Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.mft
File:                     VCQU--P_Iyqsxi5z3cN-J1KC7Uo.mft (raw, json)
Hash identifier:          +66al8EJwxLEQxDr7+xo680iHRxwIvS4VNJXTl6KmJo=
Subject key identifier:   B4:AE:89:4C:F9:C1:A5:99:3C:87:A5:DD:05:9C:40:FA:6C:E9:B4:3D
Authority key identifier: 54:24:14:FB:E3:FF:23:2A:AC:C6:2E:73:DD:C3:7E:27:52:82:ED:4A
Certificate issuer:       /CN=A917295C/serialNumber=542414FBE3FF232AACC62E73DDC37E275282ED4A
Certificate serial:       0672
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.mft
Manifest number:          066B
Signing time:             Thu 18 Sep 2025 22:49:34 +0000
Manifest this update:     Thu 18 Sep 2025 22:49:34 +0000
Manifest next update:     Thu 25 Sep 2025 22:49:34 +0000
Files and hashes:         1: VCQU--P_Iyqsxi5z3cN-J1KC7Uo.crl (hash: esZEMJs1p/g9MPME8B+0Rly7gkMUzv8mO3iF5SVCQ3U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.crl
                          rsync://rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 22:49:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1650 (0x672)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917295C, serialNumber=542414FBE3FF232AACC62E73DDC37E275282ED4A
        Validity
            Not Before: Sep 18 22:49:34 2025 GMT
            Not After : Sep 25 22:49:34 2025 GMT
        Subject: CN=68cc8c7e-33c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:09:10:53:26:f5:49:5f:82:62:43:2f:e9:46:
                    4a:ee:3c:7f:ad:a8:1c:1f:05:5a:ea:f5:78:da:d4:
                    4a:f0:97:7e:11:91:e0:87:ec:e2:d6:d3:3c:6a:df:
                    11:cc:58:52:df:ba:7c:09:d6:f1:06:33:13:c4:93:
                    28:af:b6:b3:bb:22:b4:8d:87:21:e1:52:d1:1f:0f:
                    f3:1c:68:e3:d7:16:2f:53:a3:04:b4:49:63:33:11:
                    a1:2a:ae:bf:67:3f:b1:24:98:5a:48:9e:33:3f:8e:
                    f8:bd:36:a9:01:f6:0e:89:54:3e:18:39:22:70:4d:
                    6c:c7:0e:fe:68:0d:9a:e4:f8:52:42:e2:3c:f8:84:
                    8c:42:1c:a6:4f:df:81:1f:fe:6b:8f:8b:ca:ee:9b:
                    3d:de:92:b7:45:65:25:50:88:5b:1e:fa:d6:f9:7a:
                    dc:f4:1d:f9:81:35:86:15:9d:c8:c0:9b:55:37:80:
                    56:9d:c8:9a:b1:67:f5:16:81:63:d1:50:6f:4c:15:
                    43:39:ee:70:98:d8:fa:08:28:b4:d6:45:69:24:c6:
                    8b:82:dd:b5:27:c6:07:2f:23:6a:f6:bb:9e:64:49:
                    14:7c:2e:66:30:19:be:8d:ae:5a:43:06:ec:06:7d:
                    21:a7:d0:21:e2:02:99:13:8e:26:f9:51:7a:88:3a:
                    81:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:AE:89:4C:F9:C1:A5:99:3C:87:A5:DD:05:9C:40:FA:6C:E9:B4:3D
            X509v3 Authority Key Identifier:
                keyid:54:24:14:FB:E3:FF:23:2A:AC:C6:2E:73:DD:C3:7E:27:52:82:ED:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:26:75:c4:b0:4a:50:b2:88:49:59:65:70:4e:9e:94:df:6b:
         a7:da:46:d7:c9:8c:17:12:da:cb:19:97:44:b5:95:1d:48:44:
         9a:a1:18:18:d1:a8:05:e1:92:70:66:7b:35:6a:d0:cc:7b:c8:
         a2:5e:3d:2e:9c:04:61:69:56:e2:7f:e4:e4:a1:18:21:08:26:
         27:d0:94:2d:c7:f6:60:dc:e5:8f:51:b1:e0:91:0d:5f:c2:aa:
         cf:f1:31:16:a3:37:60:9e:5c:5c:eb:d3:49:3e:b9:75:7a:04:
         57:4e:73:94:88:74:ae:1a:25:e4:6c:b3:c9:77:8f:cd:d5:50:
         fb:3d:ec:03:41:39:f0:be:50:07:51:02:ca:46:63:23:e1:e4:
         90:8b:6f:7a:db:91:76:bb:e6:bf:80:ff:0d:60:3e:9b:c0:70:
         de:c3:0a:90:03:e9:6e:6e:13:a1:19:90:7b:35:51:b0:b0:6d:
         33:06:59:a7:3a:46:f3:3f:2f:e6:43:bd:a0:69:b1:88:c1:60:
         5c:d1:1a:be:5a:ac:da:b3:85:55:bb:f1:c6:7e:55:70:1e:f7:
         10:6b:81:94:19:de:7c:51:81:b0:60:58:65:2b:1d:75:7c:c3:
         0d:e7:8c:d0:9f:fb:21:ea:83:d6:97:00:21:cc:6f:28:ee:4f:
         ef:c8:ec:43
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzI5NUMxMTAvBgNVBAUTKDU0MjQxNEZCRTNGRjIzMkFBQ0M2MkU3M0REQzM3RTI3
NTI4MkVENEEwHhcNMjUwOTE4MjI0OTM0WhcNMjUwOTI1MjI0OTM0WjAYMRYwFAYD
VQQDEw02OGNjOGM3ZS0zM2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4AkQUyb1SV+CYkMv6UZK7jx/ragcHwVa6vV42tRK8Jd+EZHgh+zi1tM8at8R
zFhS37p8CdbxBjMTxJMor7azuyK0jYch4VLRHw/zHGjj1xYvU6MEtEljMxGhKq6/
Zz+xJJhaSJ4zP474vTapAfYOiVQ+GDkicE1sxw7+aA2a5PhSQuI8+ISMQhymT9+B
H/5rj4vK7ps93pK3RWUlUIhbHvrW+Xrc9B35gTWGFZ3IwJtVN4BWnciasWf1FoFj
0VBvTBVDOe5wmNj6CCi01kVpJMaLgt21J8YHLyNq9rueZEkUfC5mMBm+ja5aQwbs
Bn0hp9Ah4gKZE44m+VF6iDqBrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLSuiUz5
waWZPIel3QWcQPps6bQ9MB8GA1UdIwQYMBaAFFQkFPvj/yMqrMYuc93DfidSgu1K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk1Qy8xRjIwNzRDODk2
ODIxMUVCQTM5OTExNUJDNEY5QUUwMi9WQ1FVLS1QX0l5cXN4aTV6M2NOLUoxS0M3
VW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZDUVUtLVBfSXlxc3hpNXozY04tSjFLQzdVby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
Mjk1Qy8xRjIwNzRDODk2ODIxMUVCQTM5OTExNUJDNEY5QUUwMi9WQ1FVLS1QX0l5
cXN4aTV6M2NOLUoxS0M3VW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAGJnXEsEpQsohJWWVwTp6U32un2kbXyYwXEtrLGZdEtZUdSESaoRgY
0agF4ZJwZns1atDMe8iiXj0unARhaVbif+TkoRghCCYn0JQtx/Zg3OWPUbHgkQ1f
wqrP8TEWozdgnlxc69NJPrl1egRXTnOUiHSuGiXkbLPJd4/N1VD7PewDQTnwvlAH
UQLKRmMj4eSQi29625F2u+a/gP8NYD6bwHDewwqQA+lubhOhGZB7NVGwsG0zBlmn
OkbzPy/mQ72gabGIwWBc0Rq+Wqzas4VVu/HGflVwHvcQa4GUGd58UYGwYFhlKx11
fMMN54zQn/sh6oPWlwAhzG8o7k/vyOxD
-----END CERTIFICATE-----
Generated at Fri Sep 19 02:31:31 2025 by rpki-client