Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
File:                     PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft (raw, json)
Hash identifier:          6XM+c3JWCRmbmfAduwZytbAZCnEwm//UR1fBVglcVNg=
Subject key identifier:   50:43:9D:3B:01:9B:76:32:59:97:7E:2D:4F:09:64:BB:3B:3F:BA:AB
Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
Certificate issuer:       /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Certificate serial:       012D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
Manifest number:          F0
Signing time:             Wed 02 Sep 2026 20:38:33 +0000
Manifest this update:     Wed 02 Sep 2026 20:38:33 +0000
Manifest next update:     Wed 09 Sep 2026 20:38:33 +0000
Files and hashes:         1: PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl (hash: M1r0tm1H4ji9nv0nF+sW+o+WvEfSj2mOtyNAZ39zHs0=)
                          2: F5B4E5A0997E11F190B827626411F970.roa (hash: FFyugH0R0kNPn9YhC9OgXmNIVwuNxfXQ89WoxLBYmlk=)
                          3: E51B21C4965311F1B6AAEF027011F970.roa (hash: biq88vO9CEHjMnLulBtUgawpd/kQwxBTdW+v2csmjzk=)
                          4: F43C291A59B711F186CA4B50C0833773.roa (hash: 7CU9NDub2/4I1kPbc14cNlm39zQ38TTs6MubOAc+vA8=)
                          5: 57370A4C541A11F1A6DC56E096833773.roa (hash: ruJ2EGjt6cNHDhgKXoRYEJ4KK5GoIqPdnFk7GEdFDwY=)
                          6: 6CB9FE946FBB11F1AD182CE57BA30FBC.roa (hash: PQ9HzfZkLYeUD5kVQdxoMDJIRrH0R8amkT7pH9dx42s=)
                          7: D2647EFC503711F19AF4DBDECC833773.roa (hash: qaqH19VkRQuCPMfeembjxsWHSZkfZ20205xWKi+skBQ=)
                          8: 025F9668C60A11F0AB4AE483C4F9AE02.roa (hash: ck7EdxjimXDwSiGbbik85D8DmhKPqzjo4eBl7XbzG4k=)
                          9: 11FCAFA67AC411F19AC82E046BA30FBC.roa (hash: WGc4E/UhwDFDjDhbZf3tEwJa7E0PRTRKgjfrMlIBiqI=)
                          10: 9F931B1659B811F19C535564C0833773.roa (hash: +szMLYefcgIvDL/DCysdtEyVwugzq2lHBPCRoc2ju3g=)
                          11: E5B24FEA965311F1B6AAEF027011F970.roa (hash: n1QXap4Fv0KEAuEDKj5UHRpvTy9j5PeOJxNRqTfJs3M=)
                          12: 844A140AC5F111F08382761DC4F9AE02.roa (hash: d/VO5+vdceoCm14fD2F5YiKiv4phAjglIp5OyjhSXL4=)
                          13: B2A60854958F11F1853404D43611F970.roa (hash: gMg7JbXoSFqIcFers8vGh6xtWDT9Wxwu+PGr66/blno=)
                          14: 901A806E936311F0AFC2992BC4F9AE02.roa (hash: 4jEVz1hG1/Z1VyTQpmLsIhOnSHh6bzFw7W7dBzuJBMc=)
                          15: 63B9CFC4601411F1877882318A47A888.roa (hash: /dUV29a5JWdPNy1oP9PAybXKl1uAj0Fu+u4R9AbUVu4=)
                          16: B36100BE958F11F1853404D43611F970.roa (hash: FvVZdZkzkM+1g87qyLDM9BkaOxF6tIm2qvlq5EuyxJ0=)
                          17: 90EC9146631811F1AF84BBE77D47A888.roa (hash: nB2Igd2e5lJ157FCZJoV9Mz79t+6bcBUmWpJEKlerDA=)
                          18: EC39CCB479B911F19EDAB94259A30FBC.roa (hash: yL4EC4dDyMr82eBylFYL7FpvFA5tJwFjWMmbB7+reKM=)
                          19: 12A52794DD1211F0B41550BC5F6F56BC.roa (hash: poFkQcNLaPe2AFd5eZOfOml2iDaf3YW9G1N1COGbd/Q=)
                          20: E473113C965311F1B6AAEF027011F970.roa (hash: xMizpAYj7qIjKM+ffavm9SQ1IhJvjorPgaY6Wd6qMdE=)
                          21: A1FA022EC60C11F08F496250C4F9AE02.roa (hash: 44akUTnCH1HDsJMsoNnyoAJdCMH1NwTn5fLJKlmUzr8=)
