Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft
File:                     VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft (raw, json)
Hash identifier:          C4sGfD8wGWLVDPkX16faaYRSzLV24/YUNeTmGOZtSDI=
Subject key identifier:   4C:D7:66:C5:F6:DA:09:BB:93:D4:E4:8A:97:DA:D0:D4:8A:A0:82:12
Authority key identifier: 56:B7:68:01:D5:0A:4E:63:C8:5E:06:45:77:06:54:B7:F9:36:C9:94
Certificate issuer:       /CN=A91AD9BD/serialNumber=56B76801D50A4E63C85E0645770654B7F936C994
Certificate serial:       0281
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft
Manifest number:          0278
Signing time:             Mon 11 May 2026 02:05:53 +0000
Manifest this update:     Mon 11 May 2026 02:05:53 +0000
Manifest next update:     Mon 18 May 2026 02:05:53 +0000
Files and hashes:         1: VrdoAdUKTmPIXgZFdwZUt_k2yZQ.crl (hash: eCqxnox8XTqu55UBQCt7Tjx0ctSY2FLKnmZBjaVLn+c=)
                          2: B9E2643697CE11EDB7D5B312C4F9AE02.roa (hash: TsYbtlzYuFIcHRyU9vKWwptu5/ItOjGOn1ZrqYpBfEc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.crl
                          rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 02:05:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 641 (0x281)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AD9BD, serialNumber=56B76801D50A4E63C85E0645770654B7F936C994
        Validity
            Not Before: May 11 02:05:53 2026 GMT
            Not After : May 18 02:05:53 2026 GMT
        Subject: CN=6a013981-aad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ac:3e:c3:d5:33:5b:1c:87:fc:b3:ab:e4:62:
                    a3:be:7c:71:ca:58:6f:b0:81:e3:67:27:f4:4e:05:
                    d6:66:db:12:03:27:53:93:af:1e:45:3a:b1:7b:f0:
                    de:c0:80:91:19:0b:a9:ce:22:15:eb:5e:05:66:15:
                    2b:55:9e:09:64:dd:f5:54:a6:bf:bb:56:42:8f:90:
                    09:df:40:67:f9:ee:2e:a1:25:0b:f3:c4:b2:ee:ba:
                    a8:a7:d0:d9:b5:10:59:73:2a:26:57:e6:66:e7:06:
                    c2:38:7a:f4:76:01:72:3f:a3:c1:ec:18:4e:70:4b:
                    70:0b:14:62:c1:af:d6:a1:f0:87:fb:d8:33:3f:f4:
                    ea:86:8d:27:a7:cc:11:f0:18:89:70:3d:28:68:f3:
                    e6:90:67:20:04:12:35:a0:66:86:90:3e:fb:15:df:
                    38:fb:11:d1:dc:0e:ef:e4:58:91:bf:d8:7a:8a:80:
                    60:eb:b1:7d:3b:44:78:93:d2:2c:90:21:47:82:33:
                    f9:d0:cb:2f:15:fe:f6:3a:ca:10:c4:5b:5c:c5:32:
                    6b:f4:9c:bd:d9:3c:5b:16:61:cb:c0:bd:89:6e:dc:
                    fa:29:0f:f8:69:d2:03:dc:84:00:ee:ab:22:7a:71:
                    0f:31:d2:5c:a2:35:ea:1d:d3:a2:55:31:15:fe:47:
                    55:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D7:66:C5:F6:DA:09:BB:93:D4:E4:8A:97:DA:D0:D4:8A:A0:82:12
            X509v3 Authority Key Identifier:
                keyid:56:B7:68:01:D5:0A:4E:63:C8:5E:06:45:77:06:54:B7:F9:36:C9:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:e8:f3:7d:f8:af:65:a5:5b:ac:c7:ba:65:31:e3:ba:70:6d:
         68:70:68:da:6a:b0:e0:82:df:e0:40:0b:70:7e:2c:ab:d1:5a:
         8b:ad:84:1a:65:39:69:e3:37:42:f9:25:a5:7a:ee:16:e5:27:
         4f:56:75:fd:f6:c9:a8:f2:2a:64:f2:ff:a5:57:fe:b8:89:2c:
         99:72:fb:26:b3:05:3b:2a:d4:d0:00:4d:5f:b2:52:6a:60:5f:
         29:6c:19:be:e9:2a:f8:65:47:e2:d1:4a:7a:a3:16:57:72:e4:
         b3:d4:b5:53:56:f0:6c:23:62:9a:0b:0c:1c:ee:51:11:39:bd:
         aa:51:13:98:be:96:f6:9d:89:6d:7c:c3:9a:2b:fa:26:de:e5:
         a2:6b:bc:7a:bb:aa:8e:56:90:99:46:5e:23:df:28:8d:55:ff:
         3b:28:53:35:a7:75:6f:31:a6:e2:49:17:8a:fd:f6:a7:84:95:
         0e:06:77:f8:bd:23:af:1f:7a:8b:4e:55:85:c5:60:a6:95:0b:
         8a:f6:66:b7:fc:fb:f8:91:6b:0f:5a:2c:19:ef:fc:45:ba:b2:
         53:64:d5:9e:b8:ad:00:61:eb:0f:9d:28:88:91:b9:55:e3:a3:
         6b:94:0f:8c:44:c2:7a:c0:c0:f6:31:9c:b0:ad:dc:63:35:9c:
         ba:27:c5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:46:22 2026 by rpki-client