Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.mft
File:                     VCQU--P_Iyqsxi5z3cN-J1KC7Uo.mft (raw, json)
Hash identifier:          6tqAps86fEEt6ALmhYSeifPAJ/vFm5wIEeJ9zx+6Znk=
Subject key identifier:   BE:39:41:77:3C:7C:D7:5C:65:F1:0D:08:A4:91:37:B8:37:C7:67:89
Authority key identifier: 54:24:14:FB:E3:FF:23:2A:AC:C6:2E:73:DD:C3:7E:27:52:82:ED:4A
Certificate issuer:       /CN=A917295C/serialNumber=542414FBE3FF232AACC62E73DDC37E275282ED4A
Certificate serial:       0631
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.mft
Manifest number:          062A
Signing time:             Wed 14 May 2025 22:46:42 +0000
Manifest this update:     Wed 14 May 2025 22:46:41 +0000
Manifest next update:     Wed 21 May 2025 22:46:41 +0000
Files and hashes:         1: VCQU--P_Iyqsxi5z3cN-J1KC7Uo.crl (hash: /QlUpB8a0/qY3r6fb66XFvzO90m2S5EmvD8RDvgyouQ=)
                          2: AE810C76CC8811EC85E73563C4F9AE02.roa (hash: KY/NWRg0nkZbgcah/UEEpqWN9t5PCkRr4Ny3AGbpHGs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.crl
                          rsync://rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 22:46:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1585 (0x631)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917295C, serialNumber=542414FBE3FF232AACC62E73DDC37E275282ED4A
        Validity
            Not Before: May 14 22:46:41 2025 GMT
            Not After : May 21 22:46:41 2025 GMT
        Subject: CN=68251d52-d234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:17:f8:fb:58:bc:77:ca:19:f9:46:97:3e:92:
                    b1:13:ca:a3:bb:6e:28:17:6c:81:e3:20:89:49:20:
                    c9:0d:20:98:c7:ca:f0:68:d1:91:10:bc:ea:89:67:
                    17:b7:df:1d:38:da:ca:bd:81:b3:1f:e3:19:3c:ba:
                    36:7f:7f:47:10:29:23:b4:4f:97:de:51:d2:02:e9:
                    d2:c4:6c:13:ff:15:a2:81:c7:01:11:b7:d1:6b:86:
                    9e:2d:6c:ff:a9:25:1b:95:82:8b:12:e9:da:72:3b:
                    6c:91:cf:df:54:fa:3f:16:05:83:8b:b6:ac:5c:64:
                    25:ad:7a:6a:f6:c7:f9:a5:a5:0a:43:8d:54:6b:55:
                    90:bc:27:98:de:9d:ea:54:bc:98:3d:a4:68:a8:77:
                    02:22:20:f4:91:3f:f6:3c:5e:4a:72:d5:57:9a:6c:
                    f0:2d:82:ed:11:ea:b8:74:3d:f7:ea:9f:d3:43:2e:
                    e1:17:56:79:5d:b1:8b:72:cb:8a:64:f0:83:b9:f8:
                    07:f5:4e:fd:c7:0a:86:2e:a1:3e:b7:d4:d4:67:ac:
                    5b:30:95:c7:81:a1:4d:ad:e2:f8:85:95:f1:46:14:
                    99:c0:3e:3a:89:09:04:a2:77:33:c4:64:a6:52:bb:
                    cd:d8:b9:02:d3:72:6b:83:66:26:9b:2d:7a:06:63:
                    71:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:39:41:77:3C:7C:D7:5C:65:F1:0D:08:A4:91:37:B8:37:C7:67:89
            X509v3 Authority Key Identifier:
                keyid:54:24:14:FB:E3:FF:23:2A:AC:C6:2E:73:DD:C3:7E:27:52:82:ED:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:34:8d:81:4f:27:89:f3:05:81:19:9b:8e:f2:c9:31:6c:e5:
         98:cf:16:3a:05:cd:a0:21:d7:ba:7a:46:30:48:b8:75:a1:80:
         66:db:cd:21:12:29:d8:d9:bd:fc:81:55:7f:cf:c1:90:82:61:
         a7:c4:68:45:a0:eb:e7:ae:46:39:d2:05:af:4e:d7:bc:60:da:
         18:fb:62:5a:bf:5e:42:a4:1d:52:a2:97:74:0b:00:ed:b4:39:
         a6:12:0a:62:eb:0b:2f:79:48:23:65:10:74:fb:56:87:18:7e:
         f0:5b:96:27:10:93:31:e9:66:28:8b:ee:11:f0:a2:f8:8b:2a:
         e1:d4:a3:e0:28:01:35:49:ae:4c:06:bb:08:ee:1c:a1:f5:15:
         e8:93:66:4c:22:f1:e9:22:e1:96:f7:e5:bc:0c:ed:f7:61:d4:
         38:c3:72:47:a2:72:30:3c:37:ff:27:04:56:88:80:b1:95:23:
         40:3b:0c:33:be:45:fb:31:17:56:68:44:8a:aa:b7:c0:62:d7:
         a3:25:ff:4b:33:27:85:90:d5:32:7b:81:5a:49:13:45:34:02:
         53:99:ad:c2:df:be:f5:4f:65:d6:08:fd:5c:4a:cc:86:d3:63:
         07:24:04:a6:e4:5d:b7:0a:7d:40:2c:a5:ab:61:c1:87:92:65:
         68:b8:9b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 22:12:00 2025 by rpki-client