Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.mft
File:                     VCQU--P_Iyqsxi5z3cN-J1KC7Uo.mft (raw, json)
Hash identifier:          3Cbbhk0sdSfpYAZYIoEOKpWFaamCmommjqO7DuF8slA=
Subject key identifier:   56:A7:7A:9C:E9:B0:52:57:37:CF:36:B6:1F:D9:18:F6:69:B6:90:5B
Authority key identifier: 54:24:14:FB:E3:FF:23:2A:AC:C6:2E:73:DD:C3:7E:27:52:82:ED:4A
Certificate issuer:       /CN=A917295C/serialNumber=542414FBE3FF232AACC62E73DDC37E275282ED4A
Certificate serial:       062B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.mft
Manifest number:          0624
Signing time:             Fri 02 May 2025 22:52:24 +0000
Manifest this update:     Fri 02 May 2025 22:52:24 +0000
Manifest next update:     Fri 09 May 2025 22:52:24 +0000
Files and hashes:         1: VCQU--P_Iyqsxi5z3cN-J1KC7Uo.crl (hash: RLPt6PhVuXNPD/MjEqKfq9iVN968eUlzxipyIqwbPo4=)
                          2: AE810C76CC8811EC85E73563C4F9AE02.roa (hash: KY/NWRg0nkZbgcah/UEEpqWN9t5PCkRr4Ny3AGbpHGs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.crl
                          rsync://rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 May 2025 22:52:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1579 (0x62b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917295C, serialNumber=542414FBE3FF232AACC62E73DDC37E275282ED4A
        Validity
            Not Before: May  2 22:52:24 2025 GMT
            Not After : May  9 22:52:24 2025 GMT
        Subject: CN=68154ca8-a968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:02:09:54:0c:fc:a5:c9:0f:64:04:c8:e0:5c:
                    ea:62:8e:2e:7c:a0:c4:5e:11:33:39:d6:c0:83:c4:
                    b2:ce:cf:43:4e:74:69:68:4c:0b:d0:70:ea:1f:71:
                    7f:2c:d0:52:d0:f4:ce:20:76:ea:4f:e2:db:e0:44:
                    df:cd:a1:66:e7:0c:a0:fc:f5:73:eb:f7:c1:03:c2:
                    05:14:b3:a8:1e:3e:71:b7:b4:87:d5:c0:46:10:f0:
                    ee:0e:d8:02:56:1d:6e:94:d8:58:53:5c:5e:bb:57:
                    c0:66:7a:c6:34:a6:66:f7:ae:c4:ed:53:c5:db:a9:
                    c7:1e:85:17:be:5a:e9:74:a2:27:06:b9:b9:bb:fd:
                    aa:fc:af:1a:35:32:27:b3:8f:e8:0d:25:8c:f7:1b:
                    b7:7b:b3:f9:ad:fb:9b:70:ee:1b:ef:71:30:8e:2e:
                    1e:38:cc:dd:62:ba:cf:05:9d:dd:d7:a4:b4:47:38:
                    72:2f:d9:ff:c2:10:76:4c:66:35:ca:ce:2d:f9:01:
                    41:e9:a6:b3:ed:cc:e0:36:28:8c:00:1e:1a:f2:0e:
                    2d:a8:ea:cd:a7:ab:f8:de:85:bf:2a:93:6c:3e:d3:
                    cc:e1:3d:29:37:c5:9e:76:5d:8f:14:82:70:8f:f0:
                    5c:5f:44:a2:7a:8b:b8:a2:8d:ca:ef:f7:09:92:95:
                    84:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A7:7A:9C:E9:B0:52:57:37:CF:36:B6:1F:D9:18:F6:69:B6:90:5B
