Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2FF9/80F6C1AA42DC11F1A82C4355CB833773/4t6aQTS6L8Qq1Kk8OimO02G_DPE.mft
File:                     4t6aQTS6L8Qq1Kk8OimO02G_DPE.mft (raw, json)
Hash identifier:          abShsgoeOyCWMkkc70LR4+BeuOgakYzKDoIoH0GtwD8=
Subject key identifier:   2B:FD:91:12:16:41:49:F2:E6:87:47:BF:E0:12:77:6B:3C:EC:9F:F4
Authority key identifier: E2:DE:9A:41:34:BA:2F:C4:2A:D4:A9:3C:3A:29:8E:D3:61:BF:0C:F1
Certificate issuer:       /CN=A91A2FF9/serialNumber=E2DE9A4134BA2FC42AD4A93C3A298ED361BF0CF1
Certificate serial:       2A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4t6aQTS6L8Qq1Kk8OimO02G_DPE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2FF9/80F6C1AA42DC11F1A82C4355CB833773/4t6aQTS6L8Qq1Kk8OimO02G_DPE.mft
Manifest number:          29
Signing time:             Fri 17 Jul 2026 10:05:24 +0000
Manifest this update:     Fri 17 Jul 2026 10:05:24 +0000
Manifest next update:     Fri 24 Jul 2026 10:05:24 +0000
Files and hashes:         1: 4t6aQTS6L8Qq1Kk8OimO02G_DPE.crl (hash: AES3NJ09OwoIACIszBBbwfHxQ6PVcXTZCNx57jDgAcM=)
                          2: D898F57242DC11F1862EFB92CB833773.roa (hash: NhBu2Z3OF4VzcUnX2RhgJnVsv8Gh1MRdgOtdbwjJcZw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2FF9/80F6C1AA42DC11F1A82C4355CB833773/4t6aQTS6L8Qq1Kk8OimO02G_DPE.crl
                          rsync://rpki.apnic.net/member_repository/A91A2FF9/80F6C1AA42DC11F1A82C4355CB833773/4t6aQTS6L8Qq1Kk8OimO02G_DPE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4t6aQTS6L8Qq1Kk8OimO02G_DPE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 10:05:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2FF9, serialNumber=E2DE9A4134BA2FC42AD4A93C3A298ED361BF0CF1
        Validity
            Not Before: Jul 17 10:05:24 2026 GMT
            Not After : Jul 24 10:05:24 2026 GMT
        Subject: CN=6a59fe64-d91c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:50:20:32:ba:ea:5c:16:9c:45:40:7b:a7:3a:
                    86:de:f2:bb:ae:b8:17:cf:ac:55:ba:4c:5b:e1:4c:
                    c9:7e:7f:2d:e8:5b:5e:83:55:c4:65:10:3d:c9:cd:
                    01:44:c6:be:8e:9d:3c:98:26:15:32:1c:9c:a7:f9:
                    59:a7:3f:4c:fb:97:6f:b6:f2:0e:ed:e6:60:54:1d:
                    b5:33:99:70:64:f8:d8:49:e3:c5:6f:b0:91:8f:67:
                    c7:06:01:33:25:6e:0f:90:13:b7:da:74:48:6b:48:
                    a3:ed:64:36:00:c1:ee:b8:b1:e9:61:b1:d2:e4:e1:
                    fd:25:4c:84:4f:55:8c:fe:a5:1f:b3:1d:8f:5c:05:
                    0b:e1:58:e1:68:01:63:0c:a0:47:03:25:cd:0e:c1:
                    82:9e:90:07:b0:4c:51:e1:8a:8d:ed:18:65:e8:62:
                    c2:41:11:36:93:fb:a3:e5:33:66:f0:89:b3:20:4c:
                    f4:1c:f4:ca:5c:c0:1a:2d:31:50:d9:47:24:ba:10:
                    f9:50:42:d8:dc:58:ee:cd:35:83:d9:1b:a9:c4:ea:
                    2c:66:33:3b:e1:5c:ad:b0:22:a8:97:2d:86:8c:03:
                    0e:67:9e:db:eb:22:1f:b8:93:d3:5f:88:bd:6c:19:
                    ae:14:7a:07:d2:a9:21:87:d6:2a:f1:6f:89:06:28:
                    cb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:FD:91:12:16:41:49:F2:E6:87:47:BF:E0:12:77:6B:3C:EC:9F:F4
            X509v3 Authority Key Identifier:
                keyid:E2:DE:9A:41:34:BA:2F:C4:2A:D4:A9:3C:3A:29:8E:D3:61:BF:0C:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2FF9/80F6C1AA42DC11F1A82C4355CB833773/4t6aQTS6L8Qq1Kk8OimO02G_DPE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4t6aQTS6L8Qq1Kk8OimO02G_DPE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2FF9/80F6C1AA42DC11F1A82C4355CB833773/4t6aQTS6L8Qq1Kk8OimO02G_DPE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:67:11:52:bf:a1:1e:1a:1d:05:08:05:e7:7d:19:ea:a3:30:
         4d:71:08:71:be:9c:85:a0:28:d6:24:6b:f4:c3:b3:99:69:82:
         7b:dc:4a:b2:84:0d:b3:e7:57:c7:e5:ba:e9:e0:7b:13:25:2b:
         4f:b2:f6:24:8f:39:f7:34:5b:61:c3:4b:1f:3f:6a:bd:c1:53:
         df:1d:77:fd:d6:ae:31:7b:64:73:47:b9:ad:ee:bb:c2:a6:52:
         7f:5a:ae:44:19:ed:59:90:f5:71:68:02:2b:ed:71:39:39:3b:
         88:69:72:b1:1c:80:3d:b5:74:cd:e1:cc:cf:11:53:1b:fa:25:
         60:f1:b6:b6:08:e6:3f:99:d8:a4:87:dd:76:ea:b1:b5:8f:ca:
         46:9d:a1:44:78:04:da:6b:12:3c:f6:09:37:dc:77:31:85:57:
         68:35:00:20:ca:7b:51:82:0a:db:16:4f:4c:ee:ff:6c:34:2a:
         98:e6:b7:e9:f5:6b:d4:0f:5c:56:bd:6d:f2:ef:1c:9b:a5:cf:
         2b:cc:b6:53:f7:56:fc:c3:36:00:85:38:71:17:66:01:c5:9a:
         a3:6e:cc:36:39:e5:d6:bf:27:b9:c8:0b:69:a2:1b:68:72:a4:
         6a:d3:07:f6:23:08:d2:11:86:6e:41:b5:30:84:0f:39:51:72:
         4b:48:fc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:18 2026 by rpki-client