Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft
File:                     veqI5TAIig7Hf54Ozuoz5gHhnPc.mft (raw, json)
Hash identifier:          cx8VciLWRciyMv/rl2tqs1HVyre+4sexE/RoJcKqE4k=
Subject key identifier:   4A:FE:E5:04:2C:1B:E8:DC:10:04:F1:62:4A:CB:41:F9:41:0A:00:6C
Authority key identifier: BD:EA:88:E5:30:08:8A:0E:C7:7F:9E:0E:CE:EA:33:E6:01:E1:9C:F7
Certificate issuer:       /CN=A919C82F/serialNumber=BDEA88E530088A0EC77F9E0ECEEA33E601E19CF7
Certificate serial:       0B94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft
Manifest number:          0B8B
Signing time:             Tue 28 Jul 2026 19:23:52 +0000
Manifest this update:     Tue 28 Jul 2026 19:23:51 +0000
Manifest next update:     Tue 04 Aug 2026 19:23:51 +0000
Files and hashes:         1: veqI5TAIig7Hf54Ozuoz5gHhnPc.crl (hash: JQFnmrvk+2gaGj4SmDfZS7ztyTwQGqbudTY8BiMKLts=)
                          2: D6D22DBC53CD11EA9301951AC4F9AE02.roa (hash: PIyBuMUGswUUPyphqmLcOxvbRBBsVsv2sj/WYRN7vSw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.crl
                          rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2964 (0xb94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C82F, serialNumber=BDEA88E530088A0EC77F9E0ECEEA33E601E19CF7
        Validity
            Not Before: Jul 28 19:23:51 2026 GMT
            Not After : Aug  4 19:23:51 2026 GMT
        Subject: CN=6a6901c8-3d71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:67:de:1f:b0:68:cc:59:bd:9e:00:bc:53:08:
                    0b:c6:e6:b6:f6:00:c3:54:6f:de:c3:6a:16:a7:a6:
                    db:9c:78:c0:c0:8d:d2:38:ce:64:a3:38:1b:cc:a8:
                    e1:03:3d:87:02:3e:de:3b:52:37:47:88:88:2d:5b:
                    30:5f:0d:00:06:7d:ee:c2:d9:6f:bc:8b:7c:11:a7:
                    a7:9e:05:3d:58:21:d7:54:2c:a5:d7:92:9b:78:8c:
                    a5:b5:c5:d6:a8:58:72:fc:76:63:1c:6d:9b:4c:e8:
                    94:e6:4d:4b:93:30:b8:9d:d0:e6:c8:26:56:61:ae:
                    e5:a6:14:3f:8d:5a:4e:92:da:7b:2e:13:f7:6c:37:
                    79:2c:f9:e9:b4:77:78:a8:12:1a:e2:14:d8:60:67:
                    a5:c2:b5:1e:2b:8b:44:62:75:e1:df:64:b3:4c:8e:
                    6c:0e:81:ce:90:73:83:08:26:af:f1:a5:43:67:07:
                    8f:46:f9:2a:e2:c7:eb:59:72:d5:6d:76:af:10:e5:
                    42:50:a0:fc:9c:26:e8:19:97:76:99:59:86:2a:ce:
                    63:9e:0c:19:d5:d4:24:f5:bc:2f:dc:da:99:be:05:
                    4e:23:31:a8:bd:2c:9a:51:75:66:b3:b6:02:75:a5:
                    b8:93:32:da:bb:d9:a7:d8:ea:88:dc:24:ef:d0:9d:
                    06:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:FE:E5:04:2C:1B:E8:DC:10:04:F1:62:4A:CB:41:F9:41:0A:00:6C
