Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft
File:                     0WaBZz8RihAOwgFHTM-7UYeD2WA.mft (raw, json)
Hash identifier:          pb6CgN/Vc1TNT1bTW+wEIUIUURjiSv94RREaiwr/FBg=
Subject key identifier:   D4:70:8E:40:C9:08:72:57:80:27:DA:BC:CB:C5:2A:34:86:05:F5:43
Authority key identifier: D1:66:81:67:3F:11:8A:10:0E:C2:01:47:4C:CF:BB:51:87:83:D9:60
Certificate issuer:       /CN=A91C9E82/serialNumber=D16681673F118A100EC201474CCFBB518783D960
Certificate serial:       86
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft
Manifest number:          84
Signing time:             Thu 23 Jul 2026 04:16:59 +0000
Manifest this update:     Thu 23 Jul 2026 04:16:59 +0000
Manifest next update:     Thu 30 Jul 2026 04:16:59 +0000
Files and hashes:         1: 0WaBZz8RihAOwgFHTM-7UYeD2WA.crl (hash: oC5jLsh/M+eeAg1B6oLI2CqnvOjn/cgFGdo3OTQaeWY=)
                          2: D798F0A0C04B11F0A85A7449C4F9AE02.roa (hash: D1XVMH1vA5La0IfiYGXEnqhzX2rQW9q2kW1yPmg2KPU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.crl
                          rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:16:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9E82, serialNumber=D16681673F118A100EC201474CCFBB518783D960
        Validity
            Not Before: Jul 23 04:16:59 2026 GMT
            Not After : Jul 30 04:16:59 2026 GMT
        Subject: CN=6a6195bb-4f6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d4:07:04:6b:e6:2c:56:25:ad:a7:4a:84:f2:
                    5f:84:1e:7a:c7:c4:92:7a:74:20:be:1d:d7:88:7e:
                    24:c4:81:fc:ae:04:b9:cd:34:0e:9e:3f:7c:43:1d:
                    4a:77:a4:26:28:9e:b3:07:74:2e:4b:91:4e:fc:c4:
                    93:a7:37:cf:0d:a9:0f:63:45:c9:8e:f0:11:1f:33:
                    d1:da:e9:27:e9:b4:9b:c2:f5:33:d8:ea:ec:ae:11:
                    50:c3:e8:29:36:dc:03:16:1b:e8:e3:40:38:5f:d8:
                    c5:0b:ea:62:0d:e8:27:2d:c4:4b:2f:28:b0:c6:96:
                    ac:4c:ef:32:27:75:07:d5:14:87:56:f6:96:d5:95:
                    8a:7f:71:25:a1:c4:7b:20:23:8b:af:c8:cf:29:7e:
                    45:3a:bb:91:7f:d0:07:3d:ac:dd:db:cd:29:78:9b:
                    3f:43:85:36:43:a1:70:1f:93:fe:5a:61:a8:74:ad:
                    e4:44:8b:ae:23:ee:0b:3d:b6:ec:27:08:a6:e0:92:
                    7d:3a:dd:b5:5b:0b:ad:53:02:d4:24:76:89:22:88:
                    a2:b0:30:bd:c9:97:57:d9:86:d6:80:df:8e:28:ad:
                    ed:07:03:4d:6f:c2:00:da:a3:1f:a7:a4:e7:d7:c1:
                    fa:52:55:9b:ab:38:f4:44:0a:47:f9:92:10:90:a1:
                    7c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:70:8E:40:C9:08:72:57:80:27:DA:BC:CB:C5:2A:34:86:05:F5:43
            X509v3 Authority Key Identifier:
                keyid:D1:66:81:67:3F:11:8A:10:0E:C2:01:47:4C:CF:BB:51:87:83:D9:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:23:ba:3a:7b:d3:4a:d0:d6:ac:5a:00:3b:6d:30:b7:a2:ab:
         ea:d5:92:20:0f:e6:02:4e:6f:d5:0b:60:39:89:6d:7b:08:d2:
         9e:16:b2:04:c5:80:34:f0:75:1b:85:a0:20:c1:b3:dc:ea:71:
         07:79:74:a6:eb:7d:43:8e:8e:8a:8e:8f:a3:a0:c8:fc:ae:6e:
         32:15:6b:80:8f:da:fa:22:88:b6:34:ac:3c:8a:50:77:3b:cf:
         a0:80:70:c6:61:a7:a7:aa:8f:0c:ca:5a:ee:e9:9d:82:f3:86:
         ee:1e:ad:6a:1e:bd:2a:92:8b:df:ab:90:84:64:54:1e:40:ef:
         5f:70:83:72:0a:51:7d:f1:fc:14:83