Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7DFB/C8E5084CEE6F11ED8D18BD52C4F9AE02/2hN_AdcLsdPnUS4d6UFzAiXTlXA.mft
File:                     2hN_AdcLsdPnUS4d6UFzAiXTlXA.mft (raw, json)
Hash identifier:          pjFD/0OErRi/kxpkhI82oAsLttJ5CZKaGdRPZfDVKug=
Subject key identifier:   82:83:7E:2C:87:80:63:C2:3A:30:91:93:1C:4F:83:79:9D:63:D0:62
Authority key identifier: DA:13:7F:01:D7:0B:B1:D3:E7:51:2E:1D:E9:41:73:02:25:D3:95:70
Certificate issuer:       /CN=A91C7DFB/serialNumber=DA137F01D70BB1D3E7512E1DE941730225D39570
Certificate serial:       F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2hN_AdcLsdPnUS4d6UFzAiXTlXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7DFB/C8E5084CEE6F11ED8D18BD52C4F9AE02/2hN_AdcLsdPnUS4d6UFzAiXTlXA.mft
Manifest number:          F0
Signing time:             Tue 23 Jul 2024 04:53:45 +0000
Manifest this update:     Tue 23 Jul 2024 04:53:44 +0000
Manifest next update:     Tue 30 Jul 2024 04:53:44 +0000
Files and hashes:         1: 2hN_AdcLsdPnUS4d6UFzAiXTlXA.crl (hash: pxqX8WtyhjhpctHtOMvuxx2BsPR2LI034zKRfluuHSc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 249 (0xf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7DFB/serialNumber=DA137F01D70BB1D3E7512E1DE941730225D39570
        Validity
            Not Before: Jul 23 04:53:44 2024 GMT
            Not After : Jul 30 04:53:44 2024 GMT
        Subject: CN=669f3758-8165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f5:31:66:b3:e4:cf:1e:c1:93:a4:95:1e:77:
                    ed:79:c6:f9:59:2f:f6:cc:36:ae:9a:e3:e8:31:5e:
                    4a:ec:22:ce:96:29:44:04:1a:3d:40:b2:53:ce:11:
                    bd:06:58:69:59:16:58:f7:13:95:dd:2c:78:1a:f8:
                    f3:d5:dd:e5:91:d0:6a:5f:93:1e:4c:0c:a2:0e:20:
                    bc:8b:dc:4c:bc:fd:8a:95:19:e4:cf:c5:e8:4b:33:
                    12:ee:48:c4:df:23:cd:cd:f5:5c:a0:f2:0f:a5:53:
                    1f:ff:71:05:fd:1f:ec:d2:56:85:ff:2e:8b:f8:f5:
                    e6:16:be:d8:01:c0:bc:5e:20:b8:46:61:fb:c7:f8:
                    b4:d4:6b:49:c3:2c:52:da:f4:56:87:74:bb:12:e8:
                    84:f8:00:88:3d:d0:73:16:88:4a:ec:1f:43:20:b9:
                    1c:bd:11:de:4a:41:36:e5:58:e5:0b:24:49:52:a9:
                    4b:83:0f:c1:57:f1:b3:4b:22:a4:70:83:cf:6c:cf:
                    ea:57:59:34:ff:dc:d6:c1:33:fd:ad:27:1b:13:cc:
                    87:4a:68:9f:92:31:e4:b6:6f:9f:2f:17:6f:ca:74:
                    37:04:7b:24:1c:f7:27:9e:61:50:40:2e:c0:99:21:
                    40:2b:32:76:68:73:e5:f5:f3:ed:4b:5f:de:5d:06:
                    09:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:83:7E:2C:87:80:63:C2:3A:30:91:93:1C:4F:83:79:9D:63:D0:62
            X509v3 Authority Key Identifier:
                keyid:DA:13:7F:01:D7:0B:B1:D3:E7:51:2E:1D:E9:41:73:02:25:D3:95:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7DFB/C8E5084CEE6F11ED8D18BD52C4F9AE02/2hN_AdcLsdPnUS4d6UFzAiXTlXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2hN_AdcLsdPnUS4d6UFzAiXTlXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7DFB/C8E5084CEE6F11ED8D18BD52C4F9AE02/2hN_AdcLsdPnUS4d6UFzAiXTlXA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:9f:d2:7d:c1:ec:cc:64:0a:69:b6:36:73:e2:d7:15:77:bd:
         bc:58:2d:f5:65:71:1e:a9:36:35:6e:74:e2:66:52:5b:11:3b:
         a4:bd:5a:66:09:61:73:e7:b8:66:da:33:6f:1a:50:3a:a4:62:
         9d:e7:b7:dd:a8:a3:f9:34:55:c2:af:83:88:5c:21:99:22:57:
         87:72:46:72:37:ae:89:f8:23:fd:0b:ff:23:1e:69:06:f9:ca:
         c8:69:45:2c:c1:5f:9d:dc:e6:69:78:87:58:9f:9f:6f:d6:0d:
         cd:48:ea:5d:96:99:76:8a:c3:56:a1:f3:21:22:ca:b0:aa:6b:
         7b:70:52:f3:f0:a5:58:72:7e:b1:9e:80:33:ba:79:f9:b1:3d:
         2b:e0:11:cf:ad:02:56:3b:93:83:c8:be:42:30:8e:be:92:e6:
         a2:d4:2d:93:d2:29:62:12:81:3f:92:67:6b:02:47:0d:d1:3b:
         96:2e:16:57:41:a9:e9:1b:31:be:2a:27:b2:74:ec:61:7e:96:
         42:aa:fb:6a:2d:6b:8a:fd:49:a3:02:de:46:74:b1:4b:4b:bf:
         14:db:85:ad:fd:83:fd:b2:46:a2:2d:91:d8:1c:cf:c6:79:c6:
         ac:6c:d8:6d:aa:53:d5:77:4d:d4:27:ec:77:bf:13:34:51:9e:
         4d:0a:39:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----