Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCAB4/6AA6872AEFE911E9B1993352C4F9AE02/Z2DvJRw36wzx64XIR11qpwE7Khg.mft
File:                     Z2DvJRw36wzx64XIR11qpwE7Khg.mft (raw, json)
Hash identifier:          gc/+NFZIhABYvzCi6Xc29x56i0cik+i7u9qB7ObCm4U=
Subject key identifier:   5D:D1:31:EC:8C:58:AA:62:5A:CB:57:55:15:A3:3F:EB:50:8B:0D:93
Authority key identifier: 67:60:EF:25:1C:37:EB:0C:F1:EB:85:C8:47:5D:6A:A7:01:3B:2A:18
Certificate issuer:       /CN=A91BCAB4/serialNumber=6760EF251C37EB0CF1EB85C8475D6AA7013B2A18
Certificate serial:       09CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z2DvJRw36wzx64XIR11qpwE7Khg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BCAB4/6AA6872AEFE911E9B1993352C4F9AE02/Z2DvJRw36wzx64XIR11qpwE7Khg.mft
Manifest number:          09C5
Signing time:             Wed 01 Jun 2022 01:12:59 +0000
Manifest this update:     Wed 01 Jun 2022 01:12:59 +0000
Manifest next update:     Fri 03 Jun 2022 01:12:59 +0000
Files and hashes:         1: Z2DvJRw36wzx64XIR11qpwE7Khg.crl (hash: j30KeNi4aoQKwoJ+EHA2HSpGlCUnPMs7nhr/7GA3Gm0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2506 (0x9ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BCAB4/serialNumber=6760EF251C37EB0CF1EB85C8475D6AA7013B2A18
        Validity
            Not Before: Jun  1 01:12:59 2022 GMT
            Not After : Jun  3 01:12:59 2022 GMT
        Subject: CN=6296bd1b-f906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:db:26:bb:11:dd:a0:79:24:5e:60:04:cf:80:
                    86:20:00:9d:ae:62:29:c5:c3:63:eb:08:be:68:f3:
                    40:a7:19:d6:12:03:84:06:ee:1b:e5:26:83:72:91:
                    d5:74:15:c7:bb:8c:f0:34:c3:41:0b:1a:31:ba:ce:
                    ec:bd:25:b8:80:a9:46:96:4f:d4:d7:7e:2c:67:e8:
                    4c:54:62:a0:ee:05:6f:d5:d5:3c:4b:3c:0f:ed:e6:
                    d3:ad:79:65:0c:f6:5c:14:57:da:eb:85:47:98:e6:
                    c4:5d:86:ec:09:cd:c4:f2:4f:61:9d:42:62:da:9b:
                    c2:15:20:17:f4:4e:87:b6:20:cb:e4:a9:6d:1a:4c:
                    27:49:9f:09:5d:df:aa:ad:00:e6:be:04:40:c8:0d:
                    e2:24:a2:9c:35:24:a4:48:64:65:d5:f2:49:e6:9d:
                    f1:64:18:a0:47:b2:e2:8c:83:fa:de:4c:cc:ad:66:
                    f7:45:ba:54:fb:36:71:7d:88:9b:43:6e:5b:f8:d4:
                    af:8a:86:52:9c:94:9e:63:f8:a2:75:d8:b4:54:4d:
                    b6:e7:2a:1d:7b:6c:ea:05:25:bc:a5:a6:ae:03:6b:
                    e4:d2:76:14:1d:a0:ff:73:00:7b:94:24:d4:2b:a8:
                    21:2f:8e:67:26:04:c1:44:96:a0:39:46:56:11:06:
                    aa:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D1:31:EC:8C:58:AA:62:5A:CB:57:55:15:A3:3F:EB:50:8B:0D:93
            X509v3 Authority Key Identifier:
                keyid:67:60:EF:25:1C:37:EB:0C:F1:EB:85:C8:47:5D:6A:A7:01:3B:2A:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BCAB4/6AA6872AEFE911E9B1993352C4F9AE02/Z2DvJRw36wzx64XIR11qpwE7Khg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z2DvJRw36wzx64XIR11qpwE7Khg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCAB4/6AA6872AEFE911E9B1993352C4F9AE02/Z2DvJRw36wzx64XIR11qpwE7Khg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:55:e2:45:8b:3c:15:e3:97:29:4f:68:25:b7:3a:c1:e3:c3:
         f5:0e:23:5a:d7:9c:54:72:88:90:e0:76:1c:6f:cc:51:1e:40:
         c5:cd:30:c5:5f:ad:18:28:a3:f1:6b:92:38:c1:7e:07:84:dc:
         6b:9d:87:db:12:28:14:cf:34:3d:1c:4d:69:4d:5a:9e:ca:77:
         44:02:85:e2:3f:0d:36:88:fd:31:29:71:d3:a0:e0:3f:23:28:
         b3:bf:48:9c:31:18:bb:c9:2b:af:6c:5d:35:58:ef:c8:6c:bc:
         66:69:4c:02:73:63:b0:b1:cd:00:46:63:03:fc:f9:7e:f5:e7:
         0d:86:eb:c5:34:25:52:23:fe:fb:3a:d6:bb:25:a5:50:f5:6c:
         ef:d8:37:17:dc:50:bd:83:96:4d:e6:15:50:9a:e0:b8:a0:e4:
         f1:f4:a1:36:68:be:e6:b0:d2:d3:24:6e:3a:10:01:0d:dd:88:
         a7:1b:a7:af:fa:8d:ea:ec:0c:65:f1:b4:f4:9c:cd:27:07:c5:
         01:9b:03:ea:e0:b3:60:97:8d:6d:42:23:96:d1:e9:72:b0:69:
         e2:d9:cc:a5:f1:90:31:e1:4c:64:8c:b7:af:2d:75:d6:d1:33:
         8a:bc:e1:2c:62:ee:f9:1e:a1:14:63:14:34:51:93:b7:de:3b:
         2b:63:e6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----