Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft
File:                     DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft (raw, json)
Hash identifier:          tH7X3Q8o4CJvmlzpnxALoOzp146pUxvbRjLJP+HchQ4=
Subject key identifier:   7E:8D:E3:9E:22:BB:2B:9E:D7:56:26:76:53:5D:F5:A7:E6:0A:93:5D
Authority key identifier: 0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F
Certificate issuer:       /CN=A91C731A/serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F
Certificate serial:       083F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft
Manifest number:          0833
Signing time:             Thu 16 Apr 2026 20:53:05 +0000
Manifest this update:     Thu 16 Apr 2026 20:53:04 +0000
Manifest next update:     Thu 23 Apr 2026 20:53:04 +0000
Files and hashes:         1: DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl (hash: wnCZfp3JJsH/E64DMxFjr6YMZRjI+fHqS+0V8+8r8wU=)
                          2: AD27F510895E11F0AF42FE0EC4F9AE02.roa (hash: JM03PRnYpRFkohzYbnLnI1USKOzvkdZpcJ9fV4bxujM=)
                          3: CC26BAE6895E11F08FE3390FC4F9AE02.roa (hash: gMWeQiLTy0ha5JRkRDRAzKIPkA2Mg4zoy04sliHlLwQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl
                          rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:53:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2111 (0x83f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C731A, serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F
        Validity
            Not Before: Apr 16 20:53:04 2026 GMT
            Not After : Apr 23 20:53:04 2026 GMT
        Subject: CN=69e14c30-1459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2e:e6:7a:f6:8f:64:06:f3:e9:bd:61:46:a3:
                    83:24:f6:1b:61:53:6a:7e:58:d5:78:03:dc:6a:90:
                    e7:f8:5c:70:13:8d:bf:3d:47:86:58:1b:c0:4b:c0:
                    bc:94:d3:38:2d:0d:ff:03:36:d8:27:f8:a8:c0:97:
                    6b:33:70:24:78:10:c0:5f:1a:d8:74:a6:de:fd:53:
                    aa:23:28:64:69:ac:ac:fc:4e:0a:a3:91:50:bb:6b:
                    24:ad:e6:0d:5c:0d:2f:c6:64:bd:01:e3:0c:98:80:
                    f3:47:21:b5:f7:c3:5d:ac:f3:01:a4:68:1c:85:8d:
                    4a:db:bc:bc:f9:7f:65:76:eb:fc:da:91:98:27:32:
                    33:be:21:d2:27:a6:b1:d6:7a:c7:69:14:04:2b:6a:
                    0b:26:c2:89:a8:c0:9d:a5:5e:98:61:80:69:c1:64:
                    f5:6e:3a:44:ad:e5:45:72:6a:e7:d2:46:cc:86:80:
                    d3:c0:a0:5b:a0:8e:37:6e:e2:e8:88:0b:6f:98:ad:
                    90:c7:20:11:c5:9e:e5:e0:9b:f3:eb:ee:1b:72:d3:
                    b2:20:ae:b9:61:d3:72:b3:77:72:5a:aa:a1:10:3e:
                    f8:2e:a6:7b:02:1e:15:4d:02:b6:4f:2f:d4:d5:14:
                    dc:14:ca:cb:39:c3:0b:da:9e:c5:da:1a:5f:be:80:
