Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.mft
File:                     S1wWI_uzPZaiQas12w8L3rXDnLA.mft (raw, json)
Hash identifier:          sWACUjuJqN4/M4AzdGTxJQbN9LxVJeIkZ7NtWOocYRE=
Subject key identifier:   BA:60:8C:76:A5:1C:8B:8E:BD:A3:81:40:E6:4A:AE:10:B7:D0:71:53
Authority key identifier: 4B:5C:16:23:FB:B3:3D:96:A2:41:AB:35:DB:0F:0B:DE:B5:C3:9C:B0
Certificate issuer:       /CN=A91BD614/serialNumber=4B5C1623FBB33D96A241AB35DB0F0BDEB5C39CB0
Certificate serial:       EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1wWI_uzPZaiQas12w8L3rXDnLA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.mft
Manifest number:          0388
Signing time:             Wed 23 Sep 2026 01:31:54 +0000
Manifest this update:     Wed 23 Sep 2026 01:31:54 +0000
Manifest next update:     Wed 30 Sep 2026 01:31:54 +0000
Files and hashes:         1: S1wWI_uzPZaiQas12w8L3rXDnLA.crl (hash: 9g01LT7BNikf0f+nubRd0JzrKIgQ9p/VKiqwMcYp/NQ=)
                          2: FBDB9F4A57F911F0B7986D41C4F9AE02.roa (hash: e4UjmrKJitpM4Vxaxw9KuUtr2QIytzgyUGtC5yL1UHY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.crl
                          rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1wWI_uzPZaiQas12w8L3rXDnLA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 01:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD614, serialNumber=4B5C1623FBB33D96A241AB35DB0F0BDEB5C39CB0
        Validity
            Not Before: Sep 23 01:31:54 2026 GMT
            Not After : Sep 30 01:31:54 2026 GMT
        Subject: CN=6ab32c0a-57d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e8:4c:0a:0a:70:cf:bf:05:03:54:9c:8a:e0:
                    e8:0a:c8:10:30:b4:89:91:52:2b:5e:65:5c:22:44:
                    fa:fd:46:db:3a:75:42:59:25:49:45:9d:ff:01:4c:
                    49:16:ec:7a:3d:d5:32:6c:66:35:2a:ea:3a:27:ab:
                    32:15:df:91:4b:0e:85:70:e4:23:30:3c:54:50:db:
                    fc:78:35:5f:6c:06:90:77:55:f1:f9:cc:77:ea:e6:
                    73:46:d2:80:39:62:3d:c2:2b:a3:66:1d:02:4d:a6:
                    ed:a2:ba:04:a9:d2:ac:f5:fe:0c:81:30:9c:3c:86:
                    e3:fb:8d:2b:11:97:e0:42:45:6e:f1:cf:a4:99:c1:
                    99:e8:28:4d:65:1a:46:9b:22:1c:68:4f:11:0f:25:
                    7a:7d:44:32:29:39:43:70:60:0f:e7:15:f7:be:6f:
                    11:cd:71:af:ea:75:e3:91:4a:2c:86:69:01:69:a9:
                    74:e9:af:b9:63:cc:22:e5:f3:17:1c:28:7f:e1:25:
                    f0:44:fd:d1:fb:b7:fc:6e:87:8b:63:bf:69:dc:e1:
                    18:81:02:bf:3d:21:49:6c:9b:b4:c9:c2:7d:21:82:
                    64:ee:ee:f8:97:81:9f:13:c5:34:63:bb:e3:ce:b2:
                    d8:ef:5b:7c:d5:33:3f:74:a3:69:5e:8f:21:16:8b:
                    a3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:60:8C:76:A5:1C:8B:8E:BD:A3:81:40:E6:4A:AE:10:B7:D0:71:53
