Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.mft
File:                     dtwBlmJpqGSLEcQlQCgDWjafFew.mft (raw, json)
Hash identifier:          1jTjGppaiylXAHaTKsrT1axTq1EwGBOQR6nzGHt6iEo=
Subject key identifier:   1E:09:7A:F5:71:42:40:94:F3:02:C5:40:37:69:4C:13:EA:59:7F:20
Authority key identifier: 76:DC:01:96:62:69:A8:64:8B:11:C4:25:40:28:03:5A:36:9F:15:EC
Certificate issuer:       /CN=A919E4A9/serialNumber=76DC01966269A8648B11C4254028035A369F15EC
Certificate serial:       30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtwBlmJpqGSLEcQlQCgDWjafFew.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.mft
Manifest number:          2C
Signing time:             Thu 03 Sep 2026 09:02:04 +0000
Manifest this update:     Thu 03 Sep 2026 09:02:03 +0000
Manifest next update:     Thu 10 Sep 2026 09:02:03 +0000
Files and hashes:         1: dtwBlmJpqGSLEcQlQCgDWjafFew.crl (hash: 0U0hkQJrhf1DDYxo0q0BTE/9djoVONRUA3nKZZmr6Hc=)
                          2: 0A3499FA6D4011F18402C72C7347A888.roa (hash: IcAFoiT1xNzuxGEcSGlqRhiYhlm73dEBd3/qHI8dWW0=)
                          3: DF6CFFE66D3F11F1AD19B30B7347A888.roa (hash: Xkludu2C6ECpMoaKu70hUDHxFQYA88cJcDG8muAieG4=)
                          4: 1BDA0F506D4011F1A585AE4B7347A888.roa (hash: wpnVumsB2f8dA1T8SzbB3vP+w3jToecyu35SvlLd2e4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.crl
                          rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtwBlmJpqGSLEcQlQCgDWjafFew.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 09:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E4A9, serialNumber=76DC01966269A8648B11C4254028035A369F15EC
        Validity
            Not Before: Sep  3 09:02:03 2026 GMT
            Not After : Sep 10 09:02:03 2026 GMT
        Subject: CN=6a99378c-d07b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:18:cd:8e:58:1e:5e:72:e6:7b:31:d8:c7:4e:
                    a2:a1:82:1d:b2:bd:17:a3:a7:96:92:70:fc:45:62:
                    9a:9a:05:ea:45:cc:c8:8e:e9:b7:75:ae:4b:48:60:
                    c6:ca:1c:57:84:b3:97:01:40:fc:7e:79:46:9d:4b:
                    e0:bd:5c:3a:1d:06:be:97:d4:bb:a3:05:66:66:05:
                    74:09:ec:bd:e0:7e:b9:53:e0:3c:0b:92:ae:37:cc:
                    6b:35:05:da:c8:6c:0a:ce:80:8f:9a:08:65:ba:76:
                    3c:21:c5:27:9e:01:3f:16:5f:0f:21:70:98:a6:73:
                    03:cd:9b:be:68:e0:65:bd:1d:00:46:62:9c:b0:fc:
                    cd:1a:7f:f1:73:e3:e2:35:88:b1:2b:da:63:c2:f5:
                    d0:86:43:0d:e3:d7:a6:82:b1:99:63:e0:1f:4e:12:
                    e1:a2:91:f6:59:bd:f0:c8:04:01:85:3e:bf:37:25:
                    a5:00:85:69:94:81:a4:13:08:23:d2:62:fc:d4:cf:
                    99:9c:6d:a2:fa:c8:c1:54:75:eb:9d:96:12:af:bf:
                    01:cd:d7:97:80:ef:60:06:d8:98:85:9b:21:c1:3d:
                    2d:62:ef:d2:90:3b:ac:10:66:d9:3b:d3:b3:38:06:
                    4f:68:5a:f5:18:07:ce:d0:cc:7e:05:9f:8b:d9:88:
                    cb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:09:7A:F5:71:42:40:94:F3:02:C5:40:37:69:4C:13:EA:59:7F:20
            X509v3 Authority Key Identifier:
                keyid:76:DC:01:96:62:69:A8:64:8B:11:C4:25:40:28:03:5A:36:9F:15:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtwBlmJpqGSLEcQlQCgDWjafFew.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:95:23:bf:13:d8:85:a3:c5:3b:b4:e3:93:da:a2:61:ce:b2:
         30:1a:42:ab:65:3f:c0:93:62:0f:14:7a:a5:bb:99:67:b6:7c:
         4b:85:67:aa:4a:cb:e5:ed:58:c7:b4:a2:9b:0d:a1:7c:26:2a:
         da:c4:19:6e:67:41:6f:8f:a8:12:43:6f:74:29:f0:11:25:c9:
         bc:ae:0a:ae:3f:ca:48:93:79:86:4c:ba:6f:d0:26:f2:1b:57:
         8f:4b:ab:26:2b:08:ce:e6:34:21:f5:45:89:03:f2:60:a4:3f:
         64:8f:4b:4a:28:ae:9b:57:d0:60:ca:fb:5c:98:d9:c0:2e:f9:
         54:eb:f3:93:b2:1a:98:f2:d2:f1:4c:57:0c:6d:9e:da:2c:35:
         ee:5f:69:0c:89:2e:4d:ef:6d:56:c8:06:69:b1:91:ab:d3:4c:
         93:ca:79:4f:df:77:2f:1c:87:96:15:b3:d6:b3:00:e9:54:a8:
         99:c8:95:16:67:86:1a:84:0a:4f:c7:69:c1:7a:65:be:2c:8f:
         26:04:5b:a3:5d:e0:81:eb:15:40:df:19:47:3b:3d:5f:1d:b1:
         40:31:e5:43:aa:7d:53:9c:13:9b:89:ba:82:f5:39:51:12:7d:
         91:c7:0a:d5:a8:02:f4:c9:0e:24:85:b4:74:27:eb:be:01:7d:
         be:fb:4a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:10:22 2026 by rpki-client