Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.mft
File:                     dtwBlmJpqGSLEcQlQCgDWjafFew.mft (raw, json)
Hash identifier:          UsvviwubStr08XsgGgRZxcydhSJygRytXmq4H0cIr5k=
Subject key identifier:   92:66:67:2D:17:BE:0C:47:76:84:67:05:8B:AE:C7:3B:52:B4:71:AF
Authority key identifier: 76:DC:01:96:62:69:A8:64:8B:11:C4:25:40:28:03:5A:36:9F:15:EC
Certificate issuer:       /CN=A919E4A9/serialNumber=76DC01966269A8648B11C4254028035A369F15EC
Certificate serial:       1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtwBlmJpqGSLEcQlQCgDWjafFew.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.mft
Manifest number:          16
Signing time:             Thu 23 Jul 2026 11:08:49 +0000
Manifest this update:     Thu 23 Jul 2026 11:08:48 +0000
Manifest next update:     Thu 30 Jul 2026 11:08:48 +0000
Files and hashes:         1: dtwBlmJpqGSLEcQlQCgDWjafFew.crl (hash: vf8JQUzjzy38h/Wfz3EnYL9BpikEklnQr3Yc2oOF76g=)
                          2: 0A3499FA6D4011F18402C72C7347A888.roa (hash: IcAFoiT1xNzuxGEcSGlqRhiYhlm73dEBd3/qHI8dWW0=)
                          3: 1BDA0F506D4011F1A585AE4B7347A888.roa (hash: wpnVumsB2f8dA1T8SzbB3vP+w3jToecyu35SvlLd2e4=)
                          4: DF6CFFE66D3F11F1AD19B30B7347A888.roa (hash: Xkludu2C6ECpMoaKu70hUDHxFQYA88cJcDG8muAieG4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.crl
                          rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtwBlmJpqGSLEcQlQCgDWjafFew.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:08:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E4A9, serialNumber=76DC01966269A8648B11C4254028035A369F15EC
        Validity
            Not Before: Jul 23 11:08:48 2026 GMT
            Not After : Jul 30 11:08:48 2026 GMT
        Subject: CN=6a61f641-8373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:37:19:01:72:d6:ab:71:3d:81:61:77:33:e1:
                    1a:de:1f:20:5d:e2:55:bd:d7:4e:37:ed:ec:8e:49:
                    0c:2a:8e:bc:64:b0:46:bf:68:b8:5d:bb:44:10:60:
                    19:ed:68:54:be:ff:0e:f3:68:46:c5:1e:b0:79:75:
                    0d:0a:ea:24:8c:fb:73:54:14:73:8d:05:ff:f1:64:
                    65:46:75:e1:83:2d:fa:9d:7c:39:3a:b1:02:b5:a8:
                    21:84:d5:40:b5:a3:fe:fa:20:90:41:73:65:95:65:
                    48:2d:46:75:e8:5f:24:29:63:d6:4f:8a:53:69:e1:
                    2f:9f:bb:eb:c2:6b:5b:42:bf:0e:4e:7a:f7:f3:51:
                    39:8d:ef:3c:a9:4f:5a:60:4b:ec:f4:70:d0:81:3a:
                    6b:f0:0f:f8:d2:85:90:1d:6b:af:fb:1a:72:bb:28:
                    06:2b:5f:04:4b:e6:2b:7e:4e:7d:5d:f1:d2:9e:2d:
                    a1:0c:b1:01:04:4e:b8:07:2f:65:05:ea:56:d4:03:
                    03:d5:87:ce:77:a5:75:42:82:89:08:77:85:89:83:
                    9a:b4:11:17:ff:bc:11:37:fe:36:c3:25:3e:97:64:
                    ab:e3:1d:1f:31:6f:be:a8:b1:63:19:a5:47:05:e9:
                    a9:55:00:50:e5:e6:fb:f2:2a:17:c9:ae:7e:5f:24:
