Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
File:                     VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft (raw, json)
Hash identifier:          fQQPPEVRvfi4tqG8RacgbNAut87igVphzhTONCmTlN8=
Subject key identifier:   E6:CF:22:4A:44:59:35:0C:DC:BE:40:4E:6E:28:00:31:AE:F1:1B:B7
Authority key identifier: 54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8
Certificate issuer:       /CN=A914C33A/serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8
Certificate serial:       1724
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
Manifest number:          170E
Signing time:             Mon 02 Mar 2026 15:38:43 +0000
Manifest this update:     Mon 02 Mar 2026 15:38:42 +0000
Manifest next update:     Mon 09 Mar 2026 15:38:42 +0000
Files and hashes:         1: VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl (hash: C/FXTZuqygF09wKkOxOyi0Z4XHRnxbf4Oa5XkYvNrR4=)
                          2: F9B55ECA922111EAB5138581C4F9AE02.roa (hash: tVNdNXfs/JUEf9PTu4jhJoFAKzZsZXMOgAYfuqbbB74=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl
                          rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5924 (0x1724)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C33A, serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8
        Validity
            Not Before: Mar  2 15:38:42 2026 GMT
            Not After : Mar  9 15:38:42 2026 GMT
        Subject: CN=69a5af02-1570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:41:17:c6:02:44:38:bb:db:9f:1e:86:55:f9:
                    38:6a:eb:e2:53:33:65:03:fa:b4:c4:ef:86:2f:31:
                    9a:61:61:1b:af:ce:32:53:57:38:1c:f8:21:28:a2:
                    68:32:7c:25:f5:f8:71:a2:cb:e9:67:a3:ef:fc:25:
                    9e:20:e7:17:aa:33:74:99:85:8a:a9:01:7e:36:a7:
                    0b:e6:1b:7b:7f:16:3f:e1:25:af:77:49:96:45:09:
                    e6:a5:72:01:b8:f0:1d:d9:45:a0:bb:3e:cd:a9:8f:
                    24:ad:a6:3b:ec:4e:86:63:3c:fb:ba:52:91:fe:2f:
                    ff:80:f4:da:2b:4c:76:00:60:ac:46:35:66:26:6b:
                    46:32:e8:b1:0f:fc:5c:ec:2f:22:f8:ff:38:68:cb:
                    ac:6f:fb:98:3b:16:b2:d7:bb:f3:19:3b:12:a5:4f:
                    58:0d:7e:40:a3:6e:ec:1a:99:7c:d7:a5:fe:7f:8e:
                    61:35:7a:17:a0:00:3a:1d:8d:b6:f1:8d:9e:32:f5:
                    0b:f3:e7:9a:ea:06:46:dc:14:ca:7c:42:26:8b:87:
                    1c:60:60:e9:c7:be:14:88:7d:0f:df:d5:b6:5a:d4:
                    e1:0a:5a:76:eb:c0:24:93:89:d3:4c:fb:a9:eb:f0:
                    3e:92:05:06:05:3f:08:82:36:8b:6b:d5:6c:db:df:
                    15:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:CF:22:4A:44:59:35:0C:DC:BE:40:4E:6E:28:00:31:AE:F1:1B:B7
            X509v3 Authority Key Identifier:
                keyid:54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:48:e5:e9:77:91:b4:f0:e9:7b:c2:01:b9:29:83:bd:41:01:
         93:2c:b4:f4:10:86:de:f3:72:7c:85:5c:ad:da:6d:fb:f0:df:
         f2:5b:48:93:9d:55:d0:02:f6:ce:40:51:7a:f2:76:06:ae:07:
         52:74:86:bb:48:79:7d:c3:97:3e:9e:a9:86:3a:72:58:1d:b8:
         d9:be:db:a7:1d:3b:d7:cc:a2:95:34:0d:d0:64:c4:59:fd:c0:
         52:f6:19:2c:57:65:54:46:6d:52:f1:f4:f5:ac:51:f4:2d:0e:
         5c:32:f7:5a:45:ef:78:0e:56:61:24:9a:e8:bc:cb:9f:0f:88:
         78:d4:7f:21:76:11:ac:15:49:77:42:7b:7d:74:bc:78:35:a2:
         ce:8f:3a:8b:00:6a:76:38:22:98:04:e0:bf:f5:97:70:bc:2c:
         f5:fa:7e:d7:74:29:04:5f:f0:82:9f:23:44:37:ef:1a:d9:99:
         c4:7d:1f:8e:a4:81:ee:db:96:71:2e:29:73:d6:0f:2b:db:ce:
         ca:11:91:7b:86:5a:ff:b6:4b:a4:7d:07:f0:07:05:8f:12:31:
         b3:18:0a:e6:d2:b8:75:26:5b:9a:15:26:1a:5b:2d:d7:45:7c:
         e4:e3:b4:90:46:0e:29:1b:a0:17:7d:c8:36:3d:bf:f7:63:ee:
         3a:cf:db:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:08:25 2026 by rpki-client