Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7C52/BED4B8B063AC11EC84D4B63AC4F9AE02/8O9hyW_WnRrxToAMfBbHpl1Y4lw.mft
File:                     8O9hyW_WnRrxToAMfBbHpl1Y4lw.mft (raw, json)
Hash identifier:          ICMEaXZl7T/JrM0+9FCFpk055XTxlksg9/pjCOM9ubY=
Subject key identifier:   F0:BC:8C:75:FB:D3:84:D4:B7:7D:5D:19:5F:CB:D7:88:E9:88:D0:80
Authority key identifier: F0:EF:61:C9:6F:D6:9D:1A:F1:4E:80:0C:7C:16:C7:A6:5D:58:E2:5C
Certificate issuer:       /CN=A91E7C52/serialNumber=F0EF61C96FD69D1AF14E800C7C16C7A65D58E25C
Certificate serial:       02C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8O9hyW_WnRrxToAMfBbHpl1Y4lw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7C52/BED4B8B063AC11EC84D4B63AC4F9AE02/8O9hyW_WnRrxToAMfBbHpl1Y4lw.mft
Manifest number:          02BE
Signing time:             Wed 21 Jun 2023 02:42:57 +0000
Manifest this update:     Wed 21 Jun 2023 02:42:56 +0000
Manifest next update:     Wed 28 Jun 2023 02:42:56 +0000
Files and hashes:         1: 8O9hyW_WnRrxToAMfBbHpl1Y4lw.crl (hash: N3MUbAjARPhlde+gQqonGbPuhy0epCDmAvM71ZoDvh8=)
                          2: 43C84A6663B011ECA27BD40DC4F9AE02.roa (hash: 3cITMQz5nMgk9w2sT0CEgL55sCI3K6JU+5blYDr2iLg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 705 (0x2c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7C52/serialNumber=F0EF61C96FD69D1AF14E800C7C16C7A65D58E25C
        Validity
            Not Before: Jun 21 02:42:56 2023 GMT
            Not After : Jun 28 02:42:56 2023 GMT
        Subject: CN=649263b0-a9d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:3f:0a:60:01:2a:d7:3c:66:97:b9:5a:f5:f3:
                    30:b0:83:2e:b7:71:22:88:fa:ce:a0:d8:55:13:48:
                    da:f2:69:01:94:4c:b5:b9:46:0e:d7:80:a2:de:62:
                    25:21:f8:c1:bd:09:10:14:d1:9b:9d:c5:d7:e0:18:
                    e4:79:6c:ed:0c:81:71:fe:8d:18:19:30:79:96:5f:
                    10:9d:f7:ef:11:d7:df:b0:0a:5a:02:6b:8f:a1:3b:
                    11:a1:51:47:cd:d8:4f:21:b8:87:18:36:ac:af:2e:
                    56:c3:56:16:c4:d1:d0:f6:d5:ef:06:25:d0:95:c4:
                    2c:fa:11:56:73:3a:82:ed:08:9d:7e:eb:4b:6a:94:
                    66:27:a1:f0:8a:19:b7:ff:05:b8:0c:84:a8:bf:8b:
                    46:c7:d3:22:ba:16:65:12:ab:a8:78:59:91:31:d9:
                    47:f6:e4:83:e0:89:7f:4c:32:f2:de:37:a8:b5:3a:
                    80:28:50:60:a9:7c:9e:c5:1d:db:e1:e1:e2:23:31:
                    b2:15:cd:fd:0c:cc:10:03:ad:b7:20:f9:48:52:92:
                    e9:e5:c2:d1:7a:2e:ad:2a:f7:6a:10:2c:8b:cd:88:
                    e4:10:37:b5:bf:37:17:2b:8c:2a:11:c2:4f:bc:7d:
                    2e:58:a9:fa:bd:d1:ce:cc:bb:64:41:55:57:31:ac:
                    9c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:BC:8C:75:FB:D3:84:D4:B7:7D:5D:19:5F:CB:D7:88:E9:88:D0:80
            X509v3 Authority Key Identifier:
                keyid:F0:EF:61:C9:6F:D6:9D:1A:F1:4E:80:0C:7C:16:C7:A6:5D:58:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7C52/BED4B8B063AC11EC84D4B63AC4F9AE02/8O9hyW_WnRrxToAMfBbHpl1Y4lw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8O9hyW_WnRrxToAMfBbHpl1Y4lw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7C52/BED4B8B063AC11EC84D4B63AC4F9AE02/8O9hyW_WnRrxToAMfBbHpl1Y4lw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:36:39:04:b5:7a:1f:d7:ba:9d:e5:56:0d:fd:e8:fa:58:4a:
         6d:31:05:59:9d:eb:f6:78:f0:bd:22:04:f5:c9:a4:78:8b:dd:
         df:57:fa:14:f7:e9:9d:6b:8b:b3:33:45:d4:07:90:7a:f8:31:
         c4:7f:16:a4:8e:81:54:b0:9d:7d:25:35:0e:2e:27:be:64:29:
         b1:01:c3:99:b9:f2:15:5a:9e:87:71:a0:1b:77:4f:e2:46:33:
         fe:3e:54:5a:08:30:b2:0a:7a:4f:b3:49:64:f0:8d:b6:e7:f9:
         a3:df:3b:98:a6:98:40:4e:53:4c:8d:c9:84:ff:6e:0b:fb:64:
         83:b2:37:cb:d9:69:86:c9:f5:21:d5:26:14:f9:1a:b1:39:bf:
         40:66:a6:bd:23:2d:4c:4b:14:20:04:36:ea:fd:e0:af:4f:fe:
         7f:5f:61:f7:84:db:c5:46:49:de:15:00:4a:32:31:91:8f:ad:
         ba:9f:fb:0d:bb:e1:e8:60:ad:4b:12:48:9c:0a:cb:05:bf:2a:
         5e:2d:47:63:c6:93:7e:7d:0c:50:c5:20:44:3a:e4:6a:51:29:
         6e:21:d4:8e:f3:27:ec:30:1d:6c:c7:be:4d:08:a3:fc:0c:75:
         fe:63:4c:d1:aa:53:00:f6:3e:15:82:6e:a4:3d:bc:14:a9:e4:
         27:fd:c8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----