Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.mft
File:                     _dJQeCIYPOgHWUGdVlQGBqJIa0s.mft (raw, json)
Hash identifier:          ogqB9KKUWeNk7R9R1tMMH4V16RGxNgIRl4R8XEGrL78=
Subject key identifier:   34:8D:55:BB:CC:AE:06:B0:EC:32:0E:02:F4:C6:DD:2F:C1:4B:5E:69
Authority key identifier: FD:D2:50:78:22:18:3C:E8:07:59:41:9D:56:54:06:06:A2:48:6B:4B
Certificate issuer:       /CN=A917647E/serialNumber=FDD2507822183CE80759419D56540606A2486B4B
Certificate serial:       076C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dJQeCIYPOgHWUGdVlQGBqJIa0s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.mft
Manifest number:          0758
Signing time:             Fri 26 Apr 2024 22:18:50 +0000
Manifest this update:     Fri 26 Apr 2024 22:18:49 +0000
Manifest next update:     Fri 03 May 2024 22:18:49 +0000
Files and hashes:         1: _dJQeCIYPOgHWUGdVlQGBqJIa0s.crl (hash: wfUDB5ua5/YUqnw2tHSAulXy9Si6iIyu0LkzJMjC0Fg=)
                          2: FD18A8AAD97B11EAB138A00FC4F9AE02.roa (hash: UCRF9vFZOXDywqIcY63HA/AM4r67IbCjt0JaNaKzoO0=)
                          3: 5818925E826A11ECBF45DE23C4F9AE02.roa (hash: CPnY42gbKyJm0pyw61Iyw2VSVw6JGR1oNKGpe5n/Q4Y=)
                          4: A69B6B8C082411EDADBE0C60C4F9AE02.roa (hash: uhvdIT61yIc9o7e64Pv3zv/kT2auCvPuDdRfyfAkByk=)
                          5: BFECDAAC803F11EC8394C23AC4F9AE02.roa (hash: Jci3q3yx4OXKeWnvpmqCVogYDhCNTFCRb58B8IgkQxQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.crl
                          rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dJQeCIYPOgHWUGdVlQGBqJIa0s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 22:18:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1900 (0x76c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917647E/serialNumber=FDD2507822183CE80759419D56540606A2486B4B
        Validity
            Not Before: Apr 26 22:18:49 2024 GMT
            Not After : May  3 22:18:49 2024 GMT
        Subject: CN=662c284a-c829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:46:ce:13:5f:23:40:5b:e5:4a:50:dd:96:0d:
                    35:ed:64:50:45:71:b8:53:3a:97:a4:04:21:1f:3c:
                    c3:1e:b6:50:5c:6a:90:f8:38:07:10:09:c9:fd:bb:
                    b4:87:4b:82:13:74:0b:da:32:bc:0a:b6:a4:4a:91:
                    c9:72:19:52:a8:d5:6b:c0:d6:98:66:30:0d:5a:00:
                    cc:9d:f8:fa:f6:f0:f8:6b:06:fa:e5:95:8f:84:39:
                    de:cd:84:2e:10:95:a2:e3:3e:75:04:93:a5:ec:a3:
                    de:7a:b9:31:80:78:9c:3d:9b:c0:2e:ff:94:d3:e7:
                    93:99:13:b8:59:9c:fd:1f:46:d3:94:b1:96:6e:dc:
                    a8:8e:11:a4:6b:fa:76:75:a6:e3:83:b7:e8:cf:04:
                    4a:fa:d9:36:08:05:e0:70:04:c6:38:fb:ac:de:eb:
                    8c:53:00:78:3b:ed:b4:11:aa:dd:99:c3:38:61:3e:
                    c9:52:ae:30:fc:60:9b:26:33:0e:5a:3f:3a:27:c4:
                    df:62:c9:9f:fe:e7:fc:61:8a:7f:60:0b:ed:ee:c9:
                    e6:63:78:5b:cd:4d:80:7f:13:2f:5b:a8:21:97:eb:
                    5a:d5:2d:b9:80:28:d3:3c:e4:26:b4:88:de:e4:56:
                    f5:15:63:14:cd:c6:5f:c4:2b:05:2a:88:ee:80:60:
                    67:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:8D:55:BB:CC:AE:06:B0:EC:32:0E:02:F4:C6:DD:2F:C1:4B:5E:69
            X509v3 Authority Key Identifier:
                keyid:FD:D2:50:78:22:18:3C:E8:07:59:41:9D:56:54:06:06:A2:48:6B:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dJQeCIYPOgHWUGdVlQGBqJIa0s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:17:09:76:44:3c:72:ec:df:76:38:40:c3:bc:ca:69:1b:55:
         b9:6f:44:7d:ac:99:ec:fb:be:ad:3b:55:e5:21:70:b2:97:dd:
         d6:93:d1:f6:56:ad:c2:30:db:54:8f:f9:3f:75:4a:7d:a9:05:
         d3:55:f2:99:19:b7:a8:1a:1d:d0:17:45:a1:ae:92:c6:86:bc:
         d4:ed:f5:df:a4:44:70:3d:f2:2b:f9:de:85:3f:de:9c:3a:32:
         2c:cc:53:09:70:65:f8:3a:d9:7c:cd:8a:50:54:fc:39:1c:cd:
         bf:9f:0d:02:0b:e2:6f:79:e1:d4:fe:78:2f:76:ed:2a:ae:fa:
         4c:65:3a:94:b4:db:7b:c3:93:42:bd:cb:a4:a4:d4:c3:58:b2:
         98:75:cf:ad:fa:44:c6:18:bf:b1:dd:67:80:4a:c9:5f:6e:eb:
         a7:e8:83:9e:b6:91:c6:9f:bf:05:05:66:4d:ce:98:d3:74:fe:
         4f:cc:5a:b3:72:b2:22:2c:43:0e:c4:62:1c:b0:af:8c:b7:bf:
         b3:66:61:50:53:ae:3e:8c:e1:94:69:1e:56:cb:30:41:a2:5e:
         a9:8e:cc:ab:da:06:6f:58:b6:ac:c2:57:fa:25:e2:ec:51:ed:
         7d:2d:d1:d3:19:f6:07:f5:92:c8:a2:01:8e:e1:ce:fd:85:ef:
         92:23:17:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 15:50:58 2024 by rpki-client on console-fra.rpki-client.org