Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.mft
File:                     VCQU--P_Iyqsxi5z3cN-J1KC7Uo.mft (raw, json)
Hash identifier:          EFcYmE1Yhnz5DpzxujRtrKYRyLhrudWZYB9EneIfVvY=
Subject key identifier:   4B:66:06:96:05:A5:2C:A8:91:CE:D0:DB:5F:C1:46:B7:91:27:59:43
Authority key identifier: 54:24:14:FB:E3:FF:23:2A:AC:C6:2E:73:DD:C3:7E:27:52:82:ED:4A
Certificate issuer:       /CN=A917295C/serialNumber=542414FBE3FF232AACC62E73DDC37E275282ED4A
Certificate serial:       0651
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.mft
Manifest number:          064A
Signing time:             Fri 18 Jul 2025 22:56:08 +0000
Manifest this update:     Fri 18 Jul 2025 22:56:08 +0000
Manifest next update:     Fri 25 Jul 2025 22:56:08 +0000
Files and hashes:         1: VCQU--P_Iyqsxi5z3cN-J1KC7Uo.crl (hash: zrJaJkUNnJTm5tdvRsSQiHRuj27XX8Yjtt9NeKti7K4=)
                          2: AE810C76CC8811EC85E73563C4F9AE02.roa (hash: KY/NWRg0nkZbgcah/UEEpqWN9t5PCkRr4Ny3AGbpHGs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.crl
                          rsync://rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 22:56:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1617 (0x651)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917295C, serialNumber=542414FBE3FF232AACC62E73DDC37E275282ED4A
        Validity
            Not Before: Jul 18 22:56:08 2025 GMT
            Not After : Jul 25 22:56:08 2025 GMT
        Subject: CN=687ad108-e4bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e0:09:30:3f:75:60:7f:a8:cd:43:4c:b4:1f:
                    91:61:83:f0:9c:c5:3d:6b:99:44:3c:f6:bc:61:11:
                    69:7e:fc:c0:bb:8a:86:e7:a1:93:0e:70:8a:22:19:
                    ca:b1:d2:e6:7b:c4:54:54:cb:6d:bf:f1:de:11:4e:
                    74:ea:56:e3:e6:6f:82:07:ac:59:16:c8:68:5c:78:
                    2d:88:96:96:bb:f7:90:93:bc:b9:6f:3a:d9:cc:a2:
                    88:0b:03:1f:5a:ec:32:28:ec:a6:dd:1f:79:21:13:
                    16:68:86:3a:51:ad:24:a1:d3:eb:f2:a9:93:ce:82:
                    e7:41:45:0f:8e:45:7c:53:a2:91:36:fc:e0:f8:5f:
                    6d:12:4f:ce:5a:38:d0:a5:d3:fe:cb:2e:d9:76:16:
                    5b:94:08:63:95:c0:a5:23:83:8b:e3:70:b0:eb:04:
                    9d:88:da:c4:d7:2e:51:91:73:70:05:2e:81:85:a0:
                    8d:1e:e6:96:3e:f2:81:8a:4f:c2:bc:fd:00:54:db:
                    6c:fb:39:6e:a6:8a:22:20:91:68:76:53:ee:f4:56:
                    b4:8b:5d:70:fe:39:2a:d3:57:40:2f:15:a3:72:6c:
                    57:7a:83:ab:34:88:74:e4:b9:3c:ea:96:0e:0f:2f:
                    cf:73:ea:e2:66:74:44:7f:74:33:76:a0:52:f5:a3:
                    56:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:66:06:96:05:A5:2C:A8:91:CE:D0:DB:5F:C1:46:B7:91:27:59:43
