Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft
File:                     DKMWISTuZGKWQ_8p6zEQctkShTM.mft (raw, json)
Hash identifier:          Xw0M18RzC348i0kjSrim0v0iLA3cTLTlNmKAfe/QR98=
Subject key identifier:   EB:2C:5B:94:90:98:40:AB:09:FB:13:64:98:72:78:B0:8A:5E:E0:4A
Authority key identifier: 0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33
Certificate issuer:       /CN=A91A4DBF/serialNumber=0CA3162124EE64629643FF29EB311072D9128533
Certificate serial:       A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft
Manifest number:          A0
Signing time:             Thu 11 Jun 2026 09:43:55 +0000
Manifest this update:     Thu 11 Jun 2026 09:43:54 +0000
Manifest next update:     Thu 18 Jun 2026 09:43:54 +0000
Files and hashes:         1: DKMWISTuZGKWQ_8p6zEQctkShTM.crl (hash: ypAjrAWuHaYouPPKjw17fZMXowu0BtlP4KWox0qRBL4=)
                          2: 72966E18019F11F1812044E0666F56BC.roa (hash: u+qbVowvdxjMxvJonhb+j3Cw0O9VVP0RG0wUl0S5BLo=)
                          3: 608BD4EA019C11F18EFB8EA7666F56BC.roa (hash: ECO9MOD3//reRSgefojthsyvnTjQPLzyXslUjMb1MpQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl
                          rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 09:43:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4DBF, serialNumber=0CA3162124EE64629643FF29EB311072D9128533
        Validity
            Not Before: Jun 11 09:43:54 2026 GMT
            Not After : Jun 18 09:43:54 2026 GMT
        Subject: CN=6a2a835a-d0b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6b:ed:63:a4:3f:4c:4d:95:ce:f0:57:2d:87:
                    34:f7:0f:7c:c2:1e:37:1a:34:85:63:71:a9:ea:12:
                    68:13:2d:da:75:8d:ef:83:d4:ae:f1:a8:62:dc:79:
                    4d:3c:80:d3:e3:a2:c7:b8:8d:44:3c:7a:e5:ab:64:
                    3b:5a:ee:56:e9:e2:de:35:5f:9a:05:08:d3:81:5c:
                    14:f9:cb:9f:ae:48:e3:10:79:a3:59:14:53:89:1a:
                    f6:45:e1:41:11:e9:94:ad:82:c2:39:71:ab:d1:77:
                    a3:cf:68:69:53:23:96:fc:b0:18:cc:b5:0e:ba:6e:
                    ce:9f:9c:c0:a9:df:21:4e:7d:f7:d6:e4:8b:5d:d3:
                    cf:60:c7:9a:72:eb:b5:34:4e:dd:9b:bf:34:5f:bb:
                    3e:5f:53:f4:79:21:ae:6d:da:28:5c:aa:57:56:32:
                    53:0a:0a:c2:de:4b:1d:e9:d8:ca:43:3a:68:f1:7e:
                    ed:83:d3:fe:0b:a1:3c:26:7a:19:90:96:35:95:ae:
                    7f:1e:c2:2c:75:ed:db:f7:9c:a2:c8:bb:fd:ad:0e:
                    c9:20:70:c2:41:4c:e7:56:51:3a:c4:b5:57:a7:c6:
                    3d:19:48:76:22:26:3f:8c:7b:85:70:af:5f:87:92:
                    9b:4f:ff:39:78:76:6b:10:81:c9:4a:86:50:48:d7:
                    a8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:2C:5B:94:90:98:40:AB:09:FB:13:64:98:72:78:B0:8A:5E:E0:4A
            X509v3 Authority Key Identifier:
                keyid:0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:79:f6:c7:04:dd:f4:91:77:ea:96:0d:2a:4c:11:39:e7:ff:
         c2:1b:30:64:88:20:dd:df:57:0c:10:01:c7:44:af:ea:8c:e9:
         54:98:12:bf:8a:f2:fc:22:59:dd:7b:25:0a:60:4d:8a:c0:cd:
         5e:7d:bc:54:94:c4:bc:40:11:3e:80:7a:a9:56:e3:89:fd:54:
         56:bb:cb:0d:23:fc:c9:cb:6c:c6:fc:5b:25:23:91:c9:1f:17:
         56:6c:24:3f:4f:c0:8b:42:72:61:e9:34:4c:97:1b:fc:31:37:
         18:ae:76:6e:3d:ab:e6:6e:cb:a6:8c:7c:93:50:87:f8:e0:17:
         f4:3b:58:7c:25:06:bd:87:e1:fe:7c:68:e1:6f:5d:79:c5:a6:
         48:fc:17:cd:f7:42:ee:2c:0d:4c:68:db:13:88:6c:9d:87:e2:
         b9:b4:8b:5c:f2:91:b4:f4:8f:58:bf:52:7c:83:57:7d:cd:7b:
         83:28:74:e1:55:7e:67:1c:1f:4e:d3:82:94:53:4f:1e:3a:16:
         dd:a5:44:ff:ad:c0:8c:6b:d0:ac:38:90:fc:56:29:48:69:fd:
         f5:a7:34:5d:56:5e:83:aa:c8:ff:97:68:f1:3d:eb:92:f0:4d:
         b7:cd:9e:c0:8b:0c:36:2a:d2:44:0e:e1:1f:84:38:05:f0:fb:
         17:71:9f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:44:53 2026 by rpki-client