Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3A9D/0C773030FFF211EBBEBFDD85C4F9AE02/BPDOdkeXDY39bY1viK83cp-XO98.mft
File:                     BPDOdkeXDY39bY1viK83cp-XO98.mft (raw, json)
Hash identifier:          pkVfFhMgW9byeM3N02Uk9w+dzVqFpWtZzfMjRjSXF9E=
Subject key identifier:   E3:BB:0A:8F:FC:96:F1:62:C4:FA:B7:5D:E8:D4:11:4B:9D:E0:2A:23
Authority key identifier: 04:F0:CE:76:47:97:0D:8D:FD:6D:8D:6F:88:AF:37:72:9F:97:3B:DF
Certificate issuer:       /CN=A91C3A9D/serialNumber=04F0CE7647970D8DFD6D8D6F88AF37729F973BDF
Certificate serial:       02D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPDOdkeXDY39bY1viK83cp-XO98.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3A9D/0C773030FFF211EBBEBFDD85C4F9AE02/BPDOdkeXDY39bY1viK83cp-XO98.mft
Manifest number:          02D2
Signing time:             Mon 15 Aug 2022 06:30:55 +0000
Manifest this update:     Mon 15 Aug 2022 06:30:54 +0000
Manifest next update:     Wed 17 Aug 2022 06:30:54 +0000
Files and hashes:         1: BPDOdkeXDY39bY1viK83cp-XO98.crl (hash: rtg9nOaP6OQ+Tnp+JAlRMM63iCGbq5CEItfYNJt9FaQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 722 (0x2d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3A9D/serialNumber=04F0CE7647970D8DFD6D8D6F88AF37729F973BDF
        Validity
            Not Before: Aug 15 06:30:54 2022 GMT
            Not After : Aug 17 06:30:54 2022 GMT
        Subject: CN=62f9e81e-4ee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:79:58:af:d4:95:b7:1c:07:fe:56:5a:68:94:
                    14:eb:bc:cd:19:c8:fd:24:bb:1d:89:67:30:73:56:
                    b3:72:90:f0:f2:29:2e:a8:b6:f1:6c:15:cc:f1:9f:
                    0c:e0:ad:70:3c:e9:db:16:1d:a9:73:1c:ee:6f:d8:
                    12:02:6f:36:bc:e4:2f:fe:15:4c:66:45:31:20:5f:
                    73:e0:b7:10:57:2c:99:e2:61:e7:a6:d4:a9:f2:4f:
                    ba:22:57:78:05:97:c3:5e:40:4d:bb:6f:e6:15:37:
                    c4:76:1b:24:10:b4:72:ba:8b:8b:22:c4:18:41:f0:
                    a3:ce:40:ec:64:25:36:23:01:11:93:bc:ca:d5:1f:
                    0d:a9:36:2d:4c:f1:25:e5:10:9f:5b:33:6a:e3:94:
                    5f:26:a0:f6:4b:bb:3e:da:a7:ff:ca:5e:26:60:ff:
                    c1:32:ba:89:14:c7:5c:92:9a:b5:d8:8d:93:86:5d:
                    11:6d:3c:92:c7:68:a6:be:6e:7f:39:5a:14:5c:81:
                    cf:f5:49:32:f6:74:d7:f6:60:bd:45:50:2d:29:36:
                    ae:28:59:e3:70:d7:61:28:f0:9c:81:f5:29:28:81:
                    d2:11:d3:14:c0:73:e2:cf:ae:74:78:7e:ef:3d:2e:
                    d6:95:6d:b1:80:c3:06:27:1b:9b:3c:48:d5:29:4d:
                    95:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:BB:0A:8F:FC:96:F1:62:C4:FA:B7:5D:E8:D4:11:4B:9D:E0:2A:23
            X509v3 Authority Key Identifier:
                keyid:04:F0:CE:76:47:97:0D:8D:FD:6D:8D:6F:88:AF:37:72:9F:97:3B:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3A9D/0C773030FFF211EBBEBFDD85C4F9AE02/BPDOdkeXDY39bY1viK83cp-XO98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPDOdkeXDY39bY1viK83cp-XO98.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3A9D/0C773030FFF211EBBEBFDD85C4F9AE02/BPDOdkeXDY39bY1viK83cp-XO98.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:d5:76:ac:91:66:c6:7a:c5:2f:10:ac:2f:fe:87:a3:c3:67:
         10:30:6b:ef:ab:85:19:0e:f3:f6:de:eb:85:a9:84:0e:0e:4d:
         8f:59:05:f0:62:c8:00:57:35:64:fd:de:d1:2e:9b:3d:e7:3d:
         73:67:a0:86:1a:a5:f4:b1:da:61:1b:43:28:e3:ba:6f:53:e5:
         6b:cb:1c:23:f7:9a:68:71:b1:73:03:1d:0c:d4:97:d4:9e:12:
         a7:82:7e:9b:29:2e:d7:28:f9:13:de:52:4a:5d:5d:a0:77:f8:
         b4:0f:51:4a:99:45:2c:b8:94:be:95:80:f9:03:8c:f2:df:dd:
         02:5c:49:a7:25:6c:68:65:dc:c0:64:dd:60:fd:59:b5:67:7d:
         ca:73:e1:f8:1c:c8:67:2b:d8:01:6c:32:a5:8e:6a:7f:0f:84:
         63:48:fd:6f:66:f7:a4:ef:f1:39:d8:cf:0f:f0:3d:3e:2f:75:
         d8:0f:6d:5f:70:8f:f0:a1:40:c1:15:e8:7c:21:bf:65:39:0f:
         c4:e4:bf:8a:f5:f5:4e:98:78:12:5e:23:60:25:af:56:a3:06:
         20:5f:12:da:b7:e2:e9:78:e6:b5:a1:02:8a:9b:65:43:2d:8c:
         3e:67:a8:0d:bd:0a:55:bc:13:4d:47:cf:eb:b1:ee:b2:c5:d3:
         c1:55:51:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----