Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB2D3/801BEE324DA011EAA418D03BC4F9AE02/j6Pt6bkDU3V5se9Bo38DwEHnzfA.mft
File:                     j6Pt6bkDU3V5se9Bo38DwEHnzfA.mft (raw, json)
Hash identifier:          fFmDVNFra0OhfmZYgu51iufAaJ5JEgranPaN8vMEfCI=
Subject key identifier:   E6:8D:10:18:6C:C9:AB:DA:DE:E6:F2:95:79:8E:49:4F:9B:7E:B7:BD
Authority key identifier: 8F:A3:ED:E9:B9:03:53:75:79:B1:EF:41:A3:7F:03:C0:41:E7:CD:F0
Certificate issuer:       /CN=A91BB2D3/serialNumber=8FA3EDE9B903537579B1EF41A37F03C041E7CDF0
Certificate serial:       0970
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6Pt6bkDU3V5se9Bo38DwEHnzfA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB2D3/801BEE324DA011EAA418D03BC4F9AE02/j6Pt6bkDU3V5se9Bo38DwEHnzfA.mft
Manifest number:          0968
Signing time:             Wed 14 Jun 2023 02:01:57 +0000
Manifest this update:     Wed 14 Jun 2023 02:01:56 +0000
Manifest next update:     Wed 21 Jun 2023 02:01:56 +0000
Files and hashes:         1: j6Pt6bkDU3V5se9Bo38DwEHnzfA.crl (hash: fkluZxj4UQWRvkDf4Bcco598c0jU2nxCGc5K8yIGPoI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2416 (0x970)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB2D3/serialNumber=8FA3EDE9B903537579B1EF41A37F03C041E7CDF0
        Validity
            Not Before: Jun 14 02:01:56 2023 GMT
            Not After : Jun 21 02:01:56 2023 GMT
        Subject: CN=64891f95-a81d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3e:15:3a:cd:74:25:a7:8a:31:81:c8:43:3d:
                    e9:60:2b:eb:48:e3:ab:b0:1c:37:5d:cb:a8:c1:f6:
                    34:88:22:bf:71:e2:14:b0:b9:2e:3a:26:d4:d9:aa:
                    a3:67:ba:e9:82:e8:88:41:e4:f7:20:a4:2e:17:57:
                    5f:5b:a5:d6:89:0a:96:cc:a2:bb:27:43:80:35:3f:
                    03:cb:7f:91:b8:a9:5d:2a:ff:24:13:ac:17:bc:34:
                    b4:05:7f:a0:8e:05:a1:41:fb:e0:f8:28:be:ab:89:
                    17:ea:04:e1:c9:47:98:db:fd:12:b0:b0:2b:c6:fc:
                    42:f7:8a:e8:10:e7:8f:65:48:a0:51:4f:a7:71:9f:
                    47:ab:48:1d:b3:68:bc:87:89:37:72:ae:db:fd:68:
                    33:0d:64:7a:53:41:f3:22:87:50:9b:b8:21:ca:35:
                    cd:63:ea:b9:5c:f3:42:3b:c2:f6:25:72:08:51:ae:
                    81:36:9c:23:60:55:8a:4b:0a:6f:22:c7:91:1a:15:
                    38:17:53:1d:56:ac:db:b4:dc:7a:2f:c1:0d:a9:5b:
                    5f:92:53:b3:d7:19:2a:23:57:a9:d4:b0:1c:af:bf:
                    ac:7f:5e:e8:b9:d5:9e:6b:e6:ee:40:0e:03:92:68:
                    25:5a:b8:51:e2:60:41:74:73:a2:61:11:75:4f:bb:
                    bc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:8D:10:18:6C:C9:AB:DA:DE:E6:F2:95:79:8E:49:4F:9B:7E:B7:BD
            X509v3 Authority Key Identifier:
                keyid:8F:A3:ED:E9:B9:03:53:75:79:B1:EF:41:A3:7F:03:C0:41:E7:CD:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB2D3/801BEE324DA011EAA418D03BC4F9AE02/j6Pt6bkDU3V5se9Bo38DwEHnzfA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6Pt6bkDU3V5se9Bo38DwEHnzfA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB2D3/801BEE324DA011EAA418D03BC4F9AE02/j6Pt6bkDU3V5se9Bo38DwEHnzfA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:ef:60:0e:80:92:29:64:fd:83:32:b8:ed:30:60:b3:de:4c:
         75:d3:b3:50:cb:0b:e7:b3:21:f2:6c:1a:4d:10:49:ad:91:1b:
         67:8d:3f:cf:a9:6f:ef:17:e7:82:0a:96:73:65:fa:44:ee:8a:
         d3:db:94:06:c5:3b:ac:5a:b5:c2:c7:f8:0e:43:3e:7d:96:23:
         1d:81:7c:17:51:5c:59:4c:6d:f7:46:3d:6a:0a:a5:51:f3:9f:
         d6:de:e5:e7:27:46:b8:18:e6:fe:1a:b2:ef:63:bb:24:61:57:
         ff:09:d4:49:22:cd:a7:71:36:72:7f:14:cf:a6:d8:fe:bb:e3:
         f0:34:ee:79:28:39:51:e1:df:d2:a4:fc:6f:69:ea:97:0c:47:
         11:bf:e9:aa:a4:08:c4:6f:9e:f2:b8:0d:4a:00:92:8f:a5:98:
         fb:3b:1d:b0:fa:48:74:96:39:93:18:e2:f6:98:e4:63:91:70:
         e9:df:e9:74:35:2b:28:23:73:ce:05:50:72:1a:8b:4a:30:f5:
         7a:0c:d1:d8:65:84:c0:48:c5:c0:dd:ce:c4:97:00:d2:1f:ee:
         f3:e5:c0:52:a5:3d:57:ba:7c:0c:da:42:52:5f:a2:7a:2f:97:
         88:6a:16:1c:c5:93:52:00:f6:f6:ba:d7:21:8d:31:17:e8:95:
         09:eb:e4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----