Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.mft
File:                     vNvXHXuijevFk59cynZuyp91YxA.mft (raw, json)
Hash identifier:          K3vjrtnIvbroo8cpxr2/1oIo4PA9ZLicCRajz641QAE=
Subject key identifier:   C8:06:F6:83:FB:4A:8A:89:BF:1C:C7:9C:7D:B3:7C:3F:13:72:75:F8
Authority key identifier: BC:DB:D7:1D:7B:A2:8D:EB:C5:93:9F:5C:CA:76:6E:CA:9F:75:63:10
Certificate issuer:       /CN=A9126285/serialNumber=BCDBD71D7BA28DEBC5939F5CCA766ECA9F756310
Certificate serial:       26FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNvXHXuijevFk59cynZuyp91YxA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.mft
Manifest number:          26E3
Signing time:             Fri 31 Jan 2025 15:41:16 +0000
Manifest this update:     Fri 31 Jan 2025 15:41:16 +0000
Manifest next update:     Fri 07 Feb 2025 15:41:16 +0000
Files and hashes:         1: vNvXHXuijevFk59cynZuyp91YxA.crl (hash: hfbEnJvrsROKTS3fdgq83kyR1U0tJUBdf35BNKouswI=)
                          2: 962B0D98B14111E5A3B46B15C4F9AE02.roa (hash: 8T6+GpYGKPvpCT1aXj07WluTUhSqQG41Ny31YLC+lak=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9978 (0x26fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126285/serialNumber=BCDBD71D7BA28DEBC5939F5CCA766ECA9F756310
        Validity
            Not Before: Jan 31 15:41:16 2025 GMT
            Not After : Feb  7 15:41:16 2025 GMT
        Subject: CN=679cef1c-cdc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6d:a4:2b:bb:f5:51:f3:bd:db:ec:47:e9:2f:
                    37:93:29:96:42:49:d3:e9:45:d9:ca:90:b4:d4:73:
                    43:62:cf:2b:83:f9:ec:a3:4d:98:df:79:24:76:25:
                    6b:a5:c9:ec:28:63:56:07:ce:1b:1a:61:93:c0:b7:
                    62:26:6b:5d:5b:dd:0a:c0:c4:0d:41:73:2c:28:b2:
                    7d:c5:09:2a:e4:6a:c6:d5:ce:5f:c3:23:6a:e0:0f:
                    71:63:8d:f6:3f:c7:c6:df:e5:29:eb:75:be:d6:9b:
                    eb:a2:44:f5:46:ac:50:e3:6c:11:fe:c1:c7:14:d2:
                    6c:68:f8:63:b9:5d:fb:26:fd:e2:6e:fe:9b:e2:40:
                    7c:46:2d:0b:e1:4d:16:9e:43:b3:cd:2b:34:77:e3:
                    2e:72:7a:08:4c:b3:fb:89:2f:41:f2:9b:73:05:db:
                    8e:32:f6:d4:49:b2:9b:a9:0b:a8:d8:67:5f:ed:48:
                    61:26:aa:b7:27:55:7b:38:e0:62:89:86:8f:22:86:
                    9f:b0:bf:19:10:65:c1:ec:7f:2d:50:1a:7f:86:f0:
                    26:c9:6a:e2:16:14:fd:c6:f3:3b:59:61:2e:68:12:
                    df:4c:a4:38:b1:a8:19:6e:ed:1d:2e:2b:ce:d1:e8:
                    5d:5b:30:c6:90:21:a4:a2:5e:fd:7e:9f:f0:09:1c:
                    fe:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:06:F6:83:FB:4A:8A:89:BF:1C:C7:9C:7D:B3:7C:3F:13:72:75:F8
            X509v3 Authority Key Identifier:
                keyid:BC:DB:D7:1D:7B:A2:8D:EB:C5:93:9F:5C:CA:76:6E:CA:9F:75:63:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNvXHXuijevFk59cynZuyp91YxA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:ec:2b:1b:63:95:0f:fa:3b:06:d5:5d:2c:21:f1:17:53:cb:
         3a:cc:1a:7b:f5:3e:eb:0c:3a:cc:7e:b5:51:7a:03:a4:19:21:
         77:82:75:1d:f5:bb:bc:d9:4b:a9:f9:db:6f:cb:d3:de:ca:b1:
         bf:28:6c:22:cd:f7:29:ca:bf:bd:9e:b9:fc:a7:56:78:87:52:
         f8:cf:fc:19:f9:f7:2a:e5:9b:69:3f:74:85:bc:98:e6:fa:c8:
         99:f2:1d:72:70:d5:35:dd:45:c6:a4:f5:05:e2:08:72:2c:d7:
         6f:3f:eb:3b:ee:d7:31:1c:87:f9:52:55:a8:a4:a9:30:43:ce:
         2c:c0:6a:eb:5e:fe:ad:4e:0c:9b:4f:b8:65:7f:ff:ce:7b:12:
         6c:2b:30:a6:20:ed:13:2a:e4:46:85:69:ee:21:af:8c:e3:c7:
         a2:c3:d6:dc:79:40:23:65:02:e8:72:73:2a:3a:0f:e8:c9:44:
         43:f7:9e:86:64:4e:3c:c6:59:3a:45:87:32:a7:38:cb:f9:df:
         bb:5f:24:0d:3e:8c:da:0d:a2:7a:b5:4e:17:14:26:d8:01:0c:
         05:2f:dd:02:ce:6f:fb:6e:2d:93:e3:68:2b:0f:78:e4:a9:7c:
         68:3f:37:d8:9f:5b:6d:df:ba:75:7c:94:d8:61:41:63:b9:35:
         1c:c4:b5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----