Manifest

$ rpki-client -vvf rpki.akrn.net/repo/AKRN/0/90884A3F57AC46FA63A71BD993E4E8AD788187AF.mft
File:                     90884A3F57AC46FA63A71BD993E4E8AD788187AF.mft (raw, json)
Hash identifier:          avUJWMFue0JBF9kLj+7KwnSdx12YiFWhMBLI6ZlxdAE=
Subject key identifier:   29:28:8E:FB:12:4C:0A:13:AB:3E:65:DA:38:F4:77:18:73:88:CE:87
Authority key identifier: 90:88:4A:3F:57:AC:46:FA:63:A7:1B:D9:93:E4:E8:AD:78:81:87:AF
Certificate issuer:       /CN=A916C75D0000/serialNumber=90884A3F57AC46FA63A71BD993E4E8AD788187AF
Certificate serial:       657AE75C3B34CDEC2683CA0FFCDD591C05D4AE33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIhKP1esRvpjpxvZk-TorXiBh68.cer
Subject info access:      rsync://rpki.akrn.net/repo/AKRN/0/90884A3F57AC46FA63A71BD993E4E8AD788187AF.mft
Manifest number:          05CD
Signing time:             Mon 20 May 2024 03:00:00 +0000
Manifest this update:     Mon 20 May 2024 02:55:00 +0000
Manifest next update:     Tue 21 May 2024 03:00:00 +0000
Files and hashes:         1: 323430373a636463303a656666663a3a2f34382d3438203d3e20313339323939.roa (hash: B5NEWkwR0yS/6298bmWpvkhprAyXeahKdOoffRebZLg=)
                          2: 323430373a636463303a633031303a3a2f34342d3438203d3e20313438393832.roa (hash: MqebpH/qL4mH8tyyEEmBXD6OqEOYyGelu1HtSh13Ulw=)
                          3: 3130332e3137322e34302e302f32332d3234203d3e203338313336.roa (hash: FUVKsMCJl3ocOz6Dz/uCI4VUDqInotrLV40crKncjh4=)
                          4: 323430373a636463303a3a2f33322d3438203d3e203338313336.roa (hash: 0/KlX6t9hwoIHUyKnJX/v0U9NMrynFZmZ1/n+MFour0=)
                          5: 323430373a636463303a3a2f33322d3438203d3e20393833.roa (hash: RWCUO5fal31CMYz/lYbX+KrTL5/mo7XCEzfmHA4TWoU=)
                          6: 3130332e3137322e34302e302f32332d3234203d3e20393833.roa (hash: SJTu1mXSz70g4MIdW5PrOQG5Hx04fQN0Z5SFTd7CdOo=)
                          7: 90884A3F57AC46FA63A71BD993E4E8AD788187AF.crl (hash: mFGvlJ7nYK8Ynm7Cx3VKa3MLJ9tddc9hBF10387F65E=)

Validation:               OK
Signature path:           rsync://rpki.akrn.net/repo/AKRN/0/90884A3F57AC46FA63A71BD993E4E8AD788187AF.crl
                          rsync://rpki.akrn.net/repo/AKRN/0/90884A3F57AC46FA63A71BD993E4E8AD788187AF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIhKP1esRvpjpxvZk-TorXiBh68.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 May 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:7a:e7:5c:3b:34:cd:ec:26:83:ca:0f:fc:dd:59:1c:05:d4:ae:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C75D0000/serialNumber=90884A3F57AC46FA63A71BD993E4E8AD788187AF
        Validity
            Not Before: May 20 02:55:00 2024 GMT