                    35:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:66:67:2D:17:BE:0C:47:76:84:67:05:8B:AE:C7:3B:52:B4:71:AF
            X509v3 Authority Key Identifier:
                keyid:76:DC:01:96:62:69:A8:64:8B:11:C4:25:40:28:03:5A:36:9F:15:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtwBlmJpqGSLEcQlQCgDWjafFew.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:c2:fb:68:d5:1e:8b:e8:5e:2c:e9:38:23:bd:7e:75:76:58:
         5a:89:3f:1f:42:ca:31:e9:59:f3:d5:b9:06:bc:88:a0:b9:95:
         bd:5f:ad:c6:c0:6d:41:c7:27:ea:d8:20:d6:49:29:a5:92:b6:
         22:1c:33:f0:c3:61:fd:fa:b4:9e:dc:28:16:23:ce:7f:2d:f9:
         a7:6b:19:ab:20:cb:f0:e5:ed:9f:b2:f1:30:49:8c:82:bb:01:
         80:f3:2e:c0:41:1f:22:e5:b9:29:e2:2e:90:3c:55:5b:40:95:
         4a:a9:e4:c9:1c:af:2f:fe:b8:06:35:92:f3:bc:eb:d6:9b:3c:
         e9:84:14:79:cd:c4:bc:74:ba:2d:fc:5b:36:7a:b0:9d:a4:da:
         d4:e3:d9:38:42:84:57:1d:58:e3:bf:52:6f:33:c5:da:92:d5:
         6b:be:74:98:d2:6d:3c:b9:d4:d0:1c:41:51:10:56:4e:5a:d9:
         64:53:93:ae:95:26:4e:1e:d9:16:b0:b9:19:ce:85:27:48:59:
         ea:e0:bc:9e:7d:e2:c3:3e:3b:f3:36:c9:82:c6:1f:ae:13:90:
         c2:bf:d1:16:f4:58:9d:13:53:ee:88:f5:1b:9a:80:0e:57:d2:
         18:cf:55:01:67:ef:0d:90:c6:bb:50:e7:c9:1d:1f:85:11:82:
         4e:50:58:b2
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
RTRBOTExMC8GA1UEBRMoNzZEQzAxOTY2MjY5QTg2NDhCMTFDNDI1NDAyODAzNUEz
NjlGMTVFQzAeFw0yNjA3MjMxMTA4NDhaFw0yNjA3MzAxMTA4NDhaMBgxFjAUBgNV
BAMTDTZhNjFmNjQxLTgzNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC7NxkBctarcT2BYXcz4RreHyBd4lW910437eyOSQwqjrxksEa/aLhdu0QQYBnt
aFS+/w7zaEbFHrB5dQ0K6iSM+3NUFHONBf/xZGVGdeGDLfqdfDk6sQK1qCGE1UC1
o/76IJBBc2WVZUgtRnXoXyQpY9ZPilNp4S+fu+vCa1tCvw5OevfzUTmN7zypT1pg
S+z0cNCBOmvwD/jShZAda6/7GnK7KAYrXwRL5it+Tn1d8dKeLaEMsQEETrgHL2UF
6lbUAwPVh853pXVCgokId4WJg5q0ERf/vBE3/jbDJT6XZKvjHR8xb76osWMZpUcF
6alVAFDl5vvyKhfJrn5fJDUjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUkmZnLRe+
DEd2hGcFi67HO1K0ca8wHwYDVR0jBBgwFoAUdtwBlmJpqGSLEcQlQCgDWjafFeww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlFNEE5L0U4MEE0NkE0NkQz
NTExRjE5M0U2RkMyNjZGNDdBODg4L2R0d0JsbUpwcUdTTEVjUWxRQ2dEV2phZkZl
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZHR3QmxtSnBxR1NMRWNRbFFDZ0RXamFmRmV3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlF
NEE5L0U4MEE0NkE0NkQzNTExRjE5M0U2RkMyNjZGNDdBODg4L2R0d0JsbUpwcUdT
TEVjUWxRQ2dEV2phZkZldy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA8wvto1R6L6F4s6TgjvX51dlhaiT8fQsox6Vnz1bkGvIiguZW9X63GwG1Bxyfq
2CDWSSmlkrYiHDPww2H9+rSe3CgWI85/LfmnaxmrIMvw5e2fsvEwSYyCuwGA8y7A
QR8i5bkp4i6QPFVbQJVKqeTJHK8v/rgGNZLzvOvWmzzphBR5zcS8dLot/Fs2erCd
pNrU49k4QoRXHVjjv1JvM8XaktVrvnSY0m08udTQHEFREFZOWtlkU5OulSZOHtkW
sLkZzoUnSFnq4LyefeLDPjvzNsmCxh+uE5DCv9EW9FidE1PuiPUbmoAOV9IYz1UB
Z+8NkMa7UOfJHR+FEYJOUFiy
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:11:55 2026 by rpki-client