Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft
File:                     dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft (raw, json)
Hash identifier:          XyMLA2i6DOybkTIb6Jcl9ZRFAIRRO3XLtAixEaqPggo=
Subject key identifier:   4C:D3:05:F1:1C:86:F3:8E:3D:E6:0A:F8:3E:6F:0E:8A:DC:2B:4A:EB
Authority key identifier: 76:DF:7F:91:16:9A:3F:38:0C:0A:6B:CD:38:E9:18:6D:EF:F3:1B:AB
Certificate issuer:       /CN=A91D4DC1/serialNumber=76DF7F91169A3F380C0A6BCD38E9186DEFF31BAB
Certificate serial:       063D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt9_kRaaPzgMCmvNOOkYbe_zG6s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft
Manifest number:          0636
Signing time:             Wed 20 May 2026 22:48:50 +0000
Manifest this update:     Wed 20 May 2026 22:48:50 +0000
Manifest next update:     Wed 27 May 2026 22:48:50 +0000
Files and hashes:         1: dt9_kRaaPzgMCmvNOOkYbe_zG6s.crl (hash: N1JV/21MyY9Kd7Jiv+YWQSXaswM5XT/A9GTJRyTjr5k=)
                          2: B5A7B020DBDB11EB8EC1494EC4F9AE02.roa (hash: c5w5QLZZ9to+icb8pOHSdLzZ2mnRXQw2msiixSkPrZk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.crl
                          rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt9_kRaaPzgMCmvNOOkYbe_zG6s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 22:48:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1597 (0x63d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4DC1, serialNumber=76DF7F91169A3F380C0A6BCD38E9186DEFF31BAB
        Validity
            Not Before: May 20 22:48:50 2026 GMT
            Not After : May 27 22:48:50 2026 GMT
        Subject: CN=6a0e3a52-3250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9c:dd:b4:d5:2d:5a:ba:36:c2:ea:1e:c4:fd:
                    d5:9f:69:de:de:93:55:b1:1e:db:e2:13:7c:87:b4:
                    e9:02:52:b8:ef:10:60:5e:97:c8:2c:24:1a:d8:34:
                    ed:68:63:99:fe:ae:32:cb:62:79:93:38:41:ca:9d:
                    a9:25:4a:b2:3e:ac:38:0c:02:e2:3a:9b:6a:8e:c2:
                    d7:02:63:54:4c:6e:d9:40:85:12:5e:23:40:2d:3b:
                    f4:a6:2d:e5:45:a5:55:13:29:cd:1d:a6:1d:a8:5e:
                    3b:e9:68:e5:89:ac:da:7d:b9:1b:8c:11:b9:da:e3:
                    42:12:57:b5:00:9b:6f:a2:45:75:13:b9:20:e0:bc:
                    9d:74:8f:e2:b8:e2:5a:a1:27:39:72:c5:21:5b:25:
                    cd:f4:52:a0:65:fe:30:a7:ec:99:dc:da:24:38:91:
                    b3:ea:2c:c5:f3:b7:3f:c0:55:dd:ec:03:83:c6:75:
                    37:95:df:7a:07:f2:a3:87:ae:da:40:64:40:02:51:
                    a8:f7:32:7d:ee:ab:6c:a5:04:cb:7a:82:9c:68:af:
                    0f:0a:23:a2:a9:a1:eb:70:60:fb:19:3c:d6:90:a8:
                    c8:1c:58:e2:24:c0:37:90:d1:0d:2e:e8:88:7a:14:
                    96:d3:4a:89:17:9d:53:43:e9:80:e6:a8:d0:39:f7:
