Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft
File:                     DKMWISTuZGKWQ_8p6zEQctkShTM.mft (raw, json)
Hash identifier:          kCl2WQempaT90pRCdj6kt3vEUU1PMrPH2M8HT+5RnKs=
Subject key identifier:   9C:2A:3E:36:41:F0:71:90:D9:7C:78:FB:DA:58:E1:57:EB:BB:AA:A9
Authority key identifier: 0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33
Certificate issuer:       /CN=A91A4DBF/serialNumber=0CA3162124EE64629643FF29EB311072D9128533
Certificate serial:       F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft
Manifest number:          E3
Signing time:             Wed 23 Sep 2026 06:33:54 +0000
Manifest this update:     Wed 23 Sep 2026 06:33:53 +0000
Manifest next update:     Wed 30 Sep 2026 06:33:53 +0000
Files and hashes:         1: DKMWISTuZGKWQ_8p6zEQctkShTM.crl (hash: xt991t1cWYN5mBu5/USwmgqb4jAOaeb8Gv9WH26TMvo=)
                          2: 787672F09CBE11F195AB7B4F6511F970.roa (hash: BIwKs+tYnh5S+dj3qZ4MAv9TQim7so69Av7yFw5+2Eg=)
                          3: ABB7CDCC9C1811F1ADB92E767011F970.roa (hash: WqoVvbSiwJn5rj2IxfeamtzmjM8ScyXIZRXq+6IcKl0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl
                          rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:33:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247 (0xf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4DBF, serialNumber=0CA3162124EE64629643FF29EB311072D9128533
        Validity
            Not Before: Sep 23 06:33:53 2026 GMT
            Not After : Sep 30 06:33:53 2026 GMT
        Subject: CN=6ab372d2-a0aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:03:e0:54:c2:44:7c:09:c0:90:a2:65:7b:ef:
                    7a:e4:52:e4:04:ef:cc:25:2c:f4:7e:f7:9b:00:e3:
                    4b:34:b2:e0:c8:26:af:54:96:a6:92:f2:c9:22:28:
                    d5:05:9c:ea:c5:6a:1b:af:68:1f:55:9b:51:7c:19:
                    28:ce:50:ec:a4:f9:20:bf:72:60:44:19:53:38:87:
                    2e:1e:8f:5c:44:91:b5:a2:da:9d:a8:1f:6f:68:b3:
                    41:35:26:ac:2a:3d:21:0f:1f:41:ce:a3:07:ee:0e:
                    29:70:db:bd:30:e2:f9:3b:2a:d6:f9:76:c4:86:22:
                    41:58:e8:ff:30:52:c2:d1:1a:96:ff:b2:f6:fd:75:
                    5f:f5:87:50:77:78:e1:b9:72:57:70:22:a3:fa:3c:
                    f9:71:79:f9:2a:4e:62:c4:ea:cd:20:47:73:4b:58:
                    3b:4e:ab:3a:ee:8a:4a:05:cb:d4:ed:22:1f:b4:6f:
                    1e:65:92:4a:86:34:ed:4b:e7:2d:66:72:79:c0:3e:
                    07:45:82:5a:9b:8f:b8:8c:23:af:ab:6e:d4:6b:09:
                    bf:57:57:e3:43:d5:6b:d2:da:38:0b:fa:8e:02:36:
                    ff:cc:df:61:8c:db:24:7e:3e:66:f8:3e:cf:86:e7:
                    fd:7f:11:36:a1:1b:5c:17:e3:fe:fe:73:2b:44:48:
                    a9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:2A:3E:36:41:F0:71:90:D9:7C:78:FB:DA:58:E1:57:EB:BB:AA:A9
            X509v3 Authority Key Identifier:
                keyid:0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:b9:b2:bc:08:7a:16:3e:ba:a5:50:8c:eb:59:89:d7:4e:b1:
         cf:a1:dc:68:b5:38:2d:db:07:32:8a:de:4b:c6:1e:6d:64:b2:
         6e:3c:73:d7:8f:bd:5f:ad:dd:1e:fc:a9:d4:18:76:f9:b2:4f:
         1a:ec:b7:08:68:09:96:7d:2b:ec:e2:55:0f:c4:e9:05:b1:16:
         9e:be:fb:54:85:8f:3e:ab:20:cf:ae:0f:37:1f:d8:09:3d:b2:
         ed:c3:d4:bf:18:19:a5:7e:d2:3e:3d:91:d0:0f:f4:6d:44:27:
         06:c6:27:14:64:11:3f:ff:3c:c0:4d:ea:d0:8c:c3:76:33:cc:
         b5:76:5c:fa:87:e4:ca:90:06:63:43:2d:77:11:36:53:2b:a5:
         a7:6f:5e:91:b8:14:e8:b1:3d:c3:4f:b7:d6:d2:8b:86:b9:62:
         e5:39:2e:44:83:c0:63:fb:bd:99:f8:31:6c:ca:88:a1:76:47:
         13:b1:8f:2c:ab:13:25:1a:d3:21:b0:e9:d9:f0:cc:57:a2:2c:
         4c:8a:20:db:f0:22:2c:2a:f0:e3:48:44:ae:34:c3:d4:a5:83:
         5d:fc:81:80:06:14:e8:ee:9c:fc:45:8f:a0:62:ec:9a:1f:55:
         af:f8:bd:25:4f:12:4f:34:a1:09:50:64:46:bb:8d:3b:b9:ad:
         82:a7:60:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:23:05 2026 by rpki-client