Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
File:                     5DMXblmum0dk6179BKQ2hWKrXiE.mft (raw, json)
Hash identifier:          OSxFx9+xEQrfmFFLQXH10LFuLt7+zgFC/g5JzwdyTPM=
Subject key identifier:   5C:B0:18:1D:31:0C:7E:42:27:3C:0E:35:38:76:58:96:8B:D1:3A:20
Authority key identifier: E4:33:17:6E:59:AE:9B:47:64:EB:5E:FD:04:A4:36:85:62:AB:5E:21
Certificate issuer:       /CN=A9180318/serialNumber=E433176E59AE9B4764EB5EFD04A4368562AB5E21
Certificate serial:       33C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
Manifest number:          33C6
Signing time:             Sat 18 May 2024 14:45:56 +0000
Manifest this update:     Sat 18 May 2024 14:45:55 +0000
Manifest next update:     Sat 25 May 2024 14:45:55 +0000
Files and hashes:         1: 5DMXblmum0dk6179BKQ2hWKrXiE.crl (hash: KfFjBcUztpGyHp3h4aRDbA0zeF3g8qpQcj+iHFlrr5w=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.crl
                          rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:45:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13254 (0x33c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180318/serialNumber=E433176E59AE9B4764EB5EFD04A4368562AB5E21
        Validity
            Not Before: May 18 14:45:55 2024 GMT
            Not After : May 25 14:45:55 2024 GMT
        Subject: CN=6648bf24-b92d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c9:17:01:c8:d3:28:1f:24:00:71:b3:c5:8d:
                    a4:7a:cb:a5:63:a9:08:ec:0f:c0:6a:2f:f5:67:de:
                    55:c8:10:85:85:49:01:24:b4:db:00:68:9e:70:5c:
                    c5:05:54:1f:e4:43:67:d8:65:ae:52:b4:87:26:c3:
                    79:6d:97:47:bc:23:7e:d0:3d:d1:dc:5e:71:0c:77:
                    89:39:58:9b:19:74:60:5a:57:c2:6a:a7:16:e6:12:
                    25:f1:3e:4c:0d:16:92:c0:ce:2b:67:91:0c:fb:9b:
                    e5:01:9b:75:e3:4f:ee:45:d6:07:d2:ee:6e:40:3c:
                    cc:f2:36:34:86:36:07:2e:bf:e4:b9:a7:65:af:3c:
                    c2:5e:72:c0:10:44:92:96:02:15:05:62:9f:24:29:
                    03:18:0e:8c:18:0b:c8:11:12:de:44:c6:36:35:55:
                    e0:b7:56:3c:fd:b5:f7:df:65:fb:0f:d7:86:61:e5:
                    43:9a:65:e7:e3:3c:df:25:47:9e:1f:f4:bb:2c:99:
                    2b:1e:40:9d:df:ab:1f:40:e2:a5:76:4d:92:5e:03:
                    c2:43:16:ab:46:49:04:ec:ce:f5:ba:5b:fd:a5:02:
                    62:ae:ff:7a:8c:43:c1:62:10:00:a3:86:11:7a:25:
                    e9:c1:58:2d:ab:34:ec:84:44:c6:b5:58:ca:08:4a:
                    93:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B0:18:1D:31:0C:7E:42:27:3C:0E:35:38:76:58:96:8B:D1:3A:20
            X509v3 Authority Key Identifier:
                keyid:E4:33:17:6E:59:AE:9B:47:64:EB:5E:FD:04:A4:36:85:62:AB:5E:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:b8:d1:fb:c7:dc:95:32:48:3d:94:b1:e6:e7:fb:0a:55:d5:
         1c:69:8e:b0:e9:75:ca:29:55:45:84:b7:88:7e:ea:1d:6a:a4:
         ce:a5:95:64:eb:64:e6:89:b1:5d:03:48:8b:dd:c5:f5:30:61:
         5f:60:7a:68:15:c9:51:9f:32:f2:2d:23:2d:0e:59:dc:53:2e:
         06:9b:8a:28:77:21:a8:a4:26:02:cc:6b:b7:27:fd:82:91:66:
         46:85:a3:77:11:07:75:66:8e:af:4c:b4:03:c7:70:f1:b4:ae:
         2b:8b:b0:56:7d:a8:da:e7:e5:59:1e:46:1a:da:28:82:09:49:
         cc:12:e5:06:5e:ab:15:ea:9b:79:7d:c0:c9:13:35:56:2b:34:
         68:2f:a9:00:5a:ed:da:2e:43:f1:32:40:ef:4b:29:34:2b:4d:
         bb:34:9b:57:3a:81:7f:89:f9:c0:0a:30:72:c5:b3:35:60:0c:
         7e:6f:dd:ed:c3:5e:41:4e:b5:5a:dd:17:12:35:5c:b5:ec:d4:
         58:ab:25:ec:d0:6f:39:f1:42:a8:fb:0c:4c:d6:75:ba:a7:1c:
         e3:6e:44:1c:b5:12:6f:b2:55:99:e2:d1:f9:ef:17:f3:ca:85:
         1a:d3:13:91:52:2a:d2:4f:ca:d4:fa:43:b7:e6:1b:eb:1e:b8:
         d5:b4:e1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:58:22 2024 by rpki-client on console-ams.rpki-client.org