Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/Nb-dxVNaaDq2lad4JnhtPfnixbQ.mft
File:                     Nb-dxVNaaDq2lad4JnhtPfnixbQ.mft (raw, json)
Hash identifier:          8E89J3XqqsOhlHyZTBo0IK6sv+BmNEcLMiy9nLF/aHQ=
Subject key identifier:   A9:23:EC:A1:1F:FE:25:DE:25:28:11:59:E0:02:49:42:AF:0B:D5:07
Authority key identifier: 35:BF:9D:C5:53:5A:68:3A:B6:95:A7:78:26:78:6D:3D:F9:E2:C5:B4
Certificate issuer:       /CN=A91B9385/serialNumber=35BF9DC5535A683AB695A77826786D3DF9E2C5B4
Certificate serial:       0999
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nb-dxVNaaDq2lad4JnhtPfnixbQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/Nb-dxVNaaDq2lad4JnhtPfnixbQ.mft
Manifest number:          0993
Signing time:             Tue 20 May 2025 23:31:10 +0000
Manifest this update:     Tue 20 May 2025 23:31:10 +0000
Manifest next update:     Tue 27 May 2025 23:31:10 +0000
Files and hashes:         1: Nb-dxVNaaDq2lad4JnhtPfnixbQ.crl (hash: KescrKrQUbacQ6PZGewXp6DmbY16W6xZKxrd/vJEkDA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2457 (0x999)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9385, serialNumber=35BF9DC5535A683AB695A77826786D3DF9E2C5B4
        Validity
            Not Before: May 20 23:31:10 2025 GMT
            Not After : May 27 23:31:10 2025 GMT
        Subject: CN=682d10be-de5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f5:f1:7c:9f:5a:74:c9:ba:82:12:c5:28:52:
                    a4:5d:50:47:d8:0f:79:0d:ce:36:bc:1c:d5:b2:53:
                    67:51:21:8c:a9:c2:8a:44:e7:ec:60:b7:f7:b9:74:
                    ff:67:1a:18:a0:2d:e7:33:26:78:02:23:f7:d5:40:
                    6d:bf:fa:96:b5:e8:31:15:9b:6c:46:eb:b8:e0:6a:
                    65:4e:e5:2b:eb:b6:be:6e:a2:d5:ed:99:29:ac:b7:
                    96:3e:6a:6b:37:e8:16:44:55:e2:66:38:95:03:77:
                    09:b2:e3:8f:f9:18:c9:a3:d2:2d:47:b4:58:6a:22:
                    ca:e2:01:f8:66:66:8d:cf:9d:9e:24:89:f7:41:c0:
                    82:14:2c:6a:ad:88:a9:e3:cf:92:18:31:a9:ad:09:
                    8a:b5:88:9f:84:7e:d4:48:bc:e6:ef:c6:74:8c:3d:
                    5a:94:d4:d8:0d:e9:43:49:37:ae:3d:9e:7e:30:69:
                    14:be:64:11:26:c8:48:70:c7:9f:6e:b6:8d:0e:8e:
                    0a:af:92:fa:46:6f:6e:0b:57:23:83:5a:2b:54:2c:
                    7f:11:ca:be:a2:e8:69:7f:4b:dc:0d:a9:7b:09:91:
                    57:ee:02:2c:89:59:28:0a:93:60:aa:f9:ce:00:af:
                    fa:4f:55:b1:92:02:70:98:fe:a4:e3:34:ec:a0:a9:
                    1a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:23:EC:A1:1F:FE:25:DE:25:28:11:59:E0:02:49:42:AF:0B:D5:07
            X509v3 Authority Key Identifier:
                keyid:35:BF:9D:C5:53:5A:68:3A:B6:95:A7:78:26:78:6D:3D:F9:E2:C5:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/Nb-dxVNaaDq2lad4JnhtPfnixbQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nb-dxVNaaDq2lad4JnhtPfnixbQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/Nb-dxVNaaDq2lad4JnhtPfnixbQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:1f:8d:34:59:54:e3:12:97:89:09:4b:dd:47:02:ce:45:d7:
         2d:ac:76:0e:c0:7e:41:29:d7:69:93:86:a3:cc:5d:d2:72:ea:
         08:2b:24:f1:4c:6d:c3:67:ff:58:77:4d:cd:cb:5e:da:b2:c2:
         be:60:3d:63:62:4d:7b:7f:1e:22:6b:f7:8e:73:1d:21:b6:cb:
         48:dc:f7:1a:d5:06:47:61:14:df:a2:cc:d5:48:b8:9d:24:1e:
         d2:ce:05:39:e9:45:33:8f:24:66:81:7e:a6:6b:ec:f1:71:f7:
         7a:d9:40:d8:24:c1:be:87:3f:72:f9:5a:9b:5f:d4:53:89:fd:
         24:4b:35:b6:0a:73:01:a2:21:f6:01:99:9d:07:a1:a4:c4:4f:
         3e:f5:59:a4:8d:47:9a:bf:ad:0b:15:25:c7:cc:2c:0d:ff:e9:
         5d:a9:d9:38:0a:70:d5:4a:59:d9:97:c0:5f:f6:ef:f8:88:d7:
         7a:5a:21:58:b1:41:eb:9c:f5:84:b3:21:78:1c:fe:b6:91:e1:
         2a:15:8a:48:63:de:f9:6c:ce:f0:b0:12:53:33:b3:e5:c1:9a:
         b7:77:8d:fb:a0:26:97:48:d0:64:5d:d2:0b:1b:ef:2a:13:f9:
         70:3d:c0:06:9d:1d:d3:bd:7d:ec:5a:a2:40:15:73:bc:f6:0c:
         ef:7a:78:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----