                    1f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D3:05:F1:1C:86:F3:8E:3D:E6:0A:F8:3E:6F:0E:8A:DC:2B:4A:EB
            X509v3 Authority Key Identifier:
                keyid:76:DF:7F:91:16:9A:3F:38:0C:0A:6B:CD:38:E9:18:6D:EF:F3:1B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt9_kRaaPzgMCmvNOOkYbe_zG6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:50:58:80:f0:c5:93:a1:c5:cf:f2:11:af:a2:01:9f:4d:f7:
         96:19:09:dc:bb:65:c4:c3:3b:3c:e2:53:5c:ec:64:36:f3:29:
         58:17:64:b5:e1:89:4a:ec:f9:dc:9a:df:11:14:d0:d9:67:4a:
         8b:6a:87:6b:15:bf:be:83:28:f7:11:3b:9b:fd:2a:cb:32:db:
         a4:eb:2e:4b:d0:75:30:a2:ec:4b:db:d6:ad:5d:44:8a:fd:9f:
         d1:28:1a:75:58:43:de:6e:e5:fa:b6:22:c9:6d:e9:6b:ca:a4:
         c8:e4:53:5d:ee:09:64:e9:2c:34:79:15:19:a0:d2:02:67:f3:
         9b:d4:b1:47:5f:c2:be:6a:3d:cd:1e:44:8c:4d:50:8d:5a:7c:
         6e:da:9f:8d:67:4c:39:c5:f6:a6:7e:e4:29:31:8a:45:fa:1d:
         cc:b3:3c:e5:0b:5b:e8:41:41:ce:7a:24:a3:bc:0b:84:37:95:
         d7:6d:d7:9d:da:52:03:ab:e3:8a:9c:e8:c7:b5:a7:a9:82:44:
         8d:76:0b:f1:be:79:7a:f9:83:9f:88:28:8e:ee:c9:e0:4f:e8:
         ac:71:81:4c:b9:c4:b5:6b:24:be:cf:aa:b6:eb:a2:c6:d0:d5:
         3f:8c:ac:b4:71:1d:a8:e2:c3:17:ce:28:5f:9f:03:2e:88:98:
         d0:2d:82:04
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDREQzExMTAvBgNVBAUTKDc2REY3RjkxMTY5QTNGMzgwQzBBNkJDRDM4RTkxODZE
RUZGMzFCQUIwHhcNMjYwNTIwMjI0ODUwWhcNMjYwNTI3MjI0ODUwWjAYMRYwFAYD
VQQDEw02YTBlM2E1Mi0zMjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtJzdtNUtWro2wuoexP3Vn2ne3pNVsR7b4hN8h7TpAlK47xBgXpfILCQa2DTt
aGOZ/q4yy2J5kzhByp2pJUqyPqw4DALiOptqjsLXAmNUTG7ZQIUSXiNALTv0pi3l
RaVVEynNHaYdqF476WjliazafbkbjBG52uNCEle1AJtvokV1E7kg4LyddI/iuOJa
oSc5csUhWyXN9FKgZf4wp+yZ3NokOJGz6izF87c/wFXd7AODxnU3ld96B/Kjh67a
QGRAAlGo9zJ97qtspQTLeoKcaK8PCiOiqaHrcGD7GTzWkKjIHFjiJMA3kNENLuiI
ehSW00qJF51TQ+mA5qjQOfcfKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEzTBfEc
hvOOPeYK+D5vDorcK0rrMB8GA1UdIwQYMBaAFHbff5EWmj84DAprzTjpGG3v8xur
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENERDMS85OTZGOThFQURC
RDcxMUVCQjk1MTE3NDVDNEY5QUUwMi9kdDlfa1JhYVB6Z01DbXZOT09rWWJlX3pH
NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2R0OV9rUmFhUHpnTUNtdk5PT2tZYmVfekc2cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NERDMS85OTZGOThFQURCRDcxMUVCQjk1MTE3NDVDNEY5QUUwMi9kdDlfa1JhYVB6
Z01DbXZOT09rWWJlX3pHNnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAO1BYgPDFk6HFz/IRr6IBn033lhkJ3LtlxMM7POJTXOxkNvMpWBdkteGJSuz5
3JrfERTQ2WdKi2qHaxW/voMo9xE7m/0qyzLbpOsuS9B1MKLsS9vWrV1Eiv2f0Sga
dVhD3m7l+rYiyW3pa8qkyORTXe4JZOksNHkVGaDSAmfzm9SxR1/Cvmo9zR5EjE1Q
jVp8btqfjWdMOcX2pn7kKTGKRfodzLM85Qtb6EFBznoko7wLhDeV123XndpSA6vj
ipzox7WnqYJEjXYL8b55evmDn4goju7J4E/orHGBTLnEtWskvs+qtuuixtDVP4ys
tHEdqOLDF84oX58DLoiY0C2CBA==
-----END CERTIFICATE-----
Generated at Thu May 21 09:39:13 2026 by rpki-client