Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft
File:                     veGzlV8WJd92Ja9xy7eUuHw53Gc.mft (raw, json)
Hash identifier:          U1v/qJa77GAIgsfaSFtcLd452fay/3jbk2G74WaH4cg=
Subject key identifier:   2F:9C:A6:A9:C7:15:0F:AF:BF:98:25:7E:31:F7:9B:14:B5:A3:68:92
Authority key identifier: BD:E1:B3:95:5F:16:25:DF:76:25:AF:71:CB:B7:94:B8:7C:39:DC:67
Certificate issuer:       /CN=A913387C/serialNumber=BDE1B3955F1625DF7625AF71CBB794B87C39DC67
Certificate serial:       3598
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft
Manifest number:          3590
Signing time:             Wed 14 Oct 2026 14:31:48 +0000
Manifest this update:     Wed 14 Oct 2026 14:31:47 +0000
Manifest next update:     Wed 21 Oct 2026 14:31:47 +0000
Files and hashes:         1: veGzlV8WJd92Ja9xy7eUuHw53Gc.crl (hash: OQYdSSd6gqUvg5BZOckPBSeJhw19TKqyv8kH/PpKce8=)
                          2: 08B3D71E068611EDA1C2070DC4F9AE02.roa (hash: b4u3dfsDuybqvr0kZPhKkmwiMIVugEa5w4W6+npSizw=)
                          3: DD487AEEB18511F196D69C436811F970.roa (hash: LT659VwSHws1vID//wClrfAYNSYfrtYFSfCQUdmAMPA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.crl
                          rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Oct 2026 14:31:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13720 (0x3598)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913387C, serialNumber=BDE1B3955F1625DF7625AF71CBB794B87C39DC67
        Validity
            Not Before: Oct 14 14:31:47 2026 GMT
            Not After : Oct 21 14:31:47 2026 GMT
        Subject: CN=6acf9254-508f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4b:c6:60:3c:66:c4:1a:8e:b4:72:63:76:52:
                    08:63:6a:9f:f8:48:c7:8b:c8:6a:65:9d:28:1a:75:
                    64:98:e2:63:d7:17:f8:a7:36:09:18:7a:4e:38:23:
                    43:3a:dc:c6:55:9c:64:34:52:d4:30:c8:de:58:22:
                    9d:f1:f7:03:7b:a3:9c:14:26:e7:66:2f:3b:34:d5:
                    7f:23:74:85:4f:e4:7f:21:90:c4:df:cc:88:68:69:
                    8b:89:e2:c3:a9:25:5e:04:d4:d0:89:a6:07:39:57:
                    eb:f1:89:c5:a3:3e:32:56:ac:e1:e7:4b:05:2d:7d:
                    a1:c8:a8:60:71:36:07:75:95:f8:5a:3f:d4:50:a2:
                    65:64:1d:49:4f:92:12:03:21:8f:16:a5:99:a9:6e:
                    1a:bf:3c:13:9f:56:2f:90:f9:e6:48:a6:56:28:f2:
                    62:2f:79:4e:71:b3:06:17:16:20:0d:3b:35:ae:c7:
                    df:e0:e1:11:e7:59:36:37:04:60:bb:98:dd:fc:32:
                    96:86:57:80:83:76:ad:5e:6f:38:39:f5:b6:da:32:
                    1a:24:17:99:0e:2a:bd:fe:f9:0a:d6:09:a3:80:54:
                    23:c7:04:a5:ad:48:d1:80:a3:ac:54:f2:e3:84:6e:
                    69:45:32:ec:45:66:83:aa:57:e5:27:3e:b0:93:40:
                    bc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:9C:A6:A9:C7:15:0F:AF:BF:98:25:7E:31:F7:9B:14:B5:A3:68:92
            X509v3 Authority Key Identifier:
                keyid:BD:E1:B3:95:5F:16:25:DF:76:25:AF:71:CB:B7:94:B8:7C:39:DC:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:a7:58:75:1c:16:67:eb:64:11:ad:84:c8:4b:34:29:fc:0f:
         44:11:00:84:4b:44:a0:5a:83:c1:94:fd:bf:9c:6f:95:33:91:
         fa:bc:e9:64:c6:ee:7e:82:d8:0a:d6:0b:d6:29:eb:33:2b:1a:
         b1:bd:5a:f3:4c:c9:ef:27:27:7e:6b:e6:7c:2a:9b:a2:20:96:
         31:87:32:35:6a:67:9b:62:f4:9a:be:c9:25:60:d6:6c:07:e5:
         7b:ca:00:3f:b8:23:77:0c:ac:23:6b:d0:a4:8e:78:d6:84:bd:
         6a:70:b3:72:f7:c8:af:04:d9:da:cb:ea:ce:58:e3:41:8e:18:
         43:fa:68:ce:ba:a7:ef:2b:95:0d:5a:a8:4e:16:aa:98:6f:0c:
         a1:b1:3e:e7:2c:f4:11:45:d5:06:5a:96:21:01:c3:9a:14:ba:
         ac:d1:c8:01:f0:19:50:ff:9a:ae:0a:68:5d:c9:6b:2a:3e:64:
         5a:ba:84:cf:fc:f3:99:4b:85:5f:1b:47:c0:23:f2:42:52:14:
         77:40:12:f8:9e:b8:a6:56:c8:11:ba:14:c7:a1:b5:c9:57:81:
         f2:9f:2f:9a:f0:53:fc:cc:55:bd:31:d2:8f:03:fd:60:90:cb:
         c1:81:09:1a:c5:8a:f0:d0:25:98:8b:5f:00:06:76:e6:de:97:
         38:a4:ed:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 11:56:43 2026 by rpki-client