Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6057/86AA4DBC7A8411EC94A58648C4F9AE02/BVEqFGBSt2FyP67Dku6DyvzZN6w.mft
File:                     BVEqFGBSt2FyP67Dku6DyvzZN6w.mft (raw, json)
Hash identifier:          XZuVC6Kl+tjzOv3OjLoTt2dtrqnwsMnFC9IT6T0vCL8=
Subject key identifier:   42:C2:18:1F:AC:15:A4:39:78:3F:16:B0:31:07:10:AD:89:31:91:82
Authority key identifier: 05:51:2A:14:60:52:B7:61:72:3F:AE:C3:92:EE:83:CA:FC:D9:37:AC
Certificate issuer:       /CN=A91E6057/serialNumber=05512A146052B761723FAEC392EE83CAFCD937AC
Certificate serial:       0272
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BVEqFGBSt2FyP67Dku6DyvzZN6w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6057/86AA4DBC7A8411EC94A58648C4F9AE02/BVEqFGBSt2FyP67Dku6DyvzZN6w.mft
Manifest number:          0270
Signing time:             Thu 11 May 2023 04:41:07 +0000
Manifest this update:     Thu 11 May 2023 04:41:06 +0000
Manifest next update:     Thu 18 May 2023 04:41:06 +0000
Files and hashes:         1: BVEqFGBSt2FyP67Dku6DyvzZN6w.crl (hash: qHoJZLM7FtPU6BEd24+ZqgWWuiw/23uweJrmJ7dOpQ4=)
                          2: 2CA401F67A8811ECBA5D244DC4F9AE02.roa (hash: PHZHV5SzoEUxIwLQscvpq/YE+N5AjMqzy9Hs66G0xQs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 626 (0x272)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6057/serialNumber=05512A146052B761723FAEC392EE83CAFCD937AC
        Validity
            Not Before: May 11 04:41:06 2023 GMT
            Not After : May 18 04:41:06 2023 GMT
        Subject: CN=645c71e3-2b11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d2:ca:4c:d6:a2:5d:86:50:14:ae:ec:6e:84:
                    d2:d3:e1:7c:cf:46:18:72:45:09:a1:f1:d3:a9:59:
                    53:cc:82:41:48:36:e1:a4:54:56:96:d4:4b:4f:8e:
                    09:45:02:63:af:41:b8:12:dd:1f:dc:b4:53:15:80:
                    7c:ee:4c:52:b7:71:92:ac:83:91:d3:4f:c2:ea:e9:
                    25:1a:b5:cd:56:74:20:34:2e:0d:20:68:21:bf:f3:
                    89:77:4c:79:ab:81:7e:66:7b:a1:2c:9a:7b:3e:37:
                    b5:d2:4c:ef:6b:e8:9b:de:db:d8:40:8c:3d:45:7e:
                    da:2d:5a:ee:39:7f:6f:de:a5:7c:78:2e:a9:14:5f:
                    f2:3a:5c:d6:bb:a7:04:87:8c:2d:12:45:9c:c6:9e:
                    4d:95:d1:b9:79:e0:a9:a8:09:13:ea:67:8d:79:e4:
                    41:34:b4:59:00:8a:42:16:de:16:01:ee:89:79:94:
                    c7:66:c8:43:fc:5f:bd:c8:89:ba:36:aa:18:79:fd:
                    72:ae:d4:f0:8d:3e:63:6f:f7:6d:d2:63:0a:31:8b:
                    58:7b:76:31:82:cc:a4:da:f5:5b:b2:1f:f0:c9:bc:
                    1c:46:a5:bf:a8:b8:f1:8d:48:9c:42:ea:c5:e2:36:
                    47:34:05:44:bc:3f:48:01:df:2f:86:84:ec:99:32:
                    ba:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C2:18:1F:AC:15:A4:39:78:3F:16:B0:31:07:10:AD:89:31:91:82
            X509v3 Authority Key Identifier:
