Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBECF/B8F59F20183C11EBB945EC0BC4F9AE02/fLCdL6Lz8JFKl-WU-Av3sePjTmE.mft
File:                     fLCdL6Lz8JFKl-WU-Av3sePjTmE.mft (raw, json)
Hash identifier:          ZFF4QM4bWoMrZ1KJ1PHtgjTYUgRITmrorODkWEMCibk=
Subject key identifier:   51:F9:20:CF:D3:F3:5F:C1:70:40:19:14:FE:96:20:DF:62:1C:30:6C
Authority key identifier: 7C:B0:9D:2F:A2:F3:F0:91:4A:97:E5:94:F8:0B:F7:B1:E3:E3:4E:61
Certificate issuer:       /CN=A91FBECF/serialNumber=7CB09D2FA2F3F0914A97E594F80BF7B1E3E34E61
Certificate serial:       0697
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fLCdL6Lz8JFKl-WU-Av3sePjTmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBECF/B8F59F20183C11EBB945EC0BC4F9AE02/fLCdL6Lz8JFKl-WU-Av3sePjTmE.mft
Manifest number:          068F
Signing time:             Thu 29 Feb 2024 22:56:55 +0000
Manifest this update:     Thu 29 Feb 2024 22:56:54 +0000
Manifest next update:     Thu 07 Mar 2024 22:56:54 +0000
Files and hashes:         1: fLCdL6Lz8JFKl-WU-Av3sePjTmE.crl (hash: CpAiAjFqLuwaPEQ7N3R4rr02ylkSVGt3+vGTm86Ffnk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1687 (0x697)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBECF/serialNumber=7CB09D2FA2F3F0914A97E594F80BF7B1E3E34E61
        Validity
            Not Before: Feb 29 22:56:54 2024 GMT
            Not After : Mar  7 22:56:54 2024 GMT
        Subject: CN=65e10bb6-50fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:87:f2:dd:1e:62:fd:aa:80:9f:fd:6c:a2:f9:
                    9d:18:9b:64:a7:cd:bc:31:0d:27:b6:4a:c7:4c:22:
                    e1:e5:5e:11:4f:81:50:bc:b9:30:86:69:fb:e5:79:
                    3a:0e:96:e2:22:d6:7b:28:eb:04:cd:a7:fc:9d:8e:
                    5f:eb:5c:59:5f:87:e3:d9:ce:21:d9:61:51:f8:d9:
                    2b:d7:73:c5:1c:5a:04:77:9a:2e:d2:d0:80:fb:b9:
                    7c:69:9d:3a:02:7c:29:16:a9:3a:04:36:60:1e:f8:
                    1d:f9:f7:ce:13:84:f4:86:31:1b:1a:b3:f9:c1:da:
                    f1:8e:7c:07:fb:9e:77:c4:68:62:3c:c4:90:fa:50:
                    37:ef:c3:3f:ae:7f:0b:96:13:20:f6:5a:07:7a:96:
                    ae:17:50:4c:13:14:ae:eb:02:cb:d9:03:ee:a5:43:
                    f2:f0:2f:c9:ff:45:a3:b0:67:0e:8f:71:0c:a6:bc:
                    30:07:0e:94:fd:cd:06:81:71:c0:cc:fd:94:37:47:
                    45:3e:8c:5b:54:e7:3c:9b:98:65:d3:66:ca:1a:eb:
                    04:81:f3:39:9f:36:9e:5f:ce:19:60:9d:be:71:53:
                    5f:88:e6:38:67:71:0c:79:93:22:db:02:6b:4c:24:
                    fe:a5:ed:27:95:c3:02:24:64:88:f2:5b:7c:3c:ad:
                    39:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F9:20:CF:D3:F3:5F:C1:70:40:19:14:FE:96:20:DF:62:1C:30:6C
            X509v3 Authority Key Identifier:
                keyid:7C:B0:9D:2F:A2:F3:F0:91:4A:97:E5:94:F8:0B:F7:B1:E3:E3:4E:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBECF/B8F59F20183C11EBB945EC0BC4F9AE02/fLCdL6Lz8JFKl-WU-Av3sePjTmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fLCdL6Lz8JFKl-WU-Av3sePjTmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBECF/B8F59F20183C11EBB945EC0BC4F9AE02/fLCdL6Lz8JFKl-WU-Av3sePjTmE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:bb:cc:c6:c4:a5:e1:e5:d9:4c:1d:be:b3:61:c5:7e:72:af:
         a8:a3:bd:01:cc:58:2f:8f:2b:14:c9:c3:1e:44:cb:b9:0d:28:
         f0:f5:cb:e0:24:05:ac:67:6c:ee:68:b2:d5:f0:dc:a7:76:9e:
         ca:c3:bf:08:ba:48:56:d4:99:45:2f:ac:fa:6c:85:ff:ba:9f:
         fb:79:8e:e8:94:56:45:86:8b:96:ff:84:3c:de:f6:6f:b8:68:
         75:71:f1:ea:d3:93:f2:fb:cc:4c:ab:5b:fd:7f:09:dd:6a:2a:
         48:f4:20:d8:41:1a:52:05:10:de:db:46:48:67:bc:f7:84:0e:
         d7:c7:2e:b8:63:d0:97:ea:9e:27:11:77:23:cb:88:0c:bb:8a:
         2d:8f:d6:a2:e2:ed:a7:16:a7:73:00:26:45:54:62:95:9b:09:
         44:b3:ae:64:16:68:92:76:b8:1a:8d:10:a9:a6:96:e4:8c:e2:
         24:99:ab:17:e2:28:d8:07:06:d7:14:7b:a6:3b:e7:13:14:fd:
         83:92:91:43:95:90:b0:41:43:28:e4:57:3d:45:d3:69:85:87:
         d7:e2:49:69:4c:d5:b6:86:2b:d0:44:a0:b9:7d:0c:f5:02:4b:
         74:74:46:a1:3b:79:45:20:e8:8a:c0:09:58:fa:1d:8b:ff:8b:
         01:25:6c:77
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBpcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkJFQ0YxMTAvBgNVBAUTKDdDQjA5RDJGQTJGM0YwOTE0QTk3RTU5NEY4MEJGN0Ix
RTNFMzRFNjEwHhcNMjQwMjI5MjI1NjU0WhcNMjQwMzA3MjI1NjU0WjAYMRYwFAYD
VQQDEw02NWUxMGJiNi01MGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyYfy3R5i/aqAn/1sovmdGJtkp828MQ0ntkrHTCLh5V4RT4FQvLkwhmn75Xk6
DpbiItZ7KOsEzaf8nY5f61xZX4fj2c4h2WFR+Nkr13PFHFoEd5ou0tCA+7l8aZ06
AnwpFqk6BDZgHvgd+ffOE4T0hjEbGrP5wdrxjnwH+553xGhiPMSQ+lA378M/rn8L
lhMg9loHepauF1BMExSu6wLL2QPupUPy8C/J/0WjsGcOj3EMprwwBw6U/c0GgXHA
zP2UN0dFPoxbVOc8m5hl02bKGusEgfM5nzaeX84ZYJ2+cVNfiOY4Z3EMeZMi2wJr
TCT+pe0nlcMCJGSI8lt8PK05DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFH5IM/T
81/BcEAZFP6WIN9iHDBsMB8GA1UdIwQYMBaAFHywnS+i8/CRSpfllPgL97Hj405h
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkVDRi9COEY1OUYyMDE4
M0MxMUVCQjk0NUVDMEJDNEY5QUUwMi9mTENkTDZMejhKRktsLVdVLUF2M3NlUGpU
bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2ZMQ2RMNkx6OEpGS2wtV1UtQXYzc2VQalRtRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QkVDRi9COEY1OUYyMDE4M0MxMUVCQjk0NUVDMEJDNEY5QUUwMi9mTENkTDZMejhK
RktsLVdVLUF2M3NlUGpUbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCmu8zGxKXh5dlMHb6zYcV+cq+oo70BzFgvjysUycMeRMu5DSjw9cvg
JAWsZ2zuaLLV8Nyndp7Kw78IukhW1JlFL6z6bIX/up/7eY7olFZFhouW/4Q83vZv
uGh1cfHq05Py+8xMq1v9fwndaipI9CDYQRpSBRDe20ZIZ7z3hA7Xxy64Y9CX6p4n
EXcjy4gMu4otj9ai4u2nFqdzACZFVGKVmwlEs65kFmiSdrgajRCpppbkjOIkmasX
4ijYBwbXFHumO+cTFP2DkpFDlZCwQUMo5Fc9RdNphYfX4klpTNW2hivQRKC5fQz1
Akt0dEahO3lFIOiKwAlY+h2L/4sBJWx3
-----END CERTIFICATE-----