            X509v3 Authority Key Identifier:
                keyid:4B:5C:16:23:FB:B3:3D:96:A2:41:AB:35:DB:0F:0B:DE:B5:C3:9C:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1wWI_uzPZaiQas12w8L3rXDnLA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:78:e3:75:b0:4a:c9:8c:53:8e:5d:c8:ce:ad:f6:1c:86:7e:
         1a:f1:84:ee:5e:41:9e:21:e1:21:b0:9d:31:c7:17:51:30:9f:
         94:d3:39:22:2b:19:c5:ba:8b:42:e0:f9:b1:41:e7:47:ab:fb:
         67:02:80:db:19:ce:8e:51:98:d0:21:bd:5b:25:ed:4a:b4:82:
         a9:1b:ab:ee:2a:f4:8d:c7:fa:67:55:bd:c0:fa:2b:02:a3:3e:
         5d:7f:ed:78:da:c6:2d:43:c5:6d:a5:92:cd:03:24:55:51:2d:
         e7:7b:2f:cb:47:b5:ea:64:1d:20:43:99:92:40:61:37:7b:f6:
         c9:18:db:18:93:83:bd:3f:c4:36:71:b5:88:7b:d0:6e:5a:46:
         69:5d:f2:0e:fb:33:43:39:8c:1b:39:b6:73:db:a4:2f:c9:f6:
         39:01:26:29:33:92:cb:9f:f4:75:dd:ca:a5:b3:90:56:5b:90:
         e7:e7:3e:60:88:fb:ef:62:36:1a:0f:85:9e:ab:49:dc:1a:8a:
         89:b7:66:8d:c6:97:1b:b0:55:17:b6:96:38:17:87:dd:34:14:
         a0:77:9a:66:b6:b0:db:2d:36:54:81:ce:a5:96:f0:a1:0a:bf:
         ff:74:fe:e2:2d:f7:9b:03:46:f7:43:dc:4a:3d:ab:d8:77:24:
         2e:be:fe:e8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkQ2MTQxMTAvBgNVBAUTKDRCNUMxNjIzRkJCMzNEOTZBMjQxQUIzNURCMEYwQkRF
QjVDMzlDQjAwHhcNMjYwOTIzMDEzMTU0WhcNMjYwOTMwMDEzMTU0WjAYMRYwFAYD
VQQDEw02YWIzMmMwYS01N2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzuhMCgpwz78FA1SciuDoCsgQMLSJkVIrXmVcIkT6/UbbOnVCWSVJRZ3/AUxJ
Fux6PdUybGY1Kuo6J6syFd+RSw6FcOQjMDxUUNv8eDVfbAaQd1Xx+cx36uZzRtKA
OWI9wiujZh0CTabtoroEqdKs9f4MgTCcPIbj+40rEZfgQkVu8c+kmcGZ6ChNZRpG
myIcaE8RDyV6fUQyKTlDcGAP5xX3vm8RzXGv6nXjkUoshmkBaal06a+5Y8wi5fMX
HCh/4SXwRP3R+7f8boeLY79p3OEYgQK/PSFJbJu0ycJ9IYJk7u74l4GfE8U0Y7vj
zrLY71t81TM/dKNpXo8hFoujJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLpgjHal
HIuOvaOBQOZKrhC30HFTMB8GA1UdIwQYMBaAFEtcFiP7sz2WokGrNdsPC961w5yw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDYxNC8xREYwNzVFMkJF
REMxMUVEOEUwQUREODBDNEY5QUUwMi9TMXdXSV91elBaYWlRYXMxMnc4TDNyWERu
TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Mxd1dJX3V6UFphaVFhczEydzhMM3JYRG5MQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RDYxNC8xREYwNzVFMkJFREMxMUVEOEUwQUREODBDNEY5QUUwMi9TMXdXSV91elBa
YWlRYXMxMnc4TDNyWERuTEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgXjjdbBKyYxTjl3Izq32HIZ+GvGE7l5BniHhIbCdMccXUTCflNM5IisZxbqL
QuD5sUHnR6v7ZwKA2xnOjlGY0CG9WyXtSrSCqRur7ir0jcf6Z1W9wPorAqM+XX/t
eNrGLUPFbaWSzQMkVVEt53svy0e16mQdIEOZkkBhN3v2yRjbGJODvT/ENnG1iHvQ
blpGaV3yDvszQzmMGzm2c9ukL8n2OQEmKTOSy5/0dd3KpbOQVluQ5+c+YIj772I2
Gg+FnqtJ3BqKibdmjcaXG7BVF7aWOBeH3TQUoHeaZraw2y02VIHOpZbwoQq//3T+
4i33mwNG90PcSj2r2HckLr7+6A==
-----END CERTIFICATE-----
Generated at Fri Sep 25 00:06:14 2026 by rpki-client