Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft
File:                     DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft (raw, json)
Hash identifier:          nTFXoAA045/ZsQsBfhYHC7IPrNVQzzXOxE8RjZG0Ork=
Subject key identifier:   B5:B0:5C:64:86:1E:4A:79:F8:0B:98:7B:86:69:7B:37:27:09:54:41
Authority key identifier: 0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F
Certificate issuer:       /CN=A91C731A/serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F
Certificate serial:       081F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft
Manifest number:          0817
Signing time:             Sat 28 Feb 2026 21:25:50 +0000
Manifest this update:     Sat 28 Feb 2026 21:25:50 +0000
Manifest next update:     Sat 07 Mar 2026 21:25:50 +0000
Files and hashes:         1: DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl (hash: jwTYVMlARvhorEKnj/oK8EneQ9ZLHumcQVvHLseHPNQ=)
                          2: CC26BAE6895E11F08FE3390FC4F9AE02.roa (hash: Qd9yXxs36oF+1VHeMpSuefMICH6l6WaUGPlOLsEYxaI=)
                          3: AD27F510895E11F0AF42FE0EC4F9AE02.roa (hash: 8JiU8Oos87rOfxfxW5raSyPKQ8t3Ze/tzK20sDot2kI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl
                          rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 21:25:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2079 (0x81f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C731A, serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F
        Validity
            Not Before: Feb 28 21:25:50 2026 GMT
            Not After : Mar  7 21:25:50 2026 GMT
        Subject: CN=69a35d5e-2033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3d:bc:cd:05:97:31:f6:03:12:65:88:b9:3c:
                    1c:01:41:91:7d:39:03:2c:ac:b2:79:b8:c5:5b:ee:
                    d2:96:d0:8b:44:28:aa:18:cb:e3:ef:ad:7e:03:3f:
                    03:fb:59:3c:c4:07:1d:59:63:95:df:2c:38:5e:ea:
                    6c:6d:e6:b6:6d:8e:82:8d:a8:cf:ff:9d:32:fa:4b:
                    a8:84:a7:3c:2e:54:1a:3d:9f:e1:44:08:56:a9:d7:
                    d5:a4:c0:84:85:79:81:b3:79:bd:46:87:3e:b5:e2:
                    95:99:9a:7b:f5:6d:3b:9e:3f:77:98:fa:e6:19:98:
                    75:1a:92:8c:9b:27:10:59:77:f3:80:69:3c:e3:58:
                    47:d1:87:82:b9:3e:d2:3e:b2:8e:12:41:41:61:84:
                    27:8b:f7:5e:48:63:6b:6c:bf:5d:c8:7a:3f:68:60:
                    de:b7:bf:42:23:0f:18:36:b8:45:8d:72:54:2a:26:
                    e9:7e:35:81:56:64:20:0f:71:ac:27:3e:3f:97:63:
                    af:6c:a8:39:e1:07:6e:42:d0:4a:e5:d4:64:3a:fc:
                    da:bf:c5:c1:ee:8d:7e:e6:59:66:34:15:db:87:72:
                    4f:91:4b:e1:47:37:96:de:9a:02:e8:23:fc:0a:bf:
                    7d:31:aa:36:da:be:74:61:0c:8b:a3:80:84:86:40:
