Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE74A/FEB3AA9CDA2F11EB9F0FE94CC4F9AE02/vErylHv1TQsSYYNHDqzaGA_DUrg.mft
File:                     vErylHv1TQsSYYNHDqzaGA_DUrg.mft (raw, json)
Hash identifier:          Rt41SdCBDruQgrgpDScF+ml9EyJJwfWEWFJ8VftDINI=
Subject key identifier:   81:5B:DF:56:48:26:23:61:6C:CB:1A:C3:3C:FA:BC:0B:F4:B2:BC:FF
Authority key identifier: BC:4A:F2:94:7B:F5:4D:0B:12:61:83:47:0E:AC:DA:18:0F:C3:52:B8
Certificate issuer:       /CN=A91CE74A/serialNumber=BC4AF2947BF54D0B126183470EACDA180FC352B8
Certificate serial:       0405
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vErylHv1TQsSYYNHDqzaGA_DUrg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE74A/FEB3AA9CDA2F11EB9F0FE94CC4F9AE02/vErylHv1TQsSYYNHDqzaGA_DUrg.mft
Manifest number:          0403
Signing time:             Thu 11 May 2023 02:56:59 +0000
Manifest this update:     Thu 11 May 2023 02:56:58 +0000
Manifest next update:     Thu 18 May 2023 02:56:58 +0000
Files and hashes:         1: vErylHv1TQsSYYNHDqzaGA_DUrg.crl (hash: R9KSVm8hTwmGBPOW63XlSnuVZCoxbJe/r8P6LvP+4ZM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1029 (0x405)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE74A/serialNumber=BC4AF2947BF54D0B126183470EACDA180FC352B8
        Validity
            Not Before: May 11 02:56:58 2023 GMT
            Not After : May 18 02:56:58 2023 GMT
        Subject: CN=645c597a-7ae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:99:05:e3:ea:0e:f4:0d:e0:10:c7:1a:5d:06:
                    a0:ea:7e:2c:4e:d2:d5:74:c0:84:ad:14:7f:ad:18:
                    0d:bc:9e:c2:6a:4f:75:60:d7:21:2a:ea:99:2a:b8:
                    fe:b6:f6:03:e8:6d:b1:aa:4d:26:a7:d0:2a:58:3f:
                    70:cf:f0:9f:52:14:7b:08:0e:0a:25:54:bf:76:b3:
                    86:2a:e7:9f:aa:59:5a:6d:11:6b:fe:e6:d0:74:6d:
                    e9:70:09:7b:a1:19:bc:df:66:30:fd:9a:ea:e8:86:
                    42:ac:19:88:9a:eb:73:94:a7:b2:3a:18:27:de:87:
                    07:2e:c1:ef:2d:7a:e8:c4:ad:17:35:27:97:10:83:
                    a2:9d:ca:81:a1:07:bd:37:14:dd:d9:63:3a:35:b8:
                    87:89:fc:6a:4a:45:6f:7e:01:0a:3e:40:38:7a:9b:
                    9a:7c:ea:a0:ff:9b:ca:77:bd:09:cb:7c:53:36:0a:
                    55:d5:34:0e:84:3f:ae:b6:31:58:17:64:37:6e:b2:
                    01:f3:13:16:5a:85:d0:05:fe:9b:96:5a:6f:f9:8f:
                    6b:1c:20:44:76:eb:4c:49:9f:fc:1c:ce:d3:36:c3:
                    76:45:61:38:b4:50:54:c7:83:c4:7d:0f:eb:2f:5c:
                    a9:37:08:42:13:2e:13:9b:65:b3:54:ea:4f:94:8f:
                    58:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:5B:DF:56:48:26:23:61:6C:CB:1A:C3:3C:FA:BC:0B:F4:B2:BC:FF
            X509v3 Authority Key Identifier:
                keyid:BC:4A:F2:94:7B:F5:4D:0B:12:61:83:47:0E:AC:DA:18:0F:C3:52:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE74A/FEB3AA9CDA2F11EB9F0FE94CC4F9AE02/vErylHv1TQsSYYNHDqzaGA_DUrg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vErylHv1TQsSYYNHDqzaGA_DUrg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE74A/FEB3AA9CDA2F11EB9F0FE94CC4F9AE02/vErylHv1TQsSYYNHDqzaGA_DUrg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:b1:a6:49:42:28:71:31:78:4e:b1:70:75:5c:1f:45:cf:3d:
         31:11:20:d8:80:d1:3f:6a:f1:26:ad:64:6b:1e:93:9a:de:52:
         e6:88:5a:33:5c:6b:0f:4f:be:db:f3:85:3b:e2:d0:d2:e1:cc:
         87:48:d4:c8:a8:2f:c6:c9:76:91:9b:51:3d:83:dd:1b:73:e0:
         f1:e1:a5:8d:cc:98:d4:13:7b:57:21:b1:35:e8:05:3d:98:c3:
         4a:38:bd:3b:02:e6:1b:78:83:30:61:98:9e:a2:16:ee:41:5d:
         45:e8:9a:45:3b:17:1d:a3:0d:1b:fa:1b:07:8b:5e:97:61:73:
         22:21:57:ec:e2:fa:da:cb:9a:73:55:91:93:0e:6f:eb:a6:02:
         68:da:af:10:3c:c8:fe:cc:d8:74:e4:27:8d:f6:da:e2:21:e2:
         6e:5f:3e:0c:ac:37:74:61:4f:7d:d1:dc:18:01:d3:1a:ca:5c:
         97:5e:c3:a4:ec:ca:f4:80:90:1e:1b:f6:c4:5f:61:e2:91:88:
         d4:d9:77:9a:c3:93:e1:af:27:b0:bf:a0:d0:4d:50:db:d2:0a:
         b6:30:1c:1b:8c:2f:97:91:96:ab:2c:04:b2:64:eb:fb:8c:c3:
         1d:3d:17:89:d3:bf:bc:0a:cb:52:57:84:f6:35:56:c7:5e:06:
         01:ff:7d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----