Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft
File:                     xQo91YIWmexaCS_v5V5AfVvQy6U.mft (raw, json)
Hash identifier:          9+ulobotoBDDPicuQjdIpjfNwE9GPj7o6U+p8eiHkBI=
Subject key identifier:   0B:2B:F1:76:43:49:94:F3:D4:0E:4E:83:50:A3:6A:A7:07:A2:FE:BE
Authority key identifier: C5:0A:3D:D5:82:16:99:EC:5A:09:2F:EF:E5:5E:40:7D:5B:D0:CB:A5
Certificate issuer:       /CN=A91C2E41/serialNumber=C50A3DD5821699EC5A092FEFE55E407D5BD0CBA5
Certificate serial:       33B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft
Manifest number:          33B6
Signing time:             Sat 04 May 2024 15:23:49 +0000
Manifest this update:     Sat 04 May 2024 15:23:49 +0000
Manifest next update:     Sat 11 May 2024 15:23:49 +0000
Files and hashes:         1: xQo91YIWmexaCS_v5V5AfVvQy6U.crl (hash: Dw3jw69aMqOu4jij3Zf3eD9Fb/u8gmSd46KKVLN+74Y=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.crl
                          rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13240 (0x33b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2E41/serialNumber=C50A3DD5821699EC5A092FEFE55E407D5BD0CBA5
        Validity
            Not Before: May  4 15:23:49 2024 GMT
            Not After : May 11 15:23:49 2024 GMT
        Subject: CN=66365305-ce0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4f:d4:5e:70:db:cc:88:93:ae:3f:87:ae:41:
                    5a:96:3a:98:69:66:ee:85:94:cd:13:b1:9b:d0:8f:
                    21:6d:2e:95:6e:2b:f7:3e:72:f7:63:55:30:30:a2:
                    a1:74:7d:07:cc:9a:1d:e8:6d:d9:28:1c:ed:7e:a4:
                    91:bb:4c:0d:9d:4a:48:72:c8:e2:c7:a6:b0:dc:5a:
                    82:c3:7a:e9:d7:32:76:53:72:48:3e:d6:0f:97:83:
                    de:17:a1:ea:66:c2:4f:a8:3c:4a:72:c5:bf:b9:67:
                    3d:ff:fc:2c:a3:72:e9:0e:fa:92:f8:d9:75:54:76:
                    bc:65:02:e0:b8:fa:15:68:66:94:04:ed:63:33:0b:
                    b6:51:28:eb:90:75:bb:b3:ee:98:06:42:17:07:fc:
                    fd:23:fe:90:a0:e3:92:06:41:2f:b1:9e:9c:5c:10:
                    ef:50:95:33:09:38:81:ae:d8:87:d2:0e:c1:b8:d6:
                    b3:7a:c9:e3:63:9d:dc:1d:b8:e4:56:17:00:99:d9:
                    28:6f:86:c4:08:6d:b2:69:27:82:72:c8:83:38:72:
                    33:6d:30:45:df:8c:9b:2d:55:75:ad:f4:dc:ec:c0:
                    a4:91:5e:da:d9:e8:a4:a7:b5:64:76:59:1f:7e:83:
                    ed:b2:2c:6a:c5:54:3c:a4:b6:0e:7a:ca:9a:e9:18:
                    40:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2B:F1:76:43:49:94:F3:D4:0E:4E:83:50:A3:6A:A7:07:A2:FE:BE
            X509v3 Authority Key Identifier:
                keyid:C5:0A:3D:D5:82:16:99:EC:5A:09:2F:EF:E5:5E:40:7D:5B:D0:CB:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:09:da:73:52:92:f5:e7:68:eb:aa:9b:58:fc:f1:d3:d5:f4:
         52:87:c9:0c:13:2b:dc:42:b1:80:ac:6f:95:d9:7b:74:3c:43:
         f2:2a:7d:ac:74:ee:29:1b:d7:63:8d:b2:4a:d1:ab:f4:fa:da:
         63:09:19:2f:15:9e:19:41:b4:5d:d3:ad:41:d7:33:aa:30:33:
         32:25:e9:12:67:aa:d0:d9:64:59:96:03:97:d5:68:3d:00:95:
         ef:a7:ee:a7:d6:e7:cd:88:ac:02:18:b4:2d:33:28:ab:42:57:
         e3:a1:8d:c8:c5:92:14:30:cc:bf:c1:5b:3b:be:f5:f8:22:d7:
         12:a5:c3:c9:33:a8:38:c8:7e:40:a7:36:75:0e:6f:29:6c:41:
         b1:bb:d8:b3:db:36:e7:47:5c:c7:83:2a:8b:14:54:1e:39:ee:
         db:69:5b:ae:05:42:76:c0:7d:97:56:d1:1f:50:3a:3f:cb:57:
         82:7e:e0:60:6d:8c:48:05:3d:bb:73:70:2e:82:bb:14:2d:1c:
         e4:ad:d3:7c:11:eb:8f:29:4e:7c:a3:3d:86:82:a4:61:c3:36:
         8e:9a:af:d8:55:ca:09:23:bb:f9:92:40:24:0d:62:7e:40:8a:
         3d:df:a6:1b:cb:5e:1b:4a:85:76:fe:17:9b:b4:dc:52:5e:e8:
         f8:23:94:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 16:34:32 2024 by rpki-client on console-fra.rpki-client.org