Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E94A6/691B1FEAC08B11ECAE218555C4F9AE02/vl7EuD8mu6D_ojs2IJROQ_xyEcQ.mft
File:                     vl7EuD8mu6D_ojs2IJROQ_xyEcQ.mft (raw, json)
Hash identifier:          7EkFyoRUN1zSicvNMKZ7vvZgheR/e6F1l1aJ5KcGO3Q=
Subject key identifier:   62:46:A3:58:F9:46:A0:87:5F:AD:D5:82:24:D0:B9:EA:41:97:69:AC
Authority key identifier: BE:5E:C4:B8:3F:26:BB:A0:FF:A2:3B:36:20:94:4E:43:FC:72:11:C4
Certificate issuer:       /CN=A91E94A6/serialNumber=BE5EC4B83F26BBA0FFA23B3620944E43FC7211C4
Certificate serial:       0203
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vl7EuD8mu6D_ojs2IJROQ_xyEcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E94A6/691B1FEAC08B11ECAE218555C4F9AE02/vl7EuD8mu6D_ojs2IJROQ_xyEcQ.mft
Manifest number:          0200
Signing time:             Thu 21 Sep 2023 02:29:08 +0000
Manifest this update:     Thu 21 Sep 2023 02:29:07 +0000
Manifest next update:     Thu 28 Sep 2023 02:29:07 +0000
Files and hashes:         1: vl7EuD8mu6D_ojs2IJROQ_xyEcQ.crl (hash: m++RDOf48Xs/WqYAY/BGQuhh4PLMyxzyxMTdXVWge3k=)
                          2: C35C2FFEC08F11ECAE864A71C4F9AE02.roa (hash: ZexBph41QPvB4aw3DdJWmRc+EORzhkA+3CF9zEZfFsk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 515 (0x203)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E94A6/serialNumber=BE5EC4B83F26BBA0FFA23B3620944E43FC7211C4
        Validity
            Not Before: Sep 21 02:29:07 2023 GMT
            Not After : Sep 28 02:29:07 2023 GMT
        Subject: CN=650baa74-f3a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5f:5c:68:96:0b:7b:17:4b:15:9c:7e:d9:09:
                    a4:f6:52:54:57:19:b6:43:4e:8a:37:83:c6:5e:ad:
                    13:a3:43:60:be:b5:e9:db:30:2b:be:94:60:4e:c3:
                    d6:9c:f8:09:a2:1c:db:bc:f8:1d:cf:75:62:b9:73:
                    96:19:c7:cd:69:01:06:14:eb:67:6b:57:ff:c1:cd:
                    45:e8:48:ac:d7:0c:14:4c:89:e6:85:b8:ae:16:03:
                    f3:31:c0:28:da:c5:7d:0d:17:bc:a4:a2:b2:92:27:
                    fe:20:c2:48:cd:50:d6:e8:99:98:af:f0:2b:62:b7:
                    b2:2c:3e:6a:92:92:9a:f5:66:9b:54:24:63:3e:97:
                    17:30:1d:3b:0d:cd:e3:e9:39:f6:50:bd:5e:ea:84:
                    ec:3b:28:6e:3b:04:c6:58:fb:68:0e:3a:34:d2:59:
                    5c:45:cc:07:0f:96:d8:ee:08:53:e2:b1:04:55:15:
                    26:27:1b:ff:cd:3f:3d:a3:e8:75:e6:f5:23:22:48:
                    25:ad:d4:b0:b9:52:92:3d:83:4a:c7:b1:0b:34:4b:
                    d9:c2:91:ff:26:c4:1e:9c:6e:24:30:0d:48:a0:6f:
                    cd:7c:3a:fc:39:31:db:7c:91:e8:58:ed:51:0d:c1:
                    ac:80:6d:5f:e9:00:31:f6:6c:a2:2a:ad:f6:86:4c:
                    00:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:46:A3:58:F9:46:A0:87:5F:AD:D5:82:24:D0:B9:EA:41:97:69:AC
            X509v3 Authority Key Identifier:
                keyid:BE:5E:C4:B8:3F:26:BB:A0:FF:A2:3B:36:20:94:4E:43:FC:72:11:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E94A6/691B1FEAC08B11ECAE218555C4F9AE02/vl7EuD8mu6D_ojs2IJROQ_xyEcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vl7EuD8mu6D_ojs2IJROQ_xyEcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E94A6/691B1FEAC08B11ECAE218555C4F9AE02/vl7EuD8mu6D_ojs2IJROQ_xyEcQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:8b:93:8f:f1:65:f1:2a:59:8d:53:18:94:06:25:1b:0c:0c:
         34:4b:2d:cd:7f:54:6b:5a:1a:3b:83:05:1f:8a:52:66:19:66:
         b0:af:50:db:c7:01:0d:d6:79:4d:71:70:9f:4e:4e:b2:a0:fe:
         a3:6d:ac:f3:32:a0:9c:3b:c3:d6:8e:a2:b6:68:d8:ec:54:7f:
         38:87:ab:dc:1c:ed:fd:eb:c8:cf:2f:2d:1b:e0:89:f6:0e:d0:
         52:b8:f4:e2:1c:a9:cc:79:1a:da:bf:79:d4:7f:e7:2a:ed:a5:
         a3:9c:13:1e:a3:64:01:1c:80:ad:97:82:52:e8:ad:4c:02:1f:
         96:b1:2b:54:a9:e8:23:ed:bc:6a:9f:d1:00:95:2a:9a:20:1b:
         b2:d3:0e:94:0a:37:92:dc:f3:e0:a2:3c:cf:83:1d:f7:98:84:
         82:91:b3:04:db:90:18:fd:3d:23:33:3f:04:2d:5a:5f:97:fc:
         12:09:f6:f1:2e:6d:c9:c5:f3:d4:9d:48:06:6e:fc:d1:2e:65:
         7d:49:a1:69:3c:35:28:56:8b:8b:f8:09:91:cd:b6:dc:8a:71:
         ea:60:78:11:c8:13:b3:72:ce:d7:f8:9e:5b:6c:80:a0:59:63:
         d0:62:95:5a:d1:6e:df:f9:31:cc:36:1f:9f:9f:b6:2b:59:68:
         25:53:98:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----