Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft
File:                     dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft (raw, json)
Hash identifier:          NVndHp9mb0n/x/1GZwiZSEFQ2aeZ1RTRrqSxfvR5bdY=
Subject key identifier:   F3:B0:85:52:57:32:10:DD:49:94:D0:53:E0:24:A4:89:A5:B0:C0:C8
Authority key identifier: 76:DF:7F:91:16:9A:3F:38:0C:0A:6B:CD:38:E9:18:6D:EF:F3:1B:AB
Certificate issuer:       /CN=A91D4DC1/serialNumber=76DF7F91169A3F380C0A6BCD38E9186DEFF31BAB
Certificate serial:       065D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt9_kRaaPzgMCmvNOOkYbe_zG6s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft
Manifest number:          0656
Signing time:             Wed 22 Jul 2026 23:23:03 +0000
Manifest this update:     Wed 22 Jul 2026 23:23:03 +0000
Manifest next update:     Wed 29 Jul 2026 23:23:03 +0000
Files and hashes:         1: dt9_kRaaPzgMCmvNOOkYbe_zG6s.crl (hash: 7WFRHJVy55JmFfmfAlik73Y5E2RjdamrV/SoEhYIRgE=)
                          2: B5A7B020DBDB11EB8EC1494EC4F9AE02.roa (hash: c5w5QLZZ9to+icb8pOHSdLzZ2mnRXQw2msiixSkPrZk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.crl
                          rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt9_kRaaPzgMCmvNOOkYbe_zG6s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1629 (0x65d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4DC1, serialNumber=76DF7F91169A3F380C0A6BCD38E9186DEFF31BAB
        Validity
            Not Before: Jul 22 23:23:03 2026 GMT
            Not After : Jul 29 23:23:03 2026 GMT
        Subject: CN=6a6150d7-cd78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e6:4d:92:ff:c3:02:74:47:2e:1a:a0:94:47:
                    9a:ff:37:4d:7e:cf:78:8b:0f:9b:8f:8c:c7:de:70:
                    35:fe:2b:a2:be:02:e3:11:ef:b0:7e:1f:ca:ec:e9:
                    b1:dc:cd:5d:84:de:66:ea:fe:b7:84:76:48:0c:27:
                    c3:cf:8b:8a:8f:70:df:f4:f8:68:49:96:e5:eb:6b:
                    3c:7c:f6:f7:3f:02:a4:01:7d:c1:65:0b:2e:c3:b5:
                    d1:db:64:44:51:a6:b2:6b:99:0d:28:14:ed:88:0c:
                    b1:4d:2c:6a:4d:5a:ad:87:bb:46:7c:0f:e4:6f:9d:
                    48:3f:3d:98:71:41:9f:62:c2:17:68:b0:df:70:ca:
                    da:56:2f:18:72:6d:de:21:7f:b3:5d:2c:66:8c:13:
                    58:09:f7:27:db:1e:98:85:76:6d:be:43:e5:b0:20:
                    bc:7c:89:51:2e:c2:66:34:1e:bb:fb:20:68:40:ba:
                    c6:bc:7d:f7:7b:a4:71:8b:14:8c:fc:64:ba:b9:e4:
                    4d:e1:42:bf:1b:90:e4:aa:a5:86:3e:43:6a:2a:3e:
                    92:a9:a0:5a:cd:dc:35:f9:06:12:7e:ad:2a:2e:d1:
                    7a:e4:9e:51:9d:6d:c6:75:2d:81:6e:34:98:bf:42:
                    18:6f:16:17:6e:a6:d0:6a:e0:27:42:c1:98:73:a4:
                    28:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B0:85:52:57:32:10:DD:49:94:D0:53:E0:24:A4:89:A5:B0:C0:C8
