Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143684/712FC2C21DA611E2B529A99D08B02CD2/VV50iV-5CWGfKZw_nQuwhV_YFug.mft
File:                     VV50iV-5CWGfKZw_nQuwhV_YFug.mft (raw, json)
Hash identifier:          1qectckW2ruJkNYk/M9Dz4fSynG7ubEU4JJIbX7t8qo=
Subject key identifier:   38:9A:08:97:9E:D3:A8:4C:DB:15:CA:B1:B3:71:E7:E3:3C:3A:2F:7A
Authority key identifier: 55:5E:74:89:5F:B9:09:61:9F:29:9C:3F:9D:0B:B0:85:5F:D8:16:E8
Certificate issuer:       /CN=A9143684/serialNumber=555E74895FB909619F299C3F9D0BB0855FD816E8
Certificate serial:       34D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VV50iV-5CWGfKZw_nQuwhV_YFug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143684/712FC2C21DA611E2B529A99D08B02CD2/VV50iV-5CWGfKZw_nQuwhV_YFug.mft
Manifest number:          34D5
Signing time:             Mon 20 Oct 2025 15:19:06 +0000
Manifest this update:     Mon 20 Oct 2025 15:19:05 +0000
Manifest next update:     Mon 27 Oct 2025 15:19:05 +0000
Files and hashes:         1: VV50iV-5CWGfKZw_nQuwhV_YFug.crl (hash: A3EYxKXFXbeSdtwtMcq0HRlhiepOnpUZsLt2+NCYiyc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143684/712FC2C21DA611E2B529A99D08B02CD2/VV50iV-5CWGfKZw_nQuwhV_YFug.crl
                          rsync://rpki.apnic.net/member_repository/A9143684/712FC2C21DA611E2B529A99D08B02CD2/VV50iV-5CWGfKZw_nQuwhV_YFug.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VV50iV-5CWGfKZw_nQuwhV_YFug.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 15:19:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13525 (0x34d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143684, serialNumber=555E74895FB909619F299C3F9D0BB0855FD816E8
        Validity
            Not Before: Oct 20 15:19:05 2025 GMT
            Not After : Oct 27 15:19:05 2025 GMT
        Subject: CN=68f652e9-2c96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:85:73:f3:ff:6d:86:34:c3:32:ba:5f:2f:9e:
                    0b:d4:cf:18:18:b1:5e:99:93:de:45:6f:b1:30:b3:
                    70:42:57:05:8f:62:90:98:78:3f:56:c6:2f:71:b0:
                    78:3e:85:47:6e:b4:48:dd:1e:04:0f:34:56:e0:47:
                    2a:62:24:f1:1f:f5:91:19:ea:33:6a:0d:2a:2a:47:
                    e8:26:0e:f1:d9:5e:6d:f4:14:4f:34:26:f4:72:1f:
                    8d:4a:4a:88:d8:aa:db:1a:72:3d:ff:5f:25:3e:c3:
                    55:24:6f:37:ad:73:fb:6c:aa:0c:b6:76:81:70:bd:
                    ff:11:f3:ad:84:3c:65:01:ac:2d:06:55:9e:d4:33:
                    fa:00:f4:53:93:93:bc:9e:8e:83:a0:a8:27:8d:b0:
                    b2:00:31:6f:5c:37:8a:09:c2:f9:ab:31:bc:61:fe:
                    dc:a1:c7:af:3e:b5:ea:0e:bc:87:df:cf:ae:60:63:
                    d2:1e:6c:52:38:ac:92:ad:5e:d2:a8:bf:43:e0:f3:
                    02:1a:8e:96:69:05:5c:4e:34:96:7b:9d:46:5c:9e:
                    bf:b0:e4:d3:ce:b0:81:12:53:64:38:b5:9f:0d:db:
                    cc:6b:36:a3:0d:6c:44:53:26:9b:cd:d2:89:5d:31:
                    82:6f:de:4b:72:51:62:d6:5d:50:f7:9d:67:7b:7c:
                    3b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:9A:08:97:9E:D3:A8:4C:DB:15:CA:B1:B3:71:E7:E3:3C:3A:2F:7A
