Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft
File:                     DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft (raw, json)
Hash identifier:          TbWRkoDKVsgiTNEwPnQbsWkMx4NtDibsiYLsC3WvcCY=
Subject key identifier:   88:CE:47:15:40:D9:7A:92:89:A5:1E:6D:F7:B0:2E:3E:0D:25:D3:5C
Authority key identifier: 0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F
Certificate issuer:       /CN=A91C731A/serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F
Certificate serial:       0873
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft
Manifest number:          0867
Signing time:             Tue 28 Jul 2026 21:16:19 +0000
Manifest this update:     Tue 28 Jul 2026 21:16:19 +0000
Manifest next update:     Tue 04 Aug 2026 21:16:19 +0000
Files and hashes:         1: DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl (hash: vLWVa0cZ0i27F37gnl6jCAWt04fV6fqxNdsQsEGBOXI=)
                          2: CC26BAE6895E11F08FE3390FC4F9AE02.roa (hash: gMWeQiLTy0ha5JRkRDRAzKIPkA2Mg4zoy04sliHlLwQ=)
                          3: AD27F510895E11F0AF42FE0EC4F9AE02.roa (hash: JM03PRnYpRFkohzYbnLnI1USKOzvkdZpcJ9fV4bxujM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl
                          rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 21:16:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2163 (0x873)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C731A, serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F
        Validity
            Not Before: Jul 28 21:16:19 2026 GMT
            Not After : Aug  4 21:16:19 2026 GMT
        Subject: CN=6a691c23-9cd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8b:99:49:b3:73:a6:d1:09:34:e9:86:c6:f7:
                    cc:85:06:d6:ca:c6:58:ab:6e:bf:48:2b:d4:77:da:
                    87:66:09:bb:d2:80:11:8e:6e:1e:da:7a:dc:98:80:
                    cf:5f:46:86:6b:e9:90:ac:5d:26:61:11:5c:68:43:
                    c0:bd:bf:a3:4a:40:1e:9b:cf:68:b4:4c:8b:6e:53:
                    18:6a:95:ff:5f:3e:2b:e9:46:57:e9:46:9f:53:ee:
                    46:ab:60:65:31:cc:7c:39:03:2b:32:9d:6f:d7:fd:
                    d4:0d:51:11:de:54:52:cd:8b:0b:ff:a1:53:6b:36:
                    2c:86:60:fa:ac:da:cd:cb:51:f1:3a:89:3a:86:10:
                    17:e3:08:da:5e:5f:c2:b0:14:38:89:5a:7b:32:29:
                    2e:f2:41:f4:cd:bf:e5:13:08:7c:9a:86:02:86:b8:
                    83:02:f0:b2:ec:01:67:a5:ab:9e:9b:4d:06:5a:a7:
                    e9:54:b0:e9:c4:e6:f8:85:14:14:42:9a:25:fa:25:
                    4e:ad:e9:f8:27:68:ab:01:87:96:48:7c:67:0c:35:
                    f6:cf:6d:ef:20:23:4c:e7:6d:25:5f:70:b8:14:a4:
                    4b:b8:e1:1c:cf:05:34:71:7e:3c:b1:99:0d:0a:e2:
                    f8:0f:e6:d4:67:44:94:d0:21:bf:66:e9:11:2f:19:
                    8d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:CE:47:15:40:D9:7A:92:89:A5:1E:6D:F7:B0:2E:3E:0D:25:D3:5C
            X509v3 Authority Key Identifier:
                keyid:0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:21:57:fa:01:8e:3a:57:1f:21:24:6e:60:4d:1c:c8:1b:3f:
         8c:68:3f:df:90:e8:d3:3d:8f:01:3d:de:a7:2e:05:d3:f7:d4:
         ea:95:d7:3c:57:f8:52:25:96:0a:81:b6:cc:52:05:4b:fa:cc:
         91:dd:f7:44:f2:e4:59:63:88:2e:72:44:53:73:2b:50:01:6e:
         7b:dd:4f:ac:be:2a:26:f6:51:be:96:17:b8:a6:9c:24:96:30:
         a1:ed:dd:84:97:99:c5:eb:86:24:07:4d:08:22:69:9f:8f:ea:
         ba:9b:4b:28:79:6e:bf:2d:db:0f:37:c0:b1:ba:71:75:98:f4:
         77:a0:ef:57:e7:99:c1:f0:e4:89:e9:09:15:a3:d3:57:88:eb:
         63:55:14:dd:71:b7:b3:8f:84:75:8f:8a:ac:08:b4:8b:9c:b0:
         0e:d9:44:1e:d7:cb:3f:71:7a:ea:17:b4:23:04:b9:97:a7:24:
         2a:bc:7a:74:24:50:de:bc:5d:da:ab:f9:ce:1f:db:7c:66:6f:
         de:e1:79:71:f7:26:59:f9:a2:1c:5a:86:1d:42:23:5d:1c:b9:
         2b:d4:0d:e5:b4:28:a3:cb:d5:d4:b7:11:b5:5b:c3:c6:9d:34:
         42:8c:c0:17:07:9b:04:bf:7f:03:ba:5b:69:a6:14:af:eb:76:
         7a:ef:b2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:07:17 2026 by rpki-client