Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F349D/1996353601D611ED92E11E46C4F9AE02/-BEIESWm6HiFgujQ46rXxsHRn5k.mft
File:                     -BEIESWm6HiFgujQ46rXxsHRn5k.mft (raw, json)
Hash identifier:          XZhYQP8rEh7FHiFfSp8f6q31YtvYFimC80Ma7HNMm38=
Subject key identifier:   41:B8:9A:B4:CC:1F:21:B4:65:3F:86:48:1D:B2:E2:22:ED:D4:10:B8
Authority key identifier: F8:11:08:11:25:A6:E8:78:85:82:E8:D0:E3:AA:D7:C6:C1:D1:9F:99
Certificate issuer:       /CN=A91F349D/serialNumber=F811081125A6E8788582E8D0E3AAD7C6C1D19F99
Certificate serial:       01B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BEIESWm6HiFgujQ46rXxsHRn5k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F349D/1996353601D611ED92E11E46C4F9AE02/-BEIESWm6HiFgujQ46rXxsHRn5k.mft
Manifest number:          01AA
Signing time:             Mon 19 Feb 2024 09:16:48 +0000
Manifest this update:     Mon 19 Feb 2024 09:16:48 +0000
Manifest next update:     Mon 26 Feb 2024 09:16:48 +0000
Files and hashes:         1: -BEIESWm6HiFgujQ46rXxsHRn5k.crl (hash: GrVowchfYgDSGfhj9yAnNQ4gojLNacMhzjV+t6IUsus=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 435 (0x1b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F349D/serialNumber=F811081125A6E8788582E8D0E3AAD7C6C1D19F99
        Validity
            Not Before: Feb 19 09:16:48 2024 GMT
            Not After : Feb 26 09:16:48 2024 GMT
        Subject: CN=65d31c80-110d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:73:06:8d:6d:7e:fd:6c:c4:17:84:de:28:ef:
                    37:bb:11:c5:e3:d2:fe:96:6b:af:b6:ea:5f:16:26:
                    73:be:2a:cc:6d:31:3c:66:49:82:ee:a0:b9:e3:2c:
                    63:23:13:0f:90:4d:95:f6:0b:4e:4f:1c:a5:9f:2c:
                    29:dd:89:ad:1e:7a:50:9b:44:27:03:7a:25:1f:0d:
                    df:0d:1f:ef:81:4d:bd:20:d8:fe:d8:b4:2d:96:61:
                    f0:b4:2e:b4:49:0a:10:8a:08:d7:34:8e:f3:ab:c4:
                    12:b3:5c:25:11:f2:3f:46:a3:e8:70:83:39:cf:c0:
                    83:fd:e1:27:71:37:34:ce:1c:21:99:3a:de:5c:a5:
                    05:cd:3f:d4:5a:ff:d4:33:ca:44:c0:22:55:05:b9:
                    98:2c:6a:54:6b:29:d1:4c:3b:05:c1:a2:eb:3d:09:
                    54:7a:ae:bc:95:42:f0:39:c8:0f:7b:bd:04:a4:24:
                    de:36:ba:04:9e:b8:21:76:82:2f:5e:2c:a0:da:bc:
                    f3:9d:ca:b4:7a:e3:10:64:a6:c7:b8:13:1b:54:aa:
                    fa:c1:57:61:0e:0b:90:12:17:09:5c:cb:a8:fc:53:
                    f8:69:33:c1:9e:8d:c5:ab:e3:95:ad:52:28:f4:f9:
                    46:40:cf:40:27:db:79:97:ab:81:9b:5e:38:b2:92:
                    97:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B8:9A:B4:CC:1F:21:B4:65:3F:86:48:1D:B2:E2:22:ED:D4:10:B8
            X509v3 Authority Key Identifier:
