Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft
File:                     PShwiOOGgqTkudgoRQszZr3q1d0.mft (raw, json)
Hash identifier:          dDXZwOMeHzMODtUImdgCHAouDDo3Sne0FM+3/mt3PdI=
Subject key identifier:   0C:42:BA:AE:D3:12:A2:7F:80:CA:D9:8B:20:82:A8:62:4F:AD:9D:64
Authority key identifier: 3D:28:70:88:E3:86:82:A4:E4:B9:D8:28:45:0B:33:66:BD:EA:D5:DD
Certificate issuer:       /CN=A91F02EA/serialNumber=3D287088E38682A4E4B9D828450B3366BDEAD5DD
Certificate serial:       0CFC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PShwiOOGgqTkudgoRQszZr3q1d0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft
Manifest number:          0CE9
Signing time:             Tue 28 Jul 2026 18:36:17 +0000
Manifest this update:     Tue 28 Jul 2026 18:36:16 +0000
Manifest next update:     Tue 04 Aug 2026 18:36:16 +0000
Files and hashes:         1: PShwiOOGgqTkudgoRQszZr3q1d0.crl (hash: uq5ORFu0Qcfb8Dkq9DGz6q9W4JSnEJ+78SqwKldkmfA=)
                          2: 7716938A416211EB9B0F3C54C4F9AE02.roa (hash: JsMxuAz2clvL8td5dPv4MoycNcApjVpvYRYlrs8BPh4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.crl
                          rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PShwiOOGgqTkudgoRQszZr3q1d0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:36:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3324 (0xcfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F02EA, serialNumber=3D287088E38682A4E4B9D828450B3366BDEAD5DD
        Validity
            Not Before: Jul 28 18:36:16 2026 GMT
            Not After : Aug  4 18:36:16 2026 GMT
        Subject: CN=6a68f6a0-b7c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f0:95:96:76:50:a8:0f:c2:79:83:84:43:c7:
                    16:9d:30:9a:49:83:b6:40:7f:09:16:98:66:fc:70:
                    ea:c0:c1:c8:f4:03:e3:3f:37:74:d9:29:d3:21:18:
                    db:2c:48:fd:61:71:05:6c:8b:79:9f:d7:a5:5f:9e:
                    9a:ba:bb:16:28:59:a2:36:53:ed:ff:80:1f:28:fd:
                    30:3d:d6:53:e9:37:8a:d5:fe:06:e5:fd:94:3b:a3:
                    86:57:54:52:ac:66:10:93:c3:2a:db:9a:a1:36:c5:
                    61:ea:2c:a2:3c:e5:18:49:32:c9:35:8d:4a:87:f0:
                    ce:3d:79:92:15:d8:0b:c8:5b:ce:76:79:14:a0:0e:
                    ab:85:b4:36:9b:22:09:79:52:1d:47:e3:bb:36:2a:
                    bd:16:3b:a6:a4:58:01:bc:0c:ec:6e:49:18:5d:18:
                    d6:c2:11:79:5c:64:67:fd:12:5b:1c:2d:11:a9:60:
                    f3:13:ee:2a:76:e3:b3:b1:ea:b3:62:93:a4:60:f0:
                    47:da:8c:df:0e:35:1e:36:2f:5d:78:7e:55:0a:29:
                    07:e5:09:10:2e:2c:04:66:ac:97:b2:ab:e1:06:fb:
                    d1:b1:7d:07:9e:f3:73:04:aa:00:55:34:12:55:d0:
                    8b:1e:8b:bc:f3:81:ee:c8:0d:0e:25:73:15:ff:ed:
                    50:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:42:BA:AE:D3:12:A2:7F:80:CA:D9:8B:20:82:A8:62:4F:AD:9D:64
            X509v3 Authority Key Identifier:
                keyid:3D:28:70:88:E3:86:82:A4:E4:B9:D8:28:45:0B:33:66:BD:EA:D5:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PShwiOOGgqTkudgoRQszZr3q1d0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:6d:b2:61:11:5c:7a:6a:ff:10:fa:53:1b:c6:a2:e3:06:46:
         bf:3b:70:5b:bc:4e:84:1c:0b:71:e9:76:84:8f:64:fa:fd:fa:
         35:28:0d:4b:07:83:0c:ea:d4:75:7f:67:9d:6a:8e:75:be:46:
         31:b3:80:96:a9:e8:17:ac:cb:b9:eb:51:e0:47:41:56:a0:c9:
         ff:cc:f8:1e:94:57:3c:51:f9:17:df:a6:b5:dd:20:9f:c1:97:
         13:68:1a:f0:da:3f:21:82:77:fa:ca:38:fd:53:49:b0:56:f8:
         26:2b:c0:0d:2d:4b:6f:97:36:9b:5c:71:c8:5f:c4:3f:18:71:
         c2:a8:02:63:58:18:c1:8c:9a:7a:45:32:9a:08:b4:f0:f2:58:
         b2:75:1e:cb:c4:57:7b:a1:50:fc:5d:42:a2:c6:83:b4:b1:e2:
         da:13:4d:0b:b3:b4:91:69:04:ef:9a:1f:34:aa:38:3a:3a:5d:
         cb:b6:b0:48:ed:47:6e:5f:61:a5:3c:64:50:3a:3e:a5:8f:12:
         90:38:82:80:41:8b:db:1e:51:73:3f:a5:22:8d:49:ac:09:34:
         bb:9e:93:5a:ae:39:c0:2a:9a:7a:4d:1e:91:49:dd:b4:b0:89:
         6e:8a:e0:7e:3e:81:e2:cf:e1:53:af:00:f0:ed:38:d2:6d:51:
         8b:52:aa:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:46:39 2026 by rpki-client