Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/Vy-_GsTS-Eni9buAdnTwG-vxcp0.mft
File:                     Vy-_GsTS-Eni9buAdnTwG-vxcp0.mft (raw, json)
Hash identifier:          JFCld6YUke8YGKoDRGVDYdF3p9VenOX3nMDat1TMwIk=
Subject key identifier:   15:A8:EA:0B:44:2E:B2:97:E3:9E:9D:30:B2:54:B9:B0:7F:8F:F6:C2
Authority key identifier: 57:2F:BF:1A:C4:D2:F8:49:E2:F5:BB:80:76:74:F0:1B:EB:F1:72:9D
Certificate issuer:       /CN=A918CC02/serialNumber=572FBF1AC4D2F849E2F5BB807674F01BEBF1729D
Certificate serial:       1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy-_GsTS-Eni9buAdnTwG-vxcp0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/Vy-_GsTS-Eni9buAdnTwG-vxcp0.mft
Manifest number:          1D
Signing time:             Fri 31 Jan 2025 07:01:23 +0000
Manifest this update:     Fri 31 Jan 2025 07:01:22 +0000
Manifest next update:     Fri 07 Feb 2025 07:01:22 +0000
Files and hashes:         1: Vy-_GsTS-Eni9buAdnTwG-vxcp0.crl (hash: P5KApr/RT2zWxv7Gggs0JCT+eQj9MvfqL3+B+yR/5jc=)
                          2: 56C91968C5C011EFA167B30AC4F9AE02.roa (hash: Qpsj8zeT4wk7y+WSIb+TFw/XxcY82tQw87PIGXkqgxY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CC02/serialNumber=572FBF1AC4D2F849E2F5BB807674F01BEBF1729D
        Validity
            Not Before: Jan 31 07:01:22 2025 GMT
            Not After : Feb  7 07:01:22 2025 GMT
        Subject: CN=679c7542-5efc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f3:17:d8:f0:b7:13:0d:33:7f:d5:c5:e4:52:
                    30:27:4d:59:11:e0:19:06:cb:97:12:fe:e6:34:01:
                    ce:0a:57:ce:7c:5b:9d:1b:8e:16:bc:46:f3:da:67:
                    2f:aa:57:81:28:bf:c8:05:87:2f:b3:16:3a:68:6a:
                    7f:21:6f:09:3f:95:50:fc:84:05:0f:06:3a:a9:52:
                    d8:7c:76:6c:fc:12:c5:27:81:1b:03:1c:7a:b6:99:
                    19:c5:8b:a8:ad:65:3e:77:98:35:35:16:59:aa:be:
                    3b:f2:49:78:81:9d:da:3d:fe:b0:ce:3f:99:af:b4:
                    ab:04:8b:d8:0e:95:21:69:e7:e0:c5:6f:2a:08:e3:
                    1c:b5:3e:bc:63:13:f4:d9:c5:24:99:fb:d6:77:c5:
                    17:49:ca:7c:b9:41:48:f4:59:19:54:ff:cb:8a:0a:
                    2d:44:5f:d7:69:0c:42:74:df:22:5a:f6:38:44:5a:
                    47:33:00:7d:a9:b6:c8:48:a2:30:f2:20:af:68:5c:
                    97:89:8f:3c:65:21:c3:90:38:dd:67:d6:9f:b4:ca:
                    95:2c:1b:b1:52:65:d2:85:ca:d2:01:21:e7:46:dd:
                    d2:23:75:37:ee:a2:cf:c0:ec:5f:b4:e3:44:1e:08:
                    bd:ae:ac:bd:88:34:a0:e8:cb:ee:9d:f3:d8:cd:f3:
                    d3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A8:EA:0B:44:2E:B2:97:E3:9E:9D:30:B2:54:B9:B0:7F:8F:F6:C2
            X509v3 Authority Key Identifier:
                keyid:57:2F:BF:1A:C4:D2:F8:49:E2:F5:BB:80:76:74:F0:1B:EB:F1:72:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/Vy-_GsTS-Eni9buAdnTwG-vxcp0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy-_GsTS-Eni9buAdnTwG-vxcp0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/Vy-_GsTS-Eni9buAdnTwG-vxcp0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:a4:8e:b1:d9:56:e3:c3:93:2a:0a:d6:89:26:f2:a5:bc:4e:
         1f:a9:b9:b7:20:2c:a2:15:9f:66:23:d3:db:e2:97:5d:8e:45:
         dc:48:41:85:23:f0:fa:60:e0:90:85:45:15:d3:7b:4b:1b:dd:
         c2:e4:ad:68:ce:f5:34:64:75:cc:85:da:d8:f3:ec:b5:f8:7d:
         10:59:3c:b2:b8:6d:2e:f8:36:51:02:75:32:33:7e:c8:1c:fa:
         e1:0d:60:50:42:51:a3:2e:6c:0a:57:ff:89:e8:16:26:74:41:
         fd:60:4d:14:d6:2e:12:a7:a3:38:64:66:99:ab:c7:d4:76:e4:
         30:40:85:6b:4c:95:9d:54:48:db:3e:0f:7e:b6:f0:21:fb:b5:
         2c:5c:13:97:26:de:83:75:d3:f4:33:6a:ac:3c:9d:50:32:92:
         b1:25:ac:19:c7:1f:a4:ce:5e:71:78:84:fb:6e:08:82:21:7a:
         38:d0:e2:18:65:91:1f:13:6b:36:df:cd:0a:22:94:07:d5:3a:
         76:67:9e:dd:0e:c3:c4:f9:b5:db:bc:96:c9:2c:fb:d8:60:75:
         58:58:1a:cf:e3:a0:36:22:7a:d8:56:80:72:88:0a:f2:1c:74:
         f4:c4:69:c8:6f:89:6c:98:2c:60:57:f1:ca:ee:4e:bf:f0:e9:
         78:5a:0b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----