Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E76F3/AE32AA2010E811EB8525153AC4F9AE02/rU-MTCOd4Dl2wC2iEiJGV98oJ6g.mft
File:                     rU-MTCOd4Dl2wC2iEiJGV98oJ6g.mft (raw, json)
Hash identifier:          09wti8Oo12zal9ND5mo3d+3s+mXTBSNYQ97jfyvS66w=
Subject key identifier:   3A:BA:9F:84:F8:88:77:F7:89:DE:D4:D7:0D:50:3E:51:4F:39:F7:3B
Authority key identifier: AD:4F:8C:4C:23:9D:E0:39:76:C0:2D:A2:12:22:46:57:DF:28:27:A8
Certificate issuer:       /CN=A91E76F3/serialNumber=AD4F8C4C239DE03976C02DA212224657DF2827A8
Certificate serial:       06DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rU-MTCOd4Dl2wC2iEiJGV98oJ6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E76F3/AE32AA2010E811EB8525153AC4F9AE02/rU-MTCOd4Dl2wC2iEiJGV98oJ6g.mft
Manifest number:          06D6
Signing time:             Tue 25 Jun 2024 05:19:09 +0000
Manifest this update:     Tue 25 Jun 2024 05:19:08 +0000
Manifest next update:     Tue 02 Jul 2024 05:19:08 +0000
Files and hashes:         1: rU-MTCOd4Dl2wC2iEiJGV98oJ6g.crl (hash: zlLKnatqpTVBQjhsa8/zrWT7Uxm4BSwjANXHJJ8Zi8c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1754 (0x6da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E76F3/serialNumber=AD4F8C4C239DE03976C02DA212224657DF2827A8
        Validity
            Not Before: Jun 25 05:19:08 2024 GMT
            Not After : Jul  2 05:19:08 2024 GMT
        Subject: CN=667a534d-534f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:86:2e:0d:43:82:40:22:55:31:df:2a:ce:4c:
                    2e:2f:0a:e9:3a:f2:fc:93:60:2e:65:c1:c8:9c:06:
                    6d:7c:3b:cf:46:1f:9c:d0:0c:24:b9:6a:8e:23:bc:
                    36:b2:28:6e:c8:a2:b2:c9:70:ed:93:f6:fd:03:95:
                    e8:af:f5:be:f3:a5:bd:8e:2e:f8:ed:0a:ac:bc:7b:
                    10:11:32:bb:10:7d:a8:88:a8:8b:be:ff:ad:fa:f0:
                    4f:1e:b2:37:2f:63:97:00:5f:21:e9:a9:04:ec:92:
                    79:4f:47:c2:17:ac:83:28:fd:05:bb:c3:fa:78:fb:
                    00:fb:42:4b:33:4b:ef:de:99:0a:f2:ea:93:dc:5e:
                    b7:11:fd:82:2a:bc:ad:e9:a9:92:e2:8a:1c:75:2c:
                    41:74:ca:3f:dd:71:d5:ec:9c:a9:b9:61:98:5a:a8:
                    ee:64:aa:51:f0:cf:ae:a5:c5:62:52:4c:22:10:71:
                    0c:92:9d:dc:d9:d0:33:a4:29:9f:b3:e2:14:a3:05:
                    61:fa:7b:5d:fa:80:56:f3:48:fe:ac:ae:3c:ce:e4:
                    e4:81:56:9f:c8:11:94:e5:4b:00:d4:ea:eb:c6:fe:
                    26:32:46:c7:bb:d9:c2:a8:5e:03:2b:fa:b6:34:00:
                    04:ac:a2:82:3a:b3:fb:2f:7a:de:2b:8c:4f:2a:78:
                    7d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:BA:9F:84:F8:88:77:F7:89:DE:D4:D7:0D:50:3E:51:4F:39:F7:3B
            X509v3 Authority Key Identifier:
                keyid:AD:4F:8C:4C:23:9D:E0:39:76:C0:2D:A2:12:22:46:57:DF:28:27:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E76F3/AE32AA2010E811EB8525153AC4F9AE02/rU-MTCOd4Dl2wC2iEiJGV98oJ6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rU-MTCOd4Dl2wC2iEiJGV98oJ6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E76F3/AE32AA2010E811EB8525153AC4F9AE02/rU-MTCOd4Dl2wC2iEiJGV98oJ6g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:a8:20:44:dd:f9:f5:16:65:7b:ae:2e:7f:7f:8c:9c:64:8a:
         85:40:af:16:ec:da:68:b9:2b:37:35:d1:16:b0:64:d5:e8:98:
         9b:c0:b5:9a:83:f1:8d:a2:de:cb:76:37:ad:b6:1f:c4:69:f7:
         f5:97:2f:56:1f:1e:c1:46:1b:61:16:ed:ee:81:ec:02:63:32:
         b6:f6:35:23:e6:5e:79:17:d1:f0:ea:c8:4b:dd:ac:34:4f:32:
         19:af:52:25:56:76:17:77:14:51:be:95:69:b9:a7:29:49:b9:
         2a:a7:52:e8:27:d8:86:18:b4:a7:01:ce:5c:35:46:ab:fb:99:
         18:c0:17:22:b9:18:89:f8:d1:0d:58:e7:a3:bf:85:d3:e4:41:
         c9:1a:1a:8b:14:f2:57:8c:47:b3:e0:86:51:f7:e8:6f:2a:5e:
         e2:8e:d6:af:75:6c:3f:e2:72:93:f3:20:a6:78:fd:f7:31:e9:
         1a:01:77:d5:5b:27:46:f0:fc:b3:8f:42:f9:23:7a:03:d7:bd:
         74:a8:0e:e6:e5:67:ea:cc:fe:28:3a:d6:7b:cc:81:62:6a:59:
         71:05:aa:36:75:89:18:93:55:70:d1:12:3d:fa:55:2d:d6:23:
         f1:72:4a:00:41:df:4e:44:9c:d9:8b:dd:43:ad:b3:4d:6c:d5:
         cd:bf:cc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----