Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDEF/65569C5CFFE511EB97F7446FC4F9AE02/F2Zd6u-8ywSEWkcb1RUXndFpN5o.mft
File:                     F2Zd6u-8ywSEWkcb1RUXndFpN5o.mft (raw, json)
Hash identifier:          YwW6pZTj93M1Y0foVDJwShTPSFhoAjFiXNiKJisaJ5w=
Subject key identifier:   36:74:4B:C5:A9:1F:17:4F:99:BC:DD:EF:76:D1:CE:29:D5:58:DA:73
Authority key identifier: 17:66:5D:EA:EF:BC:CB:04:84:5A:47:1B:D5:15:17:9D:D1:69:37:9A
Certificate issuer:       /CN=A91CCDEF/serialNumber=17665DEAEFBCCB04845A471BD515179DD169379A
Certificate serial:       01DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2Zd6u-8ywSEWkcb1RUXndFpN5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCDEF/65569C5CFFE511EB97F7446FC4F9AE02/F2Zd6u-8ywSEWkcb1RUXndFpN5o.mft
Manifest number:          01DA
Signing time:             Mon 11 Apr 2022 14:50:25 +0000
Manifest this update:     Mon 11 Apr 2022 14:50:25 +0000
Manifest next update:     Wed 13 Apr 2022 14:50:25 +0000
Files and hashes:         1: F2Zd6u-8ywSEWkcb1RUXndFpN5o.crl (hash: aHBAz6aNmUj2fRU5dqBQIrov5oKZlJtJuI2pYD2Eh+o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 478 (0x1de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCDEF/serialNumber=17665DEAEFBCCB04845A471BD515179DD169379A
        Validity
            Not Before: Apr 11 14:50:25 2022 GMT
            Not After : Apr 13 14:50:25 2022 GMT
        Subject: CN=62544031-0400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8d:ce:9c:9b:ab:97:51:ab:d7:45:64:06:a7:
                    d1:d2:3e:bb:be:28:98:54:37:69:77:95:0a:61:6f:
                    dd:96:f2:be:8b:0e:64:17:84:71:3c:9a:f6:60:df:
                    fe:67:06:36:4e:87:ae:7a:0d:94:a8:e3:a6:20:c0:
                    0e:80:0d:2f:49:ee:df:0a:50:3f:95:8b:eb:02:cb:
                    f0:5d:e5:97:ee:1c:5f:cd:a1:4b:b0:4e:e7:39:46:
                    69:2a:09:63:0b:d1:87:bb:00:97:6d:3f:e1:1c:5d:
                    4f:ac:cd:5b:07:d7:7d:e1:f5:ee:06:e7:95:2a:43:
                    8a:00:f0:76:37:a4:ae:c4:6c:06:dd:a8:73:88:1c:
                    e5:a2:d4:9d:5b:d2:c6:98:f6:2e:ae:be:31:b0:92:
                    39:b3:f9:4c:ba:51:c8:75:30:39:83:96:ad:bf:48:
                    20:f8:b1:00:56:31:19:83:3d:2b:f0:d9:00:9d:a2:
                    14:3f:12:02:b7:6f:a0:e5:1f:8e:e6:e2:a7:59:8b:
                    d6:d0:fa:e7:6c:8c:61:48:65:7c:86:02:bd:30:1d:
                    06:6f:01:a6:d3:7c:a1:80:57:7d:9d:c4:23:5f:f9:
                    18:e6:65:4a:33:50:67:17:65:d0:e8:c9:37:8f:d1:
                    d5:4a:9d:68:56:d8:40:e0:46:b5:63:41:84:6b:53:
                    54:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:74:4B:C5:A9:1F:17:4F:99:BC:DD:EF:76:D1:CE:29:D5:58:DA:73
            X509v3 Authority Key Identifier:
                keyid:17:66:5D:EA:EF:BC:CB:04:84:5A:47:1B:D5:15:17:9D:D1:69:37:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCDEF/65569C5CFFE511EB97F7446FC4F9AE02/F2Zd6u-8ywSEWkcb1RUXndFpN5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2Zd6u-8ywSEWkcb1RUXndFpN5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDEF/65569C5CFFE511EB97F7446FC4F9AE02/F2Zd6u-8ywSEWkcb1RUXndFpN5o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:01:a3:fb:ea:30:bf:a9:43:fc:f1:14:f9:80:f9:15:f2:00:
         bf:50:ea:01:4a:ec:59:ff:d4:4f:ee:89:7c:06:e6:97:9d:b0:
         d5:a6:06:02:02:51:b0:ba:2e:c9:b3:e1:da:27:32:97:f0:97:
         a4:d8:59:ba:42:db:09:29:64:c4:2a:e9:8a:bf:1b:3b:a9:32:
         55:dc:b0:d8:a0:ce:a1:ec:cf:77:76:f0:e3:af:93:72:58:80:
         84:a6:34:80:8f:52:f8:c7:0d:06:0a:ac:0e:61:3f:c6:69:be:
         05:e6:e3:8b:f3:69:e9:78:53:59:59:05:52:6d:b3:f1:c4:24:
         a1:07:4f:e1:8f:eb:33:75:30:08:d2:86:a0:fa:15:8c:e0:4f:
         15:fd:5d:37:9b:af:00:3d:90:f6:2b:4a:b2:ab:8a:9e:08:d6:
         0e:41:d5:63:ec:1e:eb:32:46:ad:e8:8b:c5:83:c7:6a:19:b1:
         42:fe:d2:ab:52:f0:5f:3f:9b:80:42:72:d0:78:87:ea:e6:f2:
         b0:94:d1:98:bb:27:14:c3:da:63:1e:78:64:ae:bd:b2:10:70:
         ea:b6:bc:57:ed:af:79:29:f3:7f:ee:52:8d:83:63:00:20:69:
         44:07:f8:ba:b4:db:fb:44:a4:93:e0:a3:71:c8:e5:56:9a:31:
         9c:8e:d3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----