Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft
File:                     0WaBZz8RihAOwgFHTM-7UYeD2WA.mft (raw, json)
Hash identifier:          3WiL/C1BEzG4gKmYxT1IbK2+l3F1YGyPpJqUwUnGypE=
Subject key identifier:   EF:83:78:0F:D0:8E:C0:BC:91:D1:47:F4:F0:84:41:D4:DE:DA:6F:AE
Authority key identifier: D1:66:81:67:3F:11:8A:10:0E:C2:01:47:4C:CF:BB:51:87:83:D9:60
Certificate issuer:       /CN=A91C9E82/serialNumber=D16681673F118A100EC201474CCFBB518783D960
Certificate serial:       63
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft
Manifest number:          61
Signing time:             Wed 13 May 2026 03:26:31 +0000
Manifest this update:     Wed 13 May 2026 03:26:30 +0000
Manifest next update:     Wed 20 May 2026 03:26:30 +0000
Files and hashes:         1: 0WaBZz8RihAOwgFHTM-7UYeD2WA.crl (hash: MPWa8z1W71KPSq1kfGwOGvjfrLoFqJFlcKgff7KpU6k=)
                          2: D798F0A0C04B11F0A85A7449C4F9AE02.roa (hash: D1XVMH1vA5La0IfiYGXEnqhzX2rQW9q2kW1yPmg2KPU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.crl
                          rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9E82, serialNumber=D16681673F118A100EC201474CCFBB518783D960
        Validity
            Not Before: May 13 03:26:30 2026 GMT
            Not After : May 20 03:26:30 2026 GMT
        Subject: CN=6a03ef67-ef6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e3:49:d0:b2:2c:df:51:f0:74:43:4f:57:fd:
                    35:64:8c:25:69:be:6f:4e:a2:e0:bb:06:20:2d:a0:
                    ef:1d:f3:74:cf:1c:b3:26:13:3d:9d:4f:7c:2e:e2:
                    d6:ad:b3:63:79:6e:30:23:7e:9a:a0:28:fa:2b:be:
                    1f:9d:3b:57:89:7a:07:a3:4c:02:c6:96:e0:11:0e:
                    e5:ad:bd:85:13:68:ea:4d:e0:e1:38:bd:4c:c7:13:
                    e3:b8:47:92:29:d4:bc:f5:9b:19:39:c4:f6:50:9d:
                    96:8a:9f:bf:7c:d1:3a:b9:45:e9:c6:5d:cd:3b:a8:
                    6a:f9:82:1e:3f:33:6b:03:26:61:91:79:cc:4e:d5:
                    92:05:fa:2a:f3:e0:00:0a:5e:17:31:86:c2:3f:dd:
                    62:66:8f:40:34:0d:28:2a:a7:5c:24:3a:4a:9b:3d:
                    89:c6:f4:0d:b7:45:7c:00:8e:a1:ae:9d:40:24:31:
                    73:2e:d6:d0:e8:6e:9d:80:47:87:d8:ef:1e:88:8e:
                    fe:13:21:8f:9c:3a:9e:c6:99:c0:bf:11:b3:af:a3:
                    15:a2:93:eb:27:d5:63:8a:09:06:65:6e:ab:cb:69:
                    dd:7a:40:7b:83:3a:2a:bd:a0:4e:0b:b0:4c:cf:57:
                    3f:73:c0:33:4f:2c:44:6e:37:e2:3e:2d:56:4c:f3:
                    19:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:83:78:0F:D0:8E:C0:BC:91:D1:47:F4:F0:84:41:D4:DE:DA:6F:AE
            X509v3 Authority Key Identifier:
                keyid:D1:66:81:67:3F:11:8A:10:0E:C2:01:47:4C:CF:BB:51:87:83:D9:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:c6:49:17:95:56:67:a3:53:15:b8:64:c0:6a:82:94:0a:9b:
         2b:81:c3:b7:ca:f1:82:b9:d7:d6:48:a1:39:69:98:00:a1:80:
         18:12:fb:28:2d:52:db:51:c9:96:31:24:e6:10:d3:24:12:90:
         53:1f:65:7a:6e:3c:2c:ec:e5:52:79:b4:c2:18:13:c6:8c:f1:
         bf:0f:4c:ff:09:66:05:1a:ff:f5:55:e2:16:b1:44:1f:ac:38:
         27:87:3d:cd:cc:e4:27:06:55:9c:37:41:09:a7:9e:40:ff:3e:
         53:f9:36:5e:79:8d:a9:59:34:fb:f9:b8:e7:f1:91:d9:eb:99:
         0a:c1:a2:d7:c2:66:92:b3:90:b9:17:a2:b2:15:45:c9:21:29:
         f9:20:1b:c3:d3:d0:d8:f5:16:3a:0d:0a:e2:f6:14:3a:7f:ba:
         f7:b0:ad:34:5d:9e:72:31:ed:d4:d4:d9:55:19:9c:d2:6c:4d:
         6a:a0:d0:b6:3f:9a:79:b3:ba:11:0b:7f:d3:47:41:df:cb:63:
         13:42:67:b2:8a:a8:6b:49:9e:4d:b4:36:16:11:6c:fe:76:6c:
         3f:a9:64:f2:40:bc:df:76:ea:39:67:43:c9:18:2f:b6:dc:91:
         df:e0:c0:41:7a:dc:86:3f:81:7a:c3:c1:30:fe:90:31:b7:b2:
         1e:32:8c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:36:38 2026 by rpki-client