Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft
File:                     DKMWISTuZGKWQ_8p6zEQctkShTM.mft (raw, json)
Hash identifier:          uQQ53Fuu52/FJcLnZYto+8SCPou4rrC+qv7Jk+4FPdw=
Subject key identifier:   61:FA:BC:ED:D3:FC:11:E6:25:05:EE:F6:D0:57:35:6E:8E:89:A1:3B
Authority key identifier: 0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33
Certificate issuer:       /CN=A91A4DBF/serialNumber=0CA3162124EE64629643FF29EB311072D9128533
Certificate serial:       0100
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft
Manifest number:          EA
Signing time:             Sat 03 Oct 2026 07:25:09 +0000
Manifest this update:     Sat 03 Oct 2026 07:25:08 +0000
Manifest next update:     Sat 10 Oct 2026 07:25:08 +0000
Files and hashes:         1: DKMWISTuZGKWQ_8p6zEQctkShTM.crl (hash: TINgCoCqFBv6fv0A5hJZJOhtQWseFK+YSWIbDShM2mg=)
                          2: 787672F09CBE11F195AB7B4F6511F970.roa (hash: I5IxFyCtT7zYY9/FbbAes2M7qHoDKlhVu3FHnQhKWLI=)
                          3: ABB7CDCC9C1811F1ADB92E767011F970.roa (hash: dayQUyCD0Do8LCvwGcnu/bg+553HfxU3jaTnkxBwdSU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl
                          rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 07:25:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 256 (0x100)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4DBF, serialNumber=0CA3162124EE64629643FF29EB311072D9128533
        Validity
            Not Before: Oct  3 07:25:08 2026 GMT
            Not After : Oct 10 07:25:08 2026 GMT
        Subject: CN=6ac0add5-b7a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b4:4c:7d:04:c0:6f:72:1d:86:aa:e4:d6:0c:
                    e7:46:82:9e:df:f4:d8:79:16:1a:36:5c:ef:63:eb:
                    15:6d:ae:2d:6c:c7:03:e7:b3:fa:19:ad:24:9e:5e:
                    ab:9e:fd:df:f8:78:50:72:1b:3d:73:22:7e:63:c3:
                    cc:d7:ac:c6:a5:8c:f2:df:ab:bf:50:43:9c:e3:f1:
                    f8:92:29:48:43:5f:f0:84:80:48:51:bc:14:77:85:
                    d5:57:e1:75:b7:0c:95:cc:07:7f:81:f9:23:8f:f6:
                    5a:2f:24:74:43:9d:d1:0b:59:db:94:b5:69:c4:84:
                    99:47:80:01:d0:de:d4:34:e1:5a:eb:52:d8:20:c8:
                    a0:e2:fe:ef:9e:a8:b6:57:48:1f:32:60:38:5b:34:
                    33:c8:e1:9d:13:3e:81:bb:23:ab:cf:65:10:75:8c:
                    17:f9:7c:c0:1d:40:1e:38:ce:8c:b8:73:95:89:df:
                    68:0d:39:5a:0b:1a:1e:de:ff:4c:73:18:5d:94:d7:
                    52:00:f2:c7:08:32:4f:4f:1f:15:f0:67:f1:12:58:
                    bc:66:13:6f:e6:e1:67:53:35:99:c0:44:07:18:51:
                    ad:08:64:d8:d3:e0:83:37:b3:e5:12:c1:de:ba:f3:
                    1b:d4:97:8d:c6:9c:70:b0:9c:39:76:dd:4b:4f:2c:
                    aa:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:FA:BC:ED:D3:FC:11:E6:25:05:EE:F6:D0:57:35:6E:8E:89:A1:3B
            X509v3 Authority Key Identifier:
                keyid:0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:d6:00:b2:c2:a3:a9:ab:d0:36:7d:b5:16:a5:4f:0b:f0:ad:
         c4:04:33:6c:9f:05:4c:d3:ff:7e:6f:ca:66:1c:65:b3:4f:03:
         d8:97:84:d7:ef:74:19:db:b9:d1:d2:78:85:21:39:40:4c:c1:
         fb:af:e5:0b:3c:59:c6:e6:e6:de:c3:50:90:23:56:0e:2c:bf:
         75:7a:50:11:1b:49:35:e7:92:77:63:b4:76:37:ff:fc:16:41:
         82:2a:29:b7:fe:49:11:70:bc:45:53:74:63:62:96:12:6c:15:
         4e:83:2c:fd:94:e3:26:b2:2d:e2:58:67:e9:34:bc:b4:8f:b4:
         02:9c:c6:3c:4a:66:e7:52:53:9c:97:08:de:42:88:78:31:aa:
         5a:cf:a7:59:c9:a4:9c:94:a6:5e:9c:1c:da:f3:79:dc:f9:ae:
         66:1a:41:d1:e8:22:42:39:cc:07:8f:0a:74:fe:a1:de:b8:76:
         34:78:71:a9:ec:28:bc:4b:20:f7:2f:33:7a:4a:94:2c:ef:8e:
         04:59:38:b4:f3:e4:b3:4d:f7:20:bd:d6:3a:21:87:6d:1c:49:
         76:5b:3a:84:8c:a3:98:e9:c2:65:34:ec:92:90:49:3e:68:2a:
         69:24:db:16:7d:77:a8:b5:8e:fa:73:0a:ac:5e:ff:0f:8f:d1:
         ef:66:bf:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:57:54 2026 by rpki-client