Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE730/0DEC44E47D0811E78E22875EC4F9AE02/ly1SrTPSEQnNNXQ5YfIG12Ao430.mft
File:                     ly1SrTPSEQnNNXQ5YfIG12Ao430.mft (raw, json)
Hash identifier:          wSPhEX+tLnBkZtbysj+buBxPMnESb6JlVvc+wtCC8+M=
Subject key identifier:   2A:A3:41:5E:2B:C2:3B:19:DC:17:15:54:9C:40:E3:B1:1A:AD:83:9C
Authority key identifier: 97:2D:52:AD:33:D2:11:09:CD:35:74:39:61:F2:06:D7:60:28:E3:7D
Certificate issuer:       /CN=A91CE730/serialNumber=972D52AD33D21109CD35743961F206D76028E37D
Certificate serial:       1788
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ly1SrTPSEQnNNXQ5YfIG12Ao430.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE730/0DEC44E47D0811E78E22875EC4F9AE02/ly1SrTPSEQnNNXQ5YfIG12Ao430.mft
Manifest number:          1785
Signing time:             Tue 28 Mar 2023 17:15:16 +0000
Manifest this update:     Tue 28 Mar 2023 17:15:15 +0000
Manifest next update:     Tue 04 Apr 2023 17:15:15 +0000
Files and hashes:         1: ly1SrTPSEQnNNXQ5YfIG12Ao430.crl (hash: qXcA2/4takF2tOJESitL1XcUQunhZIzo1kyZI377hnA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6024 (0x1788)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE730/serialNumber=972D52AD33D21109CD35743961F206D76028E37D
        Validity
            Not Before: Mar 28 17:15:15 2023 GMT
            Not After : Apr  4 17:15:15 2023 GMT
        Subject: CN=642320a4-6eb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e9:7e:62:33:41:a2:56:03:0f:9a:46:ac:1b:
                    5d:ac:e4:19:40:58:2d:42:a8:35:50:6b:82:f1:48:
                    23:99:af:59:48:a4:f3:aa:98:bd:41:d6:7e:50:05:
                    61:b7:75:28:9c:0b:f8:ab:aa:15:b2:04:94:c6:b5:
                    75:5b:97:4b:c3:69:5a:f7:77:e5:bf:30:03:df:b4:
                    39:12:6f:58:c1:6e:79:e1:98:11:85:5d:48:5c:41:
                    9e:02:f8:9d:7a:58:38:e5:20:53:c1:e0:bb:fc:a7:
                    e3:61:4f:04:3d:64:78:4d:f1:20:74:86:00:80:9c:
                    d6:50:21:6f:62:f9:c2:03:56:60:87:73:db:33:b4:
                    ef:fd:2f:29:d9:0a:fd:42:b7:99:31:44:ec:f5:59:
                    4b:8c:72:82:d3:b6:71:5f:c8:59:a1:2e:21:32:ca:
                    42:e2:21:d6:8c:9b:df:68:5c:d4:98:39:65:bb:b0:
                    db:89:6f:a1:31:30:2c:8f:99:91:99:a7:e9:dd:01:
                    45:41:9f:b7:18:cc:6b:ec:2f:15:19:a0:46:44:c4:
                    76:11:ce:75:72:f4:fb:ad:1b:d4:a5:65:ad:02:f1:
                    7b:d0:4c:d0:f2:07:ad:20:42:63:d5:1c:cc:75:87:
                    6f:0a:7c:09:39:8e:a7:2e:bb:b7:86:6d:85:fd:9e:
                    1e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A3:41:5E:2B:C2:3B:19:DC:17:15:54:9C:40:E3:B1:1A:AD:83:9C
            X509v3 Authority Key Identifier:
                keyid:97:2D:52:AD:33:D2:11:09:CD:35:74:39:61:F2:06:D7:60:28:E3:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE730/0DEC44E47D0811E78E22875EC4F9AE02/ly1SrTPSEQnNNXQ5YfIG12Ao430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ly1SrTPSEQnNNXQ5YfIG12Ao430.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE730/0DEC44E47D0811E78E22875EC4F9AE02/ly1SrTPSEQnNNXQ5YfIG12Ao430.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:6d:a1:f1:cb:14:b7:b1:33:19:17:74:a7:fd:38:4f:ec:6d:
         09:ee:7e:84:5d:d5:53:c9:fa:56:6e:41:e7:8a:54:e8:34:77:
         e9:85:63:74:46:ec:5e:95:a9:5c:5a:01:3b:df:25:36:f5:e2:
         19:66:f6:7f:63:a0:56:de:95:10:a1:dd:c6:6a:da:4c:aa:fa:
         5b:0f:bb:83:da:1d:59:e8:7d:a2:e4:03:a4:81:55:34:89:74:
         51:18:5a:a5:c6:e1:57:9c:a8:de:aa:7a:84:9d:a3:ee:05:ef:
         4d:92:dc:b1:f6:ba:f8:b8:51:c7:94:51:93:24:7a:f9:82:0d:
         0f:3a:7b:bd:05:58:9c:63:63:2a:6f:9f:cd:53:bb:02:98:09:
         4f:7f:5d:f3:63:b1:1a:c3:4e:ba:51:89:1f:cb:0d:24:9f:09:
         cd:15:47:52:5f:e8:24:72:31:f0:43:6d:30:43:05:8e:09:b8:
         02:4c:d5:d5:cd:3e:d9:74:a6:9d:7e:2d:92:04:e5:d4:98:22:
         24:23:df:98:24:2b:4f:59:45:69:da:48:b1:0d:e1:af:55:48:
         80:5b:4f:9a:39:4d:01:39:8e:52:5b:8d:39:d5:6f:46:b6:3b:
         0b:46:cc:04:c4:d9:c7:c0:e4:fb:9d:a6:6f:18:1a:44:b6:f3:
         90:5c:aa:94
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICF4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0U3MzAxMTAvBgNVBAUTKDk3MkQ1MkFEMzNEMjExMDlDRDM1NzQzOTYxRjIwNkQ3
NjAyOEUzN0QwHhcNMjMwMzI4MTcxNTE1WhcNMjMwNDA0MTcxNTE1WjAYMRYwFAYD
VQQDEw02NDIzMjBhNC02ZWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArOl+YjNBolYDD5pGrBtdrOQZQFgtQqg1UGuC8Ugjma9ZSKTzqpi9QdZ+UAVh
t3UonAv4q6oVsgSUxrV1W5dLw2la93flvzAD37Q5Em9YwW554ZgRhV1IXEGeAvid
elg45SBTweC7/KfjYU8EPWR4TfEgdIYAgJzWUCFvYvnCA1Zgh3PbM7Tv/S8p2Qr9
QreZMUTs9VlLjHKC07ZxX8hZoS4hMspC4iHWjJvfaFzUmDllu7DbiW+hMTAsj5mR
mafp3QFFQZ+3GMxr7C8VGaBGRMR2Ec51cvT7rRvUpWWtAvF70EzQ8getIEJj1RzM
dYdvCnwJOY6nLru3hm2F/Z4e4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqjQV4r
wjsZ3BcVVJxA47EarYOcMB8GA1UdIwQYMBaAFJctUq0z0hEJzTV0OWHyBtdgKON9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTczMC8wREVDNDRFNDdE
MDgxMUU3OEUyMjg3NUVDNEY5QUUwMi9seTFTclRQU0VRbk5OWFE1WWZJRzEyQW80
MzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2x5MVNyVFBTRVFuTk5YUTVZZklHMTJBbzQzMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTczMC8wREVDNDRFNDdEMDgxMUU3OEUyMjg3NUVDNEY5QUUwMi9seTFTclRQU0VR
bk5OWFE1WWZJRzEyQW80MzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC7baHxyxS3sTMZF3Sn/ThP7G0J7n6EXdVTyfpWbkHnilToNHfphWN0
RuxelalcWgE73yU29eIZZvZ/Y6BW3pUQod3GatpMqvpbD7uD2h1Z6H2i5AOkgVU0
iXRRGFqlxuFXnKjeqnqEnaPuBe9Nktyx9rr4uFHHlFGTJHr5gg0POnu9BVicY2Mq
b5/NU7sCmAlPf13zY7Eaw066UYkfyw0knwnNFUdSX+gkcjHwQ20wQwWOCbgCTNXV
zT7ZdKadfi2SBOXUmCIkI9+YJCtPWUVp2kixDeGvVUiAW0+aOU0BOY5SW4051W9G
tjsLRswExNnHwOT7naZvGBpEtvOQXKqU
-----END CERTIFICATE-----