Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft
File:                     woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft (raw, json)
Hash identifier:          TTDibJw94BuO3b1TAR+n6/oHXjyq4VP8RPfiRTld5hM=
Subject key identifier:   33:C6:31:9D:1C:89:CF:39:87:54:82:AA:67:18:39:5C:BD:05:10:35
Authority key identifier: C2:84:BA:8A:88:A0:21:16:BE:E4:34:10:E0:39:E9:09:E3:02:9D:0D
Certificate issuer:       /CN=A91C7B68/serialNumber=C284BA8A88A02116BEE43410E039E909E3029D0D
Certificate serial:       0A0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woS6ioigIRa-5DQQ4DnpCeMCnQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft
Manifest number:          0CA0
Signing time:             Thu 24 Sep 2026 19:50:04 +0000
Manifest this update:     Thu 24 Sep 2026 19:50:04 +0000
Manifest next update:     Thu 01 Oct 2026 19:50:04 +0000
Files and hashes:         1: woS6ioigIRa-5DQQ4DnpCeMCnQ0.crl (hash: gNW0ER4ntz/r9AHxg19LkJFY8eE2Zyk+6GQYzDFSh6o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.crl
                          rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woS6ioigIRa-5DQQ4DnpCeMCnQ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 19:50:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2575 (0xa0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7B68, serialNumber=C284BA8A88A02116BEE43410E039E909E3029D0D
        Validity
            Not Before: Sep 24 19:50:04 2026 GMT
            Not After : Oct  1 19:50:04 2026 GMT
        Subject: CN=6ab57eec-1d47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:fc:e5:5d:91:47:03:b9:50:5a:14:01:fd:35:
                    4b:fa:b3:e0:2e:d0:70:e9:13:e1:87:1a:13:ea:89:
                    a5:c8:a2:81:60:85:c1:fe:3c:9a:e9:9e:8e:02:e1:
                    60:c3:84:bb:55:32:ed:c1:4f:22:60:d4:95:60:6d:
                    25:09:7a:87:3e:40:02:a8:a2:ae:73:d1:62:aa:52:
                    95:c9:8a:af:39:d9:ff:14:f9:ff:81:29:e9:cb:13:
                    60:bc:3e:0e:f1:3e:51:5a:01:a4:c9:76:d1:8b:11:
                    a7:a8:c8:4b:6d:ad:64:a5:c2:5d:4b:10:d8:da:b0:
                    cf:c1:37:6f:13:85:43:e3:1a:3a:48:79:31:66:ce:
                    27:36:4d:2b:34:26:e5:16:7d:c2:6d:28:05:49:51:
                    fd:7c:26:24:a7:18:b3:ee:9b:d2:07:aa:11:e9:7e:
                    61:01:7c:54:58:29:77:72:ae:3a:f4:93:6d:d1:9f:
                    ee:09:a2:81:cc:ca:b7:41:e0:95:2e:e8:ea:6b:0e:
                    d1:cd:82:14:5d:4a:df:8a:f7:09:4f:3e:44:10:dc:
                    d5:75:6a:90:ad:7d:95:34:1b:14:c1:11:04:ab:74:
                    ad:2c:23:9e:b6:0a:d6:17:2b:15:a1:d5:db:ef:01:
                    b6:71:8f:6f:81:fd:46:57:c9:24:07:d8:8e:c8:91:
                    f2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C6:31:9D:1C:89:CF:39:87:54:82:AA:67:18:39:5C:BD:05:10:35
            X509v3 Authority Key Identifier:
                keyid:C2:84:BA:8A:88:A0:21:16:BE:E4:34:10:E0:39:E9:09:E3:02:9D:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woS6ioigIRa-5DQQ4DnpCeMCnQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:da:ee:ff:38:b3:1f:ce:32:79:0a:09:02:14:f2:c9:1d:66:
         ea:81:33:38:2d:ea:81:22:41:a0:11:c3:3e:90:2d:23:05:49:
         50:08:9d:32:1d:1f:70:68:05:c4:cb:4c:06:e6:46:0e:b7:d2:
         96:98:2a:d8:26:2b:69:6b:5f:b3:0c:77:fd:d3:87:37:4b:b2:
         36:dc:20:5f:f7:fa:d4:af:a8:5a:53:06:53:77:3e:29:17:5a:
         c4:57:93:9a:35:d2:f5:1f:d1:62:10:4a:45:fb:cc:77:d4:61:
         78:61:b1:61:ab:5d:f9:e4:db:79:e7:5b:66:70:95:a6:a4:ed:
         9e:69:89:57:db:b4:45:9f:e2:38:c1:f1:84:49:4f:7a:23:a8:
         14:4e:70:17:2b:ca:1c:8c:3d:62:a1:a8:72:fc:aa:be:e6:4d:
         34:53:3c:a5:2f:3d:df:f4:7a:8f:d5:d8:ea:ee:83:41:a1:71:
         d4:20:81:27:b1:5f:3e:27:05:22:9c:f6:5e:66:b9:33:73:c1:
         27:71:2a:45:6a:4e:b1:df:9d:7e:dd:a8:1f:18:a1:4a:4d:55:
         81:87:9a:75:f4:d8:5e:3a:7d:7c:77:40:47:8d:ff:7f:10:07:
         6d:75:cd:5f:5c:ea:16:c5:b4:a2:2a:ae:9d:e3:82:30:04:55:
         a1:22:28:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:34:45 2026 by rpki-client