            X509v3 Authority Key Identifier:
                keyid:BD:EA:88:E5:30:08:8A:0E:C7:7F:9E:0E:CE:EA:33:E6:01:E1:9C:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:57:48:d1:d9:06:79:6b:06:48:8e:5a:2c:25:3f:19:c6:17:
         ff:ce:ba:63:b1:7c:eb:9e:ce:1b:61:53:26:5f:37:8d:1e:cc:
         18:be:fb:be:43:05:c7:01:07:7b:8e:ae:42:54:bc:45:81:6e:
         ea:18:3b:e1:e1:30:4d:68:b1:95:c3:70:7e:d1:ec:d4:fa:b0:
         49:4e:f1:6f:05:6f:32:d0:77:1e:fc:29:48:9b:cd:25:11:a6:
         9c:fe:40:ac:be:68:e7:1d:fb:a7:bc:3d:f7:90:d8:d3:ae:a4:
         06:eb:1d:62:b7:92:be:0d:a5:c4:a5:59:50:22:f8:b9:b7:32:
         c1:71:d9:a8:5b:2d:37:4b:53:31:6c:61:d0:32:db:3b:da:08:
         7b:0d:da:6b:1d:bd:7e:d6:0d:d3:26:a7:fa:83:3f:32:2d:73:
         ef:39:d2:08:11:d9:a8:e7:68:1f:08:c2:26:bf:e6:f4:aa:b5:
         52:f3:9c:8b:47:6f:d8:98:c7:b4:7b:62:00:89:2c:b6:eb:70:
         bd:0d:09:c4:f9:1d:bb:df:b0:8a:4f:17:b8:a9:ce:71:69:2d:
         43:64:3a:1d:3a:98:6b:e9:6c:53:6c:96:2d:45:f8:fd:03:5d:
         02:07:a6:ba:72:57:79:e9:e7:62:51:e2:a6:b2:d6:b1:d4:3a:
         2b:e1:f8:45
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUM4MkYxMTAvBgNVBAUTKEJERUE4OEU1MzAwODhBMEVDNzdGOUUwRUNFRUEzM0U2
MDFFMTlDRjcwHhcNMjYwNzI4MTkyMzUxWhcNMjYwODA0MTkyMzUxWjAYMRYwFAYD
VQQDEw02YTY5MDFjOC0zZDcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk2feH7BozFm9ngC8UwgLxua29gDDVG/ew2oWp6bbnHjAwI3SOM5kozgbzKjh
Az2HAj7eO1I3R4iILVswXw0ABn3uwtlvvIt8EaenngU9WCHXVCyl15KbeIyltcXW
qFhy/HZjHG2bTOiU5k1LkzC4ndDmyCZWYa7lphQ/jVpOktp7LhP3bDd5LPnptHd4
qBIa4hTYYGelwrUeK4tEYnXh32SzTI5sDoHOkHODCCav8aVDZwePRvkq4sfrWXLV
bXavEOVCUKD8nCboGZd2mVmGKs5jngwZ1dQk9bwv3NqZvgVOIzGovSyaUXVms7YC
daW4kzLau9mn2OqI3CTv0J0GZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEr+5QQs
G+jcEATxYkrLQflBCgBsMB8GA1UdIwQYMBaAFL3qiOUwCIoOx3+eDs7qM+YB4Zz3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzgyRi9EM0Q3NDRFQTUz
Q0MxMUVBQTFFQTQ5MTlDNEY5QUUwMi92ZXFJNVRBSWlnN0hmNTRPenVvejVnSGhu
UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZlcUk1VEFJaWc3SGY1NE96dW96NWdIaG5QYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QzgyRi9EM0Q3NDRFQTUzQ0MxMUVBQTFFQTQ5MTlDNEY5QUUwMi92ZXFJNVRBSWln
N0hmNTRPenVvejVnSGhuUGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASldI0dkGeWsGSI5aLCU/GcYX/866Y7F8657OG2FTJl83jR7MGL77vkMFxwEH
e46uQlS8RYFu6hg74eEwTWixlcNwftHs1PqwSU7xbwVvMtB3HvwpSJvNJRGmnP5A
rL5o5x37p7w995DY066kBusdYreSvg2lxKVZUCL4ubcywXHZqFstN0tTMWxh0DLb
O9oIew3aax29ftYN0yan+oM/Mi1z7znSCBHZqOdoHwjCJr/m9Kq1UvOci0dv2JjH
tHtiAIkstutwvQ0JxPkdu9+wik8XuKnOcWktQ2Q6HTqYa+lsU2yWLUX4/QNdAgem
unJXeennYlHiprLWsdQ6K+H4RQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:45:25 2026 by rpki-client