Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft
File:                     dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft (raw, json)
Hash identifier:          7UCBz6io2VWqe1LVzqVwmHyauMSAKp57QOrlMtCQFbY=
Subject key identifier:   D4:9F:70:E0:67:2B:AF:A3:0D:10:8E:E6:FD:18:23:17:39:E3:D9:63
Authority key identifier: 76:DF:7F:91:16:9A:3F:38:0C:0A:6B:CD:38:E9:18:6D:EF:F3:1B:AB
Certificate issuer:       /CN=A91D4DC1/serialNumber=76DF7F91169A3F380C0A6BCD38E9186DEFF31BAB
Certificate serial:       0684
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt9_kRaaPzgMCmvNOOkYbe_zG6s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft
Manifest number:          067D
Signing time:             Tue 06 Oct 2026 22:40:33 +0000
Manifest this update:     Tue 06 Oct 2026 22:40:32 +0000
Manifest next update:     Tue 13 Oct 2026 22:40:32 +0000
Files and hashes:         1: dt9_kRaaPzgMCmvNOOkYbe_zG6s.crl (hash: 5NJpexnqyHQRqdfAO+a7jm7tNgZj5jq22PBpbaj1PCQ=)
                          2: B5A7B020DBDB11EB8EC1494EC4F9AE02.roa (hash: c5w5QLZZ9to+icb8pOHSdLzZ2mnRXQw2msiixSkPrZk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.crl
                          rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt9_kRaaPzgMCmvNOOkYbe_zG6s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 22:40:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1668 (0x684)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4DC1, serialNumber=76DF7F91169A3F380C0A6BCD38E9186DEFF31BAB
        Validity
            Not Before: Oct  6 22:40:32 2026 GMT
            Not After : Oct 13 22:40:32 2026 GMT
        Subject: CN=6ac578e1-682f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:18:6c:a7:fe:26:69:01:3a:48:ad:33:81:17:
                    d2:4b:7c:09:60:82:42:39:b3:54:71:ef:b9:d9:b7:
                    2f:23:83:54:e7:c1:50:53:aa:e0:4d:c9:d4:12:41:
                    05:c5:19:b7:3e:19:52:31:71:48:98:a3:d6:eb:96:
                    6c:15:e6:a7:f7:17:8d:ae:9a:a6:c4:1e:c8:c9:87:
                    fc:4e:0f:f5:a0:22:68:67:66:60:13:ef:a2:91:54:
                    fa:d2:b5:1a:26:03:79:81:28:d6:1d:2d:51:cb:a0:
                    45:a8:2d:68:c8:9f:0a:68:05:94:bb:8b:2b:e4:3e:
                    cf:88:5b:3a:e2:bd:43:1e:e7:46:56:ec:61:0e:73:
                    0b:c0:db:ef:f8:f4:19:5b:1c:9e:5c:37:bb:93:72:
                    9d:04:df:ae:c1:69:65:5b:6c:4d:2e:63:53:d4:c4:
                    3a:35:fc:6e:a7:0b:91:6f:5c:2f:dd:16:91:28:2b:
                    81:7a:b8:38:56:ed:4b:4a:fc:61:6e:b5:97:2c:4f:
                    94:fb:f2:2e:51:3d:95:d7:07:68:d1:1d:7d:e9:3f:
                    8d:fe:f6:9a:41:7c:f3:5f:8c:a7:9f:26:ea:3c:a5:
                    0a:5f:34:a1:a7:d5:31:31:6e:38:72:1b:b4:f0:ec:
                    f3:2b:f9:fc:0d:17:9f:58:e6:b3:e5:5e:dd:e9:e9:
                    83:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:9F:70:E0:67:2B:AF:A3:0D:10:8E:E6:FD:18:23:17:39:E3:D9:63
            X509v3 Authority Key Identifier:
                keyid:76:DF:7F:91:16:9A:3F:38:0C:0A:6B:CD:38:E9:18:6D:EF:F3:1B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt9_kRaaPzgMCmvNOOkYbe_zG6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:aa:4a:75:a6:ed:87:38:eb:54:6b:55:67:56:0c:ef:ef:94:
         fa:96:bc:7a:c7:f0:61:ee:21:19:27:45:dc:1c:4b:c7:38:66:
         71:3c:0c:6d:f6:42:bb:b5:ca:17:fa:e6:5b:06:4f:7d:49:12:
         c6:de:9e:f2:2e:1a:e6:45:0e:06:af:8f:21:37:28:ce:6b:aa:
         25:e1:c4:b8:12:e4:58:32:9f:36:9c:9b:a6:d8:86:a6:5c:08:
         17:79:1d:a5:99:5b:f6:3e:8d:3a:69:ad:79:32:2a:00:4c:c0:
         bb:f3:cc:1c:d9:9c:52:85:d0:8c:e6:5a:78:8f:5c:03:74:d7:
         a1:d2:10:cd:72:07:3e:1d:a7:98:79:cf:23:e2:8a:e8:f8:68:
         16:b3:1e:c1:f8:ba:31:27:a4:59:c9:5c:a8:56:eb:d5:b0:25:
         e1:95:f0:6e:eb:9a:7b:69:8a:cb:7d:79:9e:12:89:78:c5:2f:
         13:08:c6:88:eb:77:23:4b:8c:67:34:16:35:63:72:cf:2a:4d:
         ef:ee:65:71:8b:d5:7b:3f:d4:99:b1:48:f0:7f:c8:51:bb:bf:
         30:0f:23:cc:c3:46:16:03:2c:09:06:9a:71:e8:f7:59:25:85:
         c0:b7:bc:00:54:b4:fd:96:a4:9f:d6:5d:8e:7d:7b:33:8b:ac:
         ac:19:e8:53
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDREQzExMTAvBgNVBAUTKDc2REY3RjkxMTY5QTNGMzgwQzBBNkJDRDM4RTkxODZE
RUZGMzFCQUIwHhcNMjYxMDA2MjI0MDMyWhcNMjYxMDEzMjI0MDMyWjAYMRYwFAYD
VQQDEw02YWM1NzhlMS02ODJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2xhsp/4maQE6SK0zgRfSS3wJYIJCObNUce+52bcvI4NU58FQU6rgTcnUEkEF
xRm3PhlSMXFImKPW65ZsFean9xeNrpqmxB7IyYf8Tg/1oCJoZ2ZgE++ikVT60rUa
JgN5gSjWHS1Ry6BFqC1oyJ8KaAWUu4sr5D7PiFs64r1DHudGVuxhDnMLwNvv+PQZ
WxyeXDe7k3KdBN+uwWllW2xNLmNT1MQ6NfxupwuRb1wv3RaRKCuBerg4Vu1LSvxh
brWXLE+U+/IuUT2V1wdo0R196T+N/vaaQXzzX4ynnybqPKUKXzShp9UxMW44chu0
8OzzK/n8DRefWOaz5V7d6emDvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNSfcOBn
K6+jDRCO5v0YIxc549ljMB8GA1UdIwQYMBaAFHbff5EWmj84DAprzTjpGG3v8xur
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENERDMS85OTZGOThFQURC
RDcxMUVCQjk1MTE3NDVDNEY5QUUwMi9kdDlfa1JhYVB6Z01DbXZOT09rWWJlX3pH
NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2R0OV9rUmFhUHpnTUNtdk5PT2tZYmVfekc2cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NERDMS85OTZGOThFQURCRDcxMUVCQjk1MTE3NDVDNEY5QUUwMi9kdDlfa1JhYVB6
Z01DbXZOT09rWWJlX3pHNnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAP6pKdabthzjrVGtVZ1YM7++U+pa8esfwYe4hGSdF3BxLxzhmcTwMbfZCu7XK
F/rmWwZPfUkSxt6e8i4a5kUOBq+PITcozmuqJeHEuBLkWDKfNpybptiGplwIF3kd
pZlb9j6NOmmteTIqAEzAu/PMHNmcUoXQjOZaeI9cA3TXodIQzXIHPh2nmHnPI+KK
6PhoFrMewfi6MSekWclcqFbr1bAl4ZXwbuuae2mKy315nhKJeMUvEwjGiOt3I0uM
ZzQWNWNyzypN7+5lcYvVez/UmbFI8H/IUbu/MA8jzMNGFgMsCQaacej3WSWFwLe8
AFS0/Zakn9Zdjn17M4usrBnoUw==
-----END CERTIFICATE-----
Generated at Wed Oct 7 16:05:29 2026 by rpki-client