Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft
File:                     Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft (raw, json)
Hash identifier:          snoNotuN2dD2NTCN6pgtlbhhBAcf/BFHMs+7QaN2wyA=
Subject key identifier:   D5:95:6D:DE:BA:C9:EE:41:22:8F:BC:98:D7:D9:52:A9:E9:E2:4F:20
Authority key identifier: 56:7F:9A:B2:B2:C7:96:92:68:5C:03:05:5A:F9:69:E6:0B:66:B8:00
Certificate issuer:       /CN=A91ADB98/serialNumber=567F9AB2B2C79692685C03055AF969E60B66B800
Certificate serial:       02EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft
Manifest number:          02DB
Signing time:             Mon 27 Jul 2026 02:31:13 +0000
Manifest this update:     Mon 27 Jul 2026 02:31:13 +0000
Manifest next update:     Mon 03 Aug 2026 02:31:13 +0000
Files and hashes:         1: Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl (hash: U4dQKKsyHzTnP6wRl0N7KChG8fz4MuclxMPAUrwJs7I=)
                          2: 310AEC7A5B7C11EDAAFAB831C4F9AE02.roa (hash: IkRGaF1uTyzRv6zOhznPG18QRmePTnGkiWjf3intWWA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl
                          rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:31:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 750 (0x2ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADB98, serialNumber=567F9AB2B2C79692685C03055AF969E60B66B800
        Validity
            Not Before: Jul 27 02:31:13 2026 GMT
            Not After : Aug  3 02:31:13 2026 GMT
        Subject: CN=6a66c2f1-2e2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:23:8f:65:8e:07:d1:19:0e:2c:32:5c:b3:52:
                    d2:50:23:9a:5e:82:ce:9f:ae:67:76:00:0f:23:16:
                    fa:40:8c:e4:72:5f:39:8c:10:45:26:58:2e:d2:35:
                    7a:45:09:51:73:a0:91:dd:a3:49:91:5f:ad:3d:5d:
                    65:1d:f1:c9:82:2b:82:37:4b:86:9b:17:75:90:9f:
                    fc:04:b1:7d:d7:72:0e:4c:6e:c9:83:99:cc:67:af:
                    2f:f6:da:5e:10:15:2f:b8:12:d8:ef:be:a3:74:5b:
                    f4:81:93:dc:52:88:f6:f0:c4:37:0b:be:a2:29:cf:
                    c4:bb:e9:99:98:80:76:4f:f0:c2:2c:bc:a1:1a:c4:
                    a4:8c:32:7b:d5:08:6b:74:94:c8:9f:16:88:2a:e2:
                    63:1c:b5:db:c0:73:dc:ce:12:e4:68:5a:33:08:ec:
                    b5:64:70:c5:d6:8b:0b:0e:07:54:9e:80:e6:c8:c8:
                    db:49:7b:7a:9a:60:c1:a7:bd:91:2c:f1:ad:41:16:
                    ce:a9:4e:55:c4:fd:55:4b:de:be:e5:b3:a4:4e:8e:
                    9f:8d:d9:75:10:e5:d6:d1:3a:af:ea:03:0b:57:df:
                    5d:b2:1c:c3:13:bb:2d:de:50:87:74:d3:df:61:a3:
                    db:74:e3:be:9f:94:b6:06:37:ae:d5:68:45:dd:d5:
                    de:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:95:6D:DE:BA:C9:EE:41:22:8F:BC:98:D7:D9:52:A9:E9:E2:4F:20
            X509v3 Authority Key Identifier:
                keyid:56:7F:9A:B2:B2:C7:96:92:68:5C:03:05:5A:F9:69:E6:0B:66:B8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:32:be:f3:cf:cb:1e:01:2a:15:02:b2:1f:df:9a:c1:b0:dd:
         5e:13:92:dd:51:f1:41:93:e8:f4:9a:8e:10:7b:0d:77:6c:83:
         e5:83:04:6b:27:6d:70:31:f9:df:fb:4f:46:19:97:a7:6d:f3:
         50:17:56:86:c4:9e:7e:00:d6:f9:1a:87:ef:e7:e4:c4:b3:d8:
         d3:99:2d:b6:48:dc:0f:aa:fb:60:bb:97:63:76:6e:96:b4:2f:
         8e:4c:f3:61:54:4c:2b:12:3e:43:b2:f1:b2:19:7e:0d:25:09:
         b0:5a:04:2c:be:d9:a3:7d:97:ad:c4:6e:97:d8:56:7e:75:b3:
         be:09:14:3f:e1:ab:1a:1a:e9:a1:b8:5f:82:05:04:58:eb:62:
         14:30:cc:d8:0e:c1:9b:27:01:33:5b:53:30:99:21:aa:2b:79:
         c2:a8:9f:9c:87:ea:0c:50:18:db:b0:4a:81:a6:42:01:35:57:
         5c:75:3f:65:2a:7b:57:e6:19:c7:01:d9:2f:4d:45:da:a6:39:
         2f:a5:6a:c3:a2:96:7a:b9:37:6c:11:df:91:dc:fd:9a:ba:5c:
         8c:71:6a:93:e1:41:a4:90:81:62:72:e5:68:3d:55:38:35:bd:
         63:96:2c:a6:62:70:37:53:09:07:01:39:6c:ff:7b:4c:38:ed:
         8a:92:db:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:43:29 2026 by rpki-client