Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
File:                     PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft (raw, json)
Hash identifier:          +znxgCU7NT0gTQ4jsf9f/7/xyKCPkakcf5XEHJkSS4k=
Subject key identifier:   9D:1C:37:AF:15:EB:C9:B2:99:2B:BE:C6:2D:72:C9:EC:E7:58:0C:F4
Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
Certificate issuer:       /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Certificate serial:       FF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
Manifest number:          CF
Signing time:             Wed 22 Jul 2026 21:11:55 +0000
Manifest this update:     Wed 22 Jul 2026 21:11:54 +0000
Manifest next update:     Wed 29 Jul 2026 21:11:54 +0000
Files and hashes:         1: PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl (hash: /FA34rsjwbT28Hq7PMOd/XTaKQ8EuLdj+4WDYJJCLrs=)
                          2: 9F931B1659B811F19C535564C0833773.roa (hash: z60HaqbZ1jka7OwRTI9VVn3xZaeALK+nzTOo1/Reyl8=)
                          3: EC39CCB479B911F19EDAB94259A30FBC.roa (hash: yL4EC4dDyMr82eBylFYL7FpvFA5tJwFjWMmbB7+reKM=)
                          4: 025F9668C60A11F0AB4AE483C4F9AE02.roa (hash: ck7EdxjimXDwSiGbbik85D8DmhKPqzjo4eBl7XbzG4k=)
                          5: 12A52794DD1211F0B41550BC5F6F56BC.roa (hash: poFkQcNLaPe2AFd5eZOfOml2iDaf3YW9G1N1COGbd/Q=)
                          6: 90EC9146631811F1AF84BBE77D47A888.roa (hash: nB2Igd2e5lJ157FCZJoV9Mz79t+6bcBUmWpJEKlerDA=)
                          7: 63B9CFC4601411F1877882318A47A888.roa (hash: /dUV29a5JWdPNy1oP9PAybXKl1uAj0Fu+u4R9AbUVu4=)
                          8: 901A806E936311F0AFC2992BC4F9AE02.roa (hash: 4jEVz1hG1/Z1VyTQpmLsIhOnSHh6bzFw7W7dBzuJBMc=)
                          9: 0228453AC5F811F08FFA5F38C4F9AE02.roa (hash: wxhbuzbWu3rbI56tYOuHWo55ZaPV1JMd62naT16Ecvo=)
                          10: 6CB9FE946FBB11F1AD182CE57BA30FBC.roa (hash: PQ9HzfZkLYeUD5kVQdxoMDJIRrH0R8amkT7pH9dx42s=)
                          11: B1DF5F34686B11F189F82205A247A888.roa (hash: sStjL3enxEHae+BuE0XpDJYUMdCn8Yb5Tfzu8jlzyUw=)
                          12: 111220F87AC411F19AC82E046BA30FBC.roa (hash: hyPLrK4mDLzzzo2Xatt36NVQhxkmeiA2DExywjteJU8=)
                          13: D2647EFC503711F19AF4DBDECC833773.roa (hash: qaqH19VkRQuCPMfeembjxsWHSZkfZ20205xWKi+skBQ=)
                          14: A1FA022EC60C11F08F496250C4F9AE02.roa (hash: MDzGdNCdYO5kEPXtS7TyIQqy0+x2zenoCh7GnwVkOyk=)
                          15: 48635696486311F19B06CCBAA3833773.roa (hash: 9dcpjl3mIgTtee6acs7h64a861IKp/WgqQdIz081Aqo=)
                          16: 844A140AC5F111F08382761DC4F9AE02.roa (hash: i9mhRJ5avRniNa/Or9GSMjn28Yf76/Ztdl3z8dFyYH0=)
                          17: 57D03776541A11F1A6DC56E096833773.roa (hash: A2v8NAnwAzbLDkyi0y+lIweB6j1Ghwt4S+YU870nMSI=)
                          18: 57370A4C541A11F1A6DC56E096833773.roa (hash: ruJ2EGjt6cNHDhgKXoRYEJ4KK5GoIqPdnFk7GEdFDwY=)
                          19: 11FCAFA67AC411F19AC82E046BA30FBC.roa (hash: WGc4E/UhwDFDjDhbZf3tEwJa7E0PRTRKgjfrMlIBiqI=)
