Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0414/DCEE5D8A976E11EA9587C25DC4F9AE02/NtX0GExzwfg4Fj9H_QSpp5v5qyc.mft
File:                     NtX0GExzwfg4Fj9H_QSpp5v5qyc.mft (raw, json)
Hash identifier:          aI1rAl3k+eYlLVuT1v9S4S3udErTDogAY4Ihd0T9LcA=
Subject key identifier:   64:46:52:80:21:10:67:5A:25:22:C0:92:25:D4:D9:8A:33:54:B0:1B
Authority key identifier: 36:D5:F4:18:4C:73:C1:F8:38:16:3F:47:FD:04:A9:A7:9B:F9:AB:27
Certificate issuer:       /CN=A91F0414/serialNumber=36D5F4184C73C1F838163F47FD04A9A79BF9AB27
Certificate serial:       079C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtX0GExzwfg4Fj9H_QSpp5v5qyc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0414/DCEE5D8A976E11EA9587C25DC4F9AE02/NtX0GExzwfg4Fj9H_QSpp5v5qyc.mft
Manifest number:          0799
Signing time:             Fri 27 Jan 2023 00:28:19 +0000
Manifest this update:     Fri 27 Jan 2023 00:28:19 +0000
Manifest next update:     Fri 03 Feb 2023 00:28:19 +0000
Files and hashes:         1: NtX0GExzwfg4Fj9H_QSpp5v5qyc.crl (hash: tHqqtZD19bUzrHL9Nz0MLstRIkkeiuVUif8HzHLiyvg=)
                          2: 319038D0977011EA87D8C65FC4F9AE02.roa (hash: 90p3Xr7agCNdfcVUAgOvD0l3hsPhY4COTm/olkUeV38=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1948 (0x79c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0414/serialNumber=36D5F4184C73C1F838163F47FD04A9A79BF9AB27
        Validity
            Not Before: Jan 27 00:28:19 2023 GMT
            Not After : Feb  3 00:28:19 2023 GMT
        Subject: CN=63d31aa3-766c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c7:9e:c9:ce:09:e4:8f:e8:84:5b:5c:63:bc:
                    6e:87:d4:3c:0c:59:97:40:25:3d:94:55:30:00:26:
                    2b:f9:d0:65:3e:8c:49:a9:3b:b5:46:98:a1:b9:a0:
                    2f:89:fe:b2:c4:c2:d5:41:eb:f7:79:0a:48:6e:53:
                    f9:1a:d0:92:62:df:da:53:1b:d0:b0:92:a8:5e:5c:
                    8b:23:f4:63:b2:ea:df:ff:f1:79:f2:ec:fb:60:71:
                    92:c7:0a:3b:d8:ca:7f:19:05:72:50:f6:75:a8:11:
                    27:41:f0:65:ef:83:03:1b:49:72:cb:85:16:30:69:
                    96:e4:e4:de:e0:e0:a3:c3:fe:94:cc:10:67:a2:a4:
                    97:8b:9b:99:8c:80:ee:9c:ac:20:69:71:50:e3:f5:
                    d9:46:a2:42:93:bc:ce:81:d8:00:76:17:57:2f:7a:
                    f0:70:54:6d:dd:aa:92:20:a2:48:fa:86:4c:a5:37:
                    9c:fd:d5:c2:f4:45:f6:9e:11:c7:05:1e:1f:b0:9a:
                    63:5b:3a:bb:bf:60:85:c5:c9:48:30:e7:ad:72:61:
                    d4:c8:b2:36:4a:62:a4:1c:d8:c0:a4:9f:d8:38:25:
                    d6:bf:7b:93:8c:5f:5f:d9:4a:89:87:9e:03:41:b0:
                    59:03:2b:28:eb:54:05:7e:cf:a0:9f:1b:02:3d:11:
                    09:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:46:52:80:21:10:67:5A:25:22:C0:92:25:D4:D9:8A:33:54:B0:1B
            X509v3 Authority Key Identifier:
                keyid:36:D5:F4:18:4C:73:C1:F8:38:16:3F:47:FD:04:A9:A7:9B:F9:AB:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0414/DCEE5D8A976E11EA9587C25DC4F9AE02/NtX0GExzwfg4Fj9H_QSpp5v5qyc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtX0GExzwfg4Fj9H_QSpp5v5qyc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0414/DCEE5D8A976E11EA9587C25DC4F9AE02/NtX0GExzwfg4Fj9H_QSpp5v5qyc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:22:b0:ac:d8:69:38:85:9c:83:84:66:f3:ce:17:e6:3b:c4:
         fa:93:8a:31:ca:7a:5b:6d:de:55:75:66:e5:2c:2c:71:16:06:
         e1:e5:75:29:e1:3f:7e:7a:3e:5f:7e:62:76:b7:30:89:c0:12:
         68:20:58:44:f0:1f:f5:27:cd:08:38:3d:d8:85:41:2b:ae:16:
         fd:fc:cf:6c:18:9c:25:7f:4e:9b:2e:2d:35:7a:c8:cc:65:b9:
         97:6d:9b:6d:86:9b:11:ab:77:c9:17:07:7f:91:f8:f9:6a:51:
         c0:e6:19:72:16:63:ed:61:de:ec:a8:66:0e:c0:59:c2:93:df:
         f3:e6:0d:a8:dc:dc:ae:52:ca:15:7b:73:55:a0:d7:a8:c4:d9:
         0e:75:52:17:fc:a7:b8:56:c1:5d:53:0a:a2:9e:22:12:4e:ce:
         3a:26:55:de:8f:08:c9:e9:ed:ca:8c:39:2a:38:d0:e3:84:03:
         46:9c:06:3b:4a:2e:4a:00:63:99:0d:25:41:83:ab:e8:3c:89:
         4b:82:f6:9b:7a:ae:c2:ea:9a:17:d6:c5:fd:1a:21:23:da:c3:
         a6:28:ea:ed:c1:6b:52:c9:20:88:fb:e4:4a:90:49:df:c2:ab:
         f9:27:47:9b:8b:84:03:f9:9d:0a:49:5d:27:26:ab:89:d7:e6:
         d9:57:da:89
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjA0MTQxMTAvBgNVBAUTKDM2RDVGNDE4NEM3M0MxRjgzODE2M0Y0N0ZEMDRBOUE3
OUJGOUFCMjcwHhcNMjMwMTI3MDAyODE5WhcNMjMwMjAzMDAyODE5WjAYMRYwFAYD
VQQDEw02M2QzMWFhMy03NjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0ceeyc4J5I/ohFtcY7xuh9Q8DFmXQCU9lFUwACYr+dBlPoxJqTu1RpihuaAv
if6yxMLVQev3eQpIblP5GtCSYt/aUxvQsJKoXlyLI/Rjsurf//F58uz7YHGSxwo7
2Mp/GQVyUPZ1qBEnQfBl74MDG0lyy4UWMGmW5OTe4OCjw/6UzBBnoqSXi5uZjIDu
nKwgaXFQ4/XZRqJCk7zOgdgAdhdXL3rwcFRt3aqSIKJI+oZMpTec/dXC9EX2nhHH
BR4fsJpjWzq7v2CFxclIMOetcmHUyLI2SmKkHNjApJ/YOCXWv3uTjF9f2UqJh54D
QbBZAyso61QFfs+gnxsCPREJEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRGUoAh
EGdaJSLAkiXU2YozVLAbMB8GA1UdIwQYMBaAFDbV9BhMc8H4OBY/R/0Eqaeb+asn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDQxNC9EQ0VFNUQ4QTk3
NkUxMUVBOTU4N0MyNURDNEY5QUUwMi9OdFgwR0V4endmZzRGajlIX1FTcHA1djVx
eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL050WDBHRXh6d2ZnNEZqOUhfUVNwcDV2NXF5Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MDQxNC9EQ0VFNUQ4QTk3NkUxMUVBOTU4N0MyNURDNEY5QUUwMi9OdFgwR0V4endm
ZzRGajlIX1FTcHA1djVxeWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAsIrCs2Gk4hZyDhGbzzhfmO8T6k4oxynpbbd5VdWblLCxxFgbh5XUp
4T9+ej5ffmJ2tzCJwBJoIFhE8B/1J80IOD3YhUErrhb9/M9sGJwlf06bLi01esjM
ZbmXbZtthpsRq3fJFwd/kfj5alHA5hlyFmPtYd7sqGYOwFnCk9/z5g2o3NyuUsoV
e3NVoNeoxNkOdVIX/Ke4VsFdUwqiniISTs46JlXejwjJ6e3KjDkqONDjhANGnAY7
Si5KAGOZDSVBg6voPIlLgvabeq7C6poX1sX9GiEj2sOmKOrtwWtSySCI++RKkEnf
wqv5J0ebi4QD+Z0KSV0nJquJ1+bZV9qJ
-----END CERTIFICATE-----