:85:A4:9A:D6:0F
Authority key identifier: 6B:B6:C7:FD:FF:5A:69:C8:FE:EF:73:2F:AD:5D:1B:0A:49:0C:6B:7D
Certificate issuer:       /CN=A91A129B/serialNumber=6BB6C7FDFF5A69C8FEEF732FAD5D1B0A490C6B7D
Certificate serial:       1E2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a7bH_f9aacj-73MvrV0bCkkMa30.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A129B/4033C1D4343E11E680B1E72CC4F9AE02/a7bH_f9aacj-73MvrV0bCkkMa30.mft
Manifest number:          1E07
Signing time:             Wed 28 Dec 2022 16:41:11 +0000
Manifest this update:     Wed 28 Dec 2022 16:41:11 +0000
Manifest next update:     Wed 04 Jan 2023 16:41:11 +0000
Files and hashes:         1: a7bH_f9aacj-73MvrV0bCkkMa30.crl (hash: 7GXLoPVUk9TVqvd5MjUi304H9Ba+if/DtNYSDEMvNgs=)
                          2: 3CBCBEB4344011E6A0B7E830C4F9AE02.roa (hash: 7Ym3ke69u6Sca2swOcWcWelbNaYBlCy7qjgYG5i+cwE=)
                          3: 899589747C5111EB9CF05385C4F9AE02.roa (hash: rl7K0d/Cmu8HzhiD6xh3+qRszyOeHV9zgCl9X4rBZvo=)
                          4: 0C0BF34CC15A11EAAB5B1038C4F9AE02.roa (hash: lnuzlyrn0weYz0xdVXlIRxe5l9fOSRr7o7voSfaiAIU=)
                          5: AC2CFAF8C15811EA868F3333C4F9AE02.roa (hash: fM8FjoxV9jyFHxdU4NxsOirjmXXlBK0z12wIL4F7VsE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7723 (0x1e2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A129B/serialNumber=6BB6C7FDFF5A69C8FEEF732FAD5D1B0A490C6B7D
        Validity
            Not Before: Dec 28 16:41:11 2022 GMT
            Not After : Jan  4 16:41:11 2023 GMT
        Subject: CN=63ac71a7-cb64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:10:24:16:45:66:4e:59:e6:ab:c9:dd:bb:91:
                    57:f0:9b:f9:20:58:f6:59:93:bc:99:53:17:76:f9:
                    f1:65:f3:46:9f:8a:84:c0:ed:81:4f:9e:8a:fb:7a:
                    8d:d5:f1:f0:79:77:27:c9:99:52:8f:67:1a:1f:15:
                    9f:36:e4:9a:8e:97:f5:e6:74:17:41:7e:db:24:00:
                    df:66:b4:9c:ce:10:cf:62:b6:6a:88:ea:14:c3:80:
                    b6:6d:3b:da:49:76:f9:c9:89:68:b7:a3:09:e6:9d:
                    86:fc:fe:08:1e:9a:0b:73:bf:8f:fe:42:dc:bb:d1:
                    a5:e9:f3:82:37:f8:a5:09:c5:24:f2:76:39:9e:ad:
                    71:1a:e0:ab:c7:05:ef:59:01:fb:cd:9b:38:d7:e1:
                    76:f4:82:0b:54:e2:80:e0:69:86:66:13:d9:99:f4:
                    bb:f2:f9:81:b5:20:e4:42:b0:c2:cc:82:78:26:4c:
                    3c:8d:b2:c0:af:82:d8:5c:86:e7:eb:78:ec:3c:fd:
                    94:c7:9d:c8:da:8e:3a:1e:3c:06:ea:9e:bf:31:a2:
                    73:38:b9:b2:f3:00:e3:bc:c1:91:32:ba:ed:2f:e4:
                    68:38:b4:5e:ee:eb:53:2c:5d:f3:7c:55:0e:31:ea:
                    af:87:d4:42:a0:c6:07:f7:cd:0e:45:e9:14:c8:ae:
                    79:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:05:FF:BC:12:A0:7C:9A:97:AB:BC:89:DB:49:D0:85:A4:9A:D6:0F
            X509v3 Authority Key Identifier:
