Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft
File:                     DKMWISTuZGKWQ_8p6zEQctkShTM.mft (raw, json)
Hash identifier:          sS6bEbMTypn1urlPPWSXPJYz8ar3z7ixYC1hz42cxXk=
Subject key identifier:   B9:59:16:17:70:64:2D:15:C5:5E:4B:FA:7A:E8:95:2A:76:20:15:FD
Authority key identifier: 0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33
Certificate issuer:       /CN=A91A4DBF/serialNumber=0CA3162124EE64629643FF29EB311072D9128533
Certificate serial:       C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft
Manifest number:          BA
Signing time:             Thu 23 Jul 2026 09:02:11 +0000
Manifest this update:     Thu 23 Jul 2026 09:02:10 +0000
Manifest next update:     Thu 30 Jul 2026 09:02:10 +0000
Files and hashes:         1: DKMWISTuZGKWQ_8p6zEQctkShTM.crl (hash: Js/anJr3gDFr7rza8nP3fQvqlB6BUVsEfrOF3PnKcEY=)
                          2: 1FAB542C7B9111F197DD75D86DA30FBC.roa (hash: 8nCW0K+J+Bsvg1/2PwSsppDlZOJWCuRAsgjP5bgTE1c=)
                          3: D53D5082734F11F1A0D3C3585CA30FBC.roa (hash: aHBK07RgGYjTbXTQK7kUe4OH996ijV7bylVi2HCpbpE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl
                          rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4DBF, serialNumber=0CA3162124EE64629643FF29EB311072D9128533
        Validity
            Not Before: Jul 23 09:02:10 2026 GMT
            Not After : Jul 30 09:02:10 2026 GMT
        Subject: CN=6a61d892-6dec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6b:5e:cc:db:5b:f4:38:9a:15:fd:42:a0:15:
                    02:3b:81:66:60:f2:c3:c8:1d:ca:1b:eb:7f:81:e7:
                    c0:f1:37:f7:d5:9a:c4:86:f5:64:2e:fe:b6:67:93:
                    44:54:04:56:68:63:6d:09:72:36:0d:4b:17:42:85:
                    5e:fc:93:23:0a:b0:89:ce:3b:52:36:16:c4:3b:70:
                    ff:ca:5c:a0:63:bd:ee:4f:38:33:62:eb:5c:22:5d:
                    33:4d:0c:7b:29:f1:2f:b8:a6:28:e5:aa:73:b0:72:
                    4e:41:bf:75:74:81:b4:7e:f8:27:3b:2f:fd:4c:09:
                    bb:ce:4f:dd:2a:c3:7b:04:00:46:2a:4f:0f:ab:1d:
                    c2:ff:f4:b6:58:3c:c5:5a:6e:77:f3:96:56:7d:fe:
                    68:d0:c1:29:49:04:c2:3d:9d:24:12:eb:45:8d:07:
                    90:b3:da:66:30:1b:f6:92:f6:a2:81:f6:4a:ae:6b:
                    ae:c8:56:20:42:16:de:3d:43:1c:47:1b:5f:ad:4a:
                    97:05:22:cc:a9:23:c9:1f:ed:c4:66:e5:76:38:41:
                    c0:5f:b7:e3:c1:12:fe:79:8f:90:a3:27:49:28:7f:
                    07:c1:0d:33:ce:79:6a:aa:55:18:b0:c8:d1:ea:99:
                    56:69:a4:c7:9a:7e:f2:6a:73:22:67:1c:48:75:55:
                    c8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:59:16:17:70:64:2D:15:C5:5E:4B:FA:7A:E8:95:2A:76:20:15:FD
