Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft
File:                     veqI5TAIig7Hf54Ozuoz5gHhnPc.mft (raw, json)
Hash identifier:          3LUdyQCwA4Sj/5zQFaqEwss+YRW2EeTWBCvYpRVthO0=
Subject key identifier:   30:09:E7:9F:99:7F:F3:A1:E3:8F:CA:5B:F3:3A:D1:28:19:2B:39:69
Authority key identifier: BD:EA:88:E5:30:08:8A:0E:C7:7F:9E:0E:CE:EA:33:E6:01:E1:9C:F7
Certificate issuer:       /CN=A919C82F/serialNumber=BDEA88E530088A0EC77F9E0ECEEA33E601E19CF7
Certificate serial:       0AFD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft
Manifest number:          0AF6
Signing time:             Sat 18 Oct 2025 20:18:45 +0000
Manifest this update:     Sat 18 Oct 2025 20:18:44 +0000
Manifest next update:     Sat 25 Oct 2025 20:18:44 +0000
Files and hashes:         1: veqI5TAIig7Hf54Ozuoz5gHhnPc.crl (hash: cTFl7oM0ZLFNG2mycWBpLh70ulrhxt64N1cMr9Yvnf4=)
                          2: D6D22DBC53CD11EA9301951AC4F9AE02.roa (hash: QRIDYBqtTuT5aBwWGaGhz+TBnDkutY1YQfqChJSa2+E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.crl
                          rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 20:18:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2813 (0xafd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C82F, serialNumber=BDEA88E530088A0EC77F9E0ECEEA33E601E19CF7
        Validity
            Not Before: Oct 18 20:18:44 2025 GMT
            Not After : Oct 25 20:18:44 2025 GMT
        Subject: CN=68f3f624-1b66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:fd:f7:60:c2:c6:08:91:1f:f8:32:43:a2:1e:
                    6d:31:50:5d:33:43:be:db:84:8c:bf:2b:3d:c2:10:
                    a9:8e:f1:d2:88:a4:72:07:68:98:eb:dd:3c:6a:80:
                    02:dc:cf:a0:50:12:00:b4:ed:75:21:eb:64:cc:46:
                    bb:05:45:2e:3d:93:2a:25:4d:05:97:6e:ce:0e:bf:
                    15:0d:4d:12:71:15:63:a6:d8:96:77:2c:7f:53:51:
                    7c:1e:d3:b0:55:f3:d4:5f:1f:67:ae:c1:0c:b6:f0:
                    c0:3f:b2:6d:dc:35:38:a6:33:fd:76:ab:ed:0f:43:
                    f5:25:9b:10:da:03:06:0f:1a:a2:77:c8:0c:39:52:
                    bb:eb:fa:1f:fa:13:06:a0:fd:bc:7c:a5:75:17:51:
                    39:33:05:9d:96:36:90:b8:1f:9e:0d:19:ec:7b:eb:
                    18:ec:47:9d:95:9a:eb:b7:8a:ae:23:21:96:68:47:
                    51:48:79:61:a2:88:d7:b2:42:2a:a2:85:e6:96:bb:
                    de:09:8c:61:45:0c:bb:29:8a:65:f8:2f:68:87:6b:
                    35:cb:a9:c5:91:8e:80:be:21:09:fa:db:d3:d6:ea:
                    b1:97:22:45:5b:a7:e3:78:a4:e7:25:11:0f:ed:3a:
                    3f:09:17:95:f7:a9:03:cf:38:df:1a:ab:19:42:1f:
                    87:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:09:E7:9F:99:7F:F3:A1:E3:8F:CA:5B:F3:3A:D1:28:19:2B:39:69
            X509v3 Authority Key Identifier:
                keyid:BD:EA:88:E5:30:08:8A:0E:C7:7F:9E:0E:CE:EA:33:E6:01:E1:9C:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veqI5TAIig7Hf54Ozuoz5gHhnPc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C82F/D3D744EA53CC11EAA1EA4919C4F9AE02/veqI5TAIig7Hf54Ozuoz5gHhnPc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:6b:47:bc:73:f8:79:c9:a3:55:0a:d8:fb:2e:c0:c7:9d:10:
         b5:1e:30:be:87:b4:97:66:81:a6:f6:8b:95:a7:02:e2:17:40:
         c2:4a:7c:c9:f7:a3:41:c3:e9:f9:73:c9:25:fc:fe:7e:d1:10:
         1d:26:4c:bc:92:ac:f8:a4:73:37:b4:f8:e8:b3:0c:4f:22:43:
         00:c4:30:68:f6:87:2a:ad:5f:24:a0:d7:68:b1:4d:48:bb:e2:
         a7:d0:11:a5:61:01:ba:1c:1f:3f:16:b9:a8:f4:c4:b0:08:ff:
         07:c9:44:87:9d:b2:07:a1:0b:b3:07:f1:35:69:c8:93:d4:dc:
         73:f3:79:ba:07:17:91:13:db:d6:c5:33:58:86:81:a6:b3:6d:
         3d:a0:d5:c7:cd:c9:7a:bf:5c:cc:f2:cf:7d:83:d3:d6:df:2d:
         12:5e:42:6d:7b:07:72:33:ff:e3:02:c7:ae:8a:7a:e6:3e:c6:
         75:e2:bf:4a:46:3d:73:c2:7c:65:6b:14:39:50:d5:30:19:64:
         5c:a8:5d:db:19:8d:e0:93:6a:d6:24:41:63:a1:80:b7:d8:5a:
         ab:10:41:3f:b8:27:59:10:3e:58:e9:a0:b9:89:fd:63:40:5e:
         a9:90:73:7e:40:63:d2:66:24:48:7d:c0:79:2a:4e:38:e5:fb:
         e3:2c:64:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:32:18 2025 by rpki-client