Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.mft
File:                     dtwBlmJpqGSLEcQlQCgDWjafFew.mft (raw, json)
Hash identifier:          SxamsI55574LFzt4DPzh+Q7jzU9W1bHJ+5Hy+GviovI=
Subject key identifier:   CB:89:64:92:DA:88:F7:85:BA:E7:37:97:4B:75:D2:A9:A0:F5:60:90
Authority key identifier: 76:DC:01:96:62:69:A8:64:8B:11:C4:25:40:28:03:5A:36:9F:15:EC
Certificate issuer:       /CN=A919E4A9/serialNumber=76DC01966269A8648B11C4254028035A369F15EC
Certificate serial:       19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtwBlmJpqGSLEcQlQCgDWjafFew.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.mft
Manifest number:          15
Signing time:             Tue 21 Jul 2026 10:58:32 +0000
Manifest this update:     Tue 21 Jul 2026 10:58:31 +0000
Manifest next update:     Tue 28 Jul 2026 10:58:31 +0000
Files and hashes:         1: dtwBlmJpqGSLEcQlQCgDWjafFew.crl (hash: NspK9+4C82/7RVGGs7wWCJtyw0FzvxpxuKi36lYyGlM=)
                          2: DF6CFFE66D3F11F1AD19B30B7347A888.roa (hash: Xkludu2C6ECpMoaKu70hUDHxFQYA88cJcDG8muAieG4=)
                          3: 0A3499FA6D4011F18402C72C7347A888.roa (hash: IcAFoiT1xNzuxGEcSGlqRhiYhlm73dEBd3/qHI8dWW0=)
                          4: 1BDA0F506D4011F1A585AE4B7347A888.roa (hash: wpnVumsB2f8dA1T8SzbB3vP+w3jToecyu35SvlLd2e4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.crl
                          rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtwBlmJpqGSLEcQlQCgDWjafFew.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 10:58:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E4A9, serialNumber=76DC01966269A8648B11C4254028035A369F15EC
        Validity
            Not Before: Jul 21 10:58:31 2026 GMT
            Not After : Jul 28 10:58:31 2026 GMT
        Subject: CN=6a5f50d8-5fde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:9c:94:7b:37:d9:c7:60:5c:b4:0e:2d:23:26:
                    ed:90:51:e3:17:52:7f:b2:66:5c:6b:03:30:e8:84:
                    80:75:4b:e3:e6:0b:ab:fe:dc:f3:c6:8e:9d:16:2d:
                    4d:f0:ec:54:74:ca:6d:aa:be:2c:83:99:e8:70:fd:
                    ee:35:48:d2:c1:4b:6c:bf:c4:e5:53:fc:26:8f:75:
                    80:00:05:cc:6a:7b:04:78:b4:2d:ad:c2:1a:03:df:
                    e1:f8:b4:c7:ef:a3:ab:a0:ea:7b:a8:ed:54:5d:93:
                    e4:cd:49:0f:eb:1f:f2:50:fc:44:7c:8c:e4:b3:18:
                    a9:0c:9b:50:54:59:d1:1a:11:8b:4b:8f:27:9c:b0:
                    5e:37:be:ec:51:46:f2:d2:d2:00:11:04:ac:e7:46:
                    c7:61:6e:08:a2:b3:50:d2:e7:5f:3a:32:b2:e4:3e:
                    99:13:4c:52:9f:08:df:86:a2:94:59:ca:ba:db:11:
                    c3:ab:3b:43:81:30:8e:86:e2:ca:59:d7:c4:cd:a0:
                    44:03:f4:75:78:28:8a:bc:f9:05:d8:52:e9:28:aa:
                    1b:57:24:34:75:c7:bf:ac:b8:98:3f:4d:84:b3:08:
                    6d:79:48:75:9f:6c:4d:75:90:ed:28:e2:26:d0:65:
                    24:ff:4d:90:1e:b9:3a:c7:2c:99:31:f5:bd:b5:4c:
                    ba:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:89:64:92:DA:88:F7:85:BA:E7:37:97:4B:75:D2:A9:A0:F5:60:90
            X509v3 Authority Key Identifier:
                keyid:76:DC:01:96:62:69:A8:64:8B:11:C4:25:40:28:03:5A:36:9F:15:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtwBlmJpqGSLEcQlQCgDWjafFew.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:55:54:5a:82:53:c0:ff:cd:f7:ea:5e:14:73:83:9b:0a:63:
         ef:a4:39:81:c7:29:9a:cf:e5:56:aa:97:ca:63:66:01:fa:8f:
         19:e7:5f:4f:a7:4f:9b:53:f9:ee:4a:e7:2d:2b:57:b9:24:75:
         65:f7:ea:b2:da:26:b9:bf:f5:fe:5f:d4:b2:43:6f:f3:c6:10:
         a5:02:01:03:d5:aa:d2:12:d7:e0:ae:8b:e2:d2:ac:ac:05:77:
         6a:26:dc:aa:6f:de:31:a9:76:1a:9f:82:7c:95:b6:2a:7d:e9:
         28:da:a2:d3:8e:4f:60:98:5c:70:38:0d:20:76:fa:44:c7:d1:
         17:43:64:db:0f:de:e9:76:8a:0e:2f:c9:66:a7:5c:f1:07:a3:
         0f:35:74:95:29:d2:11:eb:03:91:60:89:de:f3:be:ba:ab:54:
         9e:bf:ad:f0:a7:be:0d:6a:80:11:1e:53:cf:60:14:0d:a4:7a:
         2e:d1:06:a8:f0:85:bf:dd:42:2c:51:04:68:eb:6f:09:48:d2:
         03:13:b4:6e:8a:4e:98:65:5e:39:c0:45:3c:ee:04:92:e3:27:
         c9:d9:56:24:36:ed:31:79:d9:81:e6:25:a6:48:2b:57:9b:8d:
         6f:22:19:97:61:1b:a0:51:13:ce:94:29:93:17:02:31:06:0a:
         52:1b:de:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:55:53 2026 by rpki-client