                keyid:F8:11:08:11:25:A6:E8:78:85:82:E8:D0:E3:AA:D7:C6:C1:D1:9F:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F349D/1996353601D611ED92E11E46C4F9AE02/-BEIESWm6HiFgujQ46rXxsHRn5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BEIESWm6HiFgujQ46rXxsHRn5k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F349D/1996353601D611ED92E11E46C4F9AE02/-BEIESWm6HiFgujQ46rXxsHRn5k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:d0:80:b7:02:a8:b6:09:f9:39:5f:29:93:04:40:6a:59:0e:
         85:ee:11:89:ca:48:34:66:ba:28:52:c4:33:bc:40:4e:27:b9:
         12:1d:c9:11:f5:d4:ae:03:ca:e3:f5:6f:34:44:33:56:cb:75:
         b6:a8:4e:5d:91:39:e7:2e:4c:21:35:79:71:e3:98:78:c9:46:
         d8:42:3c:a4:a9:77:d3:2e:2c:e8:d9:82:b5:53:a9:c6:56:61:
         7f:45:73:71:c6:49:c5:4d:25:ac:77:2c:c5:ca:14:01:31:bf:
         b6:ff:cd:ed:ae:49:13:f7:6e:89:ee:a8:d5:0d:c3:b4:d5:b9:
         e2:8f:00:68:a9:1a:49:4e:03:ea:74:c9:41:24:9e:93:3a:b4:
         b3:d5:b6:f8:96:56:76:61:fb:83:f1:d8:cd:46:a2:8e:31:e8:
         e7:42:09:6c:36:bb:f0:a3:73:9d:d7:10:82:bc:8a:98:2c:96:
         da:55:58:bd:86:4d:a9:47:98:63:ff:62:23:09:0d:74:bb:cc:
         e6:50:ed:da:fd:1f:bf:e2:24:89:fc:de:32:af:72:2a:12:44:
         d7:9e:fc:47:e9:78:f6:d8:13:47:a3:0e:d0:c9:08:f0:db:67:
         46:bc:03:1c:82:ff:8f:c0:a2:4d:ff:7a:9d:52:87:2a:34:ac:
         d8:f5:c1:c8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjM0OUQxMTAvBgNVBAUTKEY4MTEwODExMjVBNkU4Nzg4NTgyRThEMEUzQUFEN0M2
QzFEMTlGOTkwHhcNMjQwMjE5MDkxNjQ4WhcNMjQwMjI2MDkxNjQ4WjAYMRYwFAYD
VQQDEw02NWQzMWM4MC0xMTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlnMGjW1+/WzEF4TeKO83uxHF49L+lmuvtupfFiZzvirMbTE8ZkmC7qC54yxj
IxMPkE2V9gtOTxylnywp3YmtHnpQm0QnA3olHw3fDR/vgU29INj+2LQtlmHwtC60
SQoQigjXNI7zq8QSs1wlEfI/RqPocIM5z8CD/eEncTc0zhwhmTreXKUFzT/UWv/U
M8pEwCJVBbmYLGpUaynRTDsFwaLrPQlUeq68lULwOcgPe70EpCTeNroEnrghdoIv
Xiyg2rzzncq0euMQZKbHuBMbVKr6wVdhDguQEhcJXMuo/FP4aTPBno3Fq+OVrVIo
9PlGQM9AJ9t5l6uBm144spKXPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEG4mrTM
HyG0ZT+GSB2y4iLt1BC4MB8GA1UdIwQYMBaAFPgRCBElpuh4hYLo0OOq18bB0Z+Z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzQ5RC8xOTk2MzUzNjAx
RDYxMUVEOTJFMTFFNDZDNEY5QUUwMi8tQkVJRVNXbTZIaUZndWpRNDZyWHhzSFJu
NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1CRUlFU1dtNkhpRmd1alE0NnJYeHNIUm41ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MzQ5RC8xOTk2MzUzNjAxRDYxMUVEOTJFMTFFNDZDNEY5QUUwMi8tQkVJRVNXbTZI
aUZndWpRNDZyWHhzSFJuNWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCD0IC3Aqi2Cfk5XymTBEBqWQ6F7hGJykg0ZrooUsQzvEBOJ7kSHckR
9dSuA8rj9W80RDNWy3W2qE5dkTnnLkwhNXlx45h4yUbYQjykqXfTLizo2YK1U6nG
VmF/RXNxxknFTSWsdyzFyhQBMb+2/83trkkT926J7qjVDcO01bnijwBoqRpJTgPq
dMlBJJ6TOrSz1bb4llZ2YfuD8djNRqKOMejnQglsNrvwo3Od1xCCvIqYLJbaVVi9
hk2pR5hj/2IjCQ10u8zmUO3a/R+/4iSJ/N4yr3IqEkTXnvxH6Xj22BNHow7QyQjw
22dGvAMcgv+PwKJN/3qdUocqNKzY9cHI
-----END CERTIFICATE-----