Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAC41/BA57EE381D8911E28E1630E308B02CD2/NEky8UqDlKfFRYa9Idpe461Ka7g.mft
File:                     NEky8UqDlKfFRYa9Idpe461Ka7g.mft (raw, json)
Hash identifier:          Gi/CiZ4d541MnuBkZwN92px5GElHXpAyF3tG7Iu90ww=
Subject key identifier:   54:8B:FE:0D:27:87:A4:26:3A:D7:F5:F9:FF:92:16:F5:18:F2:8D:12
Authority key identifier: 34:49:32:F1:4A:83:94:A7:C5:45:86:BD:21:DA:5E:E3:AD:4A:6B:B8
Certificate issuer:       /CN=A91CAC41/serialNumber=344932F14A8394A7C54586BD21DA5EE3AD4A6BB8
Certificate serial:       3278
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEky8UqDlKfFRYa9Idpe461Ka7g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CAC41/BA57EE381D8911E28E1630E308B02CD2/NEky8UqDlKfFRYa9Idpe461Ka7g.mft
Manifest number:          3278
Signing time:             Wed 14 Sep 2022 14:37:28 +0000
Manifest this update:     Wed 14 Sep 2022 14:37:28 +0000
Manifest next update:     Fri 16 Sep 2022 14:37:28 +0000
Files and hashes:         1: NEky8UqDlKfFRYa9Idpe461Ka7g.crl (hash: Fhu1iq9wfHG2oNnEjZLAlqSGifg9urmrRTUyOTBNaCs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12920 (0x3278)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CAC41/serialNumber=344932F14A8394A7C54586BD21DA5EE3AD4A6BB8
        Validity
            Not Before: Sep 14 14:37:28 2022 GMT
            Not After : Sep 16 14:37:28 2022 GMT
        Subject: CN=6321e728-3b29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:38:d9:f0:d2:9c:94:9a:2d:1e:8d:80:ea:9b:
                    b1:28:b6:2e:ed:1e:10:32:82:2c:bd:ff:4d:b9:9f:
                    de:30:6a:af:38:e5:e9:ed:e8:0c:a5:84:21:90:b0:
                    2d:b4:c7:a8:93:b9:f6:f2:d3:c5:76:ff:ac:69:31:
                    55:4d:d0:fb:66:1d:02:1c:f9:c2:34:64:04:ae:50:
                    68:aa:96:9b:2f:28:a2:62:e6:61:32:8d:03:f3:d6:
                    31:f5:5e:bf:8d:3e:e8:8f:d0:66:38:98:da:52:af:
                    bf:90:a4:a2:8a:0c:f3:a8:9e:78:11:ad:f8:76:62:
                    99:56:79:b9:96:6b:53:cf:6a:e1:a4:54:65:11:d2:
                    23:0b:a1:ab:4e:76:d2:2b:b5:b3:97:74:b6:52:3c:
                    f5:c2:f3:07:95:13:41:13:45:92:c1:ad:f3:91:b0:
                    e0:65:f7:11:13:fa:2a:a9:d4:fb:d2:f3:32:05:96:
                    d9:00:f3:42:7e:58:3e:3c:8c:4c:ba:d8:c9:da:2c:
                    09:9a:6f:02:df:47:9f:b3:78:09:f6:1a:df:77:3a:
                    01:41:9d:06:4b:07:13:06:0b:86:96:90:c1:1b:a9:
                    58:d1:a7:15:1b:98:af:d0:d3:ec:a7:bd:51:c2:b9:
                    ee:77:be:e7:ef:26:4c:bc:fb:48:7e:c3:e9:5c:45:
                    34:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:8B:FE:0D:27:87:A4:26:3A:D7:F5:F9:FF:92:16:F5:18:F2:8D:12
            X509v3 Authority Key Identifier:
