Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B59/E0B4C3C6C07711EC95DB4268C4F9AE02/J1B9x6rfjQke9Xe68fANg0eI91A.mft
File:                     J1B9x6rfjQke9Xe68fANg0eI91A.mft (raw, json)
Hash identifier:          i6L08XZskD1gbdnyKeZ26spGcN2k6d5SYFoeQOOFHVU=
Subject key identifier:   84:67:C3:29:34:BA:2A:4C:F8:87:A4:24:5F:97:54:7F:4A:74:1E:9C
Authority key identifier: 27:50:7D:C7:AA:DF:8D:09:1E:F5:77:BA:F1:F0:0D:83:47:88:F7:50
Certificate issuer:       /CN=A91F3B59/serialNumber=27507DC7AADF8D091EF577BAF1F00D834788F750
Certificate serial:       026A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1B9x6rfjQke9Xe68fANg0eI91A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3B59/E0B4C3C6C07711EC95DB4268C4F9AE02/J1B9x6rfjQke9Xe68fANg0eI91A.mft
Manifest number:          0263
Signing time:             Tue 19 Mar 2024 06:06:15 +0000
Manifest this update:     Tue 19 Mar 2024 06:06:13 +0000
Manifest next update:     Tue 26 Mar 2024 06:06:13 +0000
Files and hashes:         1: J1B9x6rfjQke9Xe68fANg0eI91A.crl (hash: 3jt0iKhgCMUAa4ghMt7m5tTdMIAoaC6QxwP8cGmtMRY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 618 (0x26a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3B59/serialNumber=27507DC7AADF8D091EF577BAF1F00D834788F750
        Validity
            Not Before: Mar 19 06:06:13 2024 GMT
            Not After : Mar 26 06:06:13 2024 GMT
        Subject: CN=65f92b56-9cdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b4:b2:d6:03:3e:6c:57:eb:cc:12:f7:14:16:
                    38:06:31:a6:35:e1:fe:7b:a2:f6:cc:70:ef:82:58:
                    97:25:f8:62:1c:f1:a6:e3:55:70:95:99:0b:fd:f8:
                    6a:17:bc:e3:87:de:ff:03:c6:1b:df:5d:a6:93:ee:
                    fd:e8:e1:3d:36:72:fd:85:ce:c3:64:5f:41:14:7b:
                    35:8d:e6:a4:aa:1e:89:47:7f:18:63:12:c4:8f:e5:
                    53:f1:4d:5a:9c:bb:3e:7a:12:67:28:7c:c4:29:db:
                    91:96:4c:63:57:59:29:fa:54:69:4c:9e:86:b7:4e:
                    e0:93:34:cd:f4:1f:aa:53:54:d2:32:8c:d5:38:97:
                    b0:68:ea:0f:31:d6:ff:10:5e:c6:01:ba:84:21:1d:
                    08:7d:59:d9:16:9c:a2:2f:2d:2f:a6:ae:ce:76:de:
                    ea:4c:20:b7:cf:18:9b:8e:ee:62:a1:25:f6:a9:71:
                    5a:90:a5:32:24:99:73:35:3d:a4:65:a5:82:d6:f0:
                    7d:bc:a5:96:e8:cc:f9:81:5e:60:ac:f3:70:8f:0f:
                    b6:47:80:ad:ab:36:35:7d:ea:d8:ff:be:a1:14:04:
                    0d:42:ad:81:1d:b0:65:17:46:77:71:ea:98:29:6c:
                    c7:eb:44:2c:70:43:a3:3d:25:4f:7e:1e:c3:d7:c3:
                    f0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:67:C3:29:34:BA:2A:4C:F8:87:A4:24:5F:97:54:7F:4A:74:1E:9C
            X509v3 Authority Key Identifier:
                keyid:27:50:7D:C7:AA:DF:8D:09:1E:F5:77:BA:F1:F0:0D:83:47:88:F7:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3B59/E0B4C3C6C07711EC95DB4268C4F9AE02/J1B9x6rfjQke9Xe68fANg0eI91A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1B9x6rfjQke9Xe68fANg0eI91A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B59/E0B4C3C6C07711EC95DB4268C4F9AE02/J1B9x6rfjQke9Xe68fANg0eI91A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:b2:15:3d:22:b3:38:23:c1:d1:27:70:20:7a:cf:00:07:d2:
         22:f3:81:e7:20:5e:75:bd:b0:a5:1e:ea:03:ae:0b:e0:a8:a0:
         3a:eb:6a:e0:da:19:c4:73:ab:45:32:d2:12:cd:4d:87:6e:21:
         d4:b2:c1:1c:fd:b9:3d:24:bf:40:ac:cd:45:b5:69:af:dd:2d:
         14:66:4b:56:07:ac:92:c1:5f:0e:5c:7f:0a:a8:67:40:b9:8c:
         e9:99:63:da:1b:31:03:49:b9:bb:88:37:e5:58:30:71:81:75:
         5e:91:43:1f:7e:f4:11:36:b7:4a:8a:af:7d:fc:2d:91:99:d7:
         f8:34:a1:e8:f7:f4:13:fe:44:4a:38:af:3c:a8:13:77:d6:8c:
         94:2c:80:6b:bf:a5:5d:9b:fb:33:17:e7:0b:e6:23:77:0d:69:
         00:95:ec:f5:8a:ce:d6:a2:84:88:4c:b2:e2:02:42:20:10:0b:
         9b:dc:d2:fb:fd:4e:82:39:68:1f:e8:c7:b4:8b:b8:2d:ae:75:
         52:0e:06:1f:4c:6c:2b:f4:ed:eb:0d:b8:4a:ad:7c:ef:81:e3:
         3c:07:d4:a6:cd:47:4c:a1:29:cd:63:72:9c:49:df:b3:6e:f3:
         63:f2:88:ac:45:24:b4:de:7f:6f:a4:2e:55:26:23:36:29:12:
         98:dd:b3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----