Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
File:                     VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft (raw, json)
Hash identifier:          OBKY1odZgH6mxGquKB8tuqSsF7eH2EvF530ZeRR5hso=
Subject key identifier:   64:A5:AA:10:E4:CD:53:F1:B7:56:F4:5C:BE:FC:7B:27:7E:DE:5B:70
Authority key identifier: 54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8
Certificate issuer:       /CN=A914C33A/serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8
Certificate serial:       178B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
Manifest number:          1775
Signing time:             Sun 20 Sep 2026 15:30:56 +0000
Manifest this update:     Sun 20 Sep 2026 15:30:55 +0000
Manifest next update:     Sun 27 Sep 2026 15:30:55 +0000
Files and hashes:         1: VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl (hash: XOHQHLY2TtY4SYj0tSVAvazQC1FYc2ogAddLFp1oOs4=)
                          2: F9B55ECA922111EAB5138581C4F9AE02.roa (hash: tVNdNXfs/JUEf9PTu4jhJoFAKzZsZXMOgAYfuqbbB74=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl
                          rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 15:30:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6027 (0x178b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C33A, serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8
        Validity
            Not Before: Sep 20 15:30:55 2026 GMT
            Not After : Sep 27 15:30:55 2026 GMT
        Subject: CN=6aaffc30-abda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b9:2e:dd:a8:29:3c:a1:45:ee:04:5e:38:dd:
                    51:e6:f9:05:05:24:65:31:8b:c0:3f:4d:80:3e:a1:
                    b9:bc:7b:9a:1f:74:7c:13:f4:04:81:3d:e5:ad:b3:
                    d6:53:79:c3:0b:fa:e4:13:cd:08:06:75:70:1b:0e:
                    d0:6a:05:48:bf:f4:0d:d3:6a:cb:41:24:19:d7:ff:
                    c6:f5:5c:86:da:b3:0d:05:27:4e:46:85:e3:ec:b5:
                    3c:06:6d:00:9b:de:0c:87:b2:cb:82:5d:cc:ec:a3:
                    27:9d:b7:ba:c0:1b:90:51:3f:de:26:55:25:1f:74:
                    93:c7:c3:12:73:23:64:94:7a:43:2d:75:a0:d6:94:
                    d1:96:f4:58:00:ee:70:d7:7d:1e:c1:b8:d6:7b:f9:
                    ba:7b:61:15:53:b8:a9:ae:28:4e:04:17:a7:e1:b9:
                    e6:88:12:ab:90:7a:93:d3:41:b7:6b:a0:73:77:f9:
                    fd:ce:84:3e:3a:8e:5f:cc:fe:fe:42:e0:dd:4c:a8:
                    65:f6:39:28:ec:74:55:ce:b2:c9:f4:0e:25:90:3f:
                    49:74:74:ff:3a:65:11:a6:c0:57:a6:e6:bf:f3:28:
                    e5:63:58:d3:df:0f:a6:7f:9f:00:b5:f7:80:e8:3f:
                    74:21:93:d9:ae:e8:6e:95:75:fe:f7:1a:ce:93:50:
                    f7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A5:AA:10:E4:CD:53:F1:B7:56:F4:5C:BE:FC:7B:27:7E:DE:5B:70
            X509v3 Authority Key Identifier:
                keyid:54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:bb:18:ab:ed:3b:59:44:d6:47:29:80:3b:71:bf:95:d8:12:
         6a:c5:25:67:76:44:21:89:a3:80:cc:92:21:23:95:ca:f2:92:
         cb:8a:05:4b:e4:e2:91:a3:67:71:cd:91:08:46:36:9e:92:c7:
         81:47:63:4c:b9:3f:e8:9e:c0:97:a6:c9:98:28:2a:da:da:52:
         f0:a4:f5:f6:7e:e5:41:d7:8f:49:79:80:73:40:b5:a0:74:8b:
         0c:02:84:44:03:8b:a2:ed:62:ae:b0:50:e1:ab:e2:e0:fc:42:
         bf:72:53:23:ff:6a:f5:fe:e4:7b:37:ab:9c:21:86:c9:a1:82:
         21:6f:1e:7c:3d:ef:01:ad:04:1e:dd:86:f3:7e:bb:98:20:7c:
         22:70:c9:bd:ed:57:7d:b1:1d:a3:d9:46:45:2e:81:a5:36:c9:
         f8:41:2a:42:6a:db:10:99:4c:bc:2d:4a:f7:fe:82:14:a8:5e:
         97:a4:c1:69:90:6c:ac:49:ec:ac:a3:85:53:5d:54:10:94:a2:
         89:67:b7:1f:1a:fc:34:73:10:1d:42:1c:c9:41:27:d3:2e:21:
         6e:b6:e6:a9:4b:29:3b:49:31:f2:d6:2b:02:d7:f0:5f:ed:52:
         98:aa:9b:19:c1:a9:ae:d1:6d:de:12:42:f1:32:d3:48:63:e1:
         8b:ba:6a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:24:37 2026 by rpki-client