                          22: 57D03776541A11F1A6DC56E096833773.roa (hash: A2v8NAnwAzbLDkyi0y+lIweB6j1Ghwt4S+YU870nMSI=)
                          23: 0228453AC5F811F08FFA5F38C4F9AE02.roa (hash: wxhbuzbWu3rbI56tYOuHWo55ZaPV1JMd62naT16Ecvo=)
                          24: 48635696486311F19B06CCBAA3833773.roa (hash: 9dcpjl3mIgTtee6acs7h64a861IKp/WgqQdIz081Aqo=)
                          25: B1DF5F34686B11F189F82205A247A888.roa (hash: mU4R87DuJLyj/JNQSQ+p33/47i5SjPvVktLf6I2bCgs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
                          rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Sep 2026 20:38:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 301 (0x12d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
        Validity
            Not Before: Sep  2 20:38:33 2026 GMT
            Not After : Sep  9 20:38:33 2026 GMT
        Subject: CN=6a988949-597e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:18:88:c0:53:2d:28:a7:c9:aa:ba:5c:64:a0:
                    9d:2f:e7:d2:21:f9:6e:14:45:b3:0f:03:59:1c:12:
                    38:fd:2a:49:4e:9d:e5:88:c0:30:70:2a:7d:82:98:
                    d9:93:43:7a:5a:40:85:cf:21:b8:08:05:24:55:e6:
                    76:50:7f:c9:7a:35:fa:2d:72:e6:bd:9b:b3:aa:f5:
                    01:64:74:ef:5d:9d:cb:d5:14:4d:33:19:f2:05:67:
                    30:fd:fa:2d:ae:bf:53:f5:e7:4c:1d:c4:41:7e:6e:
                    8f:ff:b6:53:fc:a2:9c:e8:fe:a0:89:ea:5c:68:de:
                    15:7c:fd:c6:9a:72:0e:4d:c2:25:cc:01:91:b1:b3:
                    04:43:81:66:43:54:46:3b:82:fd:48:a4:5b:64:d3:
                    d8:ed:85:cb:bd:e4:e8:33:ea:5e:50:15:58:87:f0:
                    c8:2b:c3:7a:64:52:8d:c1:17:03:d1:d4:1e:0d:d2:
                    ec:da:7d:81:61:6e:d4:34:40:0c:91:70:dc:e1:83:
                    8f:9b:b8:42:23:0a:e9:18:a1:3c:1f:51:56:28:1f:
                    1f:a3:0b:f0:b5:6f:69:69:9c:9f:32:f1:71:7f:4e:
                    2e:70:07:14:4e:aa:14:2e:ea:70:03:0e:13:f7:ad:
                    6e:e1:06:98:14:d4:f6:7d:44:b1:1f:19:d8:61:12:
                    9b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:43:9D:3B:01:9B:76:32:59:97:7E:2D:4F:09:64:BB:3B:3F:BA:AB
            X509v3 Authority Key Identifier:
                keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:3a:aa:be:af:15:12:26:58:3a:29:28:aa:13:f8:1c:a4:68:
         9e:a3:c0:1d:3a:f5:0d:6e:27:4f:bf:a6:20:69:50:89:a2:1c:
         63:1c:6a:ba:8a:27:6d:77:39:88:35:69:22:52:71:0d:c3:63:
         01:c2:69:cc:37:a8:1a:0c:10:47:a9:43:3a:98:14:cc:6e:6e:
         35:aa:9d:f2:b7:1e:22:cb:bb:7d:28:eb:02:2a:46:98:ae:d2:
         3a:83:2e:3d:b4:df:51:a3:e8:49:96:7e:47:c2:86:63:5e:d7:
         83:de:0e:96:6c:96:c8:fc:3a:40:80:b0:48:14:bc:5c:20:0c:
         85:49:31:45:57:cb:00:64:16:25:a3:3f:ec:e6:28:0f:3a:5b:
         e3:68:f5:c6:70:ba:80:59:72:d6:67:86:48:ac:47:25:a8:59:
         a9:d6:1e:aa:97:92:aa:68:fc:b0:1e:2e:14:e4:83:2b:bc:7a:
         b7:61:2a:41:8c:00:2a:ec:04:1d:c2:89:09:1a:03:a8:8f:fe:
         fa:d2:a7:8e:ec:c7:ae:13:2a:73:bb:75:77:f5:ed:6b:ad:a6:
         0d:84:80:bf:40:c4:2a:f7:cf:57:e0:96:2c:18:90:8d:24:4a:
         ee:2b:dd:0b:a0:c0:f6:34:90:e4:1e:ff:12:ab:60:26:e3:a1:
         70:95:58:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 19:21:56 2026 by rpki-client