Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.mft
File:                     bwlMAO-I_YtwgT1trctUaHYyjNk.mft (raw, json)
Hash identifier:          Q4cdM7i/Ex8tWYP0TtwEdeKwcVwI2Z+K+jkw7mmBpBk=
Subject key identifier:   9D:BF:43:F8:29:1A:CE:D2:A5:CB:9D:CF:DF:96:29:75:62:6B:27:58
Authority key identifier: 6F:09:4C:00:EF:88:FD:8B:70:81:3D:6D:AD:CB:54:68:76:32:8C:D9
Certificate issuer:       /CN=A91F8E25/serialNumber=6F094C00EF88FD8B70813D6DADCB546876328CD9
Certificate serial:       2285
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwlMAO-I_YtwgT1trctUaHYyjNk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.mft
Manifest number:          2EAA
Signing time:             Wed 14 Oct 2026 15:30:20 +0000
Manifest this update:     Wed 14 Oct 2026 15:30:19 +0000
Manifest next update:     Wed 21 Oct 2026 15:30:19 +0000
Files and hashes:         1: bwlMAO-I_YtwgT1trctUaHYyjNk.crl (hash: IRmqnQJK1sTYSPAd1D90tq/9c0slHqpTXfEODnKHYw4=)
                          2: 44A88C482CA611F1A847C919C5833773.roa (hash: bKgCp4EHIIvC6tgJBK5J1/iYjgk0IVxADvyBY64+CAc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.crl
                          rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwlMAO-I_YtwgT1trctUaHYyjNk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Oct 2026 15:30:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8837 (0x2285)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8E25, serialNumber=6F094C00EF88FD8B70813D6DADCB546876328CD9
        Validity
            Not Before: Oct 14 15:30:19 2026 GMT
            Not After : Oct 21 15:30:19 2026 GMT
        Subject: CN=6acfa00c-1aa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:17:5a:9a:b1:30:3a:23:03:c2:3b:b0:25:80:
                    8c:4e:6b:b5:53:1b:7a:4a:b1:8b:f9:e6:e0:48:90:
                    fd:09:07:64:82:50:4b:ff:59:ce:8b:e1:59:37:7f:
                    d9:4d:2f:e9:42:7b:ab:0e:4c:02:1f:12:1b:ae:0b:
                    39:c9:28:76:31:5c:5b:44:c1:78:e2:f2:5c:6c:3d:
                    c2:00:d3:c7:1c:69:11:62:fa:43:40:77:62:2f:93:
                    69:b0:25:c7:2a:c8:dd:26:50:50:34:a3:c2:06:fc:
                    c1:5d:25:5c:46:47:b6:06:32:a8:f1:dd:01:e5:8b:
                    14:3e:d9:c9:f9:36:ff:2e:92:28:c0:ec:05:b3:1c:
                    26:76:8f:e4:5c:22:f0:94:9f:2e:f9:d8:1e:38:78:
                    78:6b:56:a9:38:dc:b3:b4:9e:1c:1c:27:c3:35:76:
                    c4:d2:6d:11:d4:a9:1d:9e:d4:55:26:58:96:f5:ad:
                    de:f1:30:59:c9:5a:f5:bf:9a:bc:8f:e0:6d:6f:db:
                    8d:77:44:2b:c3:d3:40:75:02:d2:b1:7e:2b:7b:2f:
                    ab:91:f9:62:b0:b2:2a:a0:d5:1b:fc:4c:d5:8b:26:
                    7a:1b:d3:56:07:93:70:ba:76:25:24:12:d2:7c:98:
                    17:5c:4b:79:54:2f:50:c0:9b:c1:38:0a:d5:cc:e7:
                    3a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:BF:43:F8:29:1A:CE:D2:A5:CB:9D:CF:DF:96:29:75:62:6B:27:58
            X509v3 Authority Key Identifier:
                keyid:6F:09:4C:00:EF:88:FD:8B:70:81:3D:6D:AD:CB:54:68:76:32:8C:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwlMAO-I_YtwgT1trctUaHYyjNk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:c5:d1:7e:f3:30:0b:ce:20:cb:1a:47:c8:b0:a9:16:42:00:
         98:ac:d3:29:25:b4:8d:d3:b5:c0:e0:4b:c4:e4:15:3b:39:25:
         ec:aa:9b:fc:98:6c:0a:9b:fe:a4:d1:8f:78:2e:62:e2:d1:95:
         42:7c:76:d9:a2:b0:c9:07:6f:30:81:9c:e9:8b:98:a1:d5:2b:
         57:bc:e7:38:4e:93:0c:17:a1:97:08:27:75:7c:c6:c9:44:23:
         df:96:6f:3c:2f:11:83:4d:e8:26:07:8a:a2:98:83:a5:30:8f:
         fc:fa:60:1e:8d:bd:b1:21:d2:ae:b5:d8:a8:7e:60:69:1b:f4:
         ab:41:58:ee:fc:6f:78:61:67:ca:ba:92:a1:1f:bc:cf:44:fe:
         bb:21:f7:9e:51:18:43:8b:23:f8:63:9a:34:37:2e:2f:36:33:
         cf:e2:db:d4:9b:44:af:8f:7d:54:23:57:82:99:52:51:9d:53:
         14:fe:9c:b9:94:dc:95:45:19:a1:9e:f7:45:40:1f:15:7a:b4:
         91:d3:ab:b0:09:e3:0b:a9:0e:aa:4d:d8:6f:f3:7d:cf:6d:bd:
         4b:cf:30:99:9c:ff:ce:b4:1b:cc:26:7a:63:12:d1:9c:e5:c5:
         5f:71:12:f2:55:bb:05:3e:fa:38:9b:e3:32:e7:00:8d:a1:33:
         ae:b1:47:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:04:07 2026 by rpki-client