Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft
File:                     VELdytiYUdlLqsCrc5LOQZohisw.mft (raw, json)
Hash identifier:          7FYlemeFj3RmXeP7WIcopP+ZLExbl9k7Hq9wG4Fo82Q=
Subject key identifier:   F6:9F:99:41:B8:18:A1:4B:6F:A1:66:88:F5:96:43:30:FC:E3:CE:7F
Authority key identifier: 54:42:DD:CA:D8:98:51:D9:4B:AA:C0:AB:73:92:CE:41:9A:21:8A:CC
Certificate issuer:       /CN=A91BA0F9/serialNumber=5442DDCAD89851D94BAAC0AB7392CE419A218ACC
Certificate serial:       1CA2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft
Manifest number:          516A
Signing time:             Sat 18 Oct 2025 15:25:27 +0000
Manifest this update:     Sat 18 Oct 2025 15:25:26 +0000
Manifest next update:     Sat 25 Oct 2025 15:25:26 +0000
Files and hashes:         1: VELdytiYUdlLqsCrc5LOQZohisw.crl (hash: BGtIKcxzcE3wNsSg0mJMaFsHJ6OtZ/wP7tNI1qytxhU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.crl
                          rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 15:25:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7330 (0x1ca2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA0F9, serialNumber=5442DDCAD89851D94BAAC0AB7392CE419A218ACC
        Validity
            Not Before: Oct 18 15:25:26 2025 GMT
            Not After : Oct 25 15:25:26 2025 GMT
        Subject: CN=68f3b166-5f80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:51:a6:1c:d2:bf:e3:b2:30:fe:c9:3e:30:c4:
                    76:1c:f3:2a:05:61:a5:0e:ae:91:22:fd:90:7f:da:
                    b4:16:52:81:b5:f6:d6:31:49:13:65:28:ea:04:6a:
                    35:73:0c:40:d4:53:e4:7c:69:a3:03:84:72:01:8c:
                    33:e1:0e:b2:5b:0b:e0:f4:79:c4:ab:83:b3:ba:d0:
                    af:01:d1:f1:6a:06:5d:ba:cf:f0:fc:b3:83:c3:d9:
                    3f:02:00:58:d8:85:0e:4c:d5:82:e7:8c:48:46:6e:
                    b7:9b:17:ac:1b:db:5c:e0:60:82:78:41:ba:df:59:
                    f8:d4:32:8d:b8:a8:1f:b6:00:d1:c3:9e:a4:d5:ed:
                    64:9f:94:ca:60:7a:8d:b1:5d:00:8e:fa:f0:4f:91:
                    5f:e1:00:78:57:24:28:94:f3:fd:b9:2e:94:69:9e:
                    77:bc:7e:59:17:34:65:68:cc:72:d8:c3:e9:c3:db:
                    ab:01:d2:e3:1c:84:a1:21:7c:f9:97:b3:a8:02:f1:
                    6e:a3:a6:1f:53:9d:31:2d:c1:d7:34:7c:7c:95:7c:
                    0e:4b:d8:9e:6c:3d:7f:8e:4f:94:d3:b1:b9:cb:0c:
                    57:fd:e7:9d:30:60:99:92:6f:2f:48:41:6b:c6:c4:
                    d8:c8:9a:ec:4a:cf:cf:e7:ec:50:90:93:c9:a8:43:
                    fd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:9F:99:41:B8:18:A1:4B:6F:A1:66:88:F5:96:43:30:FC:E3:CE:7F
            X509v3 Authority Key Identifier:
                keyid:54:42:DD:CA:D8:98:51:D9:4B:AA:C0:AB:73:92:CE:41:9A:21:8A:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VELdytiYUdlLqsCrc5LOQZohisw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/VELdytiYUdlLqsCrc5LOQZohisw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:d6:16:23:1f:1d:15:79:ea:0f:8f:bd:26:c3:cf:af:5d:cd:
         ed:0f:a8:d1:2f:f5:aa:b4:a6:7a:cf:b3:d7:cd:51:48:68:6e:
         ea:f4:00:9c:70:c9:13:bc:a0:17:92:69:5f:9c:fb:25:3f:1c:
         2b:06:a2:f8:5f:d3:c5:86:e2:a8:3b:15:62:7c:04:91:bc:00:
         1e:37:89:8d:20:57:1c:ea:07:b2:04:0e:fb:f6:2d:a1:cb:8e:
         8a:6e:94:6e:a1:06:6a:63:be:75:c6:80:98:1f:7e:ee:ba:65:
         e1:2a:17:c1:dc:3c:4e:f2:7c:4a:cf:76:27:52:36:30:66:ff:
         44:e3:03:b2:21:fe:a3:5b:2e:6f:82:04:4a:13:19:8d:4f:b6:
         76:60:4e:de:e4:65:c7:78:30:71:ea:e0:a2:f7:87:45:fd:35:
         a6:70:1a:1a:21:3e:d2:6d:c8:90:d1:ec:f1:59:83:2e:c5:5c:
         68:5a:9c:4e:29:d8:6e:44:c7:73:4d:1d:6c:8c:bb:27:c0:90:
         bd:32:49:eb:81:75:d1:78:c2:94:fe:53:e6:b5:ce:c3:2f:fa:
         aa:aa:f0:54:e0:89:73:ae:12:ed:9a:8e:4b:45:df:a1:1e:3f:
         e6:db:a5:1d:f3:fe:fc:de:88:c9:47:4d:4f:a3:bd:a6:07:61:
         1b:a3:17:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:36:05 2025 by rpki-client