Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91857810000/0/63514AAD07AC49AEED8CB6EA17864CF60F2A2CBB.mft
File:                     63514AAD07AC49AEED8CB6EA17864CF60F2A2CBB.mft (raw, json)
Hash identifier:          6mvQGhJJNJrqMg4Uha+ZxFfP/+j6oYuh6NF4axS5SM0=
Subject key identifier:   90:35:E9:28:18:CD:2B:42:A0:21:54:0E:F7:53:23:40:AD:59:D9:ED
Authority key identifier: 63:51:4A:AD:07:AC:49:AE:ED:8C:B6:EA:17:86:4C:F6:0F:2A:2C:BB
Certificate issuer:       /CN=A91857810000/serialNumber=63514AAD07AC49AEED8CB6EA17864CF60F2A2CBB
Certificate serial:       346DD34696B7B3B1DF852C17194C8BCE09A52711
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FKrQesSa7tjLbqF4ZM9g8qLLs.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91857810000/0/63514AAD07AC49AEED8CB6EA17864CF60F2A2CBB.mft
Manifest number:          F1
Signing time:             Sun 27 Nov 2022 18:02:44 +0000
Manifest this update:     Sun 27 Nov 2022 17:57:44 +0000
Manifest next update:     Mon 28 Nov 2022 18:23:44 +0000
Files and hashes:         1: 3130332e3134312e36382e302f32342d3234203d3e20313338313536.roa (hash: eVfmszeMKYZkJCpiPEEB18VYn34aTEog8kyg8sONdFM=)
                          2: 3130332e3134312e36392e302f32342d3234203d3e20313338313536.roa (hash: JOVlty0eDUNkApeXytnZZfCr2zc8q94knRi71yl0k4c=)
                          3: 323430353a393234303a3a2f33322d3332203d3e203631333137.roa (hash: 9GQKHOKgPWQY2g1vrEacSd35SuKBYN/uYHWIhgjp3cs=)
                          4: 63514AAD07AC49AEED8CB6EA17864CF60F2A2CBB.crl (hash: 5d9mkiimfm4r46y7Gt4rzRd4157bLVqmZZ5h6psqpP4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:6d:d3:46:96:b7:b3:b1:df:85:2c:17:19:4c:8b:ce:09:a5:27:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91857810000/serialNumber=63514AAD07AC49AEED8CB6EA17864CF60F2A2CBB
        Validity
            Not Before: Nov 27 17:57:44 2022 GMT
            Not After : Nov 28 18:23:44 2022 GMT
        Subject: CN=9035E92818CD2B42A021540EF7532340AD59D9ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f5:a7:5f:e1:38:2e:b9:d7:8b:b1:33:07:5a:
                    1f:4c:9d:c5:62:c9:58:66:af:c8:b4:cc:a3:40:28:
                    64:f3:c3:8d:b1:13:46:b9:50:45:f0:a9:4a:13:5d:
                    4a:f1:fa:93:2c:7b:d7:d9:76:f8:eb:2d:f8:8b:b6:
                    e1:f7:bd:67:84:a6:2d:e9:fa:d0:32:ac:75:e1:f3:
                    60:86:be:53:3b:6a:fe:00:60:2f:ae:2c:da:f2:f0:
                    0d:90:8a:d1:ce:82:d7:3f:f2:6e:e1:d4:ff:18:0a:
                    d3:10:f2:58:1f:4c:af:d2:92:7e:15:3e:ab:2a:67:
                    95:83:50:97:45:d4:8e:02:c5:0b:9c:9c:d9:1c:85:
                    9a:5f:62:69:94:b4:1d:2b:05:57:a1:d9:14:53:4e:
                    b3:79:c4:20:3b:a8:3e:eb:c6:bc:2f:a0:30:0a:75:
                    92:76:90:4d:b1:16:da:5e:35:63:e6:31:58:9a:f2:
                    58:a4:7d:89:82:02:d0:e4:36:44:70:dd:40:fc:07:
                    9e:45:d8:e0:06:79:2e:5e:a4:da:fe:be:c8:3d:7b:
                    5a:57:8e:9a:4f:5e:3d:be:63:40:9b:14:b4:cb:61:
                    0b:3f:45:7e:86:f0:97:7a:5a:b7:ec:66:ca:2e:7f:
                    68:f0:de:91:30:d9:25:71:f7:97:bf:8e:93:5e:ae:
                    db:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:35:E9:28:18:CD:2B:42:A0:21:54:0E:F7:53:23:40:AD:59:D9:ED
            X509v3 Authority Key Identifier:
                keyid:63:51:4A:AD:07:AC:49:AE:ED:8C:B6:EA:17:86:4C:F6:0F:2A:2C:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91857810000/0/63514AAD07AC49AEED8CB6EA17864CF60F2A2CBB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FKrQesSa7tjLbqF4ZM9g8qLLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91857810000/0/63514AAD07AC49AEED8CB6EA17864CF60F2A2CBB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:db:0b:29:ca:ea:e9:5c:be:c9:54:ff:84:f3:a1:5c:26:76:
         4b:51:ee:27:ff:85:0a:97:0d:6f:2e:8b:51:ea:63:3c:c8:7a:
         18:56:85:df:ad:56:64:c9:6f:67:45:3a:8b:02:cf:7c:a2:72:
         6a:8d:1f:5e:9f:a8:77:ba:b9:61:cc:6c:51:e9:f0:59:12:41:
         d2:af:dd:13:10:10:1a:4c:88:24:9e:66:3c:bb:2e:bf:aa:04:
         a6:bd:ec:fe:8b:a1:cd:ca:34:ca:bf:dc:98:48:0e:a4:2a:32:
         bc:5e:33:91:3b:80:20:d6:5d:0f:cd:ec:ab:d6:f2:c0:95:c5:
         3d:c2:f1:a4:fb:90:d8:e5:ad:93:5a:d0:73:d4:ce:03:fe:61:
         4a:af:64:93:a1:e5:56:76:50:64:41:6f:7f:d3:f0:85:b1:2f:
         b6:b8:7f:28:fd:7c:ee:b6:f1:ea:53:65:e1:c3:b1:1b:2b:c0:
         c6:d0:11:2c:5e:a0:c8:72:80:02:d6:e0:5c:8e:3d:ea:2b:a8:
         ed:c5:0a:3d:4c:3b:e0:1e:df:5e:bb:99:30:84:15:2f:20:77:
         6d:bc:dc:ec:6f:b9:12:55:1e:98:f2:1a:58:31:25:5d:16:1b:
         21:f8:72:a7:4d:8b:0e:26:74:d2:c0:5b:45:e2:f2:e5:78:5d:
         04:c0:32:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----