Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E89EE/BDDEAD986EBA11E8A126AD3EC4F9AE02/8YTA5Dm-_olkUfXtXP0Afkam7ww.mft
File:                     8YTA5Dm-_olkUfXtXP0Afkam7ww.mft (raw, json)
Hash identifier:          fVAQfB/GYF5G3hGBL8WL+MRJx0C/DplTJ4j28gpajhE=
Subject key identifier:   A5:3E:EC:6E:50:55:66:23:17:2A:52:79:06:B1:46:AA:F4:E1:80:FA
Authority key identifier: F1:84:C0:E4:39:BE:FE:89:64:51:F5:ED:5C:FD:00:7E:46:A6:EF:0C
Certificate issuer:       /CN=A91E89EE/serialNumber=F184C0E439BEFE896451F5ED5CFD007E46A6EF0C
Certificate serial:       12F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YTA5Dm-_olkUfXtXP0Afkam7ww.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E89EE/BDDEAD986EBA11E8A126AD3EC4F9AE02/8YTA5Dm-_olkUfXtXP0Afkam7ww.mft
Manifest number:          12F4
Signing time:             Tue 18 Jul 2023 17:19:09 +0000
Manifest this update:     Tue 18 Jul 2023 17:19:09 +0000
Manifest next update:     Tue 25 Jul 2023 17:19:09 +0000
Files and hashes:         1: 8YTA5Dm-_olkUfXtXP0Afkam7ww.crl (hash: CpLYVMSaVrTvXXr6BcOpp9LaF6RiDHAxHr7kgc93hjU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4855 (0x12f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E89EE/serialNumber=F184C0E439BEFE896451F5ED5CFD007E46A6EF0C
        Validity
            Not Before: Jul 18 17:19:09 2023 GMT
            Not After : Jul 25 17:19:09 2023 GMT
        Subject: CN=64b6c98d-10d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:24:e2:a8:e6:17:3b:ff:e4:7a:79:8a:4f:17:
                    db:39:14:42:8b:df:54:93:9a:f5:8e:3f:98:9d:c4:
                    58:c8:c2:33:e7:40:b7:45:23:a3:79:1e:aa:17:20:
                    f6:7d:fc:10:3b:29:62:2d:bf:4b:ac:93:29:88:40:
                    b7:f8:5b:c5:a3:e6:70:97:11:2f:ed:47:11:5c:95:
                    49:0b:50:ea:56:ae:df:7a:be:17:b3:77:17:67:26:
                    b5:e2:cd:b5:1f:d7:ad:3c:07:b6:a2:3d:e9:97:47:
                    27:7a:2c:f9:ac:06:ab:ba:d5:bb:09:a4:8b:e9:d2:
                    a6:3e:25:7b:d9:9e:b3:bf:58:bb:19:5c:1e:2e:b5:
                    2d:23:de:8d:53:b9:70:9a:42:dd:9a:12:cf:ba:e5:
                    95:d6:f3:3f:3c:3d:e1:f4:d6:eb:e3:94:d8:0c:fc:
                    7d:13:a8:0c:83:39:4d:47:97:39:95:4b:42:a3:8e:
                    a5:62:8a:6e:1d:73:c7:73:ae:fc:22:b4:20:7f:3f:
                    ee:1e:49:fc:d1:34:62:30:31:27:e6:c1:74:07:d6:
                    4b:6f:ed:74:7a:a0:ff:bc:d8:eb:4c:03:bd:ee:21:
                    9f:f0:04:7d:46:f4:cb:a3:42:bd:4b:22:46:cd:a8:
                    e4:f0:85:cc:fd:25:eb:bd:7b:b1:68:2a:9b:a9:6f:
                    58:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:3E:EC:6E:50:55:66:23:17:2A:52:79:06:B1:46:AA:F4:E1:80:FA
            X509v3 Authority Key Identifier:
                keyid:F1:84:C0:E4:39:BE:FE:89:64:51:F5:ED:5C:FD:00:7E:46:A6:EF:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E89EE/BDDEAD986EBA11E8A126AD3EC4F9AE02/8YTA5Dm-_olkUfXtXP0Afkam7ww.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YTA5Dm-_olkUfXtXP0Afkam7ww.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E89EE/BDDEAD986EBA11E8A126AD3EC4F9AE02/8YTA5Dm-_olkUfXtXP0Afkam7ww.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:7d:fb:57:05:a8:8a:b5:43:61:63:a6:27:11:97:86:72:2f:
         a4:3d:fe:6a:e4:63:d8:0d:42:88:a4:c4:0b:75:9d:17:a1:b2:
         62:9a:b1:09:a9:82:50:87:ad:49:ec:e6:95:ed:7a:a7:d3:db:
         5a:c6:44:17:fa:bc:76:28:dd:70:8b:65:55:70:8b:5f:d6:0f:
         bf:a1:33:93:01:a0:21:95:5a:70:5e:2b:ae:7e:1d:27:a8:e7:
         3a:71:8c:de:12:a7:19:99:26:0a:6f:27:71:64:50:b0:cb:f9:
         30:3c:94:99:98:ca:7b:3d:97:d0:9b:c4:81:61:ed:c6:72:f2:
         16:b2:18:5e:01:26:eb:e4:ce:a2:70:09:4a:dc:93:4d:2a:a1:
         6b:c0:ba:5d:de:2a:8c:f4:8f:c9:0c:c4:75:f7:fe:f1:03:f4:
         70:14:ef:a9:4b:8f:f9:97:cb:70:6d:eb:85:34:6c:c5:f7:62:
         3d:58:00:58:0b:f3:2f:86:c5:7b:da:31:19:b2:38:79:36:c3:
         44:ae:52:74:b2:d9:a2:7f:6f:fa:bf:e1:9f:9d:a5:40:4f:2e:
         54:03:35:f4:ea:16:dd:7b:a5:40:75:9e:26:88:66:02:2c:f2:
         8c:72:20:65:2a:0d:c1:2e:7c:1f:10:e7:80:2e:40:64:a8:71:
         c4:2d:55:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----