Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA5DD/7BD3003EBA0711EBBBE11E2AC4F9AE02/8T6QbxWMdXWDqNoKbVbekaugFNo.mft
File:                     8T6QbxWMdXWDqNoKbVbekaugFNo.mft (raw, json)
Hash identifier:          VbkN4MewWahawSy/sa3JkrhCWRojtZoxfJ5Vq+vfJm0=
Subject key identifier:   12:CF:D5:29:8B:CF:3A:0E:96:AB:2C:EC:B1:C9:8D:98:A4:7A:5F:C5
Authority key identifier: F1:3E:90:6F:15:8C:75:75:83:A8:DA:0A:6D:56:DE:91:AB:A0:14:DA
Certificate issuer:       /CN=A91CA5DD/serialNumber=F13E906F158C757583A8DA0A6D56DE91ABA014DA
Certificate serial:       04ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8T6QbxWMdXWDqNoKbVbekaugFNo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA5DD/7BD3003EBA0711EBBBE11E2AC4F9AE02/8T6QbxWMdXWDqNoKbVbekaugFNo.mft
Manifest number:          04E7
Signing time:             Tue 30 Jan 2024 00:46:32 +0000
Manifest this update:     Tue 30 Jan 2024 00:46:31 +0000
Manifest next update:     Tue 06 Feb 2024 00:46:31 +0000
Files and hashes:         1: 8T6QbxWMdXWDqNoKbVbekaugFNo.crl (hash: zkoGfrTsihHeXxe+Iv2vsm9cnpzgVTMPni3cbiR9Y50=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1261 (0x4ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA5DD/serialNumber=F13E906F158C757583A8DA0A6D56DE91ABA014DA
        Validity
            Not Before: Jan 30 00:46:31 2024 GMT
            Not After : Feb  6 00:46:31 2024 GMT
        Subject: CN=65b846e7-236c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:46:82:80:9f:1b:c7:76:cf:09:fa:20:43:97:
                    18:ff:16:b6:b6:e8:cd:12:e2:d3:fd:f3:60:4d:37:
                    b9:0f:50:2b:c1:93:a9:94:43:7b:97:bb:46:a7:eb:
                    98:84:5a:7e:6e:47:e8:9c:00:c2:56:a5:ea:2e:30:
                    2a:15:b7:f6:e5:ad:35:07:63:29:7e:fb:39:df:b8:
                    31:4e:99:71:8e:8a:da:ca:cc:cc:9b:4a:34:9f:9d:
                    bd:a4:29:60:ff:e6:88:5b:f2:fa:3b:ad:ab:5e:5e:
                    d9:e6:cb:f3:08:6f:92:5e:95:46:f8:1f:2b:1f:cc:
                    43:4a:d4:e1:32:75:27:39:04:e5:ea:ed:01:bf:c0:
                    9c:6b:05:d2:10:ce:02:4a:df:1e:80:7b:81:9b:44:
                    54:b2:95:7d:34:10:d1:76:ed:4e:cc:ae:5a:9f:8d:
                    6d:2c:37:a1:05:bf:3d:79:13:6e:90:8b:d7:19:bc:
                    64:24:6f:db:75:76:1b:12:2a:ac:5d:d5:bd:52:d5:
                    f6:2f:3e:1d:20:00:c4:f7:59:2b:e9:89:28:8d:b6:
                    b0:4f:75:de:52:9f:64:1d:5c:ee:66:4d:b3:56:8f:
                    f8:7b:36:a6:a0:0b:ea:04:b2:3b:bf:39:54:2e:32:
                    4a:1f:2a:33:22:58:4d:7c:7e:62:17:d8:1e:68:69:
                    29:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:CF:D5:29:8B:CF:3A:0E:96:AB:2C:EC:B1:C9:8D:98:A4:7A:5F:C5
            X509v3 Authority Key Identifier:
                keyid:F1:3E:90:6F:15:8C:75:75:83:A8:DA:0A:6D:56:DE:91:AB:A0:14:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA5DD/7BD3003EBA0711EBBBE11E2AC4F9AE02/8T6QbxWMdXWDqNoKbVbekaugFNo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8T6QbxWMdXWDqNoKbVbekaugFNo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA5DD/7BD3003EBA0711EBBBE11E2AC4F9AE02/8T6QbxWMdXWDqNoKbVbekaugFNo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:3f:2b:14:60:60:94:90:a0:36:05:52:e1:21:d9:5d:b6:41:
         0c:0c:e0:6c:19:ca:3d:da:cf:c7:fd:4d:02:50:9e:9f:f7:5b:
         08:82:f9:14:86:63:79:1b:38:2b:ed:04:79:37:aa:d8:2e:38:
         4b:00:12:24:e2:03:25:e4:34:81:6b:e2:09:5c:5e:46:81:7f:
         f6:47:a9:bd:b3:38:a1:10:b7:81:86:20:1f:6a:d5:0d:79:cf:
         da:f0:33:b5:a2:b0:3f:4f:56:1b:cf:1f:a0:bc:06:8b:0f:3c:
         a0:2a:cd:3d:2f:7b:65:4e:55:82:4b:50:c8:a8:a8:f3:7c:7d:
         1f:51:f5:bf:7c:32:b3:bc:cf:c7:aa:b0:37:99:8f:ab:8d:bc:
         49:a8:01:41:27:59:83:71:f8:f8:e0:02:e0:99:30:9d:71:cf:
         53:65:de:4d:b8:62:3b:2f:f4:c4:7b:a5:af:ee:46:d2:8d:31:
         a9:c4:2b:51:97:bf:25:24:e9:e4:68:70:80:8a:7f:e6:94:d9:
         bc:2b:96:4f:2a:44:1f:ef:01:51:e6:11:9e:57:e2:e7:92:ef:
         59:46:10:d2:02:88:0d:49:c2:de:0b:b1:0a:43:1b:ae:87:30:
         9b:05:9c:20:85:5d:83:36:16:ee:9d:c7:e4:68:cb:01:d6:9a:
         a3:38:45:27
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0E1REQxMTAvBgNVBAUTKEYxM0U5MDZGMTU4Qzc1NzU4M0E4REEwQTZENTZERTkx
QUJBMDE0REEwHhcNMjQwMTMwMDA0NjMxWhcNMjQwMjA2MDA0NjMxWjAYMRYwFAYD
VQQDEw02NWI4NDZlNy0yMzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs0aCgJ8bx3bPCfogQ5cY/xa2tujNEuLT/fNgTTe5D1ArwZOplEN7l7tGp+uY
hFp+bkfonADCVqXqLjAqFbf25a01B2Mpfvs537gxTplxjorayszMm0o0n529pClg
/+aIW/L6O62rXl7Z5svzCG+SXpVG+B8rH8xDStThMnUnOQTl6u0Bv8CcawXSEM4C
St8egHuBm0RUspV9NBDRdu1OzK5an41tLDehBb89eRNukIvXGbxkJG/bdXYbEiqs
XdW9UtX2Lz4dIADE91kr6YkojbawT3XeUp9kHVzuZk2zVo/4ezamoAvqBLI7vzlU
LjJKHyozIlhNfH5iF9geaGkpsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBLP1SmL
zzoOlqss7LHJjZikel/FMB8GA1UdIwQYMBaAFPE+kG8VjHV1g6jaCm1W3pGroBTa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTVERC83QkQzMDAzRUJB
MDcxMUVCQkJFMTFFMkFDNEY5QUUwMi84VDZRYnhXTWRYV0RxTm9LYlZiZWthdWdG
Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhUNlFieFdNZFhXRHFOb0tiVmJla2F1Z0ZOby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QTVERC83QkQzMDAzRUJBMDcxMUVCQkJFMTFFMkFDNEY5QUUwMi84VDZRYnhXTWRY
V0RxTm9LYlZiZWthdWdGTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB6PysUYGCUkKA2BVLhIdldtkEMDOBsGco92s/H/U0CUJ6f91sIgvkU
hmN5Gzgr7QR5N6rYLjhLABIk4gMl5DSBa+IJXF5GgX/2R6m9szihELeBhiAfatUN
ec/a8DO1orA/T1Ybzx+gvAaLDzygKs09L3tlTlWCS1DIqKjzfH0fUfW/fDKzvM/H
qrA3mY+rjbxJqAFBJ1mDcfj44ALgmTCdcc9TZd5NuGI7L/TEe6Wv7kbSjTGpxCtR
l78lJOnkaHCAin/mlNm8K5ZPKkQf7wFR5hGeV+Lnku9ZRhDSAogNScLeC7EKQxuu
hzCbBZwghV2DNhbuncfkaMsB1pqjOEUn
-----END CERTIFICATE-----