Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E1C/433BA6F29D7811E99620087CC4F9AE02/CBKCvfegkZvGpCgJdmIV9tS9fY8.mft
File:                     CBKCvfegkZvGpCgJdmIV9tS9fY8.mft (raw, json)
Hash identifier:          G2xU7vGPgO7oIDP56CMGuSY3NswDyp0/OPQbRX/fp50=
Subject key identifier:   01:BA:DC:45:91:80:9F:5A:8B:F8:8B:58:B5:05:C0:EF:23:81:23:30
Authority key identifier: 08:12:82:BD:F7:A0:91:9B:C6:A4:28:09:76:62:15:F6:D4:BD:7D:8F
Certificate issuer:       /CN=A91E3E1C/serialNumber=081282BDF7A0919BC6A42809766215F6D4BD7D8F
Certificate serial:       0BEF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBKCvfegkZvGpCgJdmIV9tS9fY8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3E1C/433BA6F29D7811E99620087CC4F9AE02/CBKCvfegkZvGpCgJdmIV9tS9fY8.mft
Manifest number:          0BE4
Signing time:             Sun 31 Jul 2022 19:08:09 +0000
Manifest this update:     Sun 31 Jul 2022 19:08:09 +0000
Manifest next update:     Tue 02 Aug 2022 19:08:09 +0000
Files and hashes:         1: CBKCvfegkZvGpCgJdmIV9tS9fY8.crl (hash: xhl9yPNWrrnxUFZhWOcKL3EL/GY83Jdbrx1rAabOsAY=)
                          2: 23CB262CCD0B11E9B7BC4D10C4F9AE02.roa (hash: W/dw7dBSLQoVD/QxH+vlgG0d3PJTe5z8jixgDIftMHk=)
                          3: 615B509E9D8A11E9ADA31235C4F9AE02.roa (hash: G+v+o29JoPrVT7PmjtYzcBfeJMq+oaVGZUwQwwf4yZc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3055 (0xbef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3E1C/serialNumber=081282BDF7A0919BC6A42809766215F6D4BD7D8F
        Validity
            Not Before: Jul 31 19:08:09 2022 GMT
            Not After : Aug  2 19:08:09 2022 GMT
        Subject: CN=62e6d319-8cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:63:bd:75:a0:49:04:31:e0:b4:f3:fc:15:41:
                    45:32:84:ff:24:df:7c:7d:8f:55:ee:ee:93:00:49:
                    b7:8c:38:83:2d:fc:67:0e:09:c6:ef:9e:3c:28:79:
                    35:d9:ab:d0:e5:39:a8:aa:c9:a6:29:e1:47:22:84:
                    fe:e6:21:cc:d7:ce:31:0d:93:69:d4:55:45:0c:9e:
                    32:2e:bf:fc:59:9b:82:b7:b3:d6:46:ca:e4:db:bb:
                    bf:f4:35:46:f8:72:5c:44:a2:36:d4:e2:37:7c:fd:
                    6e:c3:da:39:5f:ec:94:0b:a1:b5:07:0e:c7:0b:92:
                    ee:6b:48:6b:8b:7c:a0:f3:ef:13:15:92:e1:e9:77:
                    07:4e:68:95:50:fc:dc:69:ef:44:27:d9:5f:4c:13:
                    0c:97:94:38:1e:c4:51:57:b6:1b:14:d0:40:be:f2:
                    1d:fc:2c:d8:54:d6:be:73:6c:5c:fc:b5:18:e4:24:
                    8c:23:0f:3e:ee:78:0e:a2:82:ad:16:05:1c:b9:04:
                    a1:30:02:d7:26:36:13:c9:7a:8d:3a:6c:f4:3e:db:
                    e5:20:dc:2b:de:0a:21:36:fd:9b:41:cc:fa:7b:56:
                    51:9b:01:ad:e9:33:9b:71:e3:80:ad:0e:68:1b:2c:
                    bd:e0:d1:94:12:11:84:df:1f:00:10:84:06:bf:02:
                    89:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:BA:DC:45:91:80:9F:5A:8B:F8:8B:58:B5:05:C0:EF:23:81:23:30
            X509v3 Authority Key Identifier:
                keyid:08:12:82:BD:F7:A0:91:9B:C6:A4:28:09:76:62:15:F6:D4:BD:7D:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3E1C/433BA6F29D7811E99620087CC4F9AE02/CBKCvfegkZvGpCgJdmIV9tS9fY8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBKCvfegkZvGpCgJdmIV9tS9fY8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E1C/433BA6F29D7811E99620087CC4F9AE02/CBKCvfegkZvGpCgJdmIV9tS9fY8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:99:52:13:b8:b2:5b:c6:85:6d:67:c3:1a:5c:1f:06:a5:c6:
         49:6f:98:aa:49:05:6a:4a:c2:bb:ee:c0:3b:92:09:02:64:08:
         34:4e:71:09:6f:02:b2:4b:81:fe:67:d6:76:13:25:4b:ee:64:
         13:ea:50:62:38:e6:a8:c2:e7:88:b3:ae:5b:f4:b3:86:c6:c9:
         d9:14:9f:7d:03:ee:b5:3a:35:5a:0c:ea:10:ec:b3:7d:1e:64:
         4d:cb:ab:47:33:bb:a5:c3:f9:74:d9:24:82:88:81:9d:d2:df:
         1e:13:72:b1:81:15:49:78:aa:7a:c7:a4:91:f3:41:cb:33:2b:
         69:f3:80:d0:ca:08:4b:e0:f0:c7:48:cf:e0:7c:e6:9f:df:99:
         f1:08:f7:79:d4:70:4a:82:5c:aa:e0:6a:e4:a8:06:29:0a:e4:
         94:2e:7e:14:f8:47:84:22:3b:ae:d9:2c:76:55:55:bb:d3:d6:
         0e:5a:2e:f0:91:1a:2d:d5:f6:2b:10:f1:5c:2f:45:ca:89:43:
         ee:a6:1b:2f:8f:90:a3:3b:f8:0b:c6:40:59:7b:04:33:7a:60:
         81:f7:05:e0:14:b7:5b:10:a4:ad:5e:48:b3:21:08:39:a4:54:
         df:6e:6f:6a:a6:c6:3e:83:2c:00:47:55:43:18:0f:3f:fd:73:
         90:9f:fc:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----