                keyid:34:49:32:F1:4A:83:94:A7:C5:45:86:BD:21:DA:5E:E3:AD:4A:6B:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CAC41/BA57EE381D8911E28E1630E308B02CD2/NEky8UqDlKfFRYa9Idpe461Ka7g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEky8UqDlKfFRYa9Idpe461Ka7g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAC41/BA57EE381D8911E28E1630E308B02CD2/NEky8UqDlKfFRYa9Idpe461Ka7g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:d1:a7:2e:a9:03:ad:29:04:1f:cb:57:48:18:ad:4b:e3:04:
         91:97:e3:5f:11:56:f2:69:ee:45:54:69:a8:9a:cb:8e:d6:40:
         2d:af:8a:db:31:dd:5c:34:e8:84:f9:8d:66:db:7f:4f:2f:1b:
         e8:b3:f7:db:56:bc:41:b4:09:bf:7e:03:b2:13:ba:3c:2f:d2:
         d1:80:53:19:eb:34:06:28:e3:5a:31:7f:a4:8a:20:95:76:36:
         3f:91:1d:0c:74:da:fb:2f:2f:5f:6f:35:f6:40:db:78:bd:72:
         01:97:ec:67:9b:95:3a:e4:43:98:86:a1:bc:df:8c:e2:2d:67:
         f0:c4:1b:92:63:b9:c3:e5:bf:37:f5:d1:4a:44:3b:e5:7a:8c:
         9f:57:69:88:29:82:61:50:f1:57:ed:79:70:ff:1d:2e:0a:9d:
         8b:9f:28:2a:65:7d:24:65:7e:76:11:ae:1b:37:d6:32:fd:70:
         16:dc:d5:d4:5d:c5:c8:c4:2b:20:c1:6a:e6:0d:65:bc:38:e4:
         8a:1e:1c:d3:41:35:2e:63:61:0c:35:38:41:dc:e4:5d:53:8a:
         7a:12:64:c3:58:a0:42:79:0b:b1:d2:1a:33:1c:18:90:91:e9:
         17:63:da:41:ce:cb:f5:01:c3:4f:c3:95:5f:97:46:30:69:ca:
         ba:c0:dd:c6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICMngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0FDNDExMTAvBgNVBAUTKDM0NDkzMkYxNEE4Mzk0QTdDNTQ1ODZCRDIxREE1RUUz
QUQ0QTZCQjgwHhcNMjIwOTE0MTQzNzI4WhcNMjIwOTE2MTQzNzI4WjAYMRYwFAYD
VQQDEw02MzIxZTcyOC0zYjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7jjZ8NKclJotHo2A6puxKLYu7R4QMoIsvf9NuZ/eMGqvOOXp7egMpYQhkLAt
tMeok7n28tPFdv+saTFVTdD7Zh0CHPnCNGQErlBoqpabLyiiYuZhMo0D89Yx9V6/
jT7oj9BmOJjaUq+/kKSiigzzqJ54Ea34dmKZVnm5lmtTz2rhpFRlEdIjC6GrTnbS
K7Wzl3S2Ujz1wvMHlRNBE0WSwa3zkbDgZfcRE/oqqdT70vMyBZbZAPNCflg+PIxM
utjJ2iwJmm8C30efs3gJ9hrfdzoBQZ0GSwcTBguGlpDBG6lY0acVG5iv0NPsp71R
wrnud77n7yZMvPtIfsPpXEU0nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFSL/g0n
h6QmOtf1+f+SFvUY8o0SMB8GA1UdIwQYMBaAFDRJMvFKg5SnxUWGvSHaXuOtSmu4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUM0MS9CQTU3RUUzODFE
ODkxMUUyOEUxNjMwRTMwOEIwMkNEMi9ORWt5OFVxRGxLZkZSWWE5SWRwZTQ2MUth
N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05Fa3k4VXFEbEtmRlJZYTlJZHBlNDYxS2E3Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QUM0MS9CQTU3RUUzODFEODkxMUUyOEUxNjMwRTMwOEIwMkNEMi9ORWt5OFVxRGxL
ZkZSWWE5SWRwZTQ2MUthN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAA0acuqQOtKQQfy1dIGK1L4wSRl+NfEVbyae5FVGmomsuO1kAtr4rb
Md1cNOiE+Y1m239PLxvos/fbVrxBtAm/fgOyE7o8L9LRgFMZ6zQGKONaMX+kiiCV
djY/kR0MdNr7Ly9fbzX2QNt4vXIBl+xnm5U65EOYhqG834ziLWfwxBuSY7nD5b83
9dFKRDvleoyfV2mIKYJhUPFX7Xlw/x0uCp2LnygqZX0kZX52Ea4bN9Yy/XAW3NXU
XcXIxCsgwWrmDWW8OOSKHhzTQTUuY2EMNThB3ORdU4p6EmTDWKBCeQux0hozHBiQ
kekXY9pBzsv1AcNPw5Vfl0Ywacq6wN3G
-----END CERTIFICATE-----