Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D264E/4E3BA4181D2811EBBDADB239C4F9AE02/O-gMtm5B2S8gfcLCkclHw6JSGEY.mft
File:                     O-gMtm5B2S8gfcLCkclHw6JSGEY.mft (raw, json)
Hash identifier:          kmkDGLwJZOEKM2vlS2iG8jztxRIOk3wPK7gUgyDRHGY=
Subject key identifier:   A7:9B:0D:56:7F:D5:5E:0E:20:3E:D1:A9:78:57:EB:6D:77:80:0B:FA
Authority key identifier: 3B:E8:0C:B6:6E:41:D9:2F:20:7D:C2:C2:91:C9:47:C3:A2:52:18:46
Certificate issuer:       /CN=A91D264E/serialNumber=3BE80CB66E41D92F207DC2C291C947C3A2521846
Certificate serial:       0558
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O-gMtm5B2S8gfcLCkclHw6JSGEY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D264E/4E3BA4181D2811EBBDADB239C4F9AE02/O-gMtm5B2S8gfcLCkclHw6JSGEY.mft
Manifest number:          0850
Signing time:             Wed 14 Sep 2022 23:52:10 +0000
Manifest this update:     Wed 14 Sep 2022 23:52:09 +0000
Manifest next update:     Fri 16 Sep 2022 23:52:09 +0000
Files and hashes:         1: O-gMtm5B2S8gfcLCkclHw6JSGEY.crl (hash: 5DAkXEI798G1uac5qUvcajtZBqNX9CSoNrL/AXB7b8k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1368 (0x558)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D264E/serialNumber=3BE80CB66E41D92F207DC2C291C947C3A2521846
        Validity
            Not Before: Sep 14 23:52:09 2022 GMT
            Not After : Sep 16 23:52:09 2022 GMT
        Subject: CN=63226929-d6a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:65:40:5e:99:dd:a7:8d:5e:8f:17:31:0d:1e:
                    3d:4b:6e:1c:e6:1d:a0:a2:75:dc:6e:23:6c:61:c6:
                    84:be:75:1a:49:35:cb:3b:b2:b1:5c:8e:ab:24:ab:
                    3f:69:9c:18:db:45:86:9e:bf:42:8c:7c:11:72:80:
                    19:02:44:5b:34:03:d4:f7:32:09:bf:8c:33:98:4a:
                    eb:db:7e:40:63:9b:0f:3d:18:21:d7:1a:ca:09:cf:
                    88:ce:e4:97:60:4e:60:ae:c6:17:8f:ec:25:d3:a0:
                    cb:3a:ab:d4:80:93:f1:22:7d:d3:ee:a5:d8:7b:9d:
                    74:e6:7d:75:7b:cc:e1:4b:e3:00:f7:f2:66:5e:44:
                    83:18:63:53:a8:48:fe:f5:40:33:97:23:8f:cb:23:
                    c8:2f:a9:60:cd:73:86:ea:aa:d1:3b:22:a9:4c:e6:
                    0e:cc:ea:04:bb:b3:be:6d:cc:23:08:7a:61:dd:8f:
                    67:97:13:e3:ff:82:11:5a:15:92:ac:93:6d:ff:97:
                    be:24:11:c9:71:f2:dc:6b:c4:21:b8:26:7c:46:f7:
                    f8:d2:d7:44:6a:36:bd:2e:7f:5b:be:cb:78:93:43:
                    cf:cd:d0:cd:a2:34:26:61:99:ac:e7:a9:77:14:99:
                    0a:c2:e9:12:66:20:40:95:56:96:fb:6f:01:5f:4a:
                    73:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:9B:0D:56:7F:D5:5E:0E:20:3E:D1:A9:78:57:EB:6D:77:80:0B:FA
            X509v3 Authority Key Identifier:
                keyid:3B:E8:0C:B6:6E:41:D9:2F:20:7D:C2:C2:91:C9:47:C3:A2:52:18:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D264E/4E3BA4181D2811EBBDADB239C4F9AE02/O-gMtm5B2S8gfcLCkclHw6JSGEY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O-gMtm5B2S8gfcLCkclHw6JSGEY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D264E/4E3BA4181D2811EBBDADB239C4F9AE02/O-gMtm5B2S8gfcLCkclHw6JSGEY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:e5:b1:30:34:5d:9a:e7:8d:e7:66:52:66:14:dd:eb:2b:b5:
         34:47:f4:22:e1:3f:b8:87:1c:40:e3:d7:9b:68:42:49:b5:1b:
         2c:5f:89:d7:98:be:98:1e:3c:99:1a:50:15:96:5b:f5:9c:6d:
         2c:55:b8:e1:19:0e:9d:eb:4d:cf:81:a9:b0:bd:ad:3c:6e:e3:
         dd:d1:78:c7:be:66:4b:8f:6f:93:b6:5b:7a:b5:65:fd:23:0b:
         84:89:2c:d9:c4:f8:20:31:db:2e:7d:16:75:e9:54:ee:92:7d:
         50:57:9e:ed:28:06:bd:f6:c0:a5:9e:7a:a3:06:b4:34:64:c3:
         c9:3f:80:15:23:c8:c0:45:76:25:3c:3b:4e:85:e1:c9:ba:75:
         91:4e:7e:13:41:3d:39:9f:6f:6a:f4:11:80:8a:0b:08:80:2b:
         61:9c:99:98:3d:f9:c6:c7:77:7f:d1:bc:76:29:f2:e4:d8:b9:
         10:6f:48:38:1c:0c:e5:02:6f:94:fb:5e:0d:e1:3f:6b:cc:42:
         41:4e:9c:27:5d:dc:ec:09:20:f7:03:b1:d2:18:75:e2:b8:95:
         9b:44:34:6d:7d:e1:75:5b:f0:37:83:0f:5b:a5:78:cd:53:8d:
         8c:01:27:bc:2c:0d:e1:a1:2b:ca:b4:7a:5a:79:eb:6b:6f:1f:
         93:7c:73:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----