Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft
File:                     dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft (raw, json)
Hash identifier:          b0yzHqWFDSkjgwsYkKDyFIeUpuoUoXdxItaPvaqvbNY=
Subject key identifier:   F4:C8:52:77:A0:36:43:E5:DB:A0:C2:E5:96:34:9C:6F:68:B2:A1:D7
Authority key identifier: 76:DF:7F:91:16:9A:3F:38:0C:0A:6B:CD:38:E9:18:6D:EF:F3:1B:AB
Certificate issuer:       /CN=A91D4DC1/serialNumber=76DF7F91169A3F380C0A6BCD38E9186DEFF31BAB
Certificate serial:       065F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt9_kRaaPzgMCmvNOOkYbe_zG6s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft
Manifest number:          0658
Signing time:             Sun 26 Jul 2026 23:29:53 +0000
Manifest this update:     Sun 26 Jul 2026 23:29:52 +0000
Manifest next update:     Sun 02 Aug 2026 23:29:52 +0000
Files and hashes:         1: dt9_kRaaPzgMCmvNOOkYbe_zG6s.crl (hash: XsYAzPsRERYyCmf1o3OZQ+oTMbQM6tNG+uUQHqYmCPA=)
                          2: B5A7B020DBDB11EB8EC1494EC4F9AE02.roa (hash: c5w5QLZZ9to+icb8pOHSdLzZ2mnRXQw2msiixSkPrZk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.crl
                          rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt9_kRaaPzgMCmvNOOkYbe_zG6s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 23:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1631 (0x65f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4DC1, serialNumber=76DF7F91169A3F380C0A6BCD38E9186DEFF31BAB
        Validity
            Not Before: Jul 26 23:29:52 2026 GMT
            Not After : Aug  2 23:29:52 2026 GMT
        Subject: CN=6a669871-a32f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:36:38:48:12:c7:6f:7f:76:71:58:1d:3e:c7:
                    ca:0c:e4:b2:5b:30:59:12:39:d2:a2:81:e4:f0:f9:
                    04:ff:87:4d:11:a1:78:f1:9a:a2:c4:52:d6:f4:b0:
                    c5:be:bc:79:70:c7:27:e1:7f:1b:b2:3a:40:95:cb:
                    0e:ab:f1:87:d6:47:92:90:e9:7d:b0:9a:4c:09:ec:
                    e7:64:e9:7a:b6:ac:bf:3b:3e:bc:00:b7:96:99:3c:
                    7b:fc:18:ee:5e:8d:41:c5:65:2a:15:34:fb:37:e4:
                    bd:55:62:2e:60:9d:07:58:a3:19:ab:3b:5a:2f:20:
                    8f:d1:2b:8a:9e:e0:2a:2a:72:87:c5:a0:3e:5c:60:
                    c2:1c:b7:e2:f8:5b:ba:11:aa:f4:72:c4:31:15:cf:
                    a9:75:b0:b0:d6:fa:34:cd:89:d7:91:93:a1:a2:a8:
                    d6:92:0c:f7:1a:47:02:1f:2e:fa:42:2e:56:cc:73:
                    30:00:1a:1d:04:1a:1b:6d:6f:c7:6e:08:5e:64:84:
                    cd:74:35:c9:1f:fe:94:d3:f3:25:97:0f:2d:5b:5f:
                    a7:12:ea:83:4f:4d:10:5a:15:b6:b3:90:38:a2:96:
                    3e:0c:ae:31:2b:fe:7e:f0:5c:8e:79:4b:c9:67:b4:
                    22:17:19:4d:e2:31:c5:45:12:cc:79:ff:cd:00:02:
                    23:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C8:52:77:A0:36:43:E5:DB:A0:C2:E5:96:34:9C:6F:68:B2:A1:D7
            X509v3 Authority Key Identifier:
                keyid:76:DF:7F:91:16:9A:3F:38:0C:0A:6B:CD:38:E9:18:6D:EF:F3:1B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt9_kRaaPzgMCmvNOOkYbe_zG6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:e7:1f:d5:05:46:b8:45:59:ca:eb:f3:60:24:ab:26:2e:18:
         c7:20:70:9b:7c:37:be:20:09:05:52:c8:e0:9e:d4:eb:08:53:
         7f:a6:48:77:34:79:48:84:a8:6b:50:d5:92:25:62:3b:67:4f:
         5b:57:e4:c7:d1:e7:f8:44:8d:3f:b5:ab:6f:1d:dd:94:bf:3f:
         5f:e5:08:4f:f5:20:bb:d7:8c:92:5e:cd:64:70:e2:75:c4:63:
         d7:c2:85:ca:42:a9:9a:c6:69:c0:4c:03:d2:db:41:82:55:bf:
         e2:e2:10:83:c3:0d:37:6f:8c:8c:99:60:eb:2e:09:6f:2e:d6:
         e2:20:7c:db:f3:2f:b1:6f:fa:5c:97:13:0c:d0:18:b3:59:fc:
         b2:e7:16:be:0d:b3:0d:31:23:2e:35:ea:90:d7:22:9d:2f:fd:
         2b:3a:dc:c8:f8:2d:d0:a4:36:70:ab:fc:7a:70:ac:3e:aa:8b:
         51:84:22:d0:c4:bb:73:f7:b3:c7:0f:88:b8:6b:eb:6f:b9:51:
         b0:74:4d:7b:c7:90:57:12:1d:79:fc:d0:a5:cc:e6:4c:40:1b:
         ef:f4:aa:a4:da:2c:9b:1c:40:78:3f:2a:a9:21:de:ee:71:0b:
         da:36:db:f0:33:19:77:fb:35:0b:c7:0a:16:ab:d1:e7:0d:b0:
         81:a4:da:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:28:31 2026 by rpki-client