                    fd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:8D:E3:9E:22:BB:2B:9E:D7:56:26:76:53:5D:F5:A7:E6:0A:93:5D
            X509v3 Authority Key Identifier:
                keyid:0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:c6:8c:30:bb:92:0c:36:ee:d5:e9:29:6a:d8:a1:95:65:f1:
         ee:c6:a3:f9:6d:b2:5d:84:bd:bd:95:8f:f8:16:d2:c5:2e:18:
         ea:d1:07:14:30:8b:ac:a4:c8:7d:92:00:57:73:f7:4c:c4:19:
         83:bc:c2:98:e1:2c:70:3e:1d:30:cb:1e:3e:1d:89:f8:1f:3f:
         41:91:66:bd:ea:de:f6:4c:a0:68:56:1d:4a:07:bc:df:03:bd:
         72:e4:1a:d9:a5:44:9c:d8:46:14:d8:02:76:e9:6b:8d:7f:77:
         c0:c5:71:61:0d:30:06:ad:1f:44:f0:ba:5a:dd:0d:69:b8:ad:
         25:49:81:0b:76:18:6a:09:0e:4f:f7:a9:5a:b5:ba:b1:46:68:
         a2:03:8b:ed:83:dd:64:9a:db:22:08:94:3e:99:19:5d:0a:2a:
         2e:7c:93:0b:d1:cd:f2:46:e9:fc:ce:60:f9:f2:d2:eb:da:40:
         0b:df:1a:5d:bf:4b:50:ac:f7:54:de:58:de:ca:a6:8b:f6:17:
         70:eb:35:da:e1:b5:ca:28:46:92:19:30:e9:b7:c8:47:33:10:
         5a:73:a9:c5:18:31:31:e8:93:b2:d4:09:2c:74:c2:36:b2:f0:
         eb:ef:09:bb:98:a1:c0:60:18:57:9a:fb:ec:b7:95:1a:5c:b9:
         51:6f:6d:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzczMUExMTAvBgNVBAUTKDBEQjREM0Y5RDVFMjBEODVCRUI3RjlDQjFCMDdDMzE1
QUE0NjA5OUYwHhcNMjYwNDE2MjA1MzA0WhcNMjYwNDIzMjA1MzA0WjAYMRYwFAYD
VQQDEw02OWUxNGMzMC0xNDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3y7mevaPZAbz6b1hRqODJPYbYVNqfljVeAPcapDn+FxwE42/PUeGWBvAS8C8
lNM4LQ3/AzbYJ/iowJdrM3AkeBDAXxrYdKbe/VOqIyhkaays/E4Ko5FQu2skreYN
XA0vxmS9AeMMmIDzRyG198NdrPMBpGgchY1K27y8+X9lduv82pGYJzIzviHSJ6ax
1nrHaRQEK2oLJsKJqMCdpV6YYYBpwWT1bjpEreVFcmrn0kbMhoDTwKBboI43buLo
iAtvmK2QxyARxZ7l4Jvz6+4bctOyIK65YdNys3dyWqqhED74LqZ7Ah4VTQK2Ty/U
1RTcFMrLOcML2p7F2hpfvoD9iwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH6N454i
uyue11YmdlNd9afmCpNdMB8GA1UdIwQYMBaAFA200/nV4g2Fvrf5yxsHwxWqRgmf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzMxQS9DOUY4M0FFRTBF
QzMxMUVCQUM5NzkxMThDNEY5QUUwMi9EYlRULWRYaURZVy10X25MR3dmREZhcEdD
WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RiVFQtZFhpRFlXLXRfbkxHd2ZERmFwR0NaOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NzMxQS9DOUY4M0FFRTBFQzMxMUVCQUM5NzkxMThDNEY5QUUwMi9EYlRULWRYaURZ
Vy10X25MR3dmREZhcEdDWjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUsaMMLuSDDbu1ekpatihlWXx7saj+W2yXYS9vZWP+BbSxS4Y6tEHFDCLrKTI
fZIAV3P3TMQZg7zCmOEscD4dMMsePh2J+B8/QZFmvere9kygaFYdSge83wO9cuQa
2aVEnNhGFNgCdulrjX93wMVxYQ0wBq0fRPC6Wt0NabitJUmBC3YYagkOT/epWrW6
sUZoogOL7YPdZJrbIgiUPpkZXQoqLnyTC9HN8kbp/M5g+fLS69pAC98aXb9LUKz3
VN5Y3sqmi/YXcOs12uG1yihGkhkw6bfIRzMQWnOpxRgxMeiTstQJLHTCNrLw6+8J
u5ihwGAYV5r77LeVGly5UW9ttw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:07:54 2026 by rpki-client