Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.mft
File:                     vejnZNDzasWboDNpTTo883QGugk.mft (raw, json)
Hash identifier:          XE3aD7dJFGj+4qInpqfFwjqHk3/Xb7GNZhcJZ1kNPns=
Subject key identifier:   E9:02:5A:DA:8E:53:E7:A5:F2:63:2C:1A:17:83:BF:0E:C2:F9:F5:AA
Authority key identifier: BD:E8:E7:64:D0:F3:6A:C5:9B:A0:33:69:4D:3A:3C:F3:74:06:BA:09
Certificate issuer:       /CN=A914A192/serialNumber=BDE8E764D0F36AC59BA033694D3A3CF37406BA09
Certificate serial:       05B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vejnZNDzasWboDNpTTo883QGugk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.mft
Manifest number:          05AA
Signing time:             Tue 12 May 2026 23:15:09 +0000
Manifest this update:     Tue 12 May 2026 23:15:08 +0000
Manifest next update:     Tue 19 May 2026 23:15:08 +0000
Files and hashes:         1: vejnZNDzasWboDNpTTo883QGugk.crl (hash: D6x3CA7RrlwDQ1wVLZHSN5MeKKYilve2bNDNm8fUdSc=)
                          2: 361EE54811E211ECAF7EDA48C4F9AE02.roa (hash: BAM5G8Jr8eUgA2dRIIXnVZKAm9CzzN8CHKbO1zMfazg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.crl
                          rsync://rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vejnZNDzasWboDNpTTo883QGugk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:15:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1457 (0x5b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A192, serialNumber=BDE8E764D0F36AC59BA033694D3A3CF37406BA09
        Validity
            Not Before: May 12 23:15:08 2026 GMT
            Not After : May 19 23:15:08 2026 GMT
        Subject: CN=6a03b47d-0ab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c1:40:09:ca:9a:a3:ec:01:de:fa:87:4f:eb:
                    91:11:88:4d:82:8b:97:f0:fc:b7:93:55:04:9d:61:
                    d7:a6:f4:80:43:2d:7f:89:c4:13:17:02:15:74:58:
                    62:59:3c:c6:2f:15:3b:4c:10:25:6a:af:78:af:e4:
                    dd:09:22:17:e8:86:61:25:c8:12:07:55:fc:bd:7b:
                    a1:d7:85:8d:c3:66:77:fe:fb:37:0e:f1:13:67:53:
                    0b:3f:b4:ef:f7:9b:fe:35:82:3f:fb:f3:36:0f:ba:
                    9e:f4:1e:b0:25:54:48:ef:6b:9d:89:dc:63:0e:b2:
                    a6:2f:8c:c0:6f:51:9d:3c:67:04:0f:25:26:f0:aa:
                    d9:8e:f6:de:b5:70:39:51:b1:50:b6:10:c0:4f:bf:
                    96:80:92:b9:23:43:60:00:16:88:58:b5:f5:cd:0f:
                    70:05:c6:79:27:be:d3:29:11:05:cb:0d:5b:6c:94:
                    b5:dd:44:2a:02:7e:1d:08:d0:f9:65:8f:4a:74:d1:
                    aa:07:ee:e3:e0:c2:08:f8:ff:56:be:d9:63:8e:cb:
                    23:97:d1:ca:a2:5b:0e:38:25:b5:53:15:c9:7f:36:
                    e8:1e:fb:0f:c3:f4:e2:11:7e:54:f6:e5:f0:c1:0c:
                    8f:b2:7b:9e:cc:a6:75:43:cc:cd:3a:b8:e0:b9:b5:
                    22:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:02:5A:DA:8E:53:E7:A5:F2:63:2C:1A:17:83:BF:0E:C2:F9:F5:AA
            X509v3 Authority Key Identifier:
                keyid:BD:E8:E7:64:D0:F3:6A:C5:9B:A0:33:69:4D:3A:3C:F3:74:06:BA:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vejnZNDzasWboDNpTTo883QGugk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:40:9e:16:1a:62:d1:36:f7:97:39:4d:c6:6e:81:96:ad:63:
         37:da:7a:03:2e:3e:93:e8:1d:d9:4e:23:a8:4b:27:28:9f:07:
         85:66:39:c7:ad:7d:ce:81:f6:f5:f1:d3:82:ac:21:f3:84:0d:
         2b:d4:b8:ab:90:b2:2c:8f:2b:69:2b:27:b8:9c:75:35:d5:e9:
         61:33:39:71:2b:54:25:b0:33:c8:95:1e:d8:19:6e:ec:d9:a6:
         f1:28:fb:55:a8:73:6e:ff:5d:27:1e:4d:fe:a9:30:c7:8a:4f:
         b4:75:f5:5b:9e:be:d4:20:fe:4c:7c:34:d8:8f:15:2a:5d:9a:
         2d:12:fd:1f:ad:a4:66:7b:51:11:5f:3e:fb:44:2e:a4:6e:82:
         12:75:b9:0e:eb:e3:b5:75:db:06:a8:08:b2:05:a2:21:7f:cb:
         e8:71:bb:6a:e1:15:10:d0:1f:42:da:b0:df:c3:69:33:b6:fa:
         c2:28:da:97:fa:32:d8:f9:70:31:3b:97:09:7f:97:e8:25:70:
         80:6f:81:3c:96:8d:12:78:51:0a:c4:1e:57:e0:77:14:89:fe:
         9f:a1:0c:d0:63:51:37:01:a9:f4:74:64:1b:c9:e9:be:d3:11:
         4d:fa:7c:7f:1c:9e:bc:5a:d7:ef:32:34:c9:9c:4a:e9:6a:f5:
         1d:07:77:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:37:03 2026 by rpki-client