Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C984B/F32F001401D811ED9C85F851C4F9AE02/OoMCQuhO3HZaBzEgrCTwQA5PYEY.mft
File:                     OoMCQuhO3HZaBzEgrCTwQA5PYEY.mft (raw, json)
Hash identifier:          ur9lSq6tgTdAPSuyohtK0TdsLas2uOAXUR6fweSmmVs=
Subject key identifier:   46:D3:9F:65:CF:14:E0:B0:79:6E:E3:D3:4F:68:A5:BB:BA:3D:9A:02
Authority key identifier: 3A:83:02:42:E8:4E:DC:76:5A:07:31:20:AC:24:F0:40:0E:4F:60:46
Certificate issuer:       /CN=A91C984B/serialNumber=3A830242E84EDC765A073120AC24F0400E4F6046
Certificate serial:       01EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoMCQuhO3HZaBzEgrCTwQA5PYEY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C984B/F32F001401D811ED9C85F851C4F9AE02/OoMCQuhO3HZaBzEgrCTwQA5PYEY.mft
Manifest number:          01E9
Signing time:             Fri 21 Jun 2024 05:04:14 +0000
Manifest this update:     Fri 21 Jun 2024 05:04:13 +0000
Manifest next update:     Fri 28 Jun 2024 05:04:13 +0000
Files and hashes:         1: OoMCQuhO3HZaBzEgrCTwQA5PYEY.crl (hash: hULJU/1doihcz9s02dR7b03/C/4vGXObWprImm4wmKU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 495 (0x1ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C984B/serialNumber=3A830242E84EDC765A073120AC24F0400E4F6046
        Validity
            Not Before: Jun 21 05:04:13 2024 GMT
            Not After : Jun 28 05:04:13 2024 GMT
        Subject: CN=667509ce-c950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9a:88:58:db:0a:75:e0:d5:52:6a:f9:19:58:
                    8c:8d:f5:31:5c:c3:ac:ff:c0:bb:6f:b7:25:0b:8a:
                    05:98:8e:0c:0a:65:13:80:41:c1:49:34:fc:89:19:
                    8d:08:4b:5c:50:69:78:59:79:bf:be:6a:c5:27:4a:
                    ab:94:60:21:3e:84:fa:3a:b1:13:04:17:12:b1:71:
                    4c:e9:8d:35:b1:9e:e5:ec:9c:0d:80:6b:8d:64:b7:
                    d3:aa:35:69:8b:13:e5:9e:a4:02:8b:03:a9:09:07:
                    1f:28:bb:4a:ff:8d:75:f5:a7:e9:02:c7:9e:6f:b4:
                    79:2c:80:00:4b:70:92:74:82:32:c3:70:96:c4:44:
                    23:78:84:18:02:ab:d1:91:28:d1:60:56:67:79:33:
                    3d:20:1b:b1:ce:7e:ed:9a:47:fb:e8:45:b7:cb:6f:
                    98:bb:2c:11:c9:c6:ce:10:72:75:11:d5:09:ad:cd:
                    94:2e:7f:13:77:fd:2f:c6:c2:61:e7:06:a5:1f:4d:
                    8f:9a:54:b5:1d:36:92:b6:e1:59:de:66:38:ca:70:
                    72:80:29:15:34:8c:71:15:13:cb:de:ea:2f:ea:f6:
                    4b:32:ae:6b:ea:57:69:af:10:f6:fe:cd:df:e6:16:
                    c6:54:fc:14:3e:38:d8:20:e1:fc:a6:84:e4:15:15:
                    3a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D3:9F:65:CF:14:E0:B0:79:6E:E3:D3:4F:68:A5:BB:BA:3D:9A:02
            X509v3 Authority Key Identifier:
