Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3A26/561D9224929C11EB957A5D5DC4F9AE02/vq_Hury3142eGQgg9ussfyi7XYg.mft
File:                     vq_Hury3142eGQgg9ussfyi7XYg.mft (raw, json)
Hash identifier:          qo/at2b7XDtiGuvFfj5XyUXzUZATEh0wM99/KGUymhU=
Subject key identifier:   B3:E6:70:12:A2:DE:42:6D:F2:01:CE:9D:FA:24:48:AB:51:DF:79:77
Authority key identifier: BE:AF:C7:BA:BC:B7:D7:8D:9E:19:08:20:F6:EB:2C:7F:28:BB:5D:88
Certificate issuer:       /CN=A91D3A26/serialNumber=BEAFC7BABCB7D78D9E190820F6EB2C7F28BB5D88
Certificate serial:       061D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vq_Hury3142eGQgg9ussfyi7XYg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3A26/561D9224929C11EB957A5D5DC4F9AE02/vq_Hury3142eGQgg9ussfyi7XYg.mft
Manifest number:          0617
Signing time:             Fri 28 Mar 2025 23:02:35 +0000
Manifest this update:     Fri 28 Mar 2025 23:02:35 +0000
Manifest next update:     Fri 04 Apr 2025 23:02:35 +0000
Files and hashes:         1: vq_Hury3142eGQgg9ussfyi7XYg.crl (hash: oc9LNDn0pSzLUwQaBdfaFIHSOM6zlrS6bpQNyKHQrDg=)
                          2: 63D1B4C0929E11EBABC48F60C4F9AE02.roa (hash: U7lR5/SoTUzZ7N5QnHfDmyPvzjrTN8A2EyZWFjyTSno=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3A26/561D9224929C11EB957A5D5DC4F9AE02/vq_Hury3142eGQgg9ussfyi7XYg.crl
                          rsync://rpki.apnic.net/member_repository/A91D3A26/561D9224929C11EB957A5D5DC4F9AE02/vq_Hury3142eGQgg9ussfyi7XYg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vq_Hury3142eGQgg9ussfyi7XYg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Apr 2025 23:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1565 (0x61d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3A26
        Validity
            Not Before: Mar 28 23:02:35 2025 GMT
            Not After : Apr  4 23:02:35 2025 GMT
        Subject: CN=67e72a8b-a71c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ba:c3:41:04:c1:90:53:b7:2b:fa:65:ec:d7:
                    fa:68:33:81:2e:6a:a3:3a:70:b9:3e:8d:67:c1:98:
                    fd:3e:56:c9:35:e6:8a:1e:2c:3d:12:b2:e5:c6:7d:
                    f5:8c:78:ec:2f:50:69:2c:69:10:dc:55:68:6c:26:
                    ae:f2:03:0e:21:40:66:62:7b:99:61:1e:cd:aa:73:
                    8a:e5:92:30:67:02:40:c8:86:76:03:92:11:03:a6:
                    b0:eb:b6:6d:6a:ab:e5:b7:37:4a:0f:a0:f4:8e:03:
                    e1:9b:74:24:34:2e:0a:d8:bd:10:51:a3:e0:d6:b6:
                    5d:e1:a3:c7:31:b1:43:b4:5f:91:a1:d1:eb:93:b2:
                    5a:a7:e5:a9:2b:f6:23:d3:ff:7d:af:f5:b4:33:5e:
                    cb:ae:8a:a5:27:00:b5:0a:d4:24:04:34:25:9c:15:
                    5c:e7:c9:86:94:31:55:19:6c:3a:d6:71:b6:52:02:
                    d9:58:8b:55:36:4b:b7:c0:38:fb:ad:e5:b7:05:d1:
                    46:82:dd:e2:4e:35:98:23:9b:8e:21:30:43:01:fa:
                    96:b9:2f:a0:de:7b:64:ee:0a:4c:7c:c7:01:2c:32:
                    dc:d8:09:a5:fe:81:a4:f1:f1:5c:9c:ba:f0:73:36:
                    78:a3:b3:b2:8e:06:38:72:ca:36:d9:7e:83:06:82:
                    f1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:E6:70:12:A2:DE:42:6D:F2:01:CE:9D:FA:24:48:AB:51:DF:79:77
            X509v3 Authority Key Identifier:
                keyid:BE:AF:C7:BA:BC:B7:D7:8D:9E:19:08:20:F6:EB:2C:7F:28:BB:5D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3A26/561D9224929C11EB957A5D5DC4F9AE02/vq_Hury3142eGQgg9ussfyi7XYg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vq_Hury3142eGQgg9ussfyi7XYg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3A26/561D9224929C11EB957A5D5DC4F9AE02/vq_Hury3142eGQgg9ussfyi7XYg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:b0:44:74:60:a7:36:18:0d:1d:f3:2d:9a:fd:71:d6:46:75:
         f8:b6:1a:d8:63:ce:53:25:66:51:52:f2:ae:69:62:db:a5:df:
         b6:7f:03:7f:a0:37:92:ca:e2:28:8c:6e:89:84:a9:e8:5f:d6:
         cb:65:22:bb:d5:0b:4f:1e:53:a4:7b:d0:01:8d:09:57:af:36:
         f3:f9:7d:25:5f:40:47:2d:0e:06:e7:7d:7d:ec:13:0f:ae:8c:
         3c:9a:e8:a7:ae:f5:27:97:3b:cf:8f:d6:4e:30:60:a8:03:72:
         df:89:9a:43:bd:c9:3d:20:39:c7:7e:39:c1:b9:4c:df:4c:ae:
         ca:eb:e5:2b:db:b2:f7:91:dc:86:61:a9:fa:4a:21:01:54:dd:
         4c:fc:9b:a5:35:f3:69:98:83:91:cb:c4:83:8b:48:bf:6d:b7:
         d3:48:4e:b2:90:ec:67:2e:38:f2:1e:bb:b2:ce:a4:9e:fc:35:
         91:1f:44:67:5f:e4:a6:e6:8f:86:ac:d6:ff:39:87:fd:95:9c:
         03:c2:0a:5a:3f:be:69:0c:6d:52:2d:5c:d2:14:23:4e:c2:54:
         93:f0:73:27:8e:50:e1:4d:4f:0f:5e:35:ce:35:a1:4d:73:95:
         19:f4:c0:a6:e2:d0:e6:86:7d:ac:53:29:ec:be:34:3a:63:ca:
         6b:cb:f9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:04:20 2025 by rpki-client