                keyid:6B:B6:C7:FD:FF:5A:69:C8:FE:EF:73:2F:AD:5D:1B:0A:49:0C:6B:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A129B/4033C1D4343E11E680B1E72CC4F9AE02/a7bH_f9aacj-73MvrV0bCkkMa30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a7bH_f9aacj-73MvrV0bCkkMa30.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A129B/4033C1D4343E11E680B1E72CC4F9AE02/a7bH_f9aacj-73MvrV0bCkkMa30.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:92:32:2d:e4:c3:f5:2a:c4:63:87:4d:73:d2:05:73:77:02:
         98:a7:3e:5b:70:bf:c0:90:eb:6a:ac:5d:af:a5:06:5d:08:ec:
         88:87:0e:0d:e6:01:0c:1e:6a:a0:00:de:a9:d4:73:50:e5:3d:
         c8:b3:de:7c:c3:e0:87:fa:e5:7c:47:85:ab:44:ad:b5:a0:c2:
         df:a0:99:10:cb:09:7e:fe:c7:b6:43:42:ae:34:25:72:b3:51:
         b0:fc:bf:5e:f4:43:9b:50:82:2c:f3:58:9d:2a:82:aa:23:21:
         da:8d:30:62:4a:f1:04:88:39:0e:b4:79:ea:a7:b6:8e:e5:81:
         cc:4b:1d:70:07:ca:8d:f9:7a:d9:c4:17:61:9b:93:cd:07:a1:
         77:24:86:2e:cf:ec:5f:d7:e0:4a:5a:27:62:da:0b:bb:a9:35:
         9a:76:21:bf:e9:04:4a:d9:e3:e8:75:fc:dc:fe:5e:87:06:1d:
         32:4a:4c:2d:cd:39:ea:f3:1d:fa:f4:ce:37:54:0c:a9:86:f3:
         70:a8:40:02:4b:30:16:6b:78:57:31:76:2a:a2:82:cf:78:75:
         f6:4c:b2:cd:b3:f9:a3:f1:8f:9e:b9:57:a6:e2:d7:53:bd:89:
         e6:d9:66:55:b0:c5:4f:03:45:70:b7:48:4f:f9:d9:9d:3f:43:
         7b:8f:2a:57
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTEyOUIxMTAvBgNVBAUTKDZCQjZDN0ZERkY1QTY5QzhGRUVGNzMyRkFENUQxQjBB
NDkwQzZCN0QwHhcNMjIxMjI4MTY0MTExWhcNMjMwMTA0MTY0MTExWjAYMRYwFAYD
VQQDEw02M2FjNzFhNy1jYjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1RAkFkVmTlnmq8ndu5FX8Jv5IFj2WZO8mVMXdvnxZfNGn4qEwO2BT56K+3qN
1fHweXcnyZlSj2caHxWfNuSajpf15nQXQX7bJADfZrSczhDPYrZqiOoUw4C2bTva
SXb5yYlot6MJ5p2G/P4IHpoLc7+P/kLcu9Gl6fOCN/ilCcUk8nY5nq1xGuCrxwXv
WQH7zZs41+F29IILVOKA4GmGZhPZmfS78vmBtSDkQrDCzIJ4Jkw8jbLAr4LYXIbn
63jsPP2Ux53I2o46HjwG6p6/MaJzOLmy8wDjvMGRMrrtL+RoOLRe7utTLF3zfFUO
Meqvh9RCoMYH980ORekUyK55sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMsF/7wS
oHyal6u8idtJ0IWkmtYPMB8GA1UdIwQYMBaAFGu2x/3/WmnI/u9zL61dGwpJDGt9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTI5Qi80MDMzQzFENDM0
M0UxMUU2ODBCMUU3MkNDNEY5QUUwMi9hN2JIX2Y5YWFjai03M012clYwYkNra01h
MzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2E3YkhfZjlhYWNqLTczTXZyVjBiQ2trTWEzMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MTI5Qi80MDMzQzFENDM0M0UxMUU2ODBCMUU3MkNDNEY5QUUwMi9hN2JIX2Y5YWFj
ai03M012clYwYkNra01hMzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBwkjIt5MP1KsRjh01z0gVzdwKYpz5bcL/AkOtqrF2vpQZdCOyIhw4N
5gEMHmqgAN6p1HNQ5T3Is958w+CH+uV8R4WrRK21oMLfoJkQywl+/se2Q0KuNCVy
s1Gw/L9e9EObUIIs81idKoKqIyHajTBiSvEEiDkOtHnqp7aO5YHMSx1wB8qN+XrZ
xBdhm5PNB6F3JIYuz+xf1+BKWidi2gu7qTWadiG/6QRK2ePodfzc/l6HBh0ySkwt
zTnq8x369M43VAyphvNwqEACSzAWa3hXMXYqooLPeHX2TLLNs/mj8Y+euVem4tdT
vYnm2WZVsMVPA0Vwt0hP+dmdP0N7jypX
-----END CERTIFICATE-----