Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft
File:                     veqI5TAIig7Hf54Ozuoz5gHhnPc.mft (raw, json)
Hash identifier:          ZCSsjATMt6IjPu6E7CH0kVnR066ZxM5oHkAGErJgW2Q=
Subject key identifier:   E2:4F:0B:E9:05:E4:1B:CE:B1:81:1D:B4:59:0F:DA:C3:3D:2F:B1:F0
Authority key identifier: BD:EA:88:E5:30:08:8A:0E:C7:7F:9E:0E:CE:EA:33:E6:01:E1:9C:F7
Certificate issuer:       /CN=A919C82F/serialNumber=BDEA88E530088A0EC77F9E0ECEEA33E601E19CF7
Certificate serial:       0ADA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft
Manifest number:          0AD3
Signing time:             Sun 10 Aug 2025 19:28:25 +0000
Manifest this update:     Sun 10 Aug 2025 19:28:25 +0000
Manifest next update:     Sun 17 Aug 2025 19:28:25 +0000
Files and hashes:         1: veqI5TAIig7Hf54Ozuoz5gHhnPc.crl (hash: i3xz1eC2YOk1FX0wV2EsQ0bdmh+7CD1X0BbAhJKekEI=)
                          2: D6D22DBC53CD11EA9301951AC4F9AE02.roa (hash: QRIDYBqtTuT5aBwWGaGhz+TBnDkutY1YQfqChJSa2+E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.crl
                          rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2778 (0xada)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C82F, serialNumber=BDEA88E530088A0EC77F9E0ECEEA33E601E19CF7
        Validity
            Not Before: Aug 10 19:28:25 2025 GMT
            Not After : Aug 17 19:28:25 2025 GMT
        Subject: CN=6898f2d9-888e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2e:03:71:e3:2f:c2:cd:a3:06:95:31:ce:4e:
                    5d:69:30:22:60:52:ad:42:03:cd:12:4c:29:89:17:
                    13:a3:e2:55:81:84:da:ff:21:53:c3:e5:4b:87:73:
                    11:ba:77:05:fa:79:1c:2d:f4:92:1b:63:e5:1f:59:
                    b4:73:de:ae:2c:73:02:b3:49:6f:23:54:37:e7:99:
                    c7:c3:b1:3d:83:85:90:d2:31:63:1c:da:f0:d1:89:
                    32:90:ec:01:e9:5a:44:c7:91:d9:08:df:16:78:7b:
                    bc:e5:da:ef:8f:be:e1:2f:04:2a:69:65:73:6c:d6:
                    7d:c1:b8:16:7e:6c:00:d1:7a:64:0b:76:f5:8e:a1:
                    95:e0:71:e9:e5:b8:4e:d7:07:a8:af:e4:4e:1f:4b:
                    d1:b0:08:61:83:80:bd:25:6f:63:66:eb:4d:d6:86:
                    a4:f1:44:ae:dd:01:ad:30:6a:ad:40:6a:77:a3:de:
                    41:48:ad:c5:ac:53:90:d7:f7:b1:af:0f:22:43:f3:
                    d3:60:4e:8a:2b:7d:a6:11:c6:67:7a:73:54:cf:12:
                    da:17:f2:08:52:9f:97:b0:b9:18:ab:f3:09:69:0a:
                    6a:b3:a8:7b:a7:62:03:0e:1a:25:d7:b3:cd:50:43:
                    35:c6:df:fe:b5:19:3f:27:83:b9:71:83:f4:cc:0d:
                    a8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:4F:0B:E9:05:E4:1B:CE:B1:81:1D:B4:59:0F:DA:C3:3D:2F:B1:F0
            X509v3 Authority Key Identifier:
                keyid:BD:EA:88:E5:30:08:8A:0E:C7:7F:9E:0E:CE:EA:33:E6:01:E1:9C:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:4e:fe:be:8b:6f:57:2e:0b:1a:69:39:97:79:08:e7:4c:95:
         87:e3:e5:19:3f:a7:a2:9a:ec:2b:27:84:f3:a6:1c:e3:30:80:
         81:12:67:5a:1e:b9:f3:26:bf:a1:5c:38:d3:ac:a1:b8:b9:33:
         c8:44:c2:7d:ea:74:0c:10:a5:e8:a9:34:ad:bd:53:ee:ef:ce:
         41:2a:3f:08:15:3f:f0:86:07:73:7a:4f:d2:ff:88:ba:c1:aa:
         b6:75:6f:25:1a:76:a5:53:af:d7:5f:a1:4a:dc:e6:2b:e0:8b:
         2a:5e:1f:36:7f:d2:78:cd:a8:fb:ce:19:81:11:13:b8:d6:dc:
         12:c4:37:ee:8d:64:30:c6:d1:fd:86:88:80:05:1e:88:f2:e7:
         26:97:d1:35:99:68:b5:bc:e1:f6:da:3a:60:dd:93:54:d1:1e:
         5d:cc:d6:6c:85:12:c4:49:1c:07:8d:69:8d:96:45:7f:a2:83:
         01:de:b7:99:97:46:de:49:d3:17:96:e0:14:5c:de:10:f4:2d:
         c5:2a:c3:7d:34:f3:67:cd:d8:ac:e4:3f:ca:8c:e6:86:d8:c4:
         b9:44:43:36:90:c1:65:70:d6:66:37:74:b5:43:a8:3e:f2:69:
         bb:61:94:24:7a:18:8f:a1:0d:10:d6:62:2c:71:78:6d:3b:19:
         e2:de:21:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:02:58 2025 by rpki-client