Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.mft
File:                     dtwBlmJpqGSLEcQlQCgDWjafFew.mft (raw, json)
Hash identifier:          3sDzZteONHJaN330TN+kwMYh/9gyw0A2Bg+EE1zPiHI=
Subject key identifier:   A4:DF:0D:A2:FE:2A:91:C9:90:74:2A:0A:FD:9A:1D:01:B9:EA:67:F8
Authority key identifier: 76:DC:01:96:62:69:A8:64:8B:11:C4:25:40:28:03:5A:36:9F:15:EC
Certificate issuer:       /CN=A919E4A9/serialNumber=76DC01966269A8648B11C4254028035A369F15EC
Certificate serial:       50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtwBlmJpqGSLEcQlQCgDWjafFew.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.mft
Manifest number:          4C
Signing time:             Thu 05 Nov 2026 09:23:09 +0000
Manifest this update:     Thu 05 Nov 2026 09:23:09 +0000
Manifest next update:     Thu 12 Nov 2026 09:23:09 +0000
Files and hashes:         1: dtwBlmJpqGSLEcQlQCgDWjafFew.crl (hash: MtR9HGkJckUpA1/ZKksWwjJNbra9OkYln9NCsqcV2wA=)
                          2: 0A3499FA6D4011F18402C72C7347A888.roa (hash: IcAFoiT1xNzuxGEcSGlqRhiYhlm73dEBd3/qHI8dWW0=)
                          3: 1BDA0F506D4011F1A585AE4B7347A888.roa (hash: wpnVumsB2f8dA1T8SzbB3vP+w3jToecyu35SvlLd2e4=)
                          4: DF6CFFE66D3F11F1AD19B30B7347A888.roa (hash: Xkludu2C6ECpMoaKu70hUDHxFQYA88cJcDG8muAieG4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.crl
                          rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtwBlmJpqGSLEcQlQCgDWjafFew.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Nov 2026 09:23:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E4A9, serialNumber=76DC01966269A8648B11C4254028035A369F15EC
        Validity
            Not Before: Nov  5 09:23:09 2026 GMT
            Not After : Nov 12 09:23:09 2026 GMT
        Subject: CN=6aec4afd-da53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6c:15:1e:0a:9d:3f:07:2b:f4:23:fe:b2:79:
                    07:c6:93:04:d8:7a:49:35:19:7e:df:2a:3c:78:ac:
                    0b:8f:ad:bf:d6:87:a6:2c:18:d6:8f:28:34:81:b3:
                    a2:1f:ae:8d:3b:5a:2b:f4:c7:4b:a6:3e:f2:20:65:
                    d8:2b:b7:8b:47:46:f4:7a:fa:b6:22:48:ec:4d:bc:
                    07:68:95:3e:46:6a:da:09:b0:b2:d4:92:ea:27:27:
                    a1:e1:0c:89:48:3a:7d:09:ba:6b:56:49:a8:c9:d9:
                    03:8e:a9:df:b0:84:51:78:98:c8:10:3b:18:5b:6a:
                    7e:d8:f1:43:c1:a8:c4:69:61:ba:50:80:ce:7e:39:
                    e6:ce:9c:33:a6:d4:0f:c7:65:7d:a5:b1:2a:8e:51:
                    3e:1f:29:f6:b6:b1:58:74:df:e5:2c:f6:4a:e0:63:
                    6c:19:00:2d:62:9f:f5:00:d8:d2:c5:7a:47:cf:f0:
                    a3:75:93:29:08:27:12:f6:75:fb:db:3d:8c:63:df:
                    c2:dd:4e:b2:ee:7c:81:56:7e:11:0f:e5:53:43:3d:
                    e1:d7:e4:a9:09:7a:fb:85:bf:ba:2a:39:c1:c7:cf:
                    8c:30:45:c3:d2:bc:95:fd:6a:ee:14:7a:ce:ae:c9:
                    b0:0e:be:1a:57:c6:64:d3:0a:dc:08:e2:cf:7c:35:
                    67:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:DF:0D:A2:FE:2A:91:C9:90:74:2A:0A:FD:9A:1D:01:B9:EA:67:F8
            X509v3 Authority Key Identifier:
                keyid:76:DC:01:96:62:69:A8:64:8B:11:C4:25:40:28:03:5A:36:9F:15:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtwBlmJpqGSLEcQlQCgDWjafFew.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:08:16:9a:03:8a:f9:a4:6e:3b:6b:5f:02:fa:e1:d1:a9:18:
         87:d9:69:3d:eb:d0:e5:92:1a:87:3e:eb:47:26:1c:07:ff:c7:
         14:38:ce:84:8c:13:a1:ad:24:db:9c:18:89:dd:17:48:30:2a:
         45:cf:10:17:0a:05:26:fa:d2:34:f4:b2:8b:cb:76:70:20:da:
         6c:ce:6d:14:e4:2b:8b:99:4e:e5:56:71:b7:02:09:ce:ac:58:
         cb:91:81:57:48:22:ab:2b:8b:81:13:b4:f4:85:bf:06:95:96:
         5d:a6:b8:74:e4:a9:ac:be:27:56:3b:b6:70:06:b0:f6:26:28:
         54:5e:80:dc:96:c4:9e:56:36:65:1d:06:8d:68:12:18:c9:e1:
         ed:a1:dc:dc:84:98:b6:e0:7a:08:bc:0f:70:d7:8e:27:e1:27:
         8a:10:d4:ef:ea:c6:a6:10:10:30:a0:52:58:d9:48:cd:13:96:
         97:2a:52:cb:52:04:1b:66:65:72:85:f8:83:44:12:42:2b:e5:
         02:4f:10:c7:49:f4:76:f6:3d:dc:79:ef:b6:d4:22:0d:5e:96:
         eb:53:1e:1b:d9:bf:a2:61:b8:46:ad:9d:5a:ff:3c:b3:01:47:
         cc:1f:27:ee:07:98:2f:ac:29:13:25:a1:c3:4a:9c:df:bf:73:
         d3:47:38:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:27:40 2026 by rpki-client