Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFF35/D1FF58321D8911E2B3006AE308B02CD2/j-VflB3qs0kt8M5qsRVRtV3c2GE.mft
File:                     j-VflB3qs0kt8M5qsRVRtV3c2GE.mft (raw, json)
Hash identifier:          RPxAo4G6lYzRhvp6oQy1e88RMRIe6MNbI16Ozs8g66o=
Subject key identifier:   74:94:4C:59:92:94:8A:26:7E:EA:31:59:6B:79:64:FA:B7:44:CF:03
Authority key identifier: 8F:E5:5F:94:1D:EA:B3:49:2D:F0:CE:6A:B1:15:51:B5:5D:DC:D8:61
Certificate issuer:       /CN=A91AFF35/serialNumber=8FE55F941DEAB3492DF0CE6AB11551B55DDCD861
Certificate serial:       335F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-VflB3qs0kt8M5qsRVRtV3c2GE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AFF35/D1FF58321D8911E2B3006AE308B02CD2/j-VflB3qs0kt8M5qsRVRtV3c2GE.mft
Manifest number:          334F
Signing time:             Sun 20 Aug 2023 14:33:53 +0000
Manifest this update:     Sun 20 Aug 2023 14:33:52 +0000
Manifest next update:     Sun 27 Aug 2023 14:33:52 +0000
Files and hashes:         1: j-VflB3qs0kt8M5qsRVRtV3c2GE.crl (hash: 6y+7UnXF23N29AGN8PHkLX3ZP+orcyRA2pUNNM2yQFQ=)
                          2: FE33B958FC0F11EA9FFA082BC4F9AE02.roa (hash: ZEX3ZCaEVAZCkU2wjMsD8CBPu08E45PeYBxgM16nsXs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13151 (0x335f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AFF35/serialNumber=8FE55F941DEAB3492DF0CE6AB11551B55DDCD861
        Validity
            Not Before: Aug 20 14:33:52 2023 GMT
            Not After : Aug 27 14:33:52 2023 GMT
        Subject: CN=64e22450-b1c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6d:25:f8:5d:37:df:8a:d8:25:9e:ec:d0:f5:
                    e5:5b:07:1e:18:d3:59:ad:b4:41:e8:64:a4:64:a5:
                    9d:a8:86:61:5e:5b:79:ec:1e:69:c4:46:5e:a6:32:
                    d8:50:8b:32:1c:91:d3:ab:cd:0c:d5:2a:87:36:90:
                    a6:83:ab:a3:1e:2f:f5:46:1a:8f:c3:21:ff:bb:2a:
                    88:38:00:6a:9a:2b:49:ef:be:bb:13:5f:ca:9e:e8:
                    59:6d:93:c0:f7:62:b1:ca:a2:1f:0c:39:98:99:1b:
                    cc:b7:a5:16:64:21:e1:64:c8:9e:b8:df:d4:72:f7:
                    6b:f7:e4:ea:8f:7b:2c:ea:56:9f:9b:a8:c9:36:d1:
                    98:59:af:69:06:3b:94:d1:dc:d6:cf:5e:a6:3c:e1:
                    69:ba:b9:25:d2:99:1f:2b:3c:60:c4:97:b7:98:dd:
                    75:ec:b7:82:2e:24:75:85:0c:25:56:70:21:1d:68:
                    96:59:94:70:07:1f:ba:59:b2:9e:da:5e:b4:97:a2:
                    70:03:cf:20:da:8b:98:99:b0:7a:45:60:34:e9:cb:
                    70:21:ed:50:2f:7e:35:04:a1:58:14:db:5a:13:23:
                    a3:4d:0b:f7:52:bf:5a:f8:cb:31:f6:a4:d3:6e:ef:
                    a0:c7:97:69:22:96:e6:53:49:19:65:0b:81:1e:71:
                    aa:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:94:4C:59:92:94:8A:26:7E:EA:31:59:6B:79:64:FA:B7:44:CF:03
            X509v3 Authority Key Identifier:
                keyid:8F:E5:5F:94:1D:EA:B3:49:2D:F0:CE:6A:B1:15:51:B5:5D:DC:D8:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AFF35/D1FF58321D8911E2B3006AE308B02CD2/j-VflB3qs0kt8M5qsRVRtV3c2GE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-VflB3qs0kt8M5qsRVRtV3c2GE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFF35/D1FF58321D8911E2B3006AE308B02CD2/j-VflB3qs0kt8M5qsRVRtV3c2GE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:c6:d8:a0:c9:d9:e9:0f:6b:ff:cb:7e:ce:16:37:a5:5f:af:
         4d:6b:47:87:14:67:87:46:bc:e7:b9:11:36:58:00:74:26:11:
         9d:53:0b:09:6b:c1:42:0c:bd:c1:85:23:c1:71:04:0b:ee:2e:
         81:f3:62:07:52:cb:c5:be:f1:68:d2:44:f6:d9:df:8e:80:b6:
         26:52:93:fa:51:17:63:2b:5f:4f:84:16:6e:07:08:15:a9:c8:
         75:95:27:66:1c:66:70:90:f4:9b:74:1f:a2:46:5e:be:1d:14:
         41:a8:51:d7:90:ee:b1:07:dd:e1:31:2b:35:63:e3:cc:a2:0e:
         60:e8:70:10:3c:2d:02:2b:cc:1a:72:1d:29:6a:94:0d:78:9a:
         df:7c:2b:2d:e5:61:ef:39:28:ad:95:24:3e:4d:38:d2:ec:73:
         2c:39:34:f5:6b:ed:81:b8:ec:16:88:30:c5:9f:de:66:9a:f2:
         70:20:92:d9:49:91:04:ab:d1:62:70:bd:db:cb:bb:19:13:d6:
         15:11:1c:b4:5a:94:95:3e:54:ec:d9:81:06:60:c2:e2:b6:8d:
         3a:76:9d:fa:f2:c8:b8:c6:cc:ec:3b:27:ca:8a:a3:32:e2:84:
         1b:16:67:30:26:df:93:2a:19:56:17:a4:e0:15:20:44:b3:53:
         a8:af:40:41
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICM18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUZGMzUxMTAvBgNVBAUTKDhGRTU1Rjk0MURFQUIzNDkyREYwQ0U2QUIxMTU1MUI1
NUREQ0Q4NjEwHhcNMjMwODIwMTQzMzUyWhcNMjMwODI3MTQzMzUyWjAYMRYwFAYD
VQQDEw02NGUyMjQ1MC1iMWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqG0l+F0334rYJZ7s0PXlWwceGNNZrbRB6GSkZKWdqIZhXlt57B5pxEZepjLY
UIsyHJHTq80M1SqHNpCmg6ujHi/1RhqPwyH/uyqIOABqmitJ7767E1/KnuhZbZPA
92KxyqIfDDmYmRvMt6UWZCHhZMieuN/Ucvdr9+Tqj3ss6lafm6jJNtGYWa9pBjuU
0dzWz16mPOFpurkl0pkfKzxgxJe3mN117LeCLiR1hQwlVnAhHWiWWZRwBx+6WbKe
2l60l6JwA88g2ouYmbB6RWA06ctwIe1QL341BKFYFNtaEyOjTQv3Ur9a+Msx9qTT
bu+gx5dpIpbmU0kZZQuBHnGqswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHSUTFmS
lIomfuoxWWt5ZPq3RM8DMB8GA1UdIwQYMBaAFI/lX5Qd6rNJLfDOarEVUbVd3Nhh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkYzNS9EMUZGNTgzMjFE
ODkxMUUyQjMwMDZBRTMwOEIwMkNEMi9qLVZmbEIzcXMwa3Q4TTVxc1JWUnRWM2My
R0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2otVmZsQjNxczBrdDhNNXFzUlZSdFYzYzJHRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RkYzNS9EMUZGNTgzMjFEODkxMUUyQjMwMDZBRTMwOEIwMkNEMi9qLVZmbEIzcXMw
a3Q4TTVxc1JWUnRWM2MyR0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDGxtigydnpD2v/y37OFjelX69Na0eHFGeHRrznuRE2WAB0JhGdUwsJ
a8FCDL3BhSPBcQQL7i6B82IHUsvFvvFo0kT22d+OgLYmUpP6URdjK19PhBZuBwgV
qch1lSdmHGZwkPSbdB+iRl6+HRRBqFHXkO6xB93hMSs1Y+PMog5g6HAQPC0CK8wa
ch0papQNeJrffCst5WHvOSitlSQ+TTjS7HMsOTT1a+2BuOwWiDDFn95mmvJwIJLZ
SZEEq9FicL3by7sZE9YVERy0WpSVPlTs2YEGYMLito06dp368si4xszsOyfKiqMy
4oQbFmcwJt+TKhlWF6TgFSBEs1Oor0BB
-----END CERTIFICATE-----
Generated at Mon Aug 21 19:18:11 2023 by rpki-client on console-ams.rpki-client.org