                keyid:3A:83:02:42:E8:4E:DC:76:5A:07:31:20:AC:24:F0:40:0E:4F:60:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C984B/F32F001401D811ED9C85F851C4F9AE02/OoMCQuhO3HZaBzEgrCTwQA5PYEY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoMCQuhO3HZaBzEgrCTwQA5PYEY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C984B/F32F001401D811ED9C85F851C4F9AE02/OoMCQuhO3HZaBzEgrCTwQA5PYEY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:84:be:ae:fd:3a:8e:17:cc:2d:ae:06:72:35:a2:de:0f:f3:
         42:89:07:74:90:81:66:99:dc:3d:52:8a:7c:64:a5:4a:45:56:
         7c:10:33:2f:41:ee:54:36:d1:dd:c8:ce:62:e4:13:d0:2e:8b:
         92:6e:7a:48:6a:f5:d5:14:af:b1:26:3a:ee:ca:81:7c:ed:57:
         e0:41:a5:a5:71:fb:3b:81:7b:83:29:9b:21:99:1b:ef:0c:e4:
         5a:4d:2f:c0:34:fa:40:27:c4:7e:81:0c:61:25:77:da:c9:c7:
         4f:44:ea:4a:7d:9a:b1:d1:f8:7f:a1:36:cd:7d:85:59:f3:44:
         45:c6:64:09:86:a8:eb:32:53:d7:38:d5:24:6b:b3:58:92:32:
         49:ae:46:90:84:c1:ad:08:06:e1:90:06:72:82:f8:10:fc:eb:
         e2:d3:9c:6b:fd:d5:d0:ec:8c:4f:36:00:10:3d:60:f3:6f:ac:
         4b:16:4c:73:88:2b:64:97:06:aa:4c:2b:a0:1b:cb:5e:14:8a:
         98:32:df:3a:74:29:32:65:8b:9a:14:b4:05:1b:fd:71:b0:c6:
         d1:46:c0:43:2e:01:3a:6d:48:b6:82:ab:b5:30:c5:64:35:cf:
         dd:10:a6:77:39:88:7e:7f:2a:4f:60:e5:9d:16:63:4b:3d:9f:
         4b:71:52:8c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzk4NEIxMTAvBgNVBAUTKDNBODMwMjQyRTg0RURDNzY1QTA3MzEyMEFDMjRGMDQw
MEU0RjYwNDYwHhcNMjQwNjIxMDUwNDEzWhcNMjQwNjI4MDUwNDEzWjAYMRYwFAYD
VQQDEw02Njc1MDljZS1jOTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt5qIWNsKdeDVUmr5GViMjfUxXMOs/8C7b7clC4oFmI4MCmUTgEHBSTT8iRmN
CEtcUGl4WXm/vmrFJ0qrlGAhPoT6OrETBBcSsXFM6Y01sZ7l7JwNgGuNZLfTqjVp
ixPlnqQCiwOpCQcfKLtK/4119afpAseeb7R5LIAAS3CSdIIyw3CWxEQjeIQYAqvR
kSjRYFZneTM9IBuxzn7tmkf76EW3y2+YuywRycbOEHJ1EdUJrc2ULn8Td/0vxsJh
5walH02PmlS1HTaStuFZ3mY4ynBygCkVNIxxFRPL3uov6vZLMq5r6ldprxD2/s3f
5hbGVPwUPjjYIOH8poTkFRU6mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEbTn2XP
FOCweW7j009opbu6PZoCMB8GA1UdIwQYMBaAFDqDAkLoTtx2WgcxIKwk8EAOT2BG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTg0Qi9GMzJGMDAxNDAx
RDgxMUVEOUM4NUY4NTFDNEY5QUUwMi9Pb01DUXVoTzNIWmFCekVnckNUd1FBNVBZ
RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09vTUNRdWhPM0haYUJ6RWdyQ1R3UUE1UFlFWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OTg0Qi9GMzJGMDAxNDAxRDgxMUVEOUM4NUY4NTFDNEY5QUUwMi9Pb01DUXVoTzNI
WmFCekVnckNUd1FBNVBZRVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAmhL6u/TqOF8wtrgZyNaLeD/NCiQd0kIFmmdw9Uop8ZKVKRVZ8EDMv
Qe5UNtHdyM5i5BPQLouSbnpIavXVFK+xJjruyoF87VfgQaWlcfs7gXuDKZshmRvv
DORaTS/ANPpAJ8R+gQxhJXfaycdPROpKfZqx0fh/oTbNfYVZ80RFxmQJhqjrMlPX
ONUka7NYkjJJrkaQhMGtCAbhkAZygvgQ/Ovi05xr/dXQ7IxPNgAQPWDzb6xLFkxz
iCtklwaqTCugG8teFIqYMt86dCkyZYuaFLQFG/1xsMbRRsBDLgE6bUi2gqu1MMVk
Nc/dEKZ3OYh+fypPYOWdFmNLPZ9LcVKM
-----END CERTIFICATE-----