Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.mft
File:                     uAcN_Ffq4OvoruS7XJHQar0cpxo.mft (raw, json)
Hash identifier:          rsNzWi1+SMg1Rc5tFMI30dh+EiISjZdxoj1BpGuMSMk=
Subject key identifier:   75:BA:DB:EC:B0:D2:3C:DB:83:4D:11:B5:CC:7F:12:55:87:61:BC:3E
Authority key identifier: B8:07:0D:FC:57:EA:E0:EB:E8:AE:E4:BB:5C:91:D0:6A:BD:1C:A7:1A
Certificate issuer:       /CN=A9196977/serialNumber=B8070DFC57EAE0EBE8AEE4BB5C91D06ABD1CA71A
Certificate serial:       053A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uAcN_Ffq4OvoruS7XJHQar0cpxo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.mft
Manifest number:          0533
Signing time:             Fri 31 May 2024 01:32:10 +0000
Manifest this update:     Fri 31 May 2024 01:32:10 +0000
Manifest next update:     Fri 07 Jun 2024 01:32:10 +0000
Files and hashes:         1: uAcN_Ffq4OvoruS7XJHQar0cpxo.crl (hash: vqrvKPlb2VfwdMrsUNnv8OI2zHBReseNntg0DM6Kx7o=)
                          2: BAC6FF88707811ED8BBDE80AC4F9AE02.roa (hash: iewlmQHKmtL9g9iAwygdncFQbz6yYvgxh4ytXfZu5xM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.crl
                          rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uAcN_Ffq4OvoruS7XJHQar0cpxo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:32:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1338 (0x53a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196977/serialNumber=B8070DFC57EAE0EBE8AEE4BB5C91D06ABD1CA71A
        Validity
            Not Before: May 31 01:32:10 2024 GMT
            Not After : Jun  7 01:32:10 2024 GMT
        Subject: CN=6659289a-824d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b8:44:7f:cc:5b:2f:1f:7e:66:99:99:56:a2:
                    e0:12:3b:de:e4:cc:35:36:8e:5b:a1:4f:64:6c:46:
                    9b:c8:a9:4e:84:1f:e3:1c:fa:2a:e3:7e:70:e5:f6:
                    12:94:47:88:be:57:fe:fc:8e:a6:20:82:1d:42:7c:
                    0f:78:3d:c4:f0:c0:4a:b5:25:77:5a:be:a6:22:0c:
                    25:5f:84:64:f0:61:b9:0c:81:2a:02:50:80:bd:69:
                    f4:83:5d:e4:11:aa:f0:75:97:41:82:bc:3c:a4:ba:
                    df:d0:ae:41:85:13:e4:99:61:3f:81:57:e8:6d:1e:
                    f9:7b:ee:e8:9b:b7:03:44:94:c2:8f:d7:f3:e3:d7:
                    a6:5f:b2:ac:43:ed:db:5a:6a:9a:1b:5c:55:39:bd:
                    3f:a2:18:7c:5c:75:26:bd:74:35:63:60:18:5d:de:
                    6b:c7:18:24:e2:b2:a0:b8:88:65:a0:4c:56:5b:da:
                    a0:d4:f9:26:fe:41:e3:4f:57:63:be:50:71:30:b2:
                    0b:af:90:82:3c:b9:dd:67:7e:da:a0:ca:0a:e7:eb:
                    a3:ff:fa:f4:eb:ef:fc:a5:50:02:4f:00:85:86:e8:
                    ca:ed:70:92:45:02:f6:85:67:7c:3c:9a:b7:2a:19:
                    ba:5a:a3:dd:a4:2c:5c:80:34:41:66:06:e4:21:dc:
                    ed:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BA:DB:EC:B0:D2:3C:DB:83:4D:11:B5:CC:7F:12:55:87:61:BC:3E
            X509v3 Authority Key Identifier:
                keyid:B8:07:0D:FC:57:EA:E0:EB:E8:AE:E4:BB:5C:91:D0:6A:BD:1C:A7:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uAcN_Ffq4OvoruS7XJHQar0cpxo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:89:37:94:d2:78:f6:55:53:7e:e0:87:d8:1a:44:fb:33:64:
         48:61:5f:5f:4e:b1:8d:4b:62:33:e1:19:fb:c4:74:95:52:1d:
         68:cd:05:9d:b5:b2:04:71:86:c1:05:ff:6e:4a:1b:9c:79:a8:
         09:3c:4f:52:6f:14:32:0b:50:fd:ab:7c:10:47:e2:50:51:05:
         30:58:9a:e9:63:b3:54:eb:b4:25:a2:5c:61:15:95:e0:13:66:
         23:3d:f1:78:3b:f7:29:8c:a1:1f:44:8c:7d:47:69:47:fe:53:
         1e:62:37:23:13:7a:7a:34:cb:32:8c:2d:6a:76:74:ea:a6:84:
         2a:89:cf:ae:25:29:2a:c6:27:2c:60:d9:20:ce:ba:33:0c:4b:
         a6:b1:8c:8e:33:28:a3:75:25:8e:3e:22:5b:4e:cf:8d:c0:2d:
         08:3e:ec:53:c8:8a:3e:fc:eb:66:f7:b0:89:29:d8:2f:56:81:
         f0:a5:0a:08:41:63:fd:1c:16:99:d1:88:57:08:5f:3e:46:20:
         ce:ce:67:b7:48:80:a9:00:b8:86:fa:82:7b:60:df:1b:7b:ed:
         10:c8:12:7e:2f:ef:2e:e5:26:01:c2:72:d2:c6:1f:4f:2f:55:
         43:de:5f:71:f3:6f:16:34:a6:fb:c2:b5:35:ad:7a:50:11:a0:
         d0:68:5d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 02:50:46 2024 by rpki-client on console-fra.rpki-client.org