Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft
File:                     VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft (raw, json)
Hash identifier:          5gbrL/gMy0zEpcKz9rY9AHPPzkSou1iuvnj8eZrPw9I=
Subject key identifier:   85:09:46:12:5B:BB:AF:14:CD:E2:71:94:32:E2:D1:78:33:27:29:43
Authority key identifier: 56:B7:68:01:D5:0A:4E:63:C8:5E:06:45:77:06:54:B7:F9:36:C9:94
Certificate issuer:       /CN=A91AD9BD/serialNumber=56B76801D50A4E63C85E0645770654B7F936C994
Certificate serial:       0275
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft
Manifest number:          026C
Signing time:             Fri 17 Apr 2026 01:56:59 +0000
Manifest this update:     Fri 17 Apr 2026 01:56:58 +0000
Manifest next update:     Fri 24 Apr 2026 01:56:58 +0000
Files and hashes:         1: VrdoAdUKTmPIXgZFdwZUt_k2yZQ.crl (hash: 9mYUt/6cE2ngwp/wiCw+ht+RJ28jmkZNo4shdKwzX4k=)
                          2: B9E2643697CE11EDB7D5B312C4F9AE02.roa (hash: TsYbtlzYuFIcHRyU9vKWwptu5/ItOjGOn1ZrqYpBfEc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.crl
                          rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 629 (0x275)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AD9BD, serialNumber=56B76801D50A4E63C85E0645770654B7F936C994
        Validity
            Not Before: Apr 17 01:56:58 2026 GMT
            Not After : Apr 24 01:56:58 2026 GMT
        Subject: CN=69e1936b-c32f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:19:42:ad:a9:f2:7b:3c:48:12:fa:3b:b0:95:
                    36:b6:64:31:d2:7e:65:1c:5d:d4:1e:29:50:39:75:
                    d1:90:99:a6:6b:3a:d0:73:fa:6e:26:08:f8:13:85:
                    70:75:f6:f8:3a:dc:a6:fe:5a:1f:39:26:2b:64:85:
                    65:4f:bc:e0:e1:a9:6d:5e:80:b1:3a:fa:96:0f:eb:
                    75:d9:48:db:5c:e6:2f:7e:80:2e:d6:8f:de:f2:44:
                    cd:25:29:e9:9b:33:52:45:75:de:8e:39:c5:5b:63:
                    02:a5:30:00:dd:ed:d3:c5:05:27:1b:11:fb:92:71:
                    0d:b6:8e:46:be:2a:c8:04:93:34:be:43:67:ae:b4:
                    db:a2:cb:1b:8c:ea:fd:ad:29:49:c7:74:b8:99:a6:
                    79:ed:c1:da:db:30:46:cc:30:ac:07:29:eb:7f:37:
                    7f:19:73:f3:2a:1a:6d:ee:7f:5c:b2:39:c7:9b:67:
                    c3:5c:1a:12:f5:10:08:2c:83:e5:ef:de:7c:c7:89:
                    8e:5c:5e:07:b3:1c:67:9b:81:7a:ef:a4:8d:dd:31:
                    31:78:fa:3d:8a:51:9b:8e:85:12:7e:59:fd:0b:4b:
                    75:44:2a:7d:40:c5:31:e8:a3:0f:08:20:58:e3:28:
                    a7:af:6a:68:00:9e:5b:3d:8b:ae:99:f6:e3:fa:78:
                    12:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:09:46:12:5B:BB:AF:14:CD:E2:71:94:32:E2:D1:78:33:27:29:43
            X509v3 Authority Key Identifier:
                keyid:56:B7:68:01:D5:0A:4E:63:C8:5E:06:45:77:06:54:B7:F9:36:C9:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:24:4d:8b:83:ee:d4:8a:9f:cd:b7:05:fc:f1:1e:24:57:d7:
         ed:fd:99:80:ee:82:61:18:ec:2d:0a:08:32:1c:f5:3c:34:9b:
         91:05:86:f7:49:a2:ce:51:38:0f:ab:2f:87:86:b3:da:61:bc:
         ba:f1:46:c8:8c:7c:f6:09:fd:33:2f:c3:c7:32:b4:ac:f1:18:
         d2:a9:b8:d1:1f:b2:d1:00:23:73:8b:3f:e7:62:5e:55:9e:9b:
         d7:32:72:a8:76:bb:b0:bb:1f:44:ec:52:c6:19:f9:53:90:9c:
         10:2a:71:90:69:1b:20:04:1c:f8:a1:51:38:03:ce:12:60:64:
         d2:d4:f2:13:35:d1:b4:08:2c:81:10:c8:a6:b5:98:63:c8:dd:
         0d:c2:8e:44:9d:5c:a5:a4:b6:63:48:e0:57:85:cc:4c:b2:f2:
         db:5e:9f:44:d7:00:4c:e7:0e:94:a5:e2:0f:49:15:60:65:7c:
         c8:5e:2d:9f:34:cf:e1:4f:aa:77:ae:af:46:2d:81:51:80:79:
         61:9d:14:9a:eb:28:e5:6f:f7:de:67:65:ae:ef:b9:0a:ae:5e:
         40:2f:c2:f6:41:3e:d8:95:bc:94:d0:00:49:46:d1:80:3a:ba:
         81:f9:78:64:0e:19:de:7a:df:af:3b:69:6c:af:e0:ad:7e:a4:
         1d:5e:75:05
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUQ5QkQxMTAvBgNVBAUTKDU2Qjc2ODAxRDUwQTRFNjNDODVFMDY0NTc3MDY1NEI3
RjkzNkM5OTQwHhcNMjYwNDE3MDE1NjU4WhcNMjYwNDI0MDE1NjU4WjAYMRYwFAYD
VQQDEw02OWUxOTM2Yi1jMzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApRlCranyezxIEvo7sJU2tmQx0n5lHF3UHilQOXXRkJmmazrQc/puJgj4E4Vw
dfb4Otym/lofOSYrZIVlT7zg4altXoCxOvqWD+t12UjbXOYvfoAu1o/e8kTNJSnp
mzNSRXXejjnFW2MCpTAA3e3TxQUnGxH7knENto5GvirIBJM0vkNnrrTbossbjOr9
rSlJx3S4maZ57cHa2zBGzDCsBynrfzd/GXPzKhpt7n9csjnHm2fDXBoS9RAILIPl
7958x4mOXF4Hsxxnm4F676SN3TExePo9ilGbjoUSfln9C0t1RCp9QMUx6KMPCCBY
4yinr2poAJ5bPYuumfbj+ngSLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIUJRhJb
u68UzeJxlDLi0XgzJylDMB8GA1UdIwQYMBaAFFa3aAHVCk5jyF4GRXcGVLf5NsmU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDlCRC8yN0QzRkNBQTk3
Q0MxMUVEQkRCQTEyMTJDNEY5QUUwMi9WcmRvQWRVS1RtUElYZ1pGZHdaVXRfazJ5
WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZyZG9BZFVLVG1QSVhnWkZkd1pVdF9rMnlaUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RDlCRC8yN0QzRkNBQTk3Q0MxMUVEQkRCQTEyMTJDNEY5QUUwMi9WcmRvQWRVS1Rt
UElYZ1pGZHdaVXRfazJ5WlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtSRNi4Pu1IqfzbcF/PEeJFfX7f2ZgO6CYRjsLQoIMhz1PDSbkQWG90mizlE4
D6svh4az2mG8uvFGyIx89gn9My/DxzK0rPEY0qm40R+y0QAjc4s/52JeVZ6b1zJy
qHa7sLsfROxSxhn5U5CcECpxkGkbIAQc+KFROAPOEmBk0tTyEzXRtAgsgRDIprWY
Y8jdDcKORJ1cpaS2Y0jgV4XMTLLy216fRNcATOcOlKXiD0kVYGV8yF4tnzTP4U+q
d66vRi2BUYB5YZ0Umuso5W/33mdlru+5Cq5eQC/C9kE+2JW8lNAASUbRgDq6gfl4
ZA4Z3nrfrztpbK/grX6kHV51BQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:13:56 2026 by rpki-client