Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8EE0/1FF1D850779D11EBA66F8078C4F9AE02/DMGsjH_Dnb3vnBg59CxjS-MN1k8.mft
File:                     DMGsjH_Dnb3vnBg59CxjS-MN1k8.mft (raw, json)
Hash identifier:          u371INd2aMkBR+S7IHt+RDT9TkOGqbUBevEfKYrkUqA=
Subject key identifier:   D1:7C:14:49:27:B6:F1:81:A5:99:03:B6:4A:AB:29:39:DF:C6:83:A0
Authority key identifier: 0C:C1:AC:8C:7F:C3:9D:BD:EF:9C:18:39:F4:2C:63:4B:E3:0D:D6:4F
Certificate issuer:       /CN=A91B8EE0/serialNumber=0CC1AC8C7FC39DBDEF9C1839F42C634BE30DD64F
Certificate serial:       04A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMGsjH_Dnb3vnBg59CxjS-MN1k8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8EE0/1FF1D850779D11EBA66F8078C4F9AE02/DMGsjH_Dnb3vnBg59CxjS-MN1k8.mft
Manifest number:          04A5
Signing time:             Tue 29 Nov 2022 01:01:22 +0000
Manifest this update:     Tue 29 Nov 2022 01:01:22 +0000
Manifest next update:     Tue 06 Dec 2022 01:01:22 +0000
Files and hashes:         1: DMGsjH_Dnb3vnBg59CxjS-MN1k8.crl (hash: LlIit2l4+Qx739+ah6mRX/CslxVF4D3tY8HHQq3LQzc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1191 (0x4a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8EE0/serialNumber=0CC1AC8C7FC39DBDEF9C1839F42C634BE30DD64F
        Validity
            Not Before: Nov 29 01:01:22 2022 GMT
            Not After : Dec  6 01:01:22 2022 GMT
        Subject: CN=638559e2-8205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:70:d8:5c:51:3c:b0:7f:97:e4:b9:26:44:a9:
                    16:60:a7:1f:28:0a:9c:11:cb:8a:b9:12:67:51:72:
                    cc:1b:d0:d3:4e:61:b6:80:cc:00:60:2c:7c:b2:ab:
                    21:55:5d:8b:c6:83:3a:38:8a:7a:d2:12:9e:0b:21:
                    20:68:45:41:c4:d1:47:54:54:58:19:16:03:60:5f:
                    94:20:19:ed:61:01:3d:04:f5:63:db:e1:f5:7c:a6:
                    c9:2d:f7:e5:13:35:bc:61:52:a1:2b:e8:5d:3e:5e:
                    af:1f:fd:cb:a5:fa:0b:12:ea:96:b1:27:b3:25:91:
                    10:72:42:ee:7a:f7:fe:73:17:78:08:1f:16:b2:14:
                    4a:b9:1e:14:61:80:36:44:87:9f:0c:a6:d0:a6:a5:
                    cc:f2:ed:74:db:3f:6f:2e:d7:68:a7:02:79:0a:dd:
                    20:de:65:d6:80:28:d1:e1:72:a3:d2:e4:f7:e6:da:
                    6a:99:b5:07:91:7a:2a:45:2a:09:34:08:5a:85:f2:
                    e1:3a:f5:42:9a:a1:21:2e:2d:98:b1:4c:a1:ef:5d:
                    d3:f4:3a:00:48:b5:58:a8:12:ab:fc:18:b0:ca:a2:
                    e1:47:6d:9e:dc:da:26:cd:52:89:cc:94:87:12:61:
                    28:97:55:7c:f8:05:c3:97:6a:3e:52:97:5a:be:4a:
                    96:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7C:14:49:27:B6:F1:81:A5:99:03:B6:4A:AB:29:39:DF:C6:83:A0
            X509v3 Authority Key Identifier:
                keyid:0C:C1:AC:8C:7F:C3:9D:BD:EF:9C:18:39:F4:2C:63:4B:E3:0D:D6:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8EE0/1FF1D850779D11EBA66F8078C4F9AE02/DMGsjH_Dnb3vnBg59CxjS-MN1k8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMGsjH_Dnb3vnBg59CxjS-MN1k8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8EE0/1FF1D850779D11EBA66F8078C4F9AE02/DMGsjH_Dnb3vnBg59CxjS-MN1k8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:33:9f:01:f8:c0:72:e0:ce:b9:66:f1:4b:92:fe:1d:7e:35:
         2b:18:27:93:df:6f:2c:2e:ab:7a:d9:99:f3:73:e2:84:a0:f3:
         ab:5a:2c:00:4d:cc:58:b5:ab:2f:1f:74:01:0f:43:91:c1:6e:
         d3:0d:1b:47:f4:27:65:8c:b1:96:c2:9c:f9:8f:09:90:21:56:
         6c:0d:9a:ab:36:e7:09:b8:62:84:55:2e:99:64:f6:35:10:f2:
         e7:cb:2e:5a:53:9d:49:d8:78:f1:c9:3e:7d:3a:31:53:8f:5f:
         6c:ff:31:d0:3c:27:a1:7f:4f:c2:8f:3b:4a:8d:3e:72:01:62:
         e7:86:45:5c:13:ba:7b:65:aa:20:35:ff:43:8e:53:62:e6:5d:
         ce:18:87:1c:08:42:ea:c9:1f:26:70:e9:db:9d:9e:52:19:82:
         a2:f4:ad:ca:7b:ee:99:45:bc:bd:52:4d:51:f6:03:61:33:b2:
         24:04:2d:70:19:6e:7d:d8:ba:cb:71:d5:a0:41:7e:dc:3d:bd:
         aa:36:1d:15:98:de:23:30:8d:3d:7e:15:2e:27:61:83:f8:bc:
         b1:e7:1c:b3:27:63:6c:5e:b0:52:65:87:b6:36:20:17:30:6b:
         55:f0:8e:5d:da:06:71:6e:b4:ac:cd:22:ba:da:9a:73:de:2b:
         fd:cc:09:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----