Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft
File:                     DKMWISTuZGKWQ_8p6zEQctkShTM.mft (raw, json)
Hash identifier:          UnSo1g4wFVb19if9oeaId7fDq4tbXxuCyfNZnJGmBDo=
Subject key identifier:   27:2A:C6:E6:EF:2B:65:6F:46:B9:BD:93:99:5A:FB:D8:E5:FF:CC:8B
Authority key identifier: 0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33
Certificate issuer:       /CN=A91A4DBF/serialNumber=0CA3162124EE64629643FF29EB311072D9128533
Certificate serial:       8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft
Manifest number:          86
Signing time:             Sun 19 Apr 2026 07:20:01 +0000
Manifest this update:     Sun 19 Apr 2026 07:20:00 +0000
Manifest next update:     Sun 26 Apr 2026 07:20:00 +0000
Files and hashes:         1: DKMWISTuZGKWQ_8p6zEQctkShTM.crl (hash: 2ZyNMmMbDHTHiYEpSGlO34riJ3gmP9JPbiaDRKj3gOw=)
                          2: 608BD4EA019C11F18EFB8EA7666F56BC.roa (hash: ECO9MOD3//reRSgefojthsyvnTjQPLzyXslUjMb1MpQ=)
                          3: 72966E18019F11F1812044E0666F56BC.roa (hash: u+qbVowvdxjMxvJonhb+j3Cw0O9VVP0RG0wUl0S5BLo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl
                          rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143 (0x8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4DBF, serialNumber=0CA3162124EE64629643FF29EB311072D9128533
        Validity
            Not Before: Apr 19 07:20:00 2026 GMT
            Not After : Apr 26 07:20:00 2026 GMT
        Subject: CN=69e48221-bb6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:c6:4d:16:d6:b2:d8:08:5b:fa:b8:14:3b:15:
                    57:f3:84:22:13:e0:74:cb:a7:9d:96:3b:9b:2f:ee:
                    3f:87:db:29:15:95:f6:d6:da:61:f5:a5:08:e2:68:
                    e5:18:08:7b:64:f2:a5:2e:f1:46:74:cd:08:07:f0:
                    9d:af:6e:6d:d7:e6:03:93:45:6d:94:25:89:d9:58:
                    54:1a:1a:a0:f9:35:ed:03:49:04:68:ab:6b:06:11:
                    d2:08:80:e5:28:0b:39:35:e1:68:9f:65:95:8c:e2:
                    6a:f9:d0:84:b7:51:d0:af:c5:99:b8:63:ec:0d:dc:
                    44:fd:c1:c7:6b:24:b7:b7:7e:a0:43:5a:57:f3:03:
                    d7:23:75:20:b4:b3:7f:a6:ba:85:be:96:a6:c8:a3:
                    f5:b6:52:69:f3:c2:38:39:2d:61:cb:c7:af:22:62:
                    51:5d:f5:68:c1:ec:c7:6b:99:b5:7c:dc:47:a1:b2:
                    f3:de:a1:7a:b6:ae:64:40:44:37:f6:47:42:03:e1:
                    db:f9:e8:45:70:66:7f:25:cb:b1:a3:5f:06:3b:d0:
                    dd:48:6e:1c:76:ca:c1:7d:f2:05:be:29:0c:7c:4a:
                    c7:ca:bb:7a:0f:40:35:7d:db:5f:f7:ba:6c:1d:f1:
                    65:a8:27:10:b3:3e:4d:40:89:4d:20:27:bb:27:bc:
                    89:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:2A:C6:E6:EF:2B:65:6F:46:B9:BD:93:99:5A:FB:D8:E5:FF:CC:8B
            X509v3 Authority Key Identifier:
                keyid:0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:58:20:66:d9:f0:82:84:bf:47:0c:62:8f:9e:08:a9:11:43:
         25:05:b7:a8:2b:62:27:c2:79:bc:2a:bc:a8:68:a2:42:cb:8c:
         27:eb:12:93:4c:20:24:1c:18:86:11:fa:da:39:d8:b4:22:f1:
         64:71:03:1a:dc:0a:98:0b:99:5d:c1:f7:ea:9e:89:0e:70:00:
         c6:3e:4f:76:46:69:a0:1d:f3:f6:7f:10:87:a5:1c:ac:64:8f:
         e5:84:40:35:66:ed:3a:8d:2e:72:0f:93:6d:7a:12:09:90:d7:
         0f:dc:e7:ac:2a:33:44:53:92:e8:16:12:ba:ac:20:7b:28:7b:
         01:73:27:ea:69:89:d2:eb:36:c9:c1:e1:36:d4:97:88:83:f1:
         63:c5:07:94:96:4a:94:c3:df:0d:0f:7e:9a:0a:8a:c4:22:5d:
         8b:14:7f:a3:be:b8:e2:d8:31:5d:ad:96:eb:0e:7f:25:1d:74:
         19:a5:d1:f5:f1:f6:f0:97:df:b6:a8:22:d5:a6:ba:06:02:bb:
         be:02:12:11:a3:16:03:a7:1b:65:96:cd:db:b8:00:45:df:fe:
         e3:ca:29:2c:27:da:72:c8:bc:bf:4c:2e:6a:a7:5b:46:f1:d1:
         88:df:08:d4:16:ff:80:d7:22:44:31:dd:29:06:7e:60:7e:b7:
         5a:8b:da:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:45:17 2026 by rpki-client