                keyid:05:51:2A:14:60:52:B7:61:72:3F:AE:C3:92:EE:83:CA:FC:D9:37:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6057/86AA4DBC7A8411EC94A58648C4F9AE02/BVEqFGBSt2FyP67Dku6DyvzZN6w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BVEqFGBSt2FyP67Dku6DyvzZN6w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6057/86AA4DBC7A8411EC94A58648C4F9AE02/BVEqFGBSt2FyP67Dku6DyvzZN6w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:8f:d0:4e:5c:16:fa:24:09:26:42:00:77:48:72:9c:a4:3f:
         58:05:f8:5b:dd:a1:87:f3:47:bf:6e:47:ce:fc:3f:40:59:7c:
         4c:43:9e:2b:f4:f1:8e:54:75:15:d6:da:db:55:c2:eb:12:f2:
         f2:72:4d:4d:91:83:54:f4:98:f7:90:31:f3:05:2f:c8:7c:15:
         d0:94:d6:28:3d:17:87:66:0f:16:35:36:5b:e5:92:23:7a:97:
         1b:18:02:f9:e5:7d:79:33:a0:9e:0e:d9:9c:f7:3a:f5:3a:fc:
         4b:e8:f4:e8:05:b6:df:50:d8:91:ee:46:f6:50:3d:da:34:2f:
         95:44:7a:bc:a3:12:67:43:75:bf:c4:b3:e8:4f:f5:45:c2:4b:
         d1:ba:a8:6d:ae:0b:99:ae:ab:9c:f4:2c:36:c6:59:98:46:b0:
         f0:b3:98:d7:c7:57:7a:05:e6:bb:16:5c:4f:a5:33:e2:56:96:
         8f:6d:a4:0b:e6:b6:36:5d:fa:5a:68:1f:c3:7e:94:61:5e:b4:
         0d:22:38:9a:3e:ab:c0:e3:8b:ab:23:07:4e:b3:98:39:e0:70:
         d3:01:21:f3:63:9e:0a:27:18:24:14:a5:fa:8f:62:5f:df:fc:
         97:e6:02:c0:4c:38:a6:f7:c4:de:33:b7:1b:3c:ae:ff:92:3a:
         dd:76:1e:43
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYwNTcxMTAvBgNVBAUTKDA1NTEyQTE0NjA1MkI3NjE3MjNGQUVDMzkyRUU4M0NB
RkNEOTM3QUMwHhcNMjMwNTExMDQ0MTA2WhcNMjMwNTE4MDQ0MTA2WjAYMRYwFAYD
VQQDEw02NDVjNzFlMy0yYjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA79LKTNaiXYZQFK7sboTS0+F8z0YYckUJofHTqVlTzIJBSDbhpFRWltRLT44J
RQJjr0G4Et0f3LRTFYB87kxSt3GSrIOR00/C6uklGrXNVnQgNC4NIGghv/OJd0x5
q4F+ZnuhLJp7Pje10kzva+ib3tvYQIw9RX7aLVruOX9v3qV8eC6pFF/yOlzWu6cE
h4wtEkWcxp5NldG5eeCpqAkT6meNeeRBNLRZAIpCFt4WAe6JeZTHZshD/F+9yIm6
NqoYef1yrtTwjT5jb/dt0mMKMYtYe3Yxgsyk2vVbsh/wybwcRqW/qLjxjUicQurF
4jZHNAVEvD9IAd8vhoTsmTK6UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFELCGB+s
FaQ5eD8WsDEHEK2JMZGCMB8GA1UdIwQYMBaAFAVRKhRgUrdhcj+uw5Lug8r82Tes
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjA1Ny84NkFBNERCQzdB
ODQxMUVDOTRBNTg2NDhDNEY5QUUwMi9CVkVxRkdCU3QyRnlQNjdEa3U2RHl2elpO
NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JWRXFGR0JTdDJGeVA2N0RrdTZEeXZ6Wk42dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NjA1Ny84NkFBNERCQzdBODQxMUVDOTRBNTg2NDhDNEY5QUUwMi9CVkVxRkdCU3Qy
RnlQNjdEa3U2RHl2elpONncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAlj9BOXBb6JAkmQgB3SHKcpD9YBfhb3aGH80e/bkfO/D9AWXxMQ54r
9PGOVHUV1trbVcLrEvLyck1NkYNU9Jj3kDHzBS/IfBXQlNYoPReHZg8WNTZb5ZIj
epcbGAL55X15M6CeDtmc9zr1OvxL6PToBbbfUNiR7kb2UD3aNC+VRHq8oxJnQ3W/
xLPoT/VFwkvRuqhtrguZrquc9Cw2xlmYRrDws5jXx1d6Bea7FlxPpTPiVpaPbaQL
5rY2XfpaaB/DfpRhXrQNIjiaPqvA44urIwdOs5g54HDTASHzY54KJxgkFKX6j2Jf
3/yX5gLATDim98TeM7cbPK7/kjrddh5D
-----END CERTIFICATE-----