Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft
File:                     vpHyHHoLwGQ389tbIUIIyHdO680.mft (raw, json)
Hash identifier:          0yHqMH5hzYrgPaTqt9a4UdA9jyRrJc7Hw+1x+TJZYjc=
Subject key identifier:   BA:CF:3E:F0:1A:76:7B:6E:44:4D:A9:9F:F7:0C:DB:3C:B3:E5:DD:0B
Authority key identifier: BE:91:F2:1C:7A:0B:C0:64:37:F3:DB:5B:21:42:08:C8:77:4E:EB:CD
Certificate issuer:       /CN=A912CEBD/serialNumber=BE91F21C7A0BC06437F3DB5B214208C8774EEBCD
Certificate serial:       DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft
Manifest number:          D9
Signing time:             Fri 31 Jan 2025 04:46:26 +0000
Manifest this update:     Fri 31 Jan 2025 04:46:25 +0000
Manifest next update:     Fri 07 Feb 2025 04:46:25 +0000
Files and hashes:         1: vpHyHHoLwGQ389tbIUIIyHdO680.crl (hash: /Afsy0TeXDo5J1e2AQ3wzeWvWnHhwsMBXsBRkWvwrWE=)
                          2: F2AB0C4A68C011EFB9196160C4F9AE02.roa (hash: DaPiCEmlAJvbaPsIVw3SLkMWbmEd02jwt+sb94Y5y+Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CEBD/serialNumber=BE91F21C7A0BC06437F3DB5B214208C8774EEBCD
        Validity
            Not Before: Jan 31 04:46:25 2025 GMT
            Not After : Feb  7 04:46:25 2025 GMT
        Subject: CN=679c55a2-9ed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cf:84:c1:f8:88:c2:a8:00:a3:24:c1:8b:f8:
                    4b:f3:93:b1:26:8a:eb:b0:be:ab:c6:8e:7f:dd:e3:
                    e5:ad:e0:ef:ed:f4:99:76:87:8d:06:65:32:dc:ac:
                    20:48:74:29:a4:d7:66:b3:4f:2a:49:99:35:a0:ee:
                    a4:76:3a:7a:4f:a0:ee:b1:d2:c3:f6:68:8b:93:f3:
                    d6:1c:cb:90:25:73:2e:91:40:2d:d3:20:9c:18:05:
                    d2:3c:72:67:3b:ca:7c:70:36:96:be:3b:0c:00:02:
                    f5:e1:e6:91:16:2e:3b:11:6c:25:c2:b7:e6:97:82:
                    20:ca:af:6b:f2:ac:09:72:e5:12:8d:d9:3f:50:09:
                    61:c6:b1:8f:0b:e0:07:81:2b:57:2f:a2:e7:0a:c2:
                    e8:d1:95:28:29:f7:f8:bc:94:45:90:b2:cd:a9:0b:
                    e9:c4:27:da:fe:31:74:44:c8:ba:47:2c:65:4b:b1:
                    88:e4:f3:3a:ab:4c:eb:a5:05:d4:64:13:fc:04:7a:
                    55:86:3f:11:a8:9a:68:33:bf:05:6e:32:6f:02:ab:
                    53:13:c5:a5:8e:33:cb:4c:c5:5d:5e:32:bc:56:20:
                    e6:38:98:5b:29:2c:d8:16:95:37:1d:25:0e:f5:b3:
                    1a:fe:98:04:d8:7b:db:63:9c:74:4f:fc:c4:d7:39:
                    bb:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:CF:3E:F0:1A:76:7B:6E:44:4D:A9:9F:F7:0C:DB:3C:B3:E5:DD:0B
            X509v3 Authority Key Identifier:
                keyid:BE:91:F2:1C:7A:0B:C0:64:37:F3:DB:5B:21:42:08:C8:77:4E:EB:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:b7:eb:a9:d8:d6:3f:07:0d:62:b2:93:b8:48:69:19:7b:8a:
         e1:f6:50:67:8b:8c:4e:1f:e7:af:c3:ee:80:38:4c:8e:ea:81:
         81:21:f9:b6:3e:52:fd:09:b7:82:dd:33:b8:01:ca:db:18:73:
         a3:db:22:d2:17:72:44:f2:b6:7d:3d:6a:2b:e1:72:66:c5:20:
         b4:cb:22:3a:45:44:e4:80:60:56:cc:ea:49:71:b8:7b:57:3e:
         30:90:07:ba:b4:a2:bd:2a:b1:7d:7f:bd:3c:f6:8f:92:3f:51:
         75:12:5f:bb:1c:6d:92:40:5a:27:88:8c:63:1b:ff:38:8e:f6:
         92:c4:9c:d5:dc:4f:d5:85:f2:82:85:09:85:76:1c:0a:11:86:
         7f:e5:a5:45:c0:a4:94:3c:12:0c:64:78:b0:72:d4:48:d8:c0:
         d4:b7:4e:6d:ca:57:51:8d:90:e5:60:94:a7:53:40:3e:a4:b4:
         78:35:0a:7e:a1:fa:32:0c:9e:fb:51:58:d4:72:5c:64:df:63:
         49:12:46:7e:c8:81:39:7d:26:70:93:06:02:2a:9b:b0:18:20:
         9e:a5:83:60:09:09:d7:18:4c:e1:ed:7c:90:8c:a1:ee:03:f0:
         19:25:c0:b0:e3:4d:e7:19:b0:17:4b:86:1d:e6:8c:84:aa:33:
         d2:de:90:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----