            X509v3 Authority Key Identifier:
                keyid:54:24:14:FB:E3:FF:23:2A:AC:C6:2E:73:DD:C3:7E:27:52:82:ED:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:22:6f:eb:5c:ce:e4:88:f9:12:7c:95:b7:c1:ec:69:72:c6:
         90:27:20:ed:69:4f:3c:ba:e5:33:18:f2:97:39:3f:23:8e:f1:
         a5:b4:e9:3f:41:a5:9d:29:d2:42:b3:61:03:3c:74:7d:55:8b:
         ca:96:0b:2a:72:8e:f2:d4:f3:ac:e4:a5:c5:0a:5e:25:26:c9:
         aa:08:40:19:75:ee:7b:66:d5:de:53:74:11:0f:0a:7e:3a:79:
         47:f5:21:a4:1c:58:aa:a0:83:9e:5f:da:a1:4d:ae:c5:6a:81:
         3b:fc:ad:fe:0a:38:65:cc:e4:1f:6c:bb:bb:05:b7:dc:55:0b:
         ed:ac:b3:18:76:b5:47:e1:e4:c2:cb:3a:39:94:13:f8:19:b4:
         0f:55:41:db:9c:fd:93:7e:bd:30:e5:0f:d9:2c:77:c4:7e:21:
         b7:c8:a5:14:75:90:30:66:a9:c7:be:d5:26:5a:19:66:1f:4e:
         05:8b:6a:6d:7c:ec:41:ca:73:7b:fa:ee:6b:87:b3:dd:84:f4:
         0a:bd:43:01:89:cf:27:0f:e5:92:10:c0:91:97:e1:18:f9:f4:
         6c:af:e1:c2:4a:68:d3:47:18:0a:9b:41:de:d4:e9:06:22:6d:
         2c:31:de:a5:fd:56:f9:f8:c4:4c:33:54:25:c6:44:ec:b1:fa:
         9a:6d:c5:cf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzI5NUMxMTAvBgNVBAUTKDU0MjQxNEZCRTNGRjIzMkFBQ0M2MkU3M0REQzM3RTI3
NTI4MkVENEEwHhcNMjUwNzE4MjI1NjA4WhcNMjUwNzI1MjI1NjA4WjAYMRYwFAYD
VQQDEw02ODdhZDEwOC1lNGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwuAJMD91YH+ozUNMtB+RYYPwnMU9a5lEPPa8YRFpfvzAu4qG56GTDnCKIhnK
sdLme8RUVMttv/HeEU506lbj5m+CB6xZFshoXHgtiJaWu/eQk7y5bzrZzKKICwMf
WuwyKOym3R95IRMWaIY6Ua0kodPr8qmTzoLnQUUPjkV8U6KRNvzg+F9tEk/OWjjQ
pdP+yy7ZdhZblAhjlcClI4OL43Cw6wSdiNrE1y5RkXNwBS6BhaCNHuaWPvKBik/C
vP0AVNts+zlupooiIJFodlPu9Fa0i11w/jkq01dALxWjcmxXeoOrNIh05Lk86pYO
Dy/Pc+riZnREf3QzdqBS9aNWIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEtmBpYF
pSyokc7Q21/BRreRJ1lDMB8GA1UdIwQYMBaAFFQkFPvj/yMqrMYuc93DfidSgu1K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk1Qy8xRjIwNzRDODk2
ODIxMUVCQTM5OTExNUJDNEY5QUUwMi9WQ1FVLS1QX0l5cXN4aTV6M2NOLUoxS0M3
VW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZDUVUtLVBfSXlxc3hpNXozY04tSjFLQzdVby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
Mjk1Qy8xRjIwNzRDODk2ODIxMUVCQTM5OTExNUJDNEY5QUUwMi9WQ1FVLS1QX0l5
cXN4aTV6M2NOLUoxS0M3VW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCCIm/rXM7kiPkSfJW3wexpcsaQJyDtaU88uuUzGPKXOT8jjvGltOk/
QaWdKdJCs2EDPHR9VYvKlgsqco7y1POs5KXFCl4lJsmqCEAZde57ZtXeU3QRDwp+
OnlH9SGkHFiqoIOeX9qhTa7FaoE7/K3+CjhlzOQfbLu7BbfcVQvtrLMYdrVH4eTC
yzo5lBP4GbQPVUHbnP2Tfr0w5Q/ZLHfEfiG3yKUUdZAwZqnHvtUmWhlmH04Fi2pt
fOxBynN7+u5rh7PdhPQKvUMBic8nD+WSEMCRl+EY+fRsr+HCSmjTRxgKm0He1OkG
Im0sMd6l/Vb5+MRMM1QlxkTssfqabcXP
-----END CERTIFICATE-----
Generated at Sun Jul 20 15:10:48 2025 by rpki-client