                          20: F43C291A59B711F186CA4B50C0833773.roa (hash: 7CU9NDub2/4I1kPbc14cNlm39zQ38TTs6MubOAc+vA8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
                          rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:11:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255 (0xff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
        Validity
            Not Before: Jul 22 21:11:54 2026 GMT
            Not After : Jul 29 21:11:54 2026 GMT
        Subject: CN=6a61321b-f0a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:d8:a0:bf:46:53:41:c3:80:00:ed:4d:c7:5b:
                    27:aa:f4:f3:e9:e0:5c:ce:a6:72:bd:56:00:82:1f:
                    bb:1c:88:71:64:da:6b:14:8b:36:12:72:93:28:49:
                    a7:ef:a3:f6:54:3b:63:2a:dd:a8:1e:20:79:4c:be:
                    45:cf:d9:60:a8:6e:fd:0d:cf:eb:ca:3e:28:68:d0:
                    3c:be:5b:11:d0:8f:5d:95:ea:58:6a:a4:ed:ea:e5:
                    75:fc:fe:77:e3:43:da:8a:0b:83:a4:0a:0d:b7:8b:
                    3e:ca:38:ce:21:d4:38:14:1b:6f:7a:cc:86:6a:fe:
                    1f:07:fa:de:58:de:58:b6:ef:20:d6:fc:54:2c:29:
                    3d:4b:cc:7c:da:86:60:ad:a1:ce:77:d6:0d:c6:94:
                    ac:7b:06:3e:6c:7d:82:e2:39:a7:53:cb:d0:19:f1:
                    7b:61:bc:54:66:d1:7f:e0:1f:c5:6d:75:f0:ed:c0:
                    99:9f:16:3b:13:d3:ed:6f:1a:a5:b6:c2:de:f1:69:
                    77:b3:08:64:37:93:be:1b:f0:a0:0c:f2:a9:b2:50:
                    73:8b:34:42:69:7b:4d:62:af:2b:56:18:ff:6a:2a:
                    26:61:08:b7:82:15:47:10:e7:73:a1:1a:70:a4:7a:
                    18:8c:9f:d8:c2:79:ec:f1:f6:30:85:45:24:5f:73:
                    29:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:1C:37:AF:15:EB:C9:B2:99:2B:BE:C6:2D:72:C9:EC:E7:58:0C:F4
            X509v3 Authority Key Identifier:
                keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:bf:2c:c0:e5:fb:33:e1:af:2b:c3:d8:ba:03:52:e4:80:cc:
         e0:44:fb:f8:ec:3f:12:c4:a5:3d:98:dd:eb:f8:eb:f8:d9:4f:
         a4:5b:9b:1b:a3:76:80:57:80:da:08:06:90:ab:09:10:b2:f6:
         14:78:ee:5c:cf:17:da:99:0d:c8:b4:0e:26:58:6b:41:a7:b4:
         16:70:b4:e5:78:7c:27:45:3c:9d:ec:8c:6d:22:4a:b1:3e:f7:
         c2:85:78:ac:ea:68:01:23:04:4c:db:3a:c6:bb:86:1c:d8:a1:
         f5:f6:5d:f4:15:e9:2e:9a:09:11:64:7c:c5:42:8b:23:78:da:
         ef:0b:4e:64:0f:79:39:a1:54:9d:7d:11:20:2e:9f:81:36:1a:
         46:95:5a:67:f7:23:90:22:6d:86:b6:6f:7e:a8:b2:9a:70:d0:
         b8:ca:7c:20:8a:07:da:ed:bb:62:8b:65:8e:9c:8a:26:a0:bd:
         b6:b6:81:83:29:9e:5c:f5:f7:2f:6e:54:1c:87:10:6b:9f:cd:
         6a:fa:56:10:f8:71:72:d9:70:d3:df:1c:ec:fa:5b:05:6e:5b:
         18:4e:fb:6d:ae:03:fc:ce:c1:0d:af:88:6e:97:46:5a:0b:f7:
         57:11:25:95:69:cf:9c:1d:24:55:17:2a:bc:49:05:9e:91:f7:
         10:54:b1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:33:25 2026 by rpki-client