Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
File:                     5DMXblmum0dk6179BKQ2hWKrXiE.mft (raw, json)
Hash identifier:          JQGXkP0fHNl7/gtm9Wj1J6f3ia2lqfr+WBCEW1GqBkQ=
Subject key identifier:   5C:B8:C0:E6:10:23:5C:20:8F:AE:49:0E:D2:C1:45:CA:78:53:2B:2A
Authority key identifier: E4:33:17:6E:59:AE:9B:47:64:EB:5E:FD:04:A4:36:85:62:AB:5E:21
Certificate issuer:       /CN=A9180318/serialNumber=E433176E59AE9B4764EB5EFD04A4368562AB5E21
Certificate serial:       33BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
Manifest number:          33BE
Signing time:             Thu 02 May 2024 14:45:39 +0000
Manifest this update:     Thu 02 May 2024 14:45:38 +0000
Manifest next update:     Thu 09 May 2024 14:45:38 +0000
Files and hashes:         1: 5DMXblmum0dk6179BKQ2hWKrXiE.crl (hash: uEZ5toznkq8CO8NId3MVf0LCDNV0EjmmGRy1yxUAgbU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.crl
                          rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 14:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13246 (0x33be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180318/serialNumber=E433176E59AE9B4764EB5EFD04A4368562AB5E21
        Validity
            Not Before: May  2 14:45:38 2024 GMT
            Not After : May  9 14:45:38 2024 GMT
        Subject: CN=6633a713-c9ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c4:cf:cb:d0:c9:4d:0e:70:a0:eb:5d:59:21:
                    ab:ab:e8:89:8f:ac:fc:78:e7:2e:93:f6:a8:4e:1c:
                    d0:9a:76:da:de:d3:7d:9a:58:02:fc:18:06:dd:5f:
                    fa:9c:b5:f4:6b:a7:a0:a6:d5:79:3c:31:44:5f:67:
                    9b:b8:d1:41:0e:89:3c:0e:28:61:8e:43:05:d1:8e:
                    e7:71:86:79:88:6a:cc:64:27:9a:a2:fe:19:89:e8:
                    b5:f6:0b:46:a6:9d:90:08:d7:71:ea:23:5b:64:27:
                    f7:14:03:95:8d:90:76:43:c8:09:3b:13:cd:58:e3:
                    b1:ff:e3:fc:27:72:09:90:39:3a:b3:6f:ac:28:0b:
                    90:1e:22:2f:11:0e:1a:46:41:8d:84:ad:cc:54:14:
                    48:40:47:ea:02:cc:62:f7:a8:c4:14:22:ce:f5:34:
                    3a:56:85:93:3f:b4:07:41:31:2a:59:18:5f:b1:2f:
                    76:6f:b9:53:8b:73:25:f6:de:4d:47:61:a1:ab:79:
                    09:36:01:6e:8f:ec:46:d2:9b:4a:b9:02:0e:8b:58:
                    d4:29:42:8b:d4:27:4b:25:ed:81:57:bc:22:d4:0c:
                    b0:ab:67:20:cc:05:b9:ca:46:be:ad:b8:72:46:12:
                    8f:8c:f5:70:15:15:4c:ce:4c:e5:f6:35:7c:c9:a3:
                    e3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B8:C0:E6:10:23:5C:20:8F:AE:49:0E:D2:C1:45:CA:78:53:2B:2A
            X509v3 Authority Key Identifier:
                keyid:E4:33:17:6E:59:AE:9B:47:64:EB:5E:FD:04:A4:36:85:62:AB:5E:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:e5:ab:d1:65:34:2a:54:dc:57:9a:e1:ba:7e:00:f6:28:32:
         33:50:96:68:c0:22:44:3e:f9:88:f1:ac:e7:55:13:4e:be:0a:
         ab:3f:3d:27:f4:5a:8a:41:9f:1a:e7:d9:f5:b0:9c:35:dc:7e:
         9f:76:b6:63:fd:ca:cb:c3:72:07:81:f3:39:bd:fc:3b:49:1a:
         26:b0:2b:09:7f:57:fe:02:8b:08:1a:7f:2f:9d:45:ca:6f:5e:
         ce:09:c5:7c:44:b9:6f:46:ba:0c:dc:55:0a:75:d0:36:d4:a7:
         b2:a9:6d:b6:42:6f:f4:4a:8e:53:03:ab:b9:3b:55:ff:2b:7a:
         01:5d:88:5c:41:24:63:60:5d:a3:41:9b:7c:9a:62:37:3f:dc:
         d1:4b:03:ba:60:6c:74:3d:4f:a8:dd:87:89:99:fd:c2:c0:9a:
         94:a5:ab:79:15:46:15:57:72:e3:27:2d:08:54:54:26:73:21:
         19:bb:8b:50:58:1f:23:35:50:7a:f2:a2:c7:8a:eb:ee:85:35:
         e0:d6:e6:7c:d2:65:99:cb:c0:1a:0f:2f:ae:8b:d4:85:86:90:
         16:bc:c3:09:91:8b:b1:da:76:0e:25:5f:a1:b7:b3:0d:4a:92:
         db:05:0b:a6:a7:41:96:73:2b:51:08:58:a4:b2:d7:f0:12:f0:
         42:40:b0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:18:30 2024 by rpki-client on console-ams.rpki-client.org