Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft
File:                     91XB4Q_ErmiS0krLh4LX5cAEGLA.mft (raw, json)
Hash identifier:          ypPt1v8axrWZGJ51UauPbytdmweT9XGMXAKAm1LyM+E=
Subject key identifier:   D0:38:76:6E:0F:DB:69:49:5F:54:DF:EB:4D:E8:AB:4B:F2:9E:CC:AF
Authority key identifier: F7:55:C1:E1:0F:C4:AE:68:92:D2:4A:CB:87:82:D7:E5:C0:04:18:B0
Certificate issuer:       /CN=A9136F59/serialNumber=F755C1E10FC4AE6892D24ACB8782D7E5C00418B0
Certificate serial:       0277
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91XB4Q_ErmiS0krLh4LX5cAEGLA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft
Manifest number:          0273
Signing time:             Fri 31 Jan 2025 01:43:57 +0000
Manifest this update:     Fri 31 Jan 2025 01:43:56 +0000
Manifest next update:     Fri 07 Feb 2025 01:43:56 +0000
Files and hashes:         1: 91XB4Q_ErmiS0krLh4LX5cAEGLA.crl (hash: zM19GCFqIPoOY9XmPPrT9XP3YfSnPJqzxw2fXMjHa6A=)
                          2: ED0C111CF8F611ECB6DF8835C4F9AE02.roa (hash: 4DnB0bL3NG78Ric1Q/fKLIMkj23xQICVd02+1wJapuQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 631 (0x277)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136F59/serialNumber=F755C1E10FC4AE6892D24ACB8782D7E5C00418B0
        Validity
            Not Before: Jan 31 01:43:56 2025 GMT
            Not After : Feb  7 01:43:56 2025 GMT
        Subject: CN=679c2adc-831c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:30:50:37:63:ca:be:63:a4:0a:65:a9:3c:a5:
                    35:f3:24:d2:d0:47:3a:0a:60:48:69:a1:a2:36:b0:
                    d4:1b:bb:32:45:17:fa:10:7b:ca:84:16:d2:e0:60:
                    0e:e4:18:b1:40:ee:14:39:f1:33:a6:d4:79:87:7b:
                    87:95:6d:99:e8:2b:2b:b3:61:7d:34:43:f1:c7:18:
                    e1:a6:39:bb:49:5f:3d:58:b5:7c:9e:74:67:2d:4a:
                    ca:d0:09:7d:6a:a8:ac:af:ee:97:90:fc:6f:2c:ff:
                    fe:4f:6e:b6:64:fe:56:d1:b5:50:d9:91:b9:37:ca:
                    4e:fa:73:a7:dd:40:f1:9d:2c:0a:99:52:c6:51:cf:
                    50:08:72:44:59:fc:93:8c:8d:19:88:fb:76:70:c0:
                    ef:53:b4:82:0c:14:7d:1b:25:e1:49:97:e2:4b:cf:
                    d2:17:70:f9:bc:f4:ad:46:01:42:6b:bd:3e:52:17:
                    e1:69:d5:b2:82:86:5d:78:99:5f:b4:95:ab:d6:e4:
                    70:bf:17:37:66:66:96:50:f7:fd:33:be:3f:f3:0c:
                    73:8e:73:21:84:88:b6:04:9e:9b:b1:44:03:ea:0d:
                    3a:ea:42:e0:0e:a9:2b:2a:66:c6:a1:95:90:1d:4b:
                    12:17:92:38:c3:44:74:80:cb:d2:3d:9a:98:e1:85:
                    01:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:38:76:6E:0F:DB:69:49:5F:54:DF:EB:4D:E8:AB:4B:F2:9E:CC:AF
            X509v3 Authority Key Identifier:
                keyid:F7:55:C1:E1:0F:C4:AE:68:92:D2:4A:CB:87:82:D7:E5:C0:04:18:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91XB4Q_ErmiS0krLh4LX5cAEGLA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:62:1b:e0:71:8d:c0:c7:db:48:d3:21:f6:b1:90:bd:ee:75:
         78:9e:8f:7f:53:c0:53:d0:f9:bc:f8:66:bb:cf:53:b7:39:94:
         49:46:ae:88:17:97:0b:ec:f1:56:f8:37:e5:88:03:04:65:cd:
         6e:ce:9d:69:cd:b7:44:00:c8:81:8a:79:bd:b4:9e:20:0b:a2:
         bd:10:8e:b5:43:05:12:b5:24:07:ee:59:27:e2:8f:5a:4a:46:
         fc:2c:40:e7:79:73:57:e1:df:1a:45:b3:d0:2e:dd:f6:18:ce:
         f8:b4:6d:4d:7c:e4:ee:78:0c:ee:15:ec:11:04:e0:ca:6e:72:
         8a:f3:f2:d2:5d:82:b3:85:69:ab:71:a1:11:28:f5:6b:31:88:
         08:b6:23:34:ee:1f:d6:58:ae:f9:d7:ba:c6:de:37:49:21:12:
         9d:aa:fc:bc:44:64:c9:01:ec:01:7a:75:8d:a2:08:dc:ae:d0:
         da:34:df:60:5d:6f:90:25:98:af:d8:eb:32:f6:a8:6c:52:62:
         6d:d2:c2:ec:c9:18:11:1f:1c:ab:54:d7:9c:5f:64:fc:0e:33:
         8d:40:fe:eb:3b:76:7b:7b:1a:a5:bc:64:a4:20:b7:76:d3:d7:
         3d:00:ba:63:aa:9d:db:bc:65:2c:cf:0f:73:2a:30:a8:8e:c5:
         c5:a7:c3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----