Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8340/444486A8833711EB9B491025C4F9AE02/vZ9jzHoeEOUiMQLLrmwpJELuhWw.mft
File:                     vZ9jzHoeEOUiMQLLrmwpJELuhWw.mft (raw, json)
Hash identifier:          zMkshlZoQ4ZMstzTCHDqXOarxm9hNV1K4t3nOZK+jBk=
Subject key identifier:   14:EE:27:67:B1:8C:88:12:F1:E9:CA:2A:73:91:DC:75:21:E5:16:ED
Authority key identifier: BD:9F:63:CC:7A:1E:10:E5:22:31:02:CB:AE:6C:29:24:42:EE:85:6C
Certificate issuer:       /CN=A91E8340/serialNumber=BD9F63CC7A1E10E5223102CBAE6C292442EE856C
Certificate serial:       036E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ9jzHoeEOUiMQLLrmwpJELuhWw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8340/444486A8833711EB9B491025C4F9AE02/vZ9jzHoeEOUiMQLLrmwpJELuhWw.mft
Manifest number:          036A
Signing time:             Mon 23 May 2022 01:15:46 +0000
Manifest this update:     Mon 23 May 2022 01:15:46 +0000
Manifest next update:     Wed 25 May 2022 01:15:46 +0000
Files and hashes:         1: vZ9jzHoeEOUiMQLLrmwpJELuhWw.crl (hash: JFloI5MEyseT4bUhYpoCYkP77C6EzCPmroTzdfFYq8s=)
                          2: 1708E9A0B16111EC966EEE2EC4F9AE02.roa (hash: sgru6ZylCj9vZZb8FPnw/gjH95vQaTMeNLSfkGcM2wQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 878 (0x36e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8340/serialNumber=BD9F63CC7A1E10E5223102CBAE6C292442EE856C
        Validity
            Not Before: May 23 01:15:46 2022 GMT
            Not After : May 25 01:15:46 2022 GMT
        Subject: CN=628ae042-eb5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e1:dc:34:65:93:a1:b8:7f:83:e9:db:c5:b4:
                    94:ba:9e:87:11:c5:74:ec:d9:31:44:d1:99:1d:fb:
                    fb:c9:32:8f:d2:af:97:fc:e3:c7:b0:82:bf:42:f7:
                    b0:a9:a5:3a:b5:8c:fb:0f:a5:6a:fc:da:1f:16:59:
                    6a:36:b9:fc:41:9b:64:a2:f6:17:2e:89:32:83:5c:
                    67:38:c0:76:d1:e8:62:16:c8:c5:dc:a6:73:d6:aa:
                    f1:bd:90:11:3e:42:a1:59:49:37:e6:c6:6a:09:a5:
                    f5:f6:c6:06:88:16:da:c8:2d:d1:c0:d4:4b:7e:e7:
                    58:45:9a:bc:d2:cb:1b:fa:ea:7a:06:54:7b:18:ca:
                    a3:5d:df:0b:3c:e1:42:50:01:b0:d0:6b:c7:0f:8d:
                    00:aa:8f:bf:66:71:12:0e:51:37:4f:e9:9b:c8:9c:
                    dd:54:6c:d8:a4:24:5a:12:b2:92:1f:44:78:68:00:
                    e0:ae:0f:ec:38:45:9a:4d:d7:08:23:40:64:b7:4a:
                    94:fc:9e:fe:f2:a8:32:35:af:45:37:b1:19:40:fa:
                    7a:97:a7:3e:c1:21:bd:6e:bd:98:9d:e0:26:e6:76:
                    3c:43:a0:fa:86:87:04:26:48:15:d3:e0:4d:ae:7a:
                    1a:41:fa:97:6b:9b:60:7c:72:27:87:3c:9b:32:2b:
                    31:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:EE:27:67:B1:8C:88:12:F1:E9:CA:2A:73:91:DC:75:21:E5:16:ED
            X509v3 Authority Key Identifier:
                keyid:BD:9F:63:CC:7A:1E:10:E5:22:31:02:CB:AE:6C:29:24:42:EE:85:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8340/444486A8833711EB9B491025C4F9AE02/vZ9jzHoeEOUiMQLLrmwpJELuhWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ9jzHoeEOUiMQLLrmwpJELuhWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8340/444486A8833711EB9B491025C4F9AE02/vZ9jzHoeEOUiMQLLrmwpJELuhWw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:d8:32:f0:89:a1:1f:58:6f:c1:7f:5d:49:36:ce:f3:88:15:
         81:7d:c6:b5:a7:3f:dc:cb:4c:3f:74:7c:07:d9:00:3b:22:11:
         d7:77:38:9e:9c:eb:b1:5a:ca:9c:fc:df:d4:ff:67:2c:21:95:
         c1:36:92:19:60:6b:9a:4e:a6:ad:7d:73:0f:52:10:47:b1:5c:
         4a:b7:30:f0:39:66:5f:36:c8:29:2b:11:75:2d:c4:01:00:c4:
         6f:a6:b6:b8:fb:cf:0b:97:8e:bd:d5:37:0a:e3:06:8c:4d:f4:
         35:57:66:a8:fb:75:1e:90:ee:be:6d:61:d8:07:50:e2:50:1a:
         03:7e:49:e9:97:9f:c9:75:a3:2f:bd:cc:ab:1f:53:a2:5e:48:
         40:b3:43:ca:9d:63:a4:ed:d0:da:a5:db:a7:6c:f2:47:4d:93:
         34:28:fa:20:f5:b4:54:cd:46:95:3c:4b:b1:4f:ac:e6:3b:77:
         1c:5f:f0:ec:17:3a:8a:d2:2e:d4:5c:32:d0:66:4a:a6:33:ef:
         9d:4a:a3:18:24:a8:8c:45:1b:99:7c:8a:3e:8b:f5:78:a4:ad:
         e5:d1:e9:c5:80:6d:82:29:59:28:55:e6:55:4a:51:95:6c:0f:
         ef:c3:a1:a3:de:3a:7e:2f:30:61:d7:d0:7c:d6:18:f5:3f:d0:
         38:ad:f4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----