Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA397/8052F814C0F011EABA308B4FC4F9AE02/20V90vc0YXbwFZGZ_YvVnU2dQX8.mft
File:                     20V90vc0YXbwFZGZ_YvVnU2dQX8.mft (raw, json)
Hash identifier:          QLWA17+0bVPU3IdapzyloUFp9KLie2FlDzTaHet2sk0=
Subject key identifier:   8E:B4:94:1B:36:95:72:06:3C:1F:D8:6E:94:E7:06:CC:AE:1D:DA:13
Authority key identifier: DB:45:7D:D2:F7:34:61:76:F0:15:91:99:FD:8B:D5:9D:4D:9D:41:7F
Certificate issuer:       /CN=A91DA397/serialNumber=DB457DD2F7346176F0159199FD8BD59D4D9D417F
Certificate serial:       06FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/20V90vc0YXbwFZGZ_YvVnU2dQX8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA397/8052F814C0F011EABA308B4FC4F9AE02/20V90vc0YXbwFZGZ_YvVnU2dQX8.mft
Manifest number:          06F8
Signing time:             Wed 03 May 2023 04:23:33 +0000
Manifest this update:     Wed 03 May 2023 04:23:32 +0000
Manifest next update:     Wed 10 May 2023 04:23:32 +0000
Files and hashes:         1: 20V90vc0YXbwFZGZ_YvVnU2dQX8.crl (hash: IgOqk7qy3LhdbOgTRzrCfqO3TFJ47VSD2gHPDOYmkss=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1787 (0x6fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA397/serialNumber=DB457DD2F7346176F0159199FD8BD59D4D9D417F
        Validity
            Not Before: May  3 04:23:32 2023 GMT
            Not After : May 10 04:23:32 2023 GMT
        Subject: CN=6451e1c5-b5f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ef:86:36:b6:8d:db:a4:e7:c5:d4:05:0e:c4:
                    2a:d6:55:20:c5:ad:dc:8a:2c:ba:12:39:65:20:1d:
                    25:0e:36:9c:91:33:4f:1a:eb:f4:78:d1:d5:48:20:
                    ce:2d:30:5b:5d:71:91:93:1d:cd:90:3e:da:8e:a0:
                    a9:b9:28:0f:35:6d:c0:08:86:cb:0f:0f:4b:f9:27:
                    31:df:e0:da:42:4c:16:b0:36:4a:2b:80:3c:c0:ca:
                    85:a8:0b:46:3d:db:9c:4f:62:c3:91:e0:34:63:76:
                    ec:6d:09:ee:75:60:6d:76:8c:e0:87:dc:04:7e:8f:
                    d4:05:c4:85:17:57:7b:e9:0e:12:a8:28:42:59:c7:
                    ef:5d:88:87:ed:72:55:76:db:3c:40:46:42:ec:4e:
                    cc:3a:7b:50:8c:e0:98:75:f0:76:98:c1:87:cb:61:
                    45:ad:85:84:45:75:0c:0d:a3:14:b2:c7:58:66:5c:
                    c5:c2:78:e7:7b:eb:a3:e5:a9:c5:f5:65:8a:b4:00:
                    e2:a4:a4:d9:5a:7a:44:87:b3:82:09:40:0b:47:59:
                    b8:84:46:13:39:dd:a7:82:54:04:2e:55:86:62:a8:
                    be:23:3a:aa:a9:19:c7:1c:1d:01:c3:a3:70:7f:bf:
                    fd:04:24:5c:54:38:13:4d:00:b7:de:ab:c9:31:73:
                    e1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B4:94:1B:36:95:72:06:3C:1F:D8:6E:94:E7:06:CC:AE:1D:DA:13
            X509v3 Authority Key Identifier:
                keyid:DB:45:7D:D2:F7:34:61:76:F0:15:91:99:FD:8B:D5:9D:4D:9D:41:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA397/8052F814C0F011EABA308B4FC4F9AE02/20V90vc0YXbwFZGZ_YvVnU2dQX8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/20V90vc0YXbwFZGZ_YvVnU2dQX8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA397/8052F814C0F011EABA308B4FC4F9AE02/20V90vc0YXbwFZGZ_YvVnU2dQX8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:93:12:3a:ec:3c:af:92:42:8b:42:05:7e:10:1a:28:2a:c1:
         f8:39:34:c8:29:fe:66:93:6e:29:bf:9b:10:84:7f:04:ff:36:
         68:d3:be:00:ea:26:53:40:78:c9:49:f7:16:b7:e8:b7:22:aa:
         50:20:a1:4d:fe:2d:c6:21:09:07:22:0e:86:7f:5d:61:08:d0:
         95:fc:1c:32:95:bf:56:0f:84:75:c4:fb:c7:45:32:f7:e7:fe:
         0e:e4:3c:1f:f3:f0:c4:64:7d:79:cd:fa:77:1a:f7:0b:28:1c:
         d1:58:86:2d:aa:bb:b4:b9:7d:0a:b8:71:14:cf:65:0b:54:24:
         fd:f9:8d:29:d9:16:c6:97:1b:54:6e:f8:f4:ab:f5:a4:40:f0:
         72:bf:3a:3e:ba:f4:d9:08:85:6a:42:cd:61:9c:c0:f2:c2:43:
         5b:c9:6b:29:46:e3:93:20:8e:fb:8c:ba:e1:95:b5:39:18:55:
         83:d4:ec:e0:40:50:41:d8:dc:05:a3:77:31:1a:b4:72:22:c2:
         e0:df:08:e9:1f:45:35:6c:01:d1:d6:d7:6d:59:55:ab:68:9d:
         f8:f6:a5:ef:9f:29:2e:14:06:c8:36:a9:3c:c9:b5:50:16:c1:
         9e:70:9d:dd:9d:44:d8:c0:7a:6c:5d:5a:e4:d0:a3:0d:51:7f:
         b3:5f:da:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----