Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA790/129B3D5C1DA811E2B94830A208B02CD2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.mft
File:                     6hMWJXP0YIe5C7dfdIJbMSjKF6c.mft (raw, json)
Hash identifier:          7/PnEutjUSAK5pf6Nj76KIMzbWmSlfBgiF2+NXa2zs4=
Subject key identifier:   C9:1A:6F:1B:86:78:13:AA:18:34:FA:9D:DD:8A:2A:92:4B:58:F7:9B
Authority key identifier: EA:13:16:25:73:F4:60:87:B9:0B:B7:5F:74:82:5B:31:28:CA:17:A7
Certificate issuer:       /CN=A91BA790/serialNumber=EA13162573F46087B90BB75F74825B3128CA17A7
Certificate serial:       33C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA790/129B3D5C1DA811E2B94830A208B02CD2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.mft
Manifest number:          33C8
Signing time:             Fri 31 May 2024 15:32:35 +0000
Manifest this update:     Fri 31 May 2024 15:32:34 +0000
Manifest next update:     Fri 07 Jun 2024 15:32:34 +0000
Files and hashes:         1: 6hMWJXP0YIe5C7dfdIJbMSjKF6c.crl (hash: MmS35lchhFEXnPDEopwVKiixce9vONAAH5xH2KvOiX4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA790/129B3D5C1DA811E2B94830A208B02CD2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.crl
                          rsync://rpki.apnic.net/member_repository/A91BA790/129B3D5C1DA811E2B94830A208B02CD2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 15:32:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13256 (0x33c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA790/serialNumber=EA13162573F46087B90BB75F74825B3128CA17A7
        Validity
            Not Before: May 31 15:32:34 2024 GMT
            Not After : Jun  7 15:32:34 2024 GMT
        Subject: CN=6659ed92-45d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f1:72:86:f2:c3:c1:26:44:c8:57:cb:e7:6c:
                    8d:b9:4b:33:fa:8c:f0:f2:db:4f:52:37:88:4c:42:
                    10:ed:98:1c:87:f6:24:12:d8:f1:9f:6e:53:2c:a8:
                    b1:b1:46:8c:3d:a4:29:56:17:6c:03:8a:e7:48:e9:
                    c6:85:1e:3c:35:7b:43:94:63:25:29:c9:50:67:50:
                    16:4c:c9:5a:77:7b:db:34:e1:ff:5f:81:01:48:46:
                    7d:1e:6f:df:c4:da:d5:04:d7:59:e0:1a:98:4c:7f:
                    81:45:94:93:a6:d2:23:e0:b3:fc:44:0e:24:37:ae:
                    ac:1f:b0:d5:06:6d:51:b3:70:d5:64:a9:b8:f2:9b:
                    8b:12:20:4a:ab:06:63:01:59:54:2d:21:c2:31:ab:
                    66:53:da:0b:d6:57:cb:0d:2b:3e:a2:91:d7:ca:6d:
                    c1:14:be:75:9a:75:0f:02:99:d3:b4:44:ab:27:8a:
                    f9:4d:9f:8f:bd:1b:d6:76:ff:4b:f2:34:a8:38:05:
                    94:54:8b:29:6f:7d:c5:b2:7f:19:59:d6:25:0f:e6:
                    71:99:20:26:fc:fe:a2:e8:06:b6:f6:c0:0f:aa:16:
                    d7:13:c5:0e:7a:f2:d3:1b:78:a1:ef:45:f2:8b:0c:
                    1b:43:ff:e5:fd:8b:c8:e3:d8:38:52:92:69:3a:01:
                    c8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:1A:6F:1B:86:78:13:AA:18:34:FA:9D:DD:8A:2A:92:4B:58:F7:9B
