Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914541C/5D4398D8E72F11EEB72C6E68C4F9AE02/6ulU-U0bR7_7MxNLI6pqkQPo-5o.mft
File:                     6ulU-U0bR7_7MxNLI6pqkQPo-5o.mft (raw, json)
Hash identifier:          q+mBRGP9osyaVIBKujSM0gujq1q90oZo2LXd0xV3KFM=
Subject key identifier:   5C:18:18:14:B6:8F:2C:86:15:9F:79:36:DE:2E:0A:2B:50:DF:BA:62
Authority key identifier: EA:E9:54:F9:4D:1B:47:BF:FB:33:13:4B:23:AA:6A:91:03:E8:FB:9A
Certificate issuer:       /CN=A914541C/serialNumber=EAE954F94D1B47BFFB33134B23AA6A9103E8FB9A
Certificate serial:       1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ulU-U0bR7_7MxNLI6pqkQPo-5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914541C/5D4398D8E72F11EEB72C6E68C4F9AE02/6ulU-U0bR7_7MxNLI6pqkQPo-5o.mft
Manifest number:          1E
Signing time:             Sun 19 May 2024 08:37:27 +0000
Manifest this update:     Sun 19 May 2024 08:37:26 +0000
Manifest next update:     Sun 26 May 2024 08:37:26 +0000
Files and hashes:         1: 6ulU-U0bR7_7MxNLI6pqkQPo-5o.crl (hash: +YsCRm9rm+mfxJvOqF9iLwbRCSO/d4UOTBgms7Yg3so=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914541C/5D4398D8E72F11EEB72C6E68C4F9AE02/6ulU-U0bR7_7MxNLI6pqkQPo-5o.crl
                          rsync://rpki.apnic.net/member_repository/A914541C/5D4398D8E72F11EEB72C6E68C4F9AE02/6ulU-U0bR7_7MxNLI6pqkQPo-5o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ulU-U0bR7_7MxNLI6pqkQPo-5o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914541C/serialNumber=EAE954F94D1B47BFFB33134B23AA6A9103E8FB9A
        Validity
            Not Before: May 19 08:37:26 2024 GMT
            Not After : May 26 08:37:26 2024 GMT
        Subject: CN=6649ba47-b1cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ff:23:1a:48:93:81:fa:3c:55:00:ef:c3:91:
                    9d:25:48:d3:47:07:1e:ca:df:36:f7:b7:bb:30:65:
                    c3:f6:0f:6c:59:4e:10:c4:41:48:d2:95:3f:c0:f1:
                    82:1c:b6:dc:5b:25:51:af:28:66:8c:22:84:74:70:
                    5d:2e:1b:73:52:30:d3:90:0b:d9:71:b5:10:14:41:
                    78:0e:64:87:8b:84:10:9b:36:37:35:01:70:95:0a:
                    69:57:e8:ab:5d:ff:87:9c:1e:da:e1:34:fd:59:61:
                    d4:78:a2:25:e8:b6:da:28:ac:79:b4:1e:fe:4e:08:
                    75:34:1a:f4:42:be:5b:f8:af:8c:7a:2d:e3:b3:eb:
                    89:15:dd:5f:3b:2b:a5:1c:76:b4:78:b2:cc:dc:70:
                    53:46:11:75:a1:5e:83:e9:44:95:74:14:71:71:ba:
                    fa:f3:2d:63:2f:77:19:d4:f4:31:ad:ae:2c:86:9d:
                    9f:c3:d9:34:58:cf:4c:ed:8a:00:41:0b:f2:d8:51:
                    77:ac:f6:06:35:3b:7c:79:21:b1:4a:7a:b4:eb:d6:
                    e2:89:cf:ec:ff:af:db:ab:ca:26:43:1e:a2:09:b6:
                    0b:0d:6c:41:56:ec:8a:f5:43:a7:e2:ae:b1:19:0f:
                    46:88:e6:43:18:ab:a3:fe:3d:a2:6d:f0:6e:4f:93:
                    9f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:18:18:14:B6:8F:2C:86:15:9F:79:36:DE:2E:0A:2B:50:DF:BA:62
            X509v3 Authority Key Identifier:
                keyid:EA:E9:54:F9:4D:1B:47:BF:FB:33:13:4B:23:AA:6A:91:03:E8:FB:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914541C/5D4398D8E72F11EEB72C6E68C4F9AE02/6ulU-U0bR7_7MxNLI6pqkQPo-5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ulU-U0bR7_7MxNLI6pqkQPo-5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914541C/5D4398D8E72F11EEB72C6E68C4F9AE02/6ulU-U0bR7_7MxNLI6pqkQPo-5o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:dc:76:5b:eb:69:37:ed:60:b7:47:2d:2b:d2:93:15:76:01:
         e0:38:d1:82:f8:c9:68:f5:3a:80:4d:d2:60:90:68:f4:09:de:
         fc:85:15:ea:12:87:77:fc:23:06:1d:7c:18:d0:13:5b:b4:6f:
         cd:75:0c:9e:a2:75:d0:d4:f3:82:ef:6f:5b:57:29:1a:02:f6:
         66:44:b7:fb:c3:13:67:b6:79:b2:18:e4:e5:64:a3:da:11:95:
         90:48:ab:2d:53:0b:9d:60:e2:26:79:24:f2:6c:c5:07:b2:57:
         ff:cc:7b:88:89:fb:75:c0:66:46:5f:3e:fd:8d:e2:bd:df:3e:
         8b:0c:b9:21:02:e4:ac:05:2d:78:c0:d1:2a:05:60:d3:74:12:
         31:eb:9c:43:f1:62:14:93:0b:63:58:05:da:9b:d8:c1:20:cf:
         ef:36:63:3d:e1:00:61:b2:ad:c0:8a:19:0e:e0:9b:df:cf:46:
         3e:77:6b:5a:f5:5a:a5:e7:0e:20:c5:f8:2c:fb:35:5b:e1:e6:
         aa:14:eb:90:aa:0e:12:34:3e:77:be:94:f2:9b:1b:e2:06:61:
         36:a6:c7:c6:91:6b:8d:69:41:1f:6a:1c:cf:ad:a0:4c:0f:08:
         4a:19:5d:aa:9c:3c:14:69:71:cb:1e:6e:9e:f8:aa:a9:ef:1e:
         6d:f5:48:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 09:32:16 2024 by rpki-client on console-ams.rpki-client.org