Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.mft
File:                     VCQU--P_Iyqsxi5z3cN-J1KC7Uo.mft (raw, json)
Hash identifier:          iHoxXfG7lBvygcJ4VIMI1v0puIMBr8b517+Eocaburg=
Subject key identifier:   46:7E:45:27:7F:8C:E2:BE:74:B9:0D:D4:B4:B7:CF:22:1A:18:A8:2E
Authority key identifier: 54:24:14:FB:E3:FF:23:2A:AC:C6:2E:73:DD:C3:7E:27:52:82:ED:4A
Certificate issuer:       /CN=A917295C/serialNumber=542414FBE3FF232AACC62E73DDC37E275282ED4A
Certificate serial:       068A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.mft
Manifest number:          0683
Signing time:             Tue 04 Nov 2025 22:33:19 +0000
Manifest this update:     Tue 04 Nov 2025 22:33:18 +0000
Manifest next update:     Tue 11 Nov 2025 22:33:18 +0000
Files and hashes:         1: VCQU--P_Iyqsxi5z3cN-J1KC7Uo.crl (hash: AhS+PouS1ZIX0Wac4INkIilu3yrQs4peGzsPkNJ870A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.crl
                          rsync://rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 22:33:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1674 (0x68a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917295C, serialNumber=542414FBE3FF232AACC62E73DDC37E275282ED4A
        Validity
            Not Before: Nov  4 22:33:18 2025 GMT
            Not After : Nov 11 22:33:18 2025 GMT
        Subject: CN=690a7f2e-0d48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:39:80:1f:9e:9f:18:52:97:7b:26:1d:76:3a:
                    bd:e5:2b:17:47:28:01:8c:d3:a3:f3:ed:b7:a1:03:
                    14:bc:97:45:bb:8e:52:89:fe:f4:ba:d3:70:a3:a4:
                    c7:e9:6e:dd:aa:df:4e:f1:29:13:5d:78:82:9b:2a:
                    8e:95:83:d3:6f:be:f9:0f:70:92:08:82:6c:3c:4c:
                    3a:12:9e:5d:f4:cc:32:c8:8b:1e:86:9e:d3:0e:d9:
                    fe:fa:44:ab:08:19:3a:4d:dd:17:00:f8:ff:46:66:
                    7e:e5:17:40:38:f8:7a:4d:3e:1f:d9:1b:76:a7:99:
                    79:3a:66:1c:2b:48:ad:bd:3c:a2:54:b2:23:da:ff:
                    14:be:f5:6d:76:68:0f:bc:6b:fe:e3:10:5b:7a:17:
                    0d:9a:19:aa:1d:33:a1:e0:e4:71:72:0d:f0:da:67:
                    67:0e:d3:ee:e6:97:73:89:e7:ec:45:14:93:40:a0:
                    76:ef:8c:c5:d5:d3:be:db:0a:6f:0f:d0:11:14:bb:
                    c8:85:bf:e1:6f:ac:19:c7:e9:8c:2b:a4:4d:fd:d1:
                    50:34:aa:df:73:9a:05:40:86:6e:b7:10:3f:4c:67:
                    d3:93:6e:0f:70:07:7a:11:25:07:20:da:0c:40:a6:
                    4b:71:06:48:10:c3:b4:85:a6:66:ee:54:29:97:0e:
                    08:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:7E:45:27:7F:8C:E2:BE:74:B9:0D:D4:B4:B7:CF:22:1A:18:A8:2E
            X509v3 Authority Key Identifier:
                keyid:54:24:14:FB:E3:FF:23:2A:AC:C6:2E:73:DD:C3:7E:27:52:82:ED:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:ba:d2:c9:ba:62:17:a4:08:ec:7e:00:57:f8:40:4f:d3:99:
         39:b1:b2:7d:2a:3f:ef:c1:08:ad:f6:33:af:3a:65:0b:09:14:
         4c:58:4f:a0:11:ae:bd:05:88:7c:2a:02:68:91:b6:f9:48:ab:
         a8:37:a3:85:49:7a:42:b0:39:3a:ce:3f:99:9c:3c:30:81:9c:
         f8:23:ea:f5:7b:a7:c0:a5:69:ca:4e:f2:4f:c4:71:28:84:ec:
         ab:e6:88:ed:e9:dc:c7:b5:45:80:b0:40:d3:5f:82:3a:ba:df:
         83:6b:7a:2a:1a:98:08:6f:b9:e5:69:77:8c:e1:72:82:36:f2:
         d4:07:48:62:3c:aa:ab:bc:b8:0b:e3:d5:ab:57:10:d5:a6:a7:
         5a:b9:91:5f:ed:0c:fd:40:e2:a5:16:70:0d:4a:ae:ae:c2:09:
         07:ef:31:49:de:68:27:51:5c:a2:69:ef:53:40:57:60:fe:b9:
         6d:f1:dd:5e:97:30:5e:87:a8:de:9e:f6:6f:88:36:e0:3d:39:
         b7:1a:39:50:4c:ae:7d:15:8d:06:b1:68:06:11:2e:6a:12:af:
         c8:9e:6f:8e:94:44:44:43:72:da:24:7a:d3:89:11:3d:6f:79:
         bf:1f:f2:a0:a3:46:e7:f1:29:ee:49:d3:8e:1a:87:ff:6e:44:
         73:f3:d1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:17:12 2025 by rpki-client