Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91626EF/9D867510FFD411E992D06518C4F9AE02/NHr-s5TFaX6XkiFO-M9WpZyo6L0.mft
File:                     NHr-s5TFaX6XkiFO-M9WpZyo6L0.mft (raw, json)
Hash identifier:          pla1nyQzG8LTSw5KSKGRy5TUTxBnRPzLnnu/ZKQ/rGk=
Subject key identifier:   EF:54:4C:9A:C8:F4:2A:E4:D9:7A:C9:7F:F9:49:23:5C:3B:8B:A0:32
Authority key identifier: 34:7A:FE:B3:94:C5:69:7E:97:92:21:4E:F8:CF:56:A5:9C:A8:E8:BD
Certificate issuer:       /CN=A91626EF/serialNumber=347AFEB394C5697E9792214EF8CF56A59CA8E8BD
Certificate serial:       0C44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHr-s5TFaX6XkiFO-M9WpZyo6L0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91626EF/9D867510FFD411E992D06518C4F9AE02/NHr-s5TFaX6XkiFO-M9WpZyo6L0.mft
Manifest number:          0C33
Signing time:             Fri 31 Jan 2025 18:19:03 +0000
Manifest this update:     Fri 31 Jan 2025 18:19:03 +0000
Manifest next update:     Fri 07 Feb 2025 18:19:03 +0000
Files and hashes:         1: NHr-s5TFaX6XkiFO-M9WpZyo6L0.crl (hash: VOL57Zsx/wBIyCGuaWmAcnW099vPii0WlM+wY2Me5tc=)
                          2: 4E130D564F7F11EDACECBE79C4F9AE02.roa (hash: Ifdlq/gxjD1LRVuw8RpiZsn3oVXsh2vyWEYkzFa2ENU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3140 (0xc44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91626EF/serialNumber=347AFEB394C5697E9792214EF8CF56A59CA8E8BD
        Validity
            Not Before: Jan 31 18:19:03 2025 GMT
            Not After : Feb  7 18:19:03 2025 GMT
        Subject: CN=679d1417-e997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4f:27:2d:0c:cb:b0:a9:75:3c:ba:c8:2c:a2:
                    8e:58:2a:94:72:b6:14:83:b0:b6:c6:f0:95:10:bd:
                    3a:df:9f:e9:bd:e0:4e:c9:3e:46:6d:67:df:3d:33:
                    2d:9c:35:bc:cf:ae:26:48:35:dc:16:3f:36:6c:7e:
                    f9:53:02:58:09:e9:f2:c5:0b:f1:90:29:87:57:f2:
                    f4:9c:5e:1a:c3:a8:bf:55:69:15:2f:c0:7e:fd:3b:
                    f2:6f:19:31:e5:3f:ac:12:62:db:19:1e:28:14:09:
                    a5:2f:95:ae:6e:50:13:b3:52:04:1f:ea:c8:98:e2:
                    9f:a9:fa:98:e6:49:b4:20:56:28:3e:99:6d:a7:a6:
                    f6:7a:c0:8d:8a:a1:7c:97:c0:b3:23:71:93:9a:69:
                    2d:77:0f:49:50:93:24:1a:03:ab:af:8a:d5:c6:40:
                    16:fd:a5:66:c2:10:79:40:48:82:15:8f:ab:80:21:
                    cf:b6:74:34:a4:4f:1d:50:66:03:64:6e:17:95:d7:
                    6a:77:35:fe:4c:13:ea:45:96:a8:00:0f:35:02:bd:
                    cb:dc:98:f0:ea:31:6f:ff:b5:01:21:89:64:36:f6:
                    52:d4:8b:60:e9:cd:da:db:ec:ec:39:3c:1e:a4:27:
                    57:28:9b:11:5a:be:64:ed:72:4f:18:28:2d:a6:8b:
                    a7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:54:4C:9A:C8:F4:2A:E4:D9:7A:C9:7F:F9:49:23:5C:3B:8B:A0:32
            X509v3 Authority Key Identifier:
                keyid:34:7A:FE:B3:94:C5:69:7E:97:92:21:4E:F8:CF:56:A5:9C:A8:E8:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91626EF/9D867510FFD411E992D06518C4F9AE02/NHr-s5TFaX6XkiFO-M9WpZyo6L0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHr-s5TFaX6XkiFO-M9WpZyo6L0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91626EF/9D867510FFD411E992D06518C4F9AE02/NHr-s5TFaX6XkiFO-M9WpZyo6L0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:4d:56:bf:6b:90:c9:6c:0a:0c:8b:c0:4c:be:61:f5:81:d7:
         a3:a5:82:e5:eb:e0:94:56:b9:f2:94:b5:eb:8b:52:97:d6:3b:
         c5:e2:45:fc:2b:4b:25:ca:75:33:7f:90:b1:41:b1:e1:0a:97:
         03:20:5c:ce:66:17:ed:c3:c1:0a:b3:f9:fe:7a:b8:32:0f:62:
         2d:82:ea:55:9a:ba:68:0b:e3:2c:fe:3c:b8:d5:8d:ae:ae:e6:
         1b:af:18:73:a7:c8:58:3a:4e:3a:e1:6b:36:4a:ed:05:3e:bf:
         87:0c:81:33:d9:cd:e5:b0:61:3d:84:dc:34:5a:e0:01:f9:ff:
         f9:43:22:94:1a:18:ec:cc:9c:6d:c6:db:3e:12:c8:93:45:df:
         81:2d:54:3c:d1:b3:6e:98:30:04:fb:0f:f4:ad:51:16:9a:c6:
         4c:2a:ae:12:e5:52:b2:7e:40:d6:8a:53:f5:e4:e0:ea:f0:96:
         4a:ed:a9:5e:1b:85:20:06:a4:e1:80:be:12:e8:90:8c:7b:35:
         28:b8:89:39:63:8d:00:84:12:65:2f:8d:88:13:48:45:89:be:
         4e:dd:07:8f:69:29:9e:a6:d3:c3:8c:f5:cd:cc:47:aa:1d:c6:
         00:b4:47:e2:97:35:d7:7a:03:76:cd:35:4b:03:85:1e:0b:36:
         3f:93:40:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----