            X509v3 Authority Key Identifier:
                keyid:55:5E:74:89:5F:B9:09:61:9F:29:9C:3F:9D:0B:B0:85:5F:D8:16:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143684/712FC2C21DA611E2B529A99D08B02CD2/VV50iV-5CWGfKZw_nQuwhV_YFug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VV50iV-5CWGfKZw_nQuwhV_YFug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143684/712FC2C21DA611E2B529A99D08B02CD2/VV50iV-5CWGfKZw_nQuwhV_YFug.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:0d:db:fc:6e:80:d6:e2:de:28:8c:b1:c9:dd:25:67:6f:86:
         3b:4b:9d:c2:ab:39:fe:98:e6:50:de:f2:e7:e0:bc:aa:7a:07:
         be:c3:60:3c:75:74:18:7d:5e:b4:d7:50:b0:a5:fb:ed:02:8e:
         b2:88:6a:0a:71:58:1f:3f:ed:5f:60:ae:db:5e:e6:96:75:0e:
         df:56:50:9d:fa:4e:e6:87:fd:bd:bc:7f:8a:b2:09:a2:97:95:
         2e:6e:16:05:25:63:9a:e7:46:5d:43:10:17:74:8b:39:65:8c:
         cb:59:a6:02:29:a6:90:1f:02:ef:6d:ab:6d:de:06:3c:ff:0d:
         44:d1:42:66:5b:de:4d:58:d4:bb:8a:56:e3:4b:92:ca:f6:5f:
         13:55:b9:c4:39:3b:5a:2c:9f:ae:a9:18:55:ab:12:06:37:2d:
         8f:e2:3b:d9:34:5d:5d:6e:65:7a:ff:b9:96:db:e1:f8:42:fe:
         34:14:b0:e8:e1:e2:55:e6:b7:6f:32:c6:8f:98:aa:71:54:84:
         d5:a8:cb:df:d4:02:07:fd:97:08:9d:37:d0:9a:99:f8:c8:1a:
         07:7d:e7:9f:46:88:21:be:ea:4d:d4:87:05:e6:7a:38:d3:57:
         2b:a9:83:2b:df:42:03:e2:97:d4:0b:a7:79:92:0f:15:12:9c:
         a4:5a:0e:58
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDM2ODQxMTAvBgNVBAUTKDU1NUU3NDg5NUZCOTA5NjE5RjI5OUMzRjlEMEJCMDg1
NUZEODE2RTgwHhcNMjUxMDIwMTUxOTA1WhcNMjUxMDI3MTUxOTA1WjAYMRYwFAYD
VQQDEw02OGY2NTJlOS0yYzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5IVz8/9thjTDMrpfL54L1M8YGLFemZPeRW+xMLNwQlcFj2KQmHg/VsYvcbB4
PoVHbrRI3R4EDzRW4EcqYiTxH/WRGeozag0qKkfoJg7x2V5t9BRPNCb0ch+NSkqI
2KrbGnI9/18lPsNVJG83rXP7bKoMtnaBcL3/EfOthDxlAawtBlWe1DP6APRTk5O8
no6DoKgnjbCyADFvXDeKCcL5qzG8Yf7cocevPrXqDryH38+uYGPSHmxSOKySrV7S
qL9D4PMCGo6WaQVcTjSWe51GXJ6/sOTTzrCBElNkOLWfDdvMazajDWxEUyabzdKJ
XTGCb95LclFi1l1Q951ne3w7kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDiaCJee
06hM2xXKsbNx5+M8Oi96MB8GA1UdIwQYMBaAFFVedIlfuQlhnymcP50LsIVf2Bbo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzY4NC83MTJGQzJDMjFE
QTYxMUUyQjUyOUE5OUQwOEIwMkNEMi9WVjUwaVYtNUNXR2ZLWndfblF1d2hWX1lG
dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZWNTBpVi01Q1dHZktad19uUXV3aFZfWUZ1Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MzY4NC83MTJGQzJDMjFEQTYxMUUyQjUyOUE5OUQwOEIwMkNEMi9WVjUwaVYtNUNX
R2ZLWndfblF1d2hWX1lGdWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBnDdv8boDW4t4ojLHJ3SVnb4Y7S53Cqzn+mOZQ3vLn4Lyqege+w2A8
dXQYfV6011CwpfvtAo6yiGoKcVgfP+1fYK7bXuaWdQ7fVlCd+k7mh/29vH+Ksgmi
l5UubhYFJWOa50ZdQxAXdIs5ZYzLWaYCKaaQHwLvbatt3gY8/w1E0UJmW95NWNS7
ilbjS5LK9l8TVbnEOTtaLJ+uqRhVqxIGNy2P4jvZNF1dbmV6/7mW2+H4Qv40FLDo
4eJV5rdvMsaPmKpxVITVqMvf1AIH/ZcInTfQmpn4yBoHfeefRoghvupN1IcF5no4
01crqYMr30ID4pfUC6d5kg8VEpykWg5Y
-----END CERTIFICATE-----
Generated at Tue Oct 21 04:49:21 2025 by rpki-client