Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD28A/943D54426F4D11E893F8D375C4F9AE02/r1UpQDAjRCxArnH_wOLX_kt-KeQ.mft
File:                     r1UpQDAjRCxArnH_wOLX_kt-KeQ.mft (raw, json)
Hash identifier:          rj4k71xxrXkGzvUzq7tgvnkUBhhD0CJ5iTdvfAeUyR0=
Subject key identifier:   0A:AA:50:DE:4C:7D:91:5C:3E:9C:DE:8C:10:9F:AE:BC:EA:29:A2:2D
Authority key identifier: AF:55:29:40:30:23:44:2C:40:AE:71:FF:C0:E2:D7:FE:4B:7E:29:E4
Certificate issuer:       /CN=A91CD28A/serialNumber=AF5529403023442C40AE71FFC0E2D7FE4B7E29E4
Certificate serial:       128F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1UpQDAjRCxArnH_wOLX_kt-KeQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD28A/943D54426F4D11E893F8D375C4F9AE02/r1UpQDAjRCxArnH_wOLX_kt-KeQ.mft
Manifest number:          128F
Signing time:             Thu 12 Jan 2023 17:55:44 +0000
Manifest this update:     Thu 12 Jan 2023 17:55:43 +0000
Manifest next update:     Thu 19 Jan 2023 17:55:43 +0000
Files and hashes:         1: r1UpQDAjRCxArnH_wOLX_kt-KeQ.crl (hash: NobDEKVtKiR5m7ahyLroO7P443LN9DI01xU0JeQ7rig=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4751 (0x128f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD28A/serialNumber=AF5529403023442C40AE71FFC0E2D7FE4B7E29E4
        Validity
            Not Before: Jan 12 17:55:43 2023 GMT
            Not After : Jan 19 17:55:43 2023 GMT
        Subject: CN=63c049a0-bc13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6c:9a:83:e7:26:0d:97:37:48:61:06:22:93:
                    a7:35:78:97:db:17:38:75:73:20:9b:f9:c0:2a:02:
                    b5:37:a6:5e:a8:b0:dd:3d:3b:ef:78:d9:39:c4:3d:
                    44:06:96:db:ee:74:1a:9a:af:63:d8:e7:b4:57:9d:
                    c8:7c:17:9d:86:3c:b0:c3:85:da:16:77:6a:cb:5f:
                    ab:47:5b:ef:dd:97:33:40:3d:0d:b6:f3:9f:29:0d:
                    bc:83:4a:b0:53:91:2f:6a:1e:3e:20:d7:2e:f3:88:
                    9e:2a:be:25:0f:b4:a1:3d:71:2d:1d:f0:c4:6f:7b:
                    07:e7:4d:1d:32:06:fa:b3:69:d0:7b:52:bf:57:f9:
                    fe:b8:32:93:5d:f3:da:3f:55:fa:47:36:e2:30:81:
                    4c:bb:de:61:e6:15:11:77:97:c2:1b:09:bf:18:2b:
                    2f:0a:d6:5c:b0:b8:3d:c9:b1:4d:e4:2d:fc:44:62:
                    71:03:9b:42:55:55:9d:09:51:b2:8f:2e:ae:9a:cd:
                    f6:bb:ef:f0:15:c3:ae:d6:21:22:d2:e4:c4:ba:91:
                    18:db:9f:9c:17:e4:c7:15:20:47:91:e8:56:20:d5:
                    ca:d2:bd:c8:88:43:f3:ec:4f:24:e2:14:d5:ac:94:
                    11:99:7f:05:1e:ef:fe:62:43:d1:a4:a3:7f:28:79:
                    ac:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:AA:50:DE:4C:7D:91:5C:3E:9C:DE:8C:10:9F:AE:BC:EA:29:A2:2D
            X509v3 Authority Key Identifier:
                keyid:AF:55:29:40:30:23:44:2C:40:AE:71:FF:C0:E2:D7:FE:4B:7E:29:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD28A/943D54426F4D11E893F8D375C4F9AE02/r1UpQDAjRCxArnH_wOLX_kt-KeQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1UpQDAjRCxArnH_wOLX_kt-KeQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD28A/943D54426F4D11E893F8D375C4F9AE02/r1UpQDAjRCxArnH_wOLX_kt-KeQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:79:f5:e2:2c:05:f0:9b:7f:5c:1e:ba:c0:5f:55:9d:46:3b:
         74:f6:48:49:a0:a8:df:4b:86:fa:bc:39:3e:aa:81:73:40:eb:
         ed:59:d4:21:90:c1:14:32:95:7b:e8:85:33:76:ac:b5:3e:fa:
         75:54:d8:95:34:74:16:c0:84:fd:1f:3b:45:13:4a:8d:5c:e7:
         34:5c:d9:e6:56:a1:8b:ef:aa:78:62:f9:18:18:5e:20:b0:ca:
         15:06:fd:6d:1f:1d:bb:04:db:46:5b:e0:ce:f6:49:8a:4a:eb:
         df:10:52:38:a2:ed:3d:b3:94:49:2d:8c:71:94:11:50:1b:d2:
         c4:eb:da:78:b7:f4:8a:15:6d:48:f2:5f:54:ef:25:0c:3c:c6:
         c8:ca:49:fe:79:c5:93:29:9e:c9:1a:81:7a:f8:ba:34:f3:7e:
         cf:63:59:99:0b:0f:94:ad:ee:53:86:51:13:85:c1:29:6e:03:
         3a:cd:f6:49:1d:6b:f3:ea:0a:2e:33:f1:0f:6e:8c:18:96:8a:
         e5:2c:6f:49:d8:8c:8b:24:d4:44:ff:31:85:ad:30:11:92:ae:
         d8:70:de:63:82:ee:c2:86:27:4f:3e:8e:b5:4e:66:af:49:2a:
         91:01:58:80:4d:d5:76:6a:e8:ce:6b:91:ba:39:1b:a0:2d:c9:
         1a:80:1a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----