Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAFB1/AB307048D52011ECB07B6035C4F9AE02/8xkBlPj64prxfsGfyIymdCzVzeo.mft
File:                     8xkBlPj64prxfsGfyIymdCzVzeo.mft (raw, json)
Hash identifier:          FnlymKHdaf2elYieeDiExsypjLj+Seei5JR/LnZ/qu8=
Subject key identifier:   7C:35:4F:37:23:31:A4:A7:1C:A5:8E:F1:A0:D4:C6:62:A3:5C:E1:40
Authority key identifier: F3:19:01:94:F8:FA:E2:9A:F1:7E:C1:9F:C8:8C:A6:74:2C:D5:CD:EA
Certificate issuer:       /CN=A91FAFB1/serialNumber=F3190194F8FAE29AF17EC19FC88CA6742CD5CDEA
Certificate serial:       01DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xkBlPj64prxfsGfyIymdCzVzeo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FAFB1/AB307048D52011ECB07B6035C4F9AE02/8xkBlPj64prxfsGfyIymdCzVzeo.mft
Manifest number:          01DC
Signing time:             Mon 16 Oct 2023 02:02:11 +0000
Manifest this update:     Mon 16 Oct 2023 02:02:11 +0000
Manifest next update:     Mon 23 Oct 2023 02:02:11 +0000
Files and hashes:         1: 8xkBlPj64prxfsGfyIymdCzVzeo.crl (hash: vvWasNA0gZc64CsFT7kzs1krB2/stVCasx7GbS98ulo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 478 (0x1de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FAFB1/serialNumber=F3190194F8FAE29AF17EC19FC88CA6742CD5CDEA
        Validity
            Not Before: Oct 16 02:02:11 2023 GMT
            Not After : Oct 23 02:02:11 2023 GMT
        Subject: CN=652c99a3-0da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0c:a4:28:da:71:75:89:04:be:08:68:ba:0a:
                    c8:a3:1d:d7:8c:4c:9e:55:91:8c:1b:7c:7a:20:5e:
                    ad:1e:b6:fb:ab:df:cd:f1:bf:93:6c:15:a2:61:e1:
                    3a:a2:32:60:8b:87:14:7a:22:9a:fa:d1:8b:37:dd:
                    5b:aa:e8:54:bc:0f:31:e7:87:f1:36:e9:84:7d:0c:
                    bb:cb:bc:6d:03:62:a6:dd:de:94:67:4f:70:4e:9d:
                    c6:af:a3:a8:71:4d:d9:66:f3:c8:d0:cd:eb:ec:44:
                    72:e6:1b:75:5d:58:99:03:c1:ef:97:61:8b:3c:36:
                    a1:6b:72:07:c6:6d:74:6d:10:fa:f6:6e:75:f9:85:
                    36:49:01:cb:0a:ec:a8:aa:d4:86:85:05:2d:7c:b4:
                    f8:fb:d2:60:f8:fd:cc:b4:f0:01:eb:b1:c6:9e:dd:
                    15:27:2b:4e:69:f8:56:33:68:35:c3:00:2f:ea:42:
                    c4:50:8b:e5:7e:cd:0b:1d:fe:42:b2:60:db:3a:41:
                    01:8b:a2:eb:61:1f:c2:e2:b2:c3:f8:42:f5:c8:e9:
                    78:23:0d:a9:ff:59:7d:c1:54:ca:77:28:61:90:94:
                    47:84:92:c9:03:19:60:31:26:e7:c1:06:18:ac:d2:
                    e9:c9:6f:47:f4:23:4b:cd:c9:2a:07:7d:bb:2e:0a:
                    32:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:35:4F:37:23:31:A4:A7:1C:A5:8E:F1:A0:D4:C6:62:A3:5C:E1:40
            X509v3 Authority Key Identifier:
                keyid:F3:19:01:94:F8:FA:E2:9A:F1:7E:C1:9F:C8:8C:A6:74:2C:D5:CD:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FAFB1/AB307048D52011ECB07B6035C4F9AE02/8xkBlPj64prxfsGfyIymdCzVzeo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xkBlPj64prxfsGfyIymdCzVzeo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAFB1/AB307048D52011ECB07B6035C4F9AE02/8xkBlPj64prxfsGfyIymdCzVzeo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:15:d9:4c:af:18:18:ab:d2:4f:26:5e:0f:25:b2:57:a0:06:
         30:8d:1a:31:bc:b7:e8:9e:6e:92:40:69:ea:dc:03:84:f7:70:
         dd:d8:a2:56:c4:8f:72:94:4d:a9:fa:55:43:13:5a:a3:1e:76:
         d6:aa:61:b7:e9:84:15:83:9e:05:88:50:df:fe:54:07:3c:f2:
         cd:b3:52:ff:fd:33:fb:ba:1e:1d:5c:97:18:56:70:8d:00:2f:
         6e:84:62:0d:a4:49:13:06:8d:22:bb:f1:d3:a9:1b:0f:bc:96:
         2f:1d:ac:9c:a5:a2:9c:12:40:49:48:54:8e:fa:1a:d0:23:50:
         26:cd:a0:dd:73:04:f2:63:b8:c3:07:7e:a7:cb:0e:8c:6d:41:
         ab:01:a3:9b:94:5d:5d:7d:30:55:a0:23:fa:5d:9f:fb:fa:c0:
         65:4d:e3:c0:f7:21:1d:9c:38:4a:4f:cc:a8:b3:ac:bf:51:e7:
         34:94:bc:e2:13:7d:22:79:7d:49:b5:c6:66:ab:3e:2f:2a:8b:
         24:69:ce:73:90:0c:52:3b:b7:a3:7c:83:49:fc:ad:5d:70:b2:
         42:0b:f8:31:c3:5e:df:b2:54:5b:04:0d:ee:6c:48:8e:1d:4a:
         10:fc:8a:16:20:a9:17:0d:27:36:31:36:aa:66:d2:67:56:21:
         85:d9:e8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----