Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft
File:                     0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft (raw, json)
Hash identifier:          DwPY2+35/SDXXyTxmiJKvsNCoNVWFl5s8ce+uP53di4=
Subject key identifier:   9D:72:84:95:73:E8:E7:D2:B2:E4:D5:CC:18:3E:2E:B8:17:9D:BE:B5
Authority key identifier: D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC
Certificate issuer:       /CN=A916B33E/serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
Certificate serial:       17B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft
Manifest number:          1759
Signing time:             Tue 26 Mar 2024 17:00:59 +0000
Manifest this update:     Tue 26 Mar 2024 17:00:58 +0000
Manifest next update:     Tue 02 Apr 2024 17:00:58 +0000
Files and hashes:         1: 0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl (hash: SvWkqJ7mGr4fAYcvxjSkPJIM3wV5mbY/r9t1IP13Gvw=)
                          2: B6928054843011EAB4270B83C4F9AE02.roa (hash: IvieDBIWYD7SEWEg8q7DQzhCW5pSv0jVUWMmKbpL9M0=)
                          3: A108D60CF92E11EA8946AD6AC4F9AE02.roa (hash: KJsZzW4EFAQDdM8B6E3IlGr5JYBkqVAvXOg7Q+GRy4c=)
                          4: A084D2B2F92E11EA8946AD6AC4F9AE02.roa (hash: ZMGcpYpyDrx5Nlm3hmxSXoAmdIiGiv7MUzbtEfqvlWM=)
                          5: B5629336843011EAB4270B83C4F9AE02.roa (hash: X614Nr7ujJ8UnBOJIaOHUT2BrUgmubnzmFfczIemC/w=)
                          6: E3ED0E12882611EAA5182C45C4F9AE02.roa (hash: a+0ggFHPecRkSli+CpwWZcbSrBDtGI7gx9QcvnxtIVc=)
                          7: B728544E843011EAB4270B83C4F9AE02.roa (hash: YfDmB/QaBB/8X0tfxFe8aFOSIeGyaNiqnqcAalVs0kc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl
                          rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 02 Apr 2024 17:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6073 (0x17b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B33E/serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
        Validity
            Not Before: Mar 26 17:00:58 2024 GMT
            Not After : Apr  2 17:00:58 2024 GMT
        Subject: CN=6602ff4a-4a0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:99:65:89:a9:60:9b:ea:f0:e2:11:5f:c4:5a:
                    73:61:03:e4:f7:50:c9:5b:05:52:24:1a:ad:e3:bc:
                    87:39:39:57:2e:51:59:13:77:a7:90:bb:c3:1a:1a:
                    1f:a5:ff:eb:b6:07:13:96:c7:11:01:40:65:6a:e3:
                    82:a8:dd:2c:1b:ff:76:cb:39:05:5a:98:14:ee:9a:
                    4e:ee:b5:1a:e1:13:56:0c:89:b9:a9:22:c7:16:6d:
                    ac:b4:b4:f9:c8:9c:66:89:ea:ff:a6:71:c4:9e:42:
                    4b:cc:02:8d:8d:19:db:66:99:90:d4:a2:10:e9:78:
                    15:6f:a5:31:8d:f3:95:7d:79:fa:8d:01:de:08:5d:
                    0f:97:49:de:a4:ac:c9:12:a5:5f:8e:41:ae:e9:c0:
                    97:6f:43:b2:35:57:ff:fc:01:b2:5a:1f:ae:c0:78:
                    45:a3:65:c5:db:25:44:da:0e:a7:3c:66:eb:84:3c:
                    4a:4e:e5:79:21:da:06:81:e5:e1:e2:a5:78:f6:3d:
                    78:5a:d1:f9:01:2c:e5:d9:6b:dc:d8:0a:b8:5c:36:
                    a4:8b:f7:a3:08:1b:4d:00:f8:53:64:76:2a:db:43:
                    00:20:db:fb:e1:08:3c:f8:40:9e:c2:36:56:9f:f1:
                    04:15:59:6b:f4:19:70:d6:58:f3:90:a8:b6:42:02:
                    51:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:72:84:95:73:E8:E7:D2:B2:E4:D5:CC:18:3E:2E:B8:17:9D:BE:B5
            X509v3 Authority Key Identifier:
                keyid:D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:39:75:77:f4:fe:a9:31:a0:cf:f5:9c:34:a4:51:04:be:8b:
         a7:0d:ab:c7:29:ce:2e:7f:15:64:18:32:32:6a:2c:2c:a7:ba:
         a0:9e:a2:d6:09:f7:53:65:10:92:81:ed:95:90:d2:5c:0a:96:
         e6:de:56:7d:22:ed:78:ba:e4:d7:ed:06:88:eb:e2:22:57:03:
         62:9f:ef:7b:cf:cf:c6:e1:76:e6:89:d0:c4:9a:63:59:91:09:
         19:ce:d8:58:f6:27:2f:12:6e:5a:9e:a9:61:07:41:18:56:76:
         8f:4e:d9:35:ce:e0:a6:d9:33:6b:80:16:e2:58:89:78:d7:08:
         a0:7a:e5:8d:b3:a3:e7:0e:48:6f:54:6b:c0:bf:1b:73:1c:32:
         37:49:00:f6:0c:c1:3a:36:42:c9:20:d6:1c:62:dd:99:3e:1d:
         e5:4e:fa:6e:95:0f:13:01:6e:48:81:c9:5d:84:3b:5b:53:56:
         02:57:98:e8:0f:8c:6f:6b:a7:9e:4c:3f:ba:49:f8:09:fc:e9:
         e5:10:64:63:c2:43:59:ac:7f:32:eb:fb:18:3a:bc:d4:e1:03:
         63:6d:2c:35:dc:77:6a:2d:29:de:be:d2:1b:44:0c:28:f8:2a:
         ba:6d:f5:f5:ea:93:62:2e:12:02:02:43:b0:ca:28:40:67:58:
         21:08:6f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 26 18:02:43 2024 by rpki-client on console-ams.rpki-client.org