Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.mft
File:                     dtwBlmJpqGSLEcQlQCgDWjafFew.mft (raw, json)
Hash identifier:          jgQsGkybRz0uTgMnqrT4baAdAybTL5nqtxqqM7ZQAe8=
Subject key identifier:   B5:8A:30:1D:75:A4:85:71:2D:41:BF:E6:15:7C:9A:FA:42:02:1C:78
Authority key identifier: 76:DC:01:96:62:69:A8:64:8B:11:C4:25:40:28:03:5A:36:9F:15:EC
Certificate issuer:       /CN=A919E4A9/serialNumber=76DC01966269A8648B11C4254028035A369F15EC
Certificate serial:       3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtwBlmJpqGSLEcQlQCgDWjafFew.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.mft
Manifest number:          36
Signing time:             Wed 23 Sep 2026 08:24:36 +0000
Manifest this update:     Wed 23 Sep 2026 08:24:35 +0000
Manifest next update:     Wed 30 Sep 2026 08:24:35 +0000
Files and hashes:         1: dtwBlmJpqGSLEcQlQCgDWjafFew.crl (hash: 8qBO++zYMTfwap9peFriMMDVSuC5/5WnJtHSKnZdmaU=)
                          2: 1BDA0F506D4011F1A585AE4B7347A888.roa (hash: wpnVumsB2f8dA1T8SzbB3vP+w3jToecyu35SvlLd2e4=)
                          3: DF6CFFE66D3F11F1AD19B30B7347A888.roa (hash: Xkludu2C6ECpMoaKu70hUDHxFQYA88cJcDG8muAieG4=)
                          4: 0A3499FA6D4011F18402C72C7347A888.roa (hash: IcAFoiT1xNzuxGEcSGlqRhiYhlm73dEBd3/qHI8dWW0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.crl
                          rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtwBlmJpqGSLEcQlQCgDWjafFew.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 08:24:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E4A9, serialNumber=76DC01966269A8648B11C4254028035A369F15EC
        Validity
            Not Before: Sep 23 08:24:35 2026 GMT
            Not After : Sep 30 08:24:35 2026 GMT
        Subject: CN=6ab38cc4-67fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bb:76:4c:9a:c1:91:0f:be:34:c2:6b:38:28:
                    14:ab:f7:38:5d:d8:16:a4:60:03:83:5d:83:3b:b7:
                    51:dc:ce:e2:49:f9:b6:ab:4e:73:1a:b6:1d:cc:98:
                    e8:62:81:30:d6:2f:35:73:ff:90:26:76:7d:e6:a6:
                    a4:fb:a0:ec:4e:46:bc:9f:47:b1:aa:c6:b7:6f:80:
                    7c:4a:63:0a:1d:fd:3e:e1:48:5c:aa:65:dd:fc:b4:
                    45:d3:40:12:5b:e6:63:db:b2:58:32:50:46:a4:68:
                    c9:88:d4:a9:1f:a1:ad:7b:be:56:48:b5:97:fe:a3:
                    be:7f:f6:cd:c5:c4:14:1c:85:6e:9f:8e:bb:5a:fd:
                    a0:31:b7:50:2d:a2:78:ae:b2:70:77:af:db:f1:9e:
                    f0:a8:15:fd:1d:46:1b:41:2d:1d:29:49:42:97:ea:
                    92:17:3f:50:21:cf:b7:a0:8c:2e:bd:46:31:e3:56:
                    33:bd:de:da:b4:3a:43:ff:7b:93:f3:bc:ba:ac:51:
                    4a:ae:83:ce:a7:74:97:0d:79:c6:dc:8d:f3:b9:24:
                    00:85:99:c4:8b:03:9d:3f:9c:99:b7:2a:5e:c9:a4:
                    ad:36:36:97:2c:66:ea:a0:f9:af:72:89:a6:a0:a4:
                    25:0f:16:50:3c:c5:97:16:e9:62:d3:a5:7a:c3:19:
                    10:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:8A:30:1D:75:A4:85:71:2D:41:BF:E6:15:7C:9A:FA:42:02:1C:78
            X509v3 Authority Key Identifier:
                keyid:76:DC:01:96:62:69:A8:64:8B:11:C4:25:40:28:03:5A:36:9F:15:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtwBlmJpqGSLEcQlQCgDWjafFew.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:d7:20:64:1e:7a:34:09:03:f7:b6:f4:3e:4a:54:d7:9e:96:
         3e:50:1a:fb:2f:d5:e0:3c:a4:d8:b8:d3:1a:44:51:9d:4f:70:
         d2:60:8f:e7:ca:4a:2c:5b:2d:14:4c:90:6b:17:65:50:25:ba:
         52:a5:8b:56:74:6b:30:ed:08:36:af:1d:c7:8d:26:fa:5f:9f:
         8d:35:c5:76:1f:06:22:8f:2a:27:cd:c5:d5:79:84:e4:30:c2:
         58:91:88:f6:86:e2:2b:28:d1:d4:cd:fb:b3:3a:96:b9:5a:ae:
         75:6d:30:a9:f1:1c:e9:d9:3b:42:0d:ab:0b:39:f0:f1:d5:e0:
         05:15:8d:95:5c:07:9c:d0:7b:f0:66:a9:93:7d:8f:2a:3d:76:
         21:d4:e5:64:db:fc:9b:cc:2f:c5:21:2e:48:52:a7:f4:3b:03:
         32:93:e2:1a:a1:c7:0a:59:b7:41:b6:ab:58:8d:f2:5a:99:b5:
         0c:ef:cb:a4:3e:a4:8b:be:cc:f2:6f:1f:32:ca:f6:15:e6:77:
         e1:89:81:9a:26:56:15:38:89:c4:47:ca:3f:ab:b2:dc:a8:b2:
         43:04:03:95:48:4f:88:44:a0:06:85:bb:66:10:96:07:51:c2:
         61:3b:bf:d2:85:f3:c0:e1:11:e6:be:0b:01:b5:ad:e2:30:d5:
         a3:81:8c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:37:27 2026 by rpki-client