            X509v3 Authority Key Identifier:
                keyid:76:DF:7F:91:16:9A:3F:38:0C:0A:6B:CD:38:E9:18:6D:EF:F3:1B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt9_kRaaPzgMCmvNOOkYbe_zG6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:7b:ec:a8:c7:98:3c:23:36:72:48:ea:f5:e4:d6:51:f3:9a:
         96:91:00:8a:c9:09:d1:ac:dd:4c:6c:1d:a7:7e:3f:19:a2:3b:
         fc:bd:d9:b0:46:18:9b:04:98:06:a2:6a:1c:b7:05:44:c9:a6:
         2e:d2:96:f5:ed:94:c6:84:a2:d2:04:47:ef:46:33:f6:c4:80:
         21:e4:c6:c7:b2:93:48:dc:28:b5:29:4a:fd:3f:ab:ce:21:74:
         fb:44:d6:5a:f8:90:13:6d:be:28:88:fc:8d:89:5d:14:bd:79:
         05:a5:9e:24:8f:5e:5c:cd:af:ce:45:3d:59:6c:d9:73:70:a9:
         01:73:c6:2a:26:19:51:41:1b:ca:0d:58:2e:62:48:32:d8:ee:
         0a:ad:59:35:04:de:b5:d1:b9:de:f0:ad:58:48:04:47:d6:15:
         5b:9a:66:85:0d:12:a9:ff:8e:cb:20:01:ea:e0:7a:9d:00:38:
         eb:fe:b6:79:1a:5f:98:33:0a:52:a5:ba:36:0a:ab:8c:ea:ad:
         ed:34:7c:11:03:26:ef:25:d3:01:8b:ca:7c:b1:34:16:1b:e0:
         d0:29:c0:f4:e3:e6:e1:e8:e7:40:6b:4e:12:82:b7:88:32:aa:
         c4:a4:0a:63:9d:d1:f0:79:87:ba:06:f2:dc:40:c3:b1:c3:26:
         ec:99:6d:1c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDREQzExMTAvBgNVBAUTKDc2REY3RjkxMTY5QTNGMzgwQzBBNkJDRDM4RTkxODZE
RUZGMzFCQUIwHhcNMjYwNzIyMjMyMzAzWhcNMjYwNzI5MjMyMzAzWjAYMRYwFAYD
VQQDEw02YTYxNTBkNy1jZDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs+ZNkv/DAnRHLhqglEea/zdNfs94iw+bj4zH3nA1/iuivgLjEe+wfh/K7Omx
3M1dhN5m6v63hHZIDCfDz4uKj3Df9PhoSZbl62s8fPb3PwKkAX3BZQsuw7XR22RE
Uaaya5kNKBTtiAyxTSxqTVqth7tGfA/kb51IPz2YcUGfYsIXaLDfcMraVi8Ycm3e
IX+zXSxmjBNYCfcn2x6YhXZtvkPlsCC8fIlRLsJmNB67+yBoQLrGvH33e6RxixSM
/GS6ueRN4UK/G5DkqqWGPkNqKj6SqaBazdw1+QYSfq0qLtF65J5RnW3GdS2BbjSY
v0IYbxYXbqbQauAnQsGYc6QovQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPOwhVJX
MhDdSZTQU+AkpImlsMDIMB8GA1UdIwQYMBaAFHbff5EWmj84DAprzTjpGG3v8xur
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENERDMS85OTZGOThFQURC
RDcxMUVCQjk1MTE3NDVDNEY5QUUwMi9kdDlfa1JhYVB6Z01DbXZOT09rWWJlX3pH
NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2R0OV9rUmFhUHpnTUNtdk5PT2tZYmVfekc2cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NERDMS85OTZGOThFQURCRDcxMUVCQjk1MTE3NDVDNEY5QUUwMi9kdDlfa1JhYVB6
Z01DbXZOT09rWWJlX3pHNnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjHvsqMeYPCM2ckjq9eTWUfOalpEAiskJ0azdTGwdp34/GaI7/L3ZsEYYmwSY
BqJqHLcFRMmmLtKW9e2UxoSi0gRH70Yz9sSAIeTGx7KTSNwotSlK/T+rziF0+0TW
WviQE22+KIj8jYldFL15BaWeJI9eXM2vzkU9WWzZc3CpAXPGKiYZUUEbyg1YLmJI
MtjuCq1ZNQTetdG53vCtWEgER9YVW5pmhQ0Sqf+OyyAB6uB6nQA46/62eRpfmDMK
UqW6NgqrjOqt7TR8EQMm7yXTAYvKfLE0Fhvg0CnA9OPm4ejnQGtOEoK3iDKqxKQK
Y53R8HmHugby3EDDscMm7JltHA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:16:56 2026 by rpki-client