Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft
File:                     veqI5TAIig7Hf54Ozuoz5gHhnPc.mft (raw, json)
Hash identifier:          5RjWG7Icy2OmhGyMASU/cje5gukiHGSyhObe1JZ3Tu4=
Subject key identifier:   69:C8:98:EA:72:17:B0:92:B4:09:EA:1A:87:79:49:54:49:42:4F:21
Authority key identifier: BD:EA:88:E5:30:08:8A:0E:C7:7F:9E:0E:CE:EA:33:E6:01:E1:9C:F7
Certificate issuer:       /CN=A919C82F/serialNumber=BDEA88E530088A0EC77F9E0ECEEA33E601E19CF7
Certificate serial:       0B51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft
Manifest number:          0B49
Signing time:             Tue 24 Mar 2026 19:02:24 +0000
Manifest this update:     Tue 24 Mar 2026 19:02:23 +0000
Manifest next update:     Tue 31 Mar 2026 19:02:23 +0000
Files and hashes:         1: veqI5TAIig7Hf54Ozuoz5gHhnPc.crl (hash: /P877yqNQDItvhUkDy4IJHbqsJ3oT2kVSiKhTNAur78=)
                          2: D6D22DBC53CD11EA9301951AC4F9AE02.roa (hash: runmHBxR1tD48gkbVs4lorKzW7FMtqLJ5VaCHiE1PLM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.crl
                          rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2897 (0xb51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C82F, serialNumber=BDEA88E530088A0EC77F9E0ECEEA33E601E19CF7
        Validity
            Not Before: Mar 24 19:02:23 2026 GMT
            Not After : Mar 31 19:02:23 2026 GMT
        Subject: CN=69c2dfc0-3c89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ef:d3:7d:a3:ab:c1:03:7f:15:72:98:70:a8:
                    63:58:6d:c3:92:e4:b9:76:c1:58:41:b1:ab:d6:3d:
                    8f:56:53:31:81:f8:49:b4:b4:d3:54:be:e7:94:6d:
                    37:79:ca:a4:83:40:07:f3:f3:d8:87:9e:8f:24:d8:
                    c3:b7:62:30:c7:27:b8:8b:33:12:94:6a:13:b2:36:
                    25:d6:81:38:70:26:c7:7d:3f:83:bd:32:ae:a1:b4:
                    84:40:ac:fe:2e:8b:bc:33:bd:aa:ea:2f:51:8f:eb:
                    89:c3:54:55:7a:cc:53:e3:4c:79:a9:58:bd:23:4c:
                    6c:8b:92:a7:7e:87:d1:cb:03:d0:41:20:47:3e:db:
                    c0:7c:e4:61:a8:30:73:1c:40:7e:b4:03:3d:de:17:
                    52:a7:d7:74:62:b5:f3:be:b8:71:47:f6:21:8f:30:
                    cc:ee:83:d1:d0:33:86:5e:9c:ee:90:90:ec:d2:ba:
                    11:59:14:f2:01:5f:9c:f3:19:df:31:72:9a:28:83:
                    3a:8f:03:3b:98:8a:2f:3e:de:f0:c7:61:ec:a2:3a:
                    03:60:51:5a:15:25:d6:80:23:b9:05:8a:a8:26:9a:
                    e9:01:3a:04:8b:f7:c6:8c:67:ac:aa:75:0f:2f:3e:
                    b4:e6:73:c0:3b:5d:13:ed:d4:b1:3f:ff:12:45:62:
                    84:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C8:98:EA:72:17:B0:92:B4:09:EA:1A:87:79:49:54:49:42:4F:21
            X509v3 Authority Key Identifier:
                keyid:BD:EA:88:E5:30:08:8A:0E:C7:7F:9E:0E:CE:EA:33:E6:01:E1:9C:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:72:4d:57:c1:cc:24:7b:55:65:a6:04:b9:0b:3d:2f:94:32:
         d1:cf:45:bd:57:c0:c8:09:ec:fc:4b:28:13:f7:cf:6a:08:64:
         29:09:46:0d:64:6c:6f:dc:33:23:7e:bc:dc:da:81:d3:3a:ec:
         b1:fd:98:43:8b:59:45:a4:c1:ec:30:d3:93:ad:ea:67:9c:80:
         9e:79:24:b2:37:04:c5:d2:c4:af:ab:3f:6d:a4:20:bc:d1:d5:
         91:15:49:c4:bc:ab:8d:4f:6f:83:1f:45:d1:78:06:e1:74:d8:
         f8:74:94:1f:18:b6:9b:c2:e0:42:f6:55:45:d4:d5:df:84:1a:
         da:0e:b7:d1:e8:1a:9c:94:6b:00:f5:b8:b4:ef:b0:0d:ff:d1:
         5d:06:98:34:1d:50:24:33:b2:bc:10:31:c8:ec:2f:1d:ea:ab:
         dd:f8:6d:3a:ab:2f:6b:a1:a1:d0:84:c9:cb:14:f2:55:9b:87:
         79:f7:46:0b:c3:46:3b:b6:64:e2:a9:cc:d7:23:5d:3a:56:41:
         ea:c9:d4:68:4b:4f:16:42:51:b2:58:cc:cf:bd:a4:29:67:dd:
         04:90:04:8e:4a:39:f9:cf:f0:ca:7b:76:10:84:74:6c:c0:e8:
         14:24:ac:a9:1f:a1:27:3d:ac:28:e3:ec:2b:74:90:72:cd:f7:
         59:35:1b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:09:59 2026 by rpki-client