                    bc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B0:5C:64:86:1E:4A:79:F8:0B:98:7B:86:69:7B:37:27:09:54:41
            X509v3 Authority Key Identifier:
                keyid:0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:08:bc:7e:4d:12:16:19:d5:b2:ae:18:be:37:96:10:dc:63:
         a7:89:63:62:b2:a0:b2:e8:30:58:bc:48:eb:01:62:3d:26:91:
         ec:5f:95:72:ab:b2:fc:2d:be:c5:68:89:83:65:80:6d:8c:45:
         7c:ea:7c:c4:80:40:cf:92:94:ef:b5:30:27:41:a7:2d:ed:1c:
         bb:49:cc:8d:07:38:71:9a:7c:62:0a:7b:ab:5a:ce:09:ee:76:
         68:68:f6:59:98:e8:87:49:08:ab:dc:fa:9c:bd:06:1c:8a:81:
         40:c5:66:2c:53:6f:a0:8a:8d:52:a7:ee:21:54:2d:02:9f:e0:
         8a:45:8b:12:a7:ac:02:db:a7:17:0b:d3:c7:06:b8:21:27:d2:
         ff:66:2c:a8:cd:ea:a3:ab:d3:d2:b5:9f:79:a2:37:5e:a6:e1:
         e5:a2:78:a6:6e:fa:df:54:d3:20:af:48:01:3b:5c:2e:7e:59:
         bb:0c:06:69:83:3e:91:89:65:a9:d4:9e:e6:76:85:b8:bc:d1:
         b2:03:04:32:a8:35:94:7c:eb:41:32:97:ef:5d:c1:69:98:1f:
         5c:ce:4c:4b:b3:e3:08:4b:aa:55:47:82:2c:a6:e5:a8:1a:10:
         5f:67:39:9f:bb:c9:09:05:f4:5a:66:3f:86:c0:62:f3:57:a3:
         8b:23:e6:c7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCB8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzczMUExMTAvBgNVBAUTKDBEQjREM0Y5RDVFMjBEODVCRUI3RjlDQjFCMDdDMzE1
QUE0NjA5OUYwHhcNMjYwMjI4MjEyNTUwWhcNMjYwMzA3MjEyNTUwWjAYMRYwFAYD
VQQDDA02OWEzNWQ1ZS0yMDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArz28zQWXMfYDEmWIuTwcAUGRfTkDLKyyebjFW+7SltCLRCiqGMvj761+Az8D
+1k8xAcdWWOV3yw4Xupsbea2bY6CjajP/50y+kuohKc8LlQaPZ/hRAhWqdfVpMCE
hXmBs3m9Roc+teKVmZp79W07nj93mPrmGZh1GpKMmycQWXfzgGk841hH0YeCuT7S
PrKOEkFBYYQni/deSGNrbL9dyHo/aGDet79CIw8YNrhFjXJUKibpfjWBVmQgD3Gs
Jz4/l2OvbKg54QduQtBK5dRkOvzav8XB7o1+5llmNBXbh3JPkUvhRzeW3poC6CP8
Cr99Mao22r50YQyLo4CEhkC8UQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLWwXGSG
Hkp5+AuYe4ZpezcnCVRBMB8GA1UdIwQYMBaAFA200/nV4g2Fvrf5yxsHwxWqRgmf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzMxQS9DOUY4M0FFRTBF
QzMxMUVCQUM5NzkxMThDNEY5QUUwMi9EYlRULWRYaURZVy10X25MR3dmREZhcEdD
WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RiVFQtZFhpRFlXLXRfbkxHd2ZERmFwR0NaOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NzMxQS9DOUY4M0FFRTBFQzMxMUVCQUM5NzkxMThDNEY5QUUwMi9EYlRULWRYaURZ
Vy10X25MR3dmREZhcEdDWjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnQi8fk0SFhnVsq4YvjeWENxjp4ljYrKgsugwWLxI6wFiPSaR7F+Vcquy/C2+
xWiJg2WAbYxFfOp8xIBAz5KU77UwJ0GnLe0cu0nMjQc4cZp8Ygp7q1rOCe52aGj2
WZjoh0kIq9z6nL0GHIqBQMVmLFNvoIqNUqfuIVQtAp/gikWLEqesAtunFwvTxwa4
ISfS/2YsqM3qo6vT0rWfeaI3Xqbh5aJ4pm7631TTIK9IATtcLn5ZuwwGaYM+kYll
qdSe5naFuLzRsgMEMqg1lHzrQTKX713BaZgfXM5MS7PjCEuqVUeCLKblqBoQX2c5
n7vJCQX0WmY/hsBi81ejiyPmxw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:16:00 2026 by rpki-client