            Not After : May 27 03:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:dd:cc:83:bb:3d:66:8f:17:ce:41:c4:2b:70:
                    3c:b6:88:a1:01:8f:27:f1:4b:25:7f:2b:8a:bd:eb:
                    cc:7a:58:61:12:c5:25:d1:95:cc:8f:72:df:19:e0:
                    50:47:1f:aa:57:67:a5:26:bc:f5:01:64:8f:85:f9:
                    7b:fb:6b:45:cb:2d:01:bb:f4:93:ac:27:5d:a4:16:
                    2e:12:bb:26:da:0c:33:37:f1:6c:8e:b8:eb:3f:42:
                    cb:7b:d9:53:d5:01:19:f9:b8:31:82:04:2c:a9:22:
                    fa:15:63:3c:57:2d:41:95:6f:8a:08:26:bc:da:95:
                    e3:dc:9f:05:85:a1:a8:f3:49:9d:e8:a0:34:ef:10:
                    60:ee:e7:ee:2c:e0:ec:45:63:e5:d6:12:5c:65:98:
                    b3:a7:71:73:98:8a:83:3b:f4:1e:6a:d1:c1:83:d6:
                    6f:37:57:df:a1:69:a9:a0:7f:0f:df:c3:2e:fc:72:
                    77:5c:28:0d:2d:ad:6a:bd:8e:b3:3a:24:72:ea:f6:
                    f6:35:6b:dd:4d:dd:84:3d:db:34:0b:84:18:6c:bf:
                    72:70:7e:1e:e3:58:32:c8:f3:df:cd:75:23:9e:e9:
                    11:7c:85:a1:46:c6:b5:92:2f:bd:fe:8a:4f:4d:9c:
                    ba:d9:b5:95:71:8e:87:7f:f3:5a:ac:d3:80:36:77:
                    54:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:28:8E:FB:12:4C:0A:13:AB:3E:65:DA:38:F4:77:18:73:88:CE:87
            X509v3 Authority Key Identifier:
                keyid:90:88:4A:3F:57:AC:46:FA:63:A7:1B:D9:93:E4:E8:AD:78:81:87:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.akrn.net/repo/AKRN/0/90884A3F57AC46FA63A71BD993E4E8AD788187AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIhKP1esRvpjpxvZk-TorXiBh68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.akrn.net/repo/AKRN/0/90884A3F57AC46FA63A71BD993E4E8AD788187AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:90:6e:1c:2e:54:30:37:c6:14:b7:73:80:20:74:45:f0:9a:
         1b:34:a1:e5:44:43:6d:f7:1d:8a:db:7b:92:0d:80:8a:f5:14:
         b2:39:3d:7a:16:1d:a9:c6:a0:38:51:43:d5:75:3b:3f:64:0a:
         2c:f9:ba:7c:98:c7:2c:34:7b:73:46:6d:ba:e7:7a:6b:89:aa:
         84:b5:08:bc:47:20:e5:5f:51:be:9e:d1:6a:48:28:98:b2:43:
         be:14:82:c6:61:98:37:29:be:dc:91:3c:46:a9:e2:39:f9:c3:
         e6:ff:44:ad:7a:6f:ca:22:7c:d4:9e:fb:46:37:f5:5a:bf:51:
         12:bc:d3:7a:d3:da:70:bb:a8:86:5a:1b:a3:4f:70:1c:59:1c:
         71:8b:23:12:5f:1e:67:3f:8f:e6:5c:6a:80:27:7b:bf:ef:c1:
         cc:6f:4d:8a:b5:b3:33:cc:af:0e:79:7e:d0:d8:7a:75:f0:7a:
         f3:58:98:da:a4:b4:70:cc:61:9f:db:33:b6:89:7a:ed:6e:a9:
         81:a6:fc:da:91:50:b3:93:4a:fd:ef:70:09:ef:f3:cb:a6:a1:
         8e:49:06:1a:48:22:46:31:bf:70:8d:a3:13:2d:73:49:1b:47:
         c1:e9:02:56:60:34:67:dd:54:ac:83:ab:f5:85:a7:fe:55:e0:
         03:13:50:00
-----BEGIN CERTIFICATE-----
MIIG/jCCBeagAwIBAgIUZXrnXDs0zewmg8oP/N1ZHAXUrjMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNkM3NUQwMDAwMTEwLwYDVQQFEyg5MDg4NEEzRjU3
QUM0NkZBNjNBNzFCRDk5M0U0RThBRDc4ODE4N0FGMB4XDTI0MDUyMDAyNTUwMFoX
DTI0MDUyNzAzMDAwMFowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBDM0REQ0M4M0JCM0Q2NjhGMTdDRTQxQzQyQjcwM0NCNjg4QTEwMThGMjdG
MTRCMjU3RjJCOEFCREVCQ0M3QTU4NjExMkM1MjVEMTk1Q0M4RjcyREYxOUUwNTA0
NzFGQUE1NzY3QTUyNkJDRjUwMTY0OEY4NUY5N0JGQjZCNDVDQjJEMDFCQkY0OTNB
QzI3NURBNDE2MkUxMkJCMjZEQTBDMzMzN0YxNkM4RUI4RUIzRjQyQ0I3QkQ5NTNE
NTAxMTlGOUI4MzE4MjA0MkNBOTIyRkExNTYzM0M1NzJENDE5NTZGOEEwODI2QkNE
QTk1RTNEQzlGMDU4NUExQThGMzQ5OURFOEEwMzRFRjEwNjBFRUU3RUUyQ0UwRUM0
NTYzRTVENjEyNUM2NTk4QjNBNzcxNzM5ODhBODMzQkY0MUU2QUQxQzE4M0Q2NkYz
NzU3REZBMTY5QTlBMDdGMEZERkMzMkVGQzcyNzc1QzI4MEQyREFENkFCRDhFQjMz
QTI0NzJFQUY2RjYzNTZCREQ0REREODQzRERCMzQwQjg0MTg2Q0JGNzI3MDdFMUVF
MzU4MzJDOEYzREZDRDc1MjM5RUU5MTE3Qzg1QTE0NkM2QjU5MjJGQkRGRThBNEY0
RDlDQkFEOUI1OTU3MThFODc3RkYzNUFBQ0QzODAzNjc3NTQ5NzAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD3cyDuz1mjxfOQcQrcDy2
iKEBjyfxSyV/K4q968x6WGESxSXRlcyPct8Z4FBHH6pXZ6UmvPUBZI+F+Xv7a0XL
LQG79JOsJ12kFi4SuybaDDM38WyOuOs/Qst72VPVARn5uDGCBCypIvoVYzxXLUGV
b4oIJrzalePcnwWFoajzSZ3ooDTvEGDu5+4s4OxFY+XWElxlmLOncXOYioM79B5q
0cGD1m83V9+haamgfw/fwy78cndcKA0trWq9jrM6JHLq9vY1a91N3YQ92zQLhBhs
v3Jwfh7jWDLI89/NdSOe6RF8haFGxrWSL73+ik9NnLrZtZVxjod/81qs04A2d1SX
AgMBAAGjggH1MIIB8TAdBgNVHQ4EFgQUKSiO+xJMChOrPmXaOPR3GHOIzocwHwYD
VR0jBBgwFoAUkIhKP1esRvpjpxvZk+TorXiBh68wDgYDVR0PAQH/BAQDAgeAMF8G
A1UdHwRYMFYwVKBSoFCGTnJzeW5jOi8vcnBraS5ha3JuLm5ldC9yZXBvL0FLUk4v
MC85MDg4NEEzRjU3QUM0NkZBNjNBNzFCRDk5M0U0RThBRDc4ODE4N0FGLmNybDB+
BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5u
ZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9r
SWhLUDFlc1J2cGpweHZaay1Ub3JYaUJoNjguY2VyMGoGCCsGAQUFBwELBF4wXDBa
BggrBgEFBQcwC4ZOcnN5bmM6Ly9ycGtpLmFrcm4ubmV0L3JlcG8vQUtSTi8wLzkw
ODg0QTNGNTdBQzQ2RkE2M0E3MUJEOTkzRTRFOEFENzg4MTg3QUYubWZ0MBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw
BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAMkG4cLlQwN8YUt3OAIHRF8JobNKHlRENt9x2K23uSDYCK9RSyOT16Fh2pxqA4
UUPVdTs/ZAos+bp8mMcsNHtzRm2653priaqEtQi8RyDlX1G+ntFqSCiYskO+FILG
YZg3Kb7ckTxGqeI5+cPm/0Stem/KInzUnvtGN/Vav1ESvNN609pwu6iGWhujT3Ac
WRxxiyMSXx5nP4/mXGqAJ3u/78HMb02KtbMzzK8OeX7Q2Hp18HrzWJjapLRwzGGf
2zO2iXrtbqmBpvzakVCzk0r973AJ7/PLpqGOSQYaSCJGMb9wjaMTLXNJG0fB6QJW
YDRn3VSsg6v1haf+VeADE1AA
-----END CERTIFICATE-----
Generated at Mon May 20 03:21:42 2024 by rpki-client on console-ams.rpki-client.org