Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.mft
File:                     dGYHPI0g_1sMqI5KOj_IHTyfZ5s.mft (raw, json)
Hash identifier:          Ja+4qgsaWOBkYf6rnu0bn47Y0b3tU5n/A5JDm4LEXQo=
Subject key identifier:   C8:15:D7:C5:6C:F7:A1:F7:20:5D:74:AE:90:BC:A9:14:AE:4E:62:A5
Authority key identifier: 74:66:07:3C:8D:20:FF:5B:0C:A8:8E:4A:3A:3F:C8:1D:3C:9F:67:9B
Certificate issuer:       /CN=A918CE56/serialNumber=7466073C8D20FF5B0CA88E4A3A3FC81D3C9F679B
Certificate serial:       01CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.mft
Manifest number:          01CA
Signing time:             Fri 31 Jan 2025 02:19:06 +0000
Manifest this update:     Fri 31 Jan 2025 02:19:06 +0000
Manifest next update:     Fri 07 Feb 2025 02:19:06 +0000
Files and hashes:         1: dGYHPI0g_1sMqI5KOj_IHTyfZ5s.crl (hash: +FPxDlwSJ4jGbggoxqtS3eXI2R0HIvXvQXTzHGBzhf4=)
                          2: BEB5E328397011EDA97F630EC4F9AE02.roa (hash: 7kPM/sKB4i8QHNZmGczzwn2v095e3qO6G9fcsHz4xRs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 461 (0x1cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CE56/serialNumber=7466073C8D20FF5B0CA88E4A3A3FC81D3C9F679B
        Validity
            Not Before: Jan 31 02:19:06 2025 GMT
            Not After : Feb  7 02:19:06 2025 GMT
        Subject: CN=679c331a-ca62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:eb:1c:11:bd:e7:75:d6:8e:0b:98:ea:57:a8:
                    a4:17:f3:a2:71:09:01:63:8d:27:05:48:64:23:fc:
                    6e:62:f3:b3:53:93:70:0a:30:85:04:41:ea:06:eb:
                    14:94:3e:96:ae:72:d6:70:c3:59:26:8b:bf:f3:78:
                    f1:cd:f1:b3:4b:cc:2a:b7:4d:a3:28:08:58:e3:2d:
                    a1:88:5f:5f:b8:4c:13:e0:40:13:70:d6:51:62:c3:
                    b0:34:fb:11:33:dd:8f:f1:fb:1a:a0:63:b3:e2:16:
                    e8:ca:95:30:7b:bb:17:b4:53:33:49:25:f9:b7:a7:
                    9c:8c:7c:f3:cf:b3:fa:8e:a8:5e:d4:66:3d:d8:51:
                    c2:62:2a:29:1b:19:fe:97:5a:8b:26:3c:0a:a9:85:
                    52:05:01:48:b2:43:69:f3:55:9d:31:b3:8d:fb:07:
                    9a:32:14:19:49:72:b1:c9:7e:9b:f9:14:b3:16:96:
                    b7:c6:a0:d4:8a:de:4e:ef:e3:a7:7d:5d:2e:3b:62:
                    dd:27:e7:26:6b:50:cf:40:de:12:c1:77:8e:46:df:
                    b0:5d:56:e6:41:22:56:36:e6:72:40:57:ca:28:51:
                    6f:82:94:af:80:a2:52:a1:05:3f:09:d6:41:ab:df:
                    4f:08:4f:3a:e0:62:3e:e8:60:1e:41:78:53:06:58:
                    3c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:15:D7:C5:6C:F7:A1:F7:20:5D:74:AE:90:BC:A9:14:AE:4E:62:A5
            X509v3 Authority Key Identifier:
                keyid:74:66:07:3C:8D:20:FF:5B:0C:A8:8E:4A:3A:3F:C8:1D:3C:9F:67:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:1e:e2:44:48:8a:c4:7f:fe:49:56:1c:79:2b:c9:aa:7c:dc:
         cb:8c:8b:86:6f:e9:16:61:ed:18:d0:9f:f3:21:c1:d4:ff:7a:
         d9:b0:a5:06:02:b7:a5:83:92:ff:45:d1:f2:e8:9c:11:d7:75:
         2b:70:9c:16:6e:fb:92:33:a2:c5:b1:0e:97:bc:1c:b3:c4:b6:
         13:7c:1c:71:46:3f:84:20:aa:12:05:ba:ab:ac:2c:77:d0:d7:
         08:e2:fa:c0:2f:4c:dd:06:87:1e:34:56:7d:9f:ec:e1:9a:80:
         cd:08:74:cf:5d:3f:18:1f:36:d3:cf:ea:84:15:5c:64:3a:17:
         a0:42:ad:23:20:25:5c:e8:0c:64:f8:95:b2:a1:18:64:ef:73:
         40:05:a8:77:9e:b3:d2:94:76:29:8e:37:7a:de:e9:52:96:d6:
         57:1a:d3:31:f6:25:a9:00:73:5f:3c:14:80:9a:99:93:0d:15:
         0f:cf:31:b4:66:80:27:26:43:89:48:67:56:a8:70:af:cc:cf:
         26:16:1d:05:8f:bb:b8:5e:1d:56:15:5f:b6:1b:4a:6a:b5:fc:
         59:e8:d9:81:a4:6a:2e:7e:ad:73:3f:70:db:bd:16:82:17:70:
         83:84:43:ab:6f:72:91:c8:4c:3f:94:32:b8:28:de:02:f4:d4:
         36:2d:f3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----