            X509v3 Authority Key Identifier:
                keyid:0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:0c:90:f1:98:c3:be:b2:3b:e5:4f:df:d9:07:e4:3b:41:83:
         12:84:0c:22:4f:bd:47:eb:0f:d7:af:c4:d0:d5:60:2c:a0:6e:
         3a:17:6f:fe:21:da:01:24:49:c2:c1:3d:1d:f0:72:7d:de:e2:
         89:09:14:89:17:82:90:ce:43:ba:20:54:be:6a:b0:9e:35:66:
         1e:8b:c4:26:35:ed:e3:de:33:e5:8e:9a:5c:99:08:cf:81:d5:
         99:61:3b:f1:57:ec:24:5a:8c:aa:ff:fc:80:42:86:41:73:ad:
         75:10:e5:18:17:e5:9b:ff:5e:ea:4d:4d:f5:d4:d8:de:d2:7f:
         dc:30:b8:eb:96:60:10:61:02:c6:a1:4f:9a:d7:6e:01:4f:a5:
         4b:bf:3f:ec:e2:33:c0:ae:a0:2a:e0:d4:12:2d:06:99:26:20:
         62:a9:a0:b6:a2:97:57:5f:1e:08:23:cf:91:23:69:94:08:68:
         d6:42:35:e0:05:35:4b:f1:25:ae:63:e9:0a:41:31:4d:ab:c8:
         cc:82:26:77:8b:0f:7c:13:e8:23:c8:78:39:89:d8:75:b9:6a:
         b0:c1:9e:20:0c:c1:aa:9f:de:e7:e6:57:9b:79:31:2f:f5:0c:
         38:5f:a4:32:d3:53:96:fa:f3:8c:14:fa:cb:02:14:9c:d1:06:
         7a:ff:ae:d8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTREQkYxMTAvBgNVBAUTKDBDQTMxNjIxMjRFRTY0NjI5NjQzRkYyOUVCMzExMDcy
RDkxMjg1MzMwHhcNMjYwNzIzMDkwMjEwWhcNMjYwNzMwMDkwMjEwWjAYMRYwFAYD
VQQDEw02YTYxZDg5Mi02ZGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz2tezNtb9DiaFf1CoBUCO4FmYPLDyB3KG+t/gefA8Tf31ZrEhvVkLv62Z5NE
VARWaGNtCXI2DUsXQoVe/JMjCrCJzjtSNhbEO3D/ylygY73uTzgzYutcIl0zTQx7
KfEvuKYo5apzsHJOQb91dIG0fvgnOy/9TAm7zk/dKsN7BABGKk8Pqx3C//S2WDzF
Wm5385ZWff5o0MEpSQTCPZ0kEutFjQeQs9pmMBv2kvaigfZKrmuuyFYgQhbePUMc
RxtfrUqXBSLMqSPJH+3EZuV2OEHAX7fjwRL+eY+QoydJKH8HwQ0zznlqqlUYsMjR
6plWaaTHmn7yanMiZxxIdVXIjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLlZFhdw
ZC0VxV5L+nrolSp2IBX9MB8GA1UdIwQYMBaAFAyjFiEk7mRilkP/KesxEHLZEoUz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNERCRi9DMTQ1NjA1MDg0
NDAxMUYwQTU3MEJDNDlDNEY5QUUwMi9ES01XSVNUdVpHS1dRXzhwNnpFUWN0a1No
VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RLTVdJU1R1WkdLV1FfOHA2ekVRY3RrU2hUTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NERCRi9DMTQ1NjA1MDg0NDAxMUYwQTU3MEJDNDlDNEY5QUUwMi9ES01XSVNUdVpH
S1dRXzhwNnpFUWN0a1NoVE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjQyQ8ZjDvrI75U/f2QfkO0GDEoQMIk+9R+sP16/E0NVgLKBuOhdv/iHaASRJ
wsE9HfByfd7iiQkUiReCkM5DuiBUvmqwnjVmHovEJjXt494z5Y6aXJkIz4HVmWE7
8VfsJFqMqv/8gEKGQXOtdRDlGBflm/9e6k1N9dTY3tJ/3DC465ZgEGECxqFPmtdu
AU+lS78/7OIzwK6gKuDUEi0GmSYgYqmgtqKXV18eCCPPkSNplAho1kI14AU1S/El
rmPpCkExTavIzIImd4sPfBPoI8h4OYnYdblqsMGeIAzBqp/e5+ZXm3kxL/UMOF+k
MtNTlvrzjBT6ywIUnNEGev+u2A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:39:09 2026 by rpki-client