Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft
File:                     VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft (raw, json)
Hash identifier:          MvpLdAl7Gw6GSOrOGUdlfEMlAfX8Si0FYDJnme+jTS0=
Subject key identifier:   71:84:1A:BE:87:86:84:EB:AC:A8:C3:17:D4:A9:FA:12:B7:E6:CE:FD
Authority key identifier: 56:B7:68:01:D5:0A:4E:63:C8:5E:06:45:77:06:54:B7:F9:36:C9:94
Certificate issuer:       /CN=A91AD9BD/serialNumber=56B76801D50A4E63C85E0645770654B7F936C994
Certificate serial:       0269
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft
Manifest number:          0260
Signing time:             Wed 25 Mar 2026 01:41:53 +0000
Manifest this update:     Wed 25 Mar 2026 01:41:52 +0000
Manifest next update:     Wed 01 Apr 2026 01:41:52 +0000
Files and hashes:         1: VrdoAdUKTmPIXgZFdwZUt_k2yZQ.crl (hash: ostOCfrdlDUNAfEKSFyzw3qqtfoy4rRQNyBMnlcHAx0=)
                          2: B9E2643697CE11EDB7D5B312C4F9AE02.roa (hash: TsYbtlzYuFIcHRyU9vKWwptu5/ItOjGOn1ZrqYpBfEc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.crl
                          rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:41:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 617 (0x269)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AD9BD, serialNumber=56B76801D50A4E63C85E0645770654B7F936C994
        Validity
            Not Before: Mar 25 01:41:52 2026 GMT
            Not After : Apr  1 01:41:52 2026 GMT
        Subject: CN=69c33d60-2cf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c6:15:ec:34:da:3e:f1:89:e7:28:bc:6c:d3:
                    1f:bb:9e:a6:53:b6:c1:f2:3e:c0:6e:20:a1:f4:45:
                    ce:8a:b2:17:57:ac:4a:c1:11:09:45:a5:1a:07:de:
                    0f:55:1a:e9:60:99:60:3b:ba:c5:fe:e6:f6:75:28:
                    47:92:93:67:ab:10:07:af:e7:2c:7f:99:8f:96:71:
                    40:40:c7:83:1b:be:5a:46:7d:12:f7:84:04:4c:2d:
                    0d:8a:ab:a3:41:c3:fd:e2:6b:f1:ef:e6:d7:4a:02:
                    15:a0:87:aa:6f:9a:b9:e4:27:c8:ae:e9:01:0c:8b:
                    e7:f5:c6:67:fa:08:fb:04:0e:57:8e:a5:2b:76:64:
                    ed:73:d4:38:66:ab:ca:e0:bd:99:8c:06:ff:aa:e7:
                    a2:a8:eb:6a:2a:c2:aa:ff:4a:3a:2a:44:be:82:56:
                    18:82:bf:d8:39:3d:ef:42:0d:01:53:ca:4e:f3:9c:
                    4a:38:dc:48:dc:e5:03:a0:96:61:f4:1e:b6:b9:01:
                    5e:48:87:45:6b:2a:0c:54:e0:f9:96:f7:d0:cf:14:
                    58:ba:5e:41:03:90:74:85:c6:67:12:4d:d6:4d:81:
                    ba:27:96:91:fb:78:9a:69:c4:50:71:23:af:e2:0a:
                    8c:40:50:42:92:cf:f8:a0:bf:3e:e5:84:3d:7b:37:
                    25:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:84:1A:BE:87:86:84:EB:AC:A8:C3:17:D4:A9:FA:12:B7:E6:CE:FD
            X509v3 Authority Key Identifier:
                keyid:56:B7:68:01:D5:0A:4E:63:C8:5E:06:45:77:06:54:B7:F9:36:C9:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:14:3c:ae:d7:9a:5c:15:4d:bc:4d:b4:61:9a:eb:e1:4f:b9:
         b4:e1:b7:f9:19:a7:35:df:94:be:a3:2a:3f:7f:2b:83:80:4c:
         4e:bf:7e:69:cb:01:4f:3e:cf:93:c2:b7:58:23:35:2b:c6:40:
         06:65:f9:7c:35:e7:c3:85:7f:fc:29:e8:73:37:55:ae:e1:db:
         aa:35:1b:2a:89:8a:b8:2a:e4:14:4a:63:c0:90:44:22:6d:a9:
         20:4a:56:f6:76:17:e1:09:09:fe:e5:32:5b:62:81:c6:ed:c6:
         5b:c6:ce:c1:46:2d:62:b3:98:8e:a0:c5:15:aa:e1:2c:ba:4f:
         8a:1f:18:47:3d:7b:df:85:71:3b:bb:97:11:ea:c7:ad:f0:fd:
         89:52:6f:eb:81:af:4c:85:ee:c6:c0:68:94:1f:0a:2e:1c:7f:
         96:99:12:27:ea:3b:fe:fe:9c:74:ee:0f:39:ac:f2:d0:61:97:
         79:cb:af:cf:f3:0c:9c:a4:1f:cf:89:8c:a9:57:6f:8d:59:df:
         48:02:a5:cc:8f:aa:c4:6a:94:5a:43:55:45:a5:6c:35:49:f4:
         67:45:cd:1c:41:6d:ea:fb:a0:76:5d:c1:b8:f3:0f:fc:63:5f:
         e9:39:e3:de:fc:c6:04:8b:26:fd:0a:4c:af:68:ba:9f:95:99:
         d9:c1:28:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:53:57 2026 by rpki-client