Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft
File:                     veqI5TAIig7Hf54Ozuoz5gHhnPc.mft (raw, json)
Hash identifier:          nojCly8G7VVSkpUCq64G1NtK4arn1e5RPuRaOycKoRU=
Subject key identifier:   CF:FC:69:7F:29:17:6A:5E:94:36:34:B4:6F:14:4D:2C:A8:89:A0:97
Authority key identifier: BD:EA:88:E5:30:08:8A:0E:C7:7F:9E:0E:CE:EA:33:E6:01:E1:9C:F7
Certificate issuer:       /CN=A919C82F/serialNumber=BDEA88E530088A0EC77F9E0ECEEA33E601E19CF7
Certificate serial:       0B45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft
Manifest number:          0B3D
Signing time:             Mon 02 Mar 2026 00:22:56 +0000
Manifest this update:     Mon 02 Mar 2026 00:22:54 +0000
Manifest next update:     Mon 09 Mar 2026 00:22:54 +0000
Files and hashes:         1: veqI5TAIig7Hf54Ozuoz5gHhnPc.crl (hash: jIqg1o4Y8ssHXC8tKCjB6S1giIT0+R+I4cpy7ndO4bM=)
                          2: D6D22DBC53CD11EA9301951AC4F9AE02.roa (hash: runmHBxR1tD48gkbVs4lorKzW7FMtqLJ5VaCHiE1PLM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.crl
                          rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2885 (0xb45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C82F, serialNumber=BDEA88E530088A0EC77F9E0ECEEA33E601E19CF7
        Validity
            Not Before: Mar  2 00:22:54 2026 GMT
            Not After : Mar  9 00:22:54 2026 GMT
        Subject: CN=69a4d85f-2295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b8:76:d6:b6:f6:58:33:62:8b:28:bd:46:16:
                    4e:35:a7:74:b1:8e:cf:8a:8e:b7:81:80:86:74:b2:
                    02:3f:8c:51:d0:95:7d:8e:e3:34:5a:80:88:05:0e:
                    d8:d1:ee:e5:68:01:8e:ab:12:75:58:04:05:58:82:
                    ed:9b:30:12:6a:be:93:4d:43:a2:3e:cd:57:4d:45:
                    a9:e9:0b:9d:44:ae:36:49:2f:5b:dc:41:bc:21:f7:
                    ce:be:da:e3:46:0e:0e:47:11:41:c3:e9:18:4f:4b:
                    7e:d7:17:c6:08:08:79:d9:6b:30:61:c0:ac:b5:60:
                    75:69:72:4b:c5:bc:29:4f:54:c3:4a:01:61:dc:cd:
                    95:e9:78:e3:af:ba:a6:be:aa:94:27:8c:ad:71:5d:
                    b7:d4:75:a5:2f:8c:7e:c5:b1:5e:37:f9:ef:92:c7:
                    94:37:d2:93:4c:7c:c1:29:ef:76:10:93:eb:59:e7:
                    f6:a4:b9:4e:26:f2:23:0c:2f:88:f1:07:e6:5e:d1:
                    42:1c:36:0a:f2:40:c4:8c:f9:5f:cf:85:01:7c:64:
                    a6:90:9c:c6:36:db:47:91:20:cc:a0:b4:0c:6b:07:
                    24:e4:28:b2:e1:a7:70:3a:37:6e:0f:e6:36:2e:eb:
                    2d:97:29:fb:f5:3b:64:77:a7:4f:bd:e0:20:99:40:
                    dc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:FC:69:7F:29:17:6A:5E:94:36:34:B4:6F:14:4D:2C:A8:89:A0:97
            X509v3 Authority Key Identifier:
                keyid:BD:EA:88:E5:30:08:8A:0E:C7:7F:9E:0E:CE:EA:33:E6:01:E1:9C:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:19:3e:75:00:62:6e:48:a9:62:ea:fa:eb:68:db:f4:30:7a:
         48:cd:22:5e:ca:2c:76:21:e9:9d:54:d9:a2:fc:a7:f7:0f:80:
         20:b9:ee:e0:89:05:a0:14:d0:b7:17:d3:bf:25:63:75:c4:71:
         0b:99:05:38:a4:b4:30:be:92:3e:21:10:6d:82:86:20:0e:3d:
         95:63:a1:6e:7c:cc:c9:1a:a7:9a:d6:6d:3f:0b:4b:5b:62:51:
         18:ed:7b:34:f3:ea:97:fa:d8:fe:21:7a:b8:87:28:8a:2f:b7:
         40:00:1a:c3:53:b2:34:18:59:1e:ee:56:2c:cb:b7:94:4a:c5:
         6a:1f:34:fe:02:18:55:25:8e:7e:6a:66:c3:25:5c:3b:7d:0c:
         f0:05:3d:b1:7d:87:7d:b9:2a:6d:28:07:a5:fe:52:10:4e:a1:
         1c:4e:11:b1:57:df:d2:b6:16:d1:2b:64:36:f1:f6:37:f7:80:
         62:c1:43:ea:24:f0:83:b1:9a:6f:0e:6f:67:9f:c6:c7:39:fe:
         17:9f:3d:61:06:e4:e1:6f:43:98:5e:05:a0:73:a5:8b:95:4f:
         92:97:45:b8:98:57:a1:0e:55:aa:fb:ab:87:09:6a:cf:4a:e5:
         ac:fc:d9:52:f4:fe:7c:5c:0b:c5:4b:79:61:4d:99:f4:13:dd:
         f4:1b:b2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:12:24 2026 by rpki-client