            X509v3 Authority Key Identifier:
                keyid:EA:13:16:25:73:F4:60:87:B9:0B:B7:5F:74:82:5B:31:28:CA:17:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA790/129B3D5C1DA811E2B94830A208B02CD2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA790/129B3D5C1DA811E2B94830A208B02CD2/6hMWJXP0YIe5C7dfdIJbMSjKF6c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:ff:5b:e6:7e:10:9d:24:0f:8c:6f:7d:16:b9:c6:9c:7e:47:
         ea:df:e2:4f:02:ad:01:ee:f4:05:ca:58:59:0f:b2:46:da:76:
         bf:f0:a4:fb:1f:18:16:1c:ed:cb:f7:46:74:df:fc:5d:b1:bc:
         e5:bf:32:83:e6:9a:a3:47:06:5e:e2:9d:93:4b:90:b4:56:c2:
         4e:bf:cc:62:12:fc:04:2a:89:3c:d0:f6:a5:66:4d:37:b8:06:
         c9:f9:0f:c4:0e:86:69:07:23:05:69:04:14:d8:a5:e4:9a:0a:
         51:de:f4:65:a9:c6:e6:09:c1:bf:b9:bc:cf:8d:5f:49:7b:4c:
         d1:37:99:64:f9:b6:61:d6:1c:01:be:60:c5:58:bc:e5:d5:63:
         22:a7:38:25:0d:8b:33:eb:3b:09:4b:5b:c4:1b:4e:92:02:64:
         bb:34:6d:d7:17:83:f6:b7:ca:dc:c3:4d:33:d3:76:c6:45:f9:
         bb:8c:a5:29:fc:1b:08:60:31:77:5e:e5:c4:d4:f7:f9:85:72:
         a7:75:e3:25:79:99:94:c5:99:e2:68:52:06:f6:61:b8:56:0c:
         27:41:8e:df:6c:3f:8d:4d:65:eb:32:d5:eb:f0:0b:fb:a6:13:
         1b:77:00:15:40:a3:5f:f0:3f:61:78:5e:46:49:f1:a4:13:02:
         aa:9d:82:2c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICM8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkE3OTAxMTAvBgNVBAUTKEVBMTMxNjI1NzNGNDYwODdCOTBCQjc1Rjc0ODI1QjMx
MjhDQTE3QTcwHhcNMjQwNTMxMTUzMjM0WhcNMjQwNjA3MTUzMjM0WjAYMRYwFAYD
VQQDEw02NjU5ZWQ5Mi00NWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn/FyhvLDwSZEyFfL52yNuUsz+ozw8ttPUjeITEIQ7Zgch/YkEtjxn25TLKix
sUaMPaQpVhdsA4rnSOnGhR48NXtDlGMlKclQZ1AWTMlad3vbNOH/X4EBSEZ9Hm/f
xNrVBNdZ4BqYTH+BRZSTptIj4LP8RA4kN66sH7DVBm1Rs3DVZKm48puLEiBKqwZj
AVlULSHCMatmU9oL1lfLDSs+opHXym3BFL51mnUPApnTtESrJ4r5TZ+PvRvWdv9L
8jSoOAWUVIspb33Fsn8ZWdYlD+ZxmSAm/P6i6Aa29sAPqhbXE8UOevLTG3ih70Xy
iwwbQ//l/YvI49g4UpJpOgHIRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMkabxuG
eBOqGDT6nd2KKpJLWPebMB8GA1UdIwQYMBaAFOoTFiVz9GCHuQu3X3SCWzEoyhen
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTc5MC8xMjlCM0Q1QzFE
QTgxMUUyQjk0ODMwQTIwOEIwMkNEMi82aE1XSlhQMFlJZTVDN2RmZElKYk1TaktG
NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZoTVdKWFAwWUllNUM3ZGZkSUpiTVNqS0Y2Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QTc5MC8xMjlCM0Q1QzFEQTgxMUUyQjk0ODMwQTIwOEIwMkNEMi82aE1XSlhQMFlJ
ZTVDN2RmZElKYk1TaktGNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAT/1vmfhCdJA+Mb30Wucacfkfq3+JPAq0B7vQFylhZD7JG2na/8KT7
HxgWHO3L90Z03/xdsbzlvzKD5pqjRwZe4p2TS5C0VsJOv8xiEvwEKok80PalZk03
uAbJ+Q/EDoZpByMFaQQU2KXkmgpR3vRlqcbmCcG/ubzPjV9Je0zRN5lk+bZh1hwB
vmDFWLzl1WMipzglDYsz6zsJS1vEG06SAmS7NG3XF4P2t8rcw00z03bGRfm7jKUp
/BsIYDF3XuXE1Pf5hXKndeMleZmUxZniaFIG9mG4VgwnQY7fbD+NTWXrMtXr8Av7
phMbdwAVQKNf8D9heF5GSfGkEwKqnYIs
-----END CERTIFICATE-----
Generated at Fri May 31 17:44:51 2024 by rpki-client on console-fra.rpki-client.org