            X509v3 Authority Key Identifier:
                keyid:54:24:14:FB:E3:FF:23:2A:AC:C6:2E:73:DD:C3:7E:27:52:82:ED:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:48:dc:af:69:8f:9c:03:9c:fb:45:c2:35:ad:49:87:c9:ec:
         c0:24:6f:41:42:6d:3b:b7:e9:30:a6:a8:2a:9f:30:5b:12:c9:
         33:14:24:d4:67:e5:a8:98:2e:86:27:df:9e:30:87:09:4a:d1:
         5d:43:8d:fb:74:67:32:29:06:9c:d8:c4:f0:4d:8b:a7:de:c2:
         c5:9f:da:ec:3c:c8:9f:95:62:f7:6b:d4:16:78:84:d4:c1:8c:
         b0:aa:df:bc:df:b5:ac:39:00:e1:32:bc:88:88:82:d0:81:37:
         2c:2d:1a:23:2b:70:a3:a3:7a:2c:d7:43:25:7c:c7:24:d4:0e:
         28:e2:f1:7f:cf:22:cc:72:14:b7:5d:1c:af:cb:27:5a:93:79:
         65:0e:a2:e0:a6:90:e7:a9:22:1b:d7:d7:98:2c:d4:9a:a2:43:
         0d:9b:7a:47:ba:e6:7d:2c:0e:15:78:d4:61:10:1e:61:94:5e:
         fe:2e:07:29:d7:8d:73:6f:8b:c5:8c:a7:7b:e5:2e:92:a4:fc:
         b0:67:0a:5e:59:ec:c0:3f:0a:a5:1f:10:50:9d:43:0b:0c:58:
         80:33:ed:00:e8:e5:d9:b5:85:d3:00:82:fc:de:45:a6:d2:c2:
         2e:4a:66:85:6b:67:28:87:ab:2b:51:79:4f:e3:61:74:eb:75:
         a0:f4:bf:a7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzI5NUMxMTAvBgNVBAUTKDU0MjQxNEZCRTNGRjIzMkFBQ0M2MkU3M0REQzM3RTI3
NTI4MkVENEEwHhcNMjUwNTAyMjI1MjI0WhcNMjUwNTA5MjI1MjI0WjAYMRYwFAYD
VQQDEw02ODE1NGNhOC1hOTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzgIJVAz8pckPZATI4FzqYo4ufKDEXhEzOdbAg8Syzs9DTnRpaEwL0HDqH3F/
LNBS0PTOIHbqT+Lb4ETfzaFm5wyg/PVz6/fBA8IFFLOoHj5xt7SH1cBGEPDuDtgC
Vh1ulNhYU1xeu1fAZnrGNKZm967E7VPF26nHHoUXvlrpdKInBrm5u/2q/K8aNTIn
s4/oDSWM9xu3e7P5rfubcO4b73Ewji4eOMzdYrrPBZ3d16S0RzhyL9n/whB2TGY1
ys4t+QFB6aaz7czgNiiMAB4a8g4tqOrNp6v43oW/KpNsPtPM4T0pN8Wedl2PFIJw
j/BcX0Sieou4oo3K7/cJkpWELQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFanepzp
sFJXN882th/ZGPZptpBbMB8GA1UdIwQYMBaAFFQkFPvj/yMqrMYuc93DfidSgu1K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk1Qy8xRjIwNzRDODk2
ODIxMUVCQTM5OTExNUJDNEY5QUUwMi9WQ1FVLS1QX0l5cXN4aTV6M2NOLUoxS0M3
VW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZDUVUtLVBfSXlxc3hpNXozY04tSjFLQzdVby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
Mjk1Qy8xRjIwNzRDODk2ODIxMUVCQTM5OTExNUJDNEY5QUUwMi9WQ1FVLS1QX0l5
cXN4aTV6M2NOLUoxS0M3VW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBgSNyvaY+cA5z7RcI1rUmHyezAJG9BQm07t+kwpqgqnzBbEskzFCTU
Z+WomC6GJ9+eMIcJStFdQ437dGcyKQac2MTwTYun3sLFn9rsPMiflWL3a9QWeITU
wYywqt+837WsOQDhMryIiILQgTcsLRojK3Cjo3os10MlfMck1A4o4vF/zyLMchS3
XRyvyydak3llDqLgppDnqSIb19eYLNSaokMNm3pHuuZ9LA4VeNRhEB5hlF7+Lgcp
141zb4vFjKd75S6SpPywZwpeWezAPwqlHxBQnUMLDFiAM+0A6OXZtYXTAIL83kWm
0sIuSmaFa2coh6srUXlP42F063Wg9L+n
-----END CERTIFICATE-----
Generated at Sat May 3 12:05:55 2025 by rpki-client