Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD4CC/4C8EBEE2279311EAA00E9724C4F9AE02/d2kjY-As1XnsUuGBSKcq3smWh1M.mft
File:                     d2kjY-As1XnsUuGBSKcq3smWh1M.mft (raw, json)
Hash identifier:          2VKt09OYHKKt/ZKMrPnN/Y7DUR1lFh1vIAMN/aEvlMo=
Subject key identifier:   0A:49:63:46:CF:20:07:73:47:C5:A2:6F:E7:CA:F9:E8:FE:CD:40:62
Authority key identifier: 77:69:23:63:E0:2C:D5:79:EC:52:E1:81:48:A7:2A:DE:C9:96:87:53
Certificate issuer:       /CN=A91FD4CC/serialNumber=77692363E02CD579EC52E18148A72ADEC9968753
Certificate serial:       0950
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2kjY-As1XnsUuGBSKcq3smWh1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD4CC/4C8EBEE2279311EAA00E9724C4F9AE02/d2kjY-As1XnsUuGBSKcq3smWh1M.mft
Manifest number:          0943
Signing time:             Sun 14 Aug 2022 20:37:10 +0000
Manifest this update:     Sun 14 Aug 2022 20:37:08 +0000
Manifest next update:     Tue 16 Aug 2022 20:37:08 +0000
Files and hashes:         1: d2kjY-As1XnsUuGBSKcq3smWh1M.crl (hash: U/ouBg0GOE9kTM7MiibHUKxjqWQZgJKPlWSnxwZRByM=)
                          2: DCE5418AFBC011EABD414749C4F9AE02.roa (hash: UIcRMB4wkxY6bLHxDwgembvqwamcWodjjyu9RHpn6JA=)
                          3: DD87AE52FBC011EABD414749C4F9AE02.roa (hash: /K5Ttb7ERxO1bKjqi0pZZ7agd6vw6jBytN06KEQ1z5c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2384 (0x950)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD4CC/serialNumber=77692363E02CD579EC52E18148A72ADEC9968753
        Validity
            Not Before: Aug 14 20:37:08 2022 GMT
            Not After : Aug 16 20:37:08 2022 GMT
        Subject: CN=62f95cf5-0ae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5d:7e:7e:74:f2:15:85:9d:71:ac:b0:63:ab:
                    0d:42:4d:9a:b3:5e:28:4c:ce:55:cb:19:18:68:b3:
                    85:50:03:5e:41:20:a5:ee:ab:6a:c0:41:c3:2f:63:
                    f1:57:0a:43:72:60:86:28:aa:82:15:75:ed:f6:45:
                    d4:a0:45:8e:e5:34:a0:86:07:16:ca:a5:f8:26:23:
                    35:4f:6c:ff:d1:3b:41:a1:95:b3:ea:5c:3e:ed:ad:
                    be:bd:81:71:c5:94:b4:8d:32:9f:6d:cc:38:7c:ef:
                    75:7c:c4:1b:1c:69:f6:1b:36:76:ef:f9:8a:e8:aa:
                    7f:0d:66:1d:5c:2a:a8:eb:8f:14:2d:7b:47:a6:e9:
                    39:f7:7f:d3:61:1e:61:7c:9f:46:89:91:4b:9c:9d:
                    40:aa:25:c8:25:9c:15:ae:a4:44:c9:f4:54:16:2e:
                    e7:ec:c0:a0:b7:cf:c8:f3:16:38:fe:69:a9:0f:4f:
                    9f:30:9d:33:dd:39:4c:1a:c3:d2:74:14:11:f1:94:
                    89:dd:64:9f:16:bd:4e:66:08:b8:91:0e:df:4f:1e:
                    00:7d:24:7d:e0:51:b5:04:07:16:64:bc:a9:6c:fb:
                    96:15:23:55:52:d1:f1:18:a7:c3:e7:76:e7:c2:0a:
                    da:5d:87:f9:93:fb:d3:40:a8:0f:3f:7d:c7:c0:b7:
                    bd:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:49:63:46:CF:20:07:73:47:C5:A2:6F:E7:CA:F9:E8:FE:CD:40:62
            X509v3 Authority Key Identifier:
                keyid:77:69:23:63:E0:2C:D5:79:EC:52:E1:81:48:A7:2A:DE:C9:96:87:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD4CC/4C8EBEE2279311EAA00E9724C4F9AE02/d2kjY-As1XnsUuGBSKcq3smWh1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2kjY-As1XnsUuGBSKcq3smWh1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD4CC/4C8EBEE2279311EAA00E9724C4F9AE02/d2kjY-As1XnsUuGBSKcq3smWh1M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:cf:51:2f:ff:27:d2:09:35:af:9c:a5:31:8e:d3:6a:8d:d6:
         52:34:a7:02:74:f2:f6:c3:f0:31:2a:b6:39:f2:95:37:d9:8c:
         43:09:e3:ec:d1:44:fc:b4:1a:68:5f:28:d9:89:d6:b5:b6:2b:
         14:1f:11:0a:95:1c:d0:8c:2f:f4:fa:0b:3e:e8:ac:ac:45:24:
         14:35:e4:09:1c:c3:25:68:58:ef:54:c5:a4:8b:33:f1:86:f9:
         38:94:f8:e9:99:a3:e3:e9:46:74:da:38:ff:91:fc:2f:40:77:
         58:8b:7f:87:a6:c8:fc:0a:c7:9f:ff:fc:2b:ba:c1:cf:17:5b:
         01:2c:d9:05:1b:94:ea:ac:2d:d3:37:05:fa:28:b3:ec:8e:8f:
         43:98:95:08:d3:54:34:f0:23:c1:fe:61:66:d0:ac:0c:36:77:
         b6:e7:7a:e6:fa:63:c8:95:45:6f:20:89:b3:d2:99:fb:b6:51:
         cc:34:33:7e:b9:59:41:42:af:54:9b:4f:6b:3b:57:ec:6e:35:
         c2:59:84:c7:c8:86:6e:38:27:bf:2a:3c:61:19:7e:38:de:85:
         80:25:37:b0:f8:39:7c:92:b3:f8:2e:05:7d:3e:84:85:c8:f3:
         5f:d8:19:ad:81:db:a4:9b:39:3a:26:db:20:36:46:19:c8:57:
         56:1a:ce:db
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkQ0Q0MxMTAvBgNVBAUTKDc3NjkyMzYzRTAyQ0Q1NzlFQzUyRTE4MTQ4QTcyQURF
Qzk5Njg3NTMwHhcNMjIwODE0MjAzNzA4WhcNMjIwODE2MjAzNzA4WjAYMRYwFAYD
VQQDEw02MmY5NWNmNS0wYWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3F1+fnTyFYWdcaywY6sNQk2as14oTM5VyxkYaLOFUANeQSCl7qtqwEHDL2Px
VwpDcmCGKKqCFXXt9kXUoEWO5TSghgcWyqX4JiM1T2z/0TtBoZWz6lw+7a2+vYFx
xZS0jTKfbcw4fO91fMQbHGn2GzZ27/mK6Kp/DWYdXCqo648ULXtHpuk593/TYR5h
fJ9GiZFLnJ1AqiXIJZwVrqREyfRUFi7n7MCgt8/I8xY4/mmpD0+fMJ0z3TlMGsPS
dBQR8ZSJ3WSfFr1OZgi4kQ7fTx4AfSR94FG1BAcWZLypbPuWFSNVUtHxGKfD53bn
wgraXYf5k/vTQKgPP33HwLe9/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFApJY0bP
IAdzR8Wib+fK+ej+zUBiMB8GA1UdIwQYMBaAFHdpI2PgLNV57FLhgUinKt7JlodT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDRDQy80QzhFQkVFMjI3
OTMxMUVBQTAwRTk3MjRDNEY5QUUwMi9kMmtqWS1BczFYbnNVdUdCU0tjcTNzbVdo
MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Qya2pZLUFzMVhuc1V1R0JTS2NxM3NtV2gxTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RDRDQy80QzhFQkVFMjI3OTMxMUVBQTAwRTk3MjRDNEY5QUUwMi9kMmtqWS1BczFY
bnNVdUdCU0tjcTNzbVdoMU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBsz1Ev/yfSCTWvnKUxjtNqjdZSNKcCdPL2w/AxKrY58pU32YxDCePs
0UT8tBpoXyjZida1tisUHxEKlRzQjC/0+gs+6KysRSQUNeQJHMMlaFjvVMWkizPx
hvk4lPjpmaPj6UZ02jj/kfwvQHdYi3+Hpsj8Csef//wrusHPF1sBLNkFG5TqrC3T
NwX6KLPsjo9DmJUI01Q08CPB/mFm0KwMNne253rm+mPIlUVvIImz0pn7tlHMNDN+
uVlBQq9Um09rO1fsbjXCWYTHyIZuOCe/KjxhGX443oWAJTew+Dl8krP4LgV9PoSF
yPNf2Bmtgdukmzk6JtsgNkYZyFdWGs7b
-----END CERTIFICATE-----