Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft
File:                     VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft (raw, json)
Hash identifier:          hieO01JZ1xmXhbXwAtR6rIeUAlgrgJ3HG8tEyr1jxMs=
Subject key identifier:   C0:AB:64:95:C9:49:E8:49:DC:CE:6E:6C:FA:8B:A6:F4:B0:9E:A5:BC
Authority key identifier: 56:B7:68:01:D5:0A:4E:63:C8:5E:06:45:77:06:54:B7:F9:36:C9:94
Certificate issuer:       /CN=A91AD9BD/serialNumber=56B76801D50A4E63C85E0645770654B7F936C994
Certificate serial:       02AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft
Manifest number:          02A0
Signing time:             Mon 27 Jul 2026 03:05:14 +0000
Manifest this update:     Mon 27 Jul 2026 03:05:13 +0000
Manifest next update:     Mon 03 Aug 2026 03:05:13 +0000
Files and hashes:         1: VrdoAdUKTmPIXgZFdwZUt_k2yZQ.crl (hash: B0VVk8BjhJ7PT8oVt2o+xhzcONr0Exhg+fPj3OWDcXo=)
                          2: B9E2643697CE11EDB7D5B312C4F9AE02.roa (hash: VXC2UkmsTZ+ecFi/hrHzBKq0lXsWlTXhFuk5XVAJAYA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.crl
                          rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 682 (0x2aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AD9BD, serialNumber=56B76801D50A4E63C85E0645770654B7F936C994
        Validity
            Not Before: Jul 27 03:05:13 2026 GMT
            Not After : Aug  3 03:05:13 2026 GMT
        Subject: CN=6a66cae9-5ce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:db:20:ae:d6:93:8d:f8:38:ad:01:94:b7:02:
                    f5:bc:8f:8c:b9:bc:a3:a7:ab:d7:29:98:ab:34:4e:
                    08:0d:4a:7a:6c:0e:c6:85:68:af:2f:0a:96:11:1f:
                    65:b9:d1:d0:a7:14:73:e4:fe:66:9b:01:9d:2d:de:
                    53:9f:6d:08:c3:11:d6:4c:d4:06:f7:f3:6c:e5:46:
                    32:ce:9d:dd:86:ba:b8:28:68:cd:e1:27:02:ea:e1:
                    74:97:57:d4:8f:53:9e:5a:09:c6:49:0b:65:a5:c6:
                    1a:ed:ab:9f:bd:5f:ac:eb:41:82:9f:8f:01:e3:74:
                    7a:13:46:d6:a8:17:70:8e:20:1a:32:d4:41:3c:74:
                    9e:b1:63:42:91:44:84:ec:6f:5e:41:02:73:a2:75:
                    5c:83:bc:d7:e8:f1:4a:e9:2e:94:a8:3c:7d:1b:b9:
                    33:d7:2c:17:41:74:1e:e9:b7:ef:28:3b:a1:80:81:
                    5d:f9:8f:1f:39:5c:24:74:af:09:a8:37:5c:df:13:
                    13:45:47:f9:70:e0:73:ac:36:31:10:9e:6f:f3:dd:
                    e4:b5:9c:17:8f:22:cb:97:7b:8a:b6:fb:c0:df:65:
                    34:64:b2:ab:7e:fa:16:28:4b:45:d9:03:d4:f2:4b:
                    fb:f1:2a:a2:8c:8d:22:51:99:9b:7d:ba:a8:85:dc:
                    a9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:AB:64:95:C9:49:E8:49:DC:CE:6E:6C:FA:8B:A6:F4:B0:9E:A5:BC
            X509v3 Authority Key Identifier:
                keyid:56:B7:68:01:D5:0A:4E:63:C8:5E:06:45:77:06:54:B7:F9:36:C9:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:86:01:7a:72:dd:82:cc:0a:44:ec:7c:c0:84:e3:6e:ba:a8:
         f3:a3:d4:0b:7d:0c:a6:a2:8b:ff:80:f0:f8:88:9e:14:01:f6:
         f9:53:d9:75:51:cc:70:c7:dd:d4:33:67:3a:eb:c5:52:fe:67:
         32:98:4e:cb:5b:7e:aa:f4:dc:f7:f0:93:cd:11:77:65:d3:5f:
         f1:00:a7:99:a4:36:c2:db:10:f1:ef:2e:66:d6:06:74:2c:5f:
         54:98:cb:36:f5:79:62:aa:8c:07:ae:6e:dd:1d:b5:8e:0d:8b:
         bc:6e:2a:e2:f0:0e:04:3b:6f:54:e6:1c:b2:6a:ef:72:c3:7f:
         c5:75:86:8f:0d:45:dd:fb:11:46:ba:f7:63:27:22:5b:c1:c4:
         4c:60:4e:c6:aa:35:ca:c2:f4:09:98:6c:48:2e:05:e2:c9:a6:
         8f:db:88:f0:34:ff:07:4d:a3:b4:2f:1d:5a:3b:c7:c2:2a:f1:
         39:3c:03:fe:3b:20:88:64:67:9a:28:7d:c1:39:6f:9d:a7:8b:
         ed:df:8a:01:c7:a9:f2:80:94:a3:df:0f:c4:44:f6:77:54:c6:
         de:2e:cf:ba:e1:3c:3b:f2:24:28:2b:af:a5:52:53:d7:b1:7d:
         1d:7b:01:77:2f:99:3a:95:aa:c7:44:c0:c2:60:cd:3a:2a:e3:
         48:fe:a1:dd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUQ5QkQxMTAvBgNVBAUTKDU2Qjc2ODAxRDUwQTRFNjNDODVFMDY0NTc3MDY1NEI3
RjkzNkM5OTQwHhcNMjYwNzI3MDMwNTEzWhcNMjYwODAzMDMwNTEzWjAYMRYwFAYD
VQQDEw02YTY2Y2FlOS01Y2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxdsgrtaTjfg4rQGUtwL1vI+Mubyjp6vXKZirNE4IDUp6bA7GhWivLwqWER9l
udHQpxRz5P5mmwGdLd5Tn20IwxHWTNQG9/Ns5UYyzp3dhrq4KGjN4ScC6uF0l1fU
j1OeWgnGSQtlpcYa7aufvV+s60GCn48B43R6E0bWqBdwjiAaMtRBPHSesWNCkUSE
7G9eQQJzonVcg7zX6PFK6S6UqDx9G7kz1ywXQXQe6bfvKDuhgIFd+Y8fOVwkdK8J
qDdc3xMTRUf5cOBzrDYxEJ5v893ktZwXjyLLl3uKtvvA32U0ZLKrfvoWKEtF2QPU
8kv78SqijI0iUZmbfbqohdypHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMCrZJXJ
SehJ3M5ubPqLpvSwnqW8MB8GA1UdIwQYMBaAFFa3aAHVCk5jyF4GRXcGVLf5NsmU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDlCRC8yN0QzRkNBQTk3
Q0MxMUVEQkRCQTEyMTJDNEY5QUUwMi9WcmRvQWRVS1RtUElYZ1pGZHdaVXRfazJ5
WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZyZG9BZFVLVG1QSVhnWkZkd1pVdF9rMnlaUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RDlCRC8yN0QzRkNBQTk3Q0MxMUVEQkRCQTEyMTJDNEY5QUUwMi9WcmRvQWRVS1Rt
UElYZ1pGZHdaVXRfazJ5WlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEIYBenLdgswKROx8wITjbrqo86PUC30MpqKL/4Dw+IieFAH2+VPZdVHMcMfd
1DNnOuvFUv5nMphOy1t+qvTc9/CTzRF3ZdNf8QCnmaQ2wtsQ8e8uZtYGdCxfVJjL
NvV5YqqMB65u3R21jg2LvG4q4vAOBDtvVOYcsmrvcsN/xXWGjw1F3fsRRrr3Yyci
W8HETGBOxqo1ysL0CZhsSC4F4smmj9uI8DT/B02jtC8dWjvHwirxOTwD/jsgiGRn
mih9wTlvnaeL7d+KAcep8oCUo98PxET2d1TG3i7PuuE8O/IkKCuvpVJT17F9HXsB
dy+ZOpWqx0TAwmDNOirjSP6h3Q==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:05:50 2026 by rpki-client