Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft
File:                     NZYOHhaeA_Rvr5H04_8TUUamMTo.mft (raw, json)
Hash identifier:          pAede+KwFbb0O68lLGvxULVljcl6+QCTNTv7HWEzZII=
Subject key identifier:   D9:57:87:CF:DA:BC:FF:08:75:42:05:B1:BA:3F:C9:73:4D:58:8C:9D
Authority key identifier: 35:96:0E:1E:16:9E:03:F4:6F:AF:91:F4:E3:FF:13:51:46:A6:31:3A
Certificate issuer:       /CN=A91BBBA5/serialNumber=35960E1E169E03F46FAF91F4E3FF135146A6313A
Certificate serial:       1357
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft
Manifest number:          1350
Signing time:             Fri 28 Mar 2025 17:06:48 +0000
Manifest this update:     Fri 28 Mar 2025 17:06:47 +0000
Manifest next update:     Fri 04 Apr 2025 17:06:47 +0000
Files and hashes:         1: NZYOHhaeA_Rvr5H04_8TUUamMTo.crl (hash: hIV4gBy9L9jLFVgkncTGk565ebVMnas1J4b5y4kMSh4=)
                          2: 21333DA69B2E11E8908CC50FC4F9AE02.roa (hash: +1SNSIFs+P7lOAKW1zIJPA5+xtDNMIC4L/Fb0Zo2lHo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4951 (0x1357)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BBBA5
        Validity
            Not Before: Mar 28 17:06:47 2025 GMT
            Not After : Apr  4 17:06:47 2025 GMT
        Subject: CN=67e6d727-5448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:b2:fb:02:42:c6:ae:02:f4:dc:79:b6:03:8d:
                    84:a0:bc:f1:d3:16:1f:6e:a1:f5:3e:71:14:87:21:
                    e3:8a:5b:9d:b2:e1:af:b7:43:9d:e5:a4:ad:21:e4:
                    66:1a:f9:bf:45:cf:48:11:70:8f:7b:4a:ec:63:46:
                    71:4d:89:7d:a3:39:30:2b:9d:9e:bf:21:a2:7f:e8:
                    99:ed:5a:ac:79:a6:d3:36:58:a0:68:ac:f5:52:c0:
                    64:33:b9:21:52:0a:c1:06:d6:69:19:fc:16:75:55:
                    47:95:82:6e:c9:c9:0e:89:48:5b:70:0e:b9:15:61:
                    af:63:12:e6:b3:77:6a:d8:0f:3b:ed:79:2e:33:73:
                    b6:80:78:3a:21:b6:e7:d1:75:74:04:af:90:f7:58:
                    70:2b:12:77:83:73:75:2e:8a:c7:02:d1:d8:54:1c:
                    bc:f3:44:2e:71:de:37:2f:ea:ef:5e:42:2b:e6:c1:
                    0b:67:bb:75:41:3c:a2:46:48:e1:26:5e:54:ea:90:
                    a4:ed:ca:d6:d6:92:b0:d4:d5:dd:07:26:c6:4a:04:
                    66:83:c1:72:fd:e9:4d:4f:55:bb:37:61:69:57:9f:
                    6f:59:2c:5c:97:5f:33:f4:e2:f1:1b:95:a8:42:80:
                    f0:5e:8c:4f:e7:85:6b:46:ce:d7:1d:84:27:93:ff:
                    f8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:57:87:CF:DA:BC:FF:08:75:42:05:B1:BA:3F:C9:73:4D:58:8C:9D
            X509v3 Authority Key Identifier:
                keyid:35:96:0E:1E:16:9E:03:F4:6F:AF:91:F4:E3:FF:13:51:46:A6:31:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:8d:2a:de:c8:fc:d6:ef:82:b8:f6:1f:39:69:ba:e4:b5:3d:
         95:78:68:cc:ab:ad:5e:4d:e3:bc:bc:12:53:13:12:63:90:bc:
         4b:9f:59:39:a5:b4:4c:cd:7d:68:a1:ee:9a:27:32:30:a4:43:
         2d:ed:94:8b:05:79:e2:b3:07:d8:35:4b:03:5e:d2:5b:44:2a:
         95:e4:fb:a9:77:d7:4c:b7:07:db:f2:f2:d5:c5:48:6a:4c:8e:
         e9:12:f8:f1:f7:ad:76:ed:31:b3:bb:dd:14:30:8b:93:ae:f4:
         d6:78:bd:74:c0:7b:ec:a4:3b:2f:85:81:71:49:3a:bc:7a:d2:
         54:fa:7d:c9:0b:2d:e6:22:7c:ea:ac:21:67:a2:9f:fc:b7:2d:
         90:93:90:83:d1:16:a0:c1:46:a3:9a:8c:ef:08:70:f9:fd:35:
         95:4d:5e:40:7c:48:12:ff:f8:a5:38:5b:a1:b3:b9:39:86:ff:
         f0:e5:d3:c7:a5:cc:20:15:8f:4a:79:88:75:73:0b:b8:e0:4b:
         5d:86:b3:d8:9d:26:96:2f:3a:e8:ef:bb:81:40:d9:d6:4e:90:
         96:d1:b6:71:0c:8e:99:75:47:24:65:3a:e9:4c:a2:fb:3e:61:
         d3:dd:cc:08:70:d8:66:64:e9:d2:f5:8a:09:dd:71:72:1c:00:
         97:0d:9c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----