Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3A26/561D9224929C11EB957A5D5DC4F9AE02/vq_Hury3142eGQgg9ussfyi7XYg.mft
File:                     vq_Hury3142eGQgg9ussfyi7XYg.mft (raw, json)
Hash identifier:          47GRWuwyX9lcDUbujHubGlQjLmleeU4ZZK5TI4Cub9Q=
Subject key identifier:   F7:52:73:BB:57:5A:E2:A0:4C:F1:E6:D4:30:D9:6D:20:01:97:B1:7D
Authority key identifier: BE:AF:C7:BA:BC:B7:D7:8D:9E:19:08:20:F6:EB:2C:7F:28:BB:5D:88
Certificate issuer:       /CN=A91D3A26/serialNumber=BEAFC7BABCB7D78D9E190820F6EB2C7F28BB5D88
Certificate serial:       063C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vq_Hury3142eGQgg9ussfyi7XYg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3A26/561D9224929C11EB957A5D5DC4F9AE02/vq_Hury3142eGQgg9ussfyi7XYg.mft
Manifest number:          0636
Signing time:             Fri 30 May 2025 22:52:59 +0000
Manifest this update:     Fri 30 May 2025 22:52:58 +0000
Manifest next update:     Fri 06 Jun 2025 22:52:58 +0000
Files and hashes:         1: vq_Hury3142eGQgg9ussfyi7XYg.crl (hash: S2sd4b5HKNQHi29GJQ8FXtw9Ss7ivhXAvXOliMa8BN8=)
                          2: 63D1B4C0929E11EBABC48F60C4F9AE02.roa (hash: U7lR5/SoTUzZ7N5QnHfDmyPvzjrTN8A2EyZWFjyTSno=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3A26/561D9224929C11EB957A5D5DC4F9AE02/vq_Hury3142eGQgg9ussfyi7XYg.crl
                          rsync://rpki.apnic.net/member_repository/A91D3A26/561D9224929C11EB957A5D5DC4F9AE02/vq_Hury3142eGQgg9ussfyi7XYg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vq_Hury3142eGQgg9ussfyi7XYg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 22:52:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1596 (0x63c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3A26, serialNumber=BEAFC7BABCB7D78D9E190820F6EB2C7F28BB5D88
        Validity
            Not Before: May 30 22:52:58 2025 GMT
            Not After : Jun  6 22:52:58 2025 GMT
        Subject: CN=683a36cb-e83b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:74:01:c1:21:b4:24:a4:a0:ee:ba:8d:86:94:
                    e6:8f:dd:2b:36:59:d5:e6:65:35:91:5f:e4:7d:e3:
                    a2:e9:f5:51:0b:78:7a:d3:53:10:4b:aa:e2:43:3e:
                    f8:1b:c9:02:8c:e7:a6:a4:80:e2:c3:94:8f:0d:ae:
                    9c:f1:2f:3b:a8:d0:14:26:3e:16:c2:36:c4:41:26:
                    77:05:4f:4e:a9:d8:17:47:21:44:c7:43:02:71:c8:
                    b2:28:38:d5:56:c1:fb:42:8c:71:e9:7a:1b:5c:26:
                    1f:78:c8:6f:e6:78:ee:fb:1a:6c:69:fb:bd:0b:31:
                    d4:b8:fe:5d:c1:a4:0d:c1:8e:a4:de:49:23:b3:fa:
                    a8:f4:b2:b7:c1:51:d1:7d:60:0d:5b:3b:61:f9:52:
                    c8:ef:28:76:ba:cc:04:5e:c8:16:75:0f:40:d6:ce:
                    a1:32:16:75:f5:a8:78:bc:3e:cb:ad:41:11:38:41:
                    47:ac:bf:0b:bb:3b:c3:f8:20:73:3a:8d:49:c9:a1:
                    f7:e3:bf:dd:f1:3d:0e:1b:55:54:8a:93:57:96:e0:
                    28:5e:57:aa:99:f9:c6:04:d5:e7:9d:16:fa:11:0d:
                    83:d2:b9:d9:89:5e:64:85:62:8b:f8:1d:6c:e1:21:
                    34:47:83:03:52:7d:c5:50:e8:14:77:9b:ab:b1:9c:
                    a9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:52:73:BB:57:5A:E2:A0:4C:F1:E6:D4:30:D9:6D:20:01:97:B1:7D
            X509v3 Authority Key Identifier:
                keyid:BE:AF:C7:BA:BC:B7:D7:8D:9E:19:08:20:F6:EB:2C:7F:28:BB:5D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3A26/561D9224929C11EB957A5D5DC4F9AE02/vq_Hury3142eGQgg9ussfyi7XYg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vq_Hury3142eGQgg9ussfyi7XYg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3A26/561D9224929C11EB957A5D5DC4F9AE02/vq_Hury3142eGQgg9ussfyi7XYg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:2d:0f:36:d4:0e:56:c0:7e:a9:ba:d5:dc:81:93:b4:3b:c1:
         e9:c4:27:85:6b:6f:f4:c4:1a:2e:4a:b3:1c:9a:e7:6b:46:80:
         e8:5e:8d:27:42:80:8e:95:2d:de:9c:93:70:43:37:5d:2d:a8:
         3f:a1:2e:3b:64:f8:78:d8:60:c9:24:f0:42:54:c1:a3:d9:44:
         ca:1b:b8:b6:e7:eb:00:25:14:e3:85:05:de:21:f4:33:87:b8:
         fe:db:88:73:47:af:55:10:d9:0a:4e:6e:6c:65:3d:c6:bd:a1:
         bc:75:6d:ef:df:b6:07:b2:67:a9:dc:42:4a:a4:48:13:97:22:
         8d:2e:af:52:22:8c:53:21:22:61:a9:90:55:e8:4d:0f:b8:04:
         fc:32:7f:b6:b6:d3:53:52:9c:b0:bf:d4:11:7f:93:4f:bd:89:
         35:d4:57:0f:96:40:cc:15:d5:ea:ea:8e:ef:d1:fe:42:ef:15:
         44:4d:5c:eb:29:58:5d:d8:7e:8a:6f:d2:de:bd:e1:93:ec:44:
         47:73:62:04:66:29:01:0c:25:5b:6c:1c:67:6a:96:45:a4:a6:
         59:fe:03:2e:71:4d:bc:9c:0c:f5:94:94:0e:84:82:a7:fe:67:
         d7:82:0b:ea:64:ee:68:d6:09:39:0c:14:00:dd:b2:05:3a:0e:
         60:07:13:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:06:26 2025 by rpki-client