Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B84BD/533AE67E20AB11EAB8B76119C4F9AE02/jxixthyqS2gIV7Xb2T3NPm3TFrU.mft
File:                     jxixthyqS2gIV7Xb2T3NPm3TFrU.mft (raw, json)
Hash identifier:          6AuLraZqkTxXbIkQJAYMQkbWo3tpsqYBPleDUgwM9nw=
Subject key identifier:   A1:76:99:17:F8:17:15:9C:8A:E9:91:7B:B5:82:9D:51:DF:72:D4:BC
Authority key identifier: 8F:18:B1:B6:1C:AA:4B:68:08:57:B5:DB:D9:3D:CD:3E:6D:D3:16:B5
Certificate issuer:       /CN=A91B84BD/serialNumber=8F18B1B61CAA4B680857B5DBD93DCD3E6DD316B5
Certificate serial:       0A68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxixthyqS2gIV7Xb2T3NPm3TFrU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B84BD/533AE67E20AB11EAB8B76119C4F9AE02/jxixthyqS2gIV7Xb2T3NPm3TFrU.mft
Manifest number:          0A5E
Signing time:             Tue 18 Jul 2023 05:06:12 +0000
Manifest this update:     Tue 18 Jul 2023 05:06:12 +0000
Manifest next update:     Tue 25 Jul 2023 05:06:12 +0000
Files and hashes:         1: jxixthyqS2gIV7Xb2T3NPm3TFrU.crl (hash: GpaRSqKRNcoTRjg4cOqGLxHzS80TLlWsWMO+Qws2oH8=)
                          2: 88A54AB6F1F011EC920D932DC4F9AE02.roa (hash: d1UnpAIhho4Qp7DYVab1InjGXzEEaZn/lRA1jJRE0rU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2664 (0xa68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B84BD/serialNumber=8F18B1B61CAA4B680857B5DBD93DCD3E6DD316B5
        Validity
            Not Before: Jul 18 05:06:12 2023 GMT
            Not After : Jul 25 05:06:12 2023 GMT
        Subject: CN=64b61dc4-b5fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:67:e4:30:7a:28:28:a2:fd:0f:d8:ef:9f:2b:
                    a4:e1:69:95:d1:74:0c:97:09:8f:65:5f:a6:fa:c8:
                    f8:89:be:97:a0:0f:d8:49:08:e9:7c:3a:a0:45:22:
                    8d:a0:de:a1:9f:8c:c6:92:b7:26:6a:f5:5d:24:09:
                    bc:35:fd:a5:72:3c:9f:fa:0a:c6:69:fb:8d:75:c8:
                    8d:04:e9:b1:43:c6:37:70:1e:8d:2c:bb:b0:da:cd:
                    67:97:6f:3e:70:a2:ba:86:5f:17:ff:2d:87:d9:a9:
                    af:77:ad:f6:d6:de:e1:78:2d:cb:03:12:aa:01:18:
                    84:9b:94:8c:f5:46:b5:1e:13:3b:8b:47:b1:af:82:
                    8b:4d:d6:6a:eb:d4:fd:dc:14:7e:50:9d:b0:35:2b:
                    bf:d1:36:b6:aa:24:54:55:95:31:c3:82:ad:e0:7d:
                    3d:e2:cf:b2:63:6b:44:9b:76:89:13:39:d3:0b:4a:
                    e8:be:ca:35:3f:d2:e6:15:ea:40:d6:38:19:1e:68:
                    00:83:08:71:cb:21:ab:4a:eb:11:35:3c:33:a9:a8:
                    bc:fb:f8:04:85:47:45:fd:01:61:3e:5b:21:63:4a:
                    3d:20:3b:15:5e:33:db:a8:e7:fe:dd:26:e5:44:ff:
                    38:65:4b:3f:49:2e:0d:fe:4d:10:37:20:be:aa:12:
                    fc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:76:99:17:F8:17:15:9C:8A:E9:91:7B:B5:82:9D:51:DF:72:D4:BC
            X509v3 Authority Key Identifier:
                keyid:8F:18:B1:B6:1C:AA:4B:68:08:57:B5:DB:D9:3D:CD:3E:6D:D3:16:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B84BD/533AE67E20AB11EAB8B76119C4F9AE02/jxixthyqS2gIV7Xb2T3NPm3TFrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxixthyqS2gIV7Xb2T3NPm3TFrU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B84BD/533AE67E20AB11EAB8B76119C4F9AE02/jxixthyqS2gIV7Xb2T3NPm3TFrU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:03:0b:92:ba:21:a2:f3:45:e0:b8:2c:25:61:a1:03:52:2d:
         fb:ae:fb:4b:58:cc:14:1c:f3:1a:15:d6:21:e2:77:88:2e:64:
         c7:c9:7c:62:e9:aa:9b:ca:b3:99:ff:e3:a2:c2:96:95:0e:6b:
         be:f6:ce:e7:26:04:fa:f6:e4:a2:c1:5f:e2:75:c6:45:a2:43:
         5b:6c:ea:aa:4c:84:03:92:dd:fd:e5:16:59:b2:5e:a8:04:d9:
         88:fc:ed:ba:4a:d7:81:0f:3d:79:52:6b:2d:40:22:f3:23:09:
         16:7f:c6:3b:38:44:c8:f2:09:af:f6:85:3c:b0:5f:dc:db:d3:
         02:15:ae:1c:21:31:05:0e:32:b7:2c:e2:45:f2:d6:8b:01:a3:
         9c:ef:fe:91:ff:0a:a0:33:fb:c7:0a:c4:2f:25:0c:e2:e8:c1:
         27:8e:87:28:af:be:59:ce:4b:8d:b0:e0:c4:f3:41:f2:fe:f2:
         37:b6:1d:e1:4b:88:1f:10:4a:51:84:ef:d7:fb:d0:6f:3c:84:
         49:52:ee:1e:45:98:f3:e0:b9:2a:d8:f2:ba:6e:08:45:a0:c0:
         30:79:12:01:a5:53:02:22:bc:94:52:07:c0:3b:be:87:2d:2c:
         d7:4f:6f:be:b1:66:cf:69:57:61:ba:f6:bd:48:54:16:d8:b2:
         30:b4:02:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----