Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9140C620000/0/DC235B4BC2B9283512BE26CAE519B5C24C6A5D74.mft
File:                     DC235B4BC2B9283512BE26CAE519B5C24C6A5D74.mft (raw, json)
Hash identifier:          pHld2D0Ib3TZe4GbwjR2wq12NpT+qnbGjUFT6UQguwM=
Subject key identifier:   25:5D:53:C4:BB:D6:72:A2:38:97:8E:50:10:79:D4:AC:28:1E:14:39
Authority key identifier: DC:23:5B:4B:C2:B9:28:35:12:BE:26:CA:E5:19:B5:C2:4C:6A:5D:74
Certificate issuer:       /CN=A9140C620000/serialNumber=DC235B4BC2B9283512BE26CAE519B5C24C6A5D74
Certificate serial:       6717A73DCBA6E41052000CDF560F68C820930CE3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CNbS8K5KDUSvibK5Rm1wkxqXXQ.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9140C620000/0/DC235B4BC2B9283512BE26CAE519B5C24C6A5D74.mft
Manifest number:          28
Signing time:             Sun 02 Apr 2023 13:29:33 +0000
Manifest this update:     Sun 02 Apr 2023 13:24:33 +0000
Manifest next update:     Mon 03 Apr 2023 15:42:33 +0000
Files and hashes:         1: DC235B4BC2B9283512BE26CAE519B5C24C6A5D74.crl (hash: 2W3n+f49U7CBALJPfFCME+si/TbinMWxr/zY03X/5PE=)
                          2: 3130332e3230392e3132382e302f32332d3234203d3e20313339353934.roa (hash: kOOiEF4U9R1G15MJHkhn5Vl8xglOAbmbxGJplV3n2MM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:17:a7:3d:cb:a6:e4:10:52:00:0c:df:56:0f:68:c8:20:93:0c:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140C620000/serialNumber=DC235B4BC2B9283512BE26CAE519B5C24C6A5D74
        Validity
            Not Before: Apr  2 13:24:33 2023 GMT
            Not After : Apr  3 15:42:33 2023 GMT
        Subject: CN=255D53C4BBD672A238978E501079D4AC281E1439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a6:9d:09:a3:83:b6:13:53:46:be:17:90:3c:
                    a1:a9:ec:25:02:9a:f3:ed:b5:83:7f:50:df:30:08:
                    0c:d4:23:2a:3e:bf:1a:d1:76:67:e9:5b:83:34:0f:
                    08:32:c9:15:d2:4d:16:61:ff:ca:a6:e3:8c:da:79:
                    7a:ce:42:02:16:a9:04:0d:ad:6e:25:1e:cf:b3:38:
                    d0:98:96:49:51:1f:54:bf:8f:61:c5:14:78:32:c8:
                    45:76:8c:92:65:de:ec:1f:9d:c2:05:44:a3:52:20:
                    16:99:35:84:38:5d:26:4b:16:a1:5f:3c:d0:c9:f2:
                    d6:3a:57:ff:f1:27:9c:1d:fb:58:5f:d1:8f:0e:01:
                    2e:4a:96:4b:4b:82:59:fd:27:10:ea:05:5d:25:32:
                    ad:6b:92:cf:62:56:29:70:da:ec:d2:d1:73:88:27:
                    4f:7d:f9:61:14:a8:3a:10:79:db:48:bc:8c:07:eb:
                    67:82:c8:c1:61:47:20:68:1c:3f:6d:65:d5:96:f0:
                    86:88:da:1c:59:26:fc:1f:b6:8f:cb:9d:c6:aa:85:
                    75:57:4e:d6:26:86:a1:ca:ad:24:93:e5:f1:d1:00:
                    e3:2f:28:7f:39:32:74:35:ae:3b:3e:5c:31:90:f9:
                    ce:d0:1e:95:4e:72:fd:70:a9:73:95:72:49:66:32:
                    8d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:5D:53:C4:BB:D6:72:A2:38:97:8E:50:10:79:D4:AC:28:1E:14:39
            X509v3 Authority Key Identifier:
                keyid:DC:23:5B:4B:C2:B9:28:35:12:BE:26:CA:E5:19:B5:C2:4C:6A:5D:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9140C620000/0/DC235B4BC2B9283512BE26CAE519B5C24C6A5D74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CNbS8K5KDUSvibK5Rm1wkxqXXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9140C620000/0/DC235B4BC2B9283512BE26CAE519B5C24C6A5D74.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:90:93:80:03:b5:1e:c0:47:ae:ac:06:5d:f0:bf:70:52:67:
         18:d4:81:89:fd:66:ff:ae:f2:68:af:5a:9b:f4:fa:86:57:c5:
         0b:d4:2a:d7:18:81:d7:0f:c1:97:c9:84:a6:5b:7e:7e:7b:91:
         f1:33:d2:6b:bb:6b:e2:b9:71:eb:41:b9:87:61:2e:a4:fc:3c:
         ce:7c:eb:bf:38:16:1b:20:a0:24:77:34:53:93:29:d0:be:5e:
         87:a8:f5:b0:bd:56:9c:9d:93:d3:7d:b6:88:97:57:6d:8f:d4:
         7b:50:73:60:0b:27:68:06:2e:2a:77:a6:dc:50:71:08:bc:53:
         82:84:4e:07:81:4d:7c:dd:eb:e1:86:ef:23:8c:9c:a9:c3:bc:
         b3:87:2d:af:cc:bd:23:63:ca:30:59:4f:32:2f:51:c7:2e:5e:
         88:0c:48:43:7a:2e:a0:23:3b:93:3b:dc:5d:91:5d:ca:56:40:
         2f:67:16:4d:e7:3f:aa:74:9f:76:ab:d8:de:5e:11:65:35:71:
         fd:06:7b:d1:33:1a:17:c7:c8:14:ff:dc:9a:48:d4:ec:ca:01:
         27:58:aa:d5:d3:c7:37:74:2f:ab:5f:cf:52:f0:66:22:2a:60:
         30:48:f2:93:91:67:dd:55:35:a7:c2:a4:ad:d6:51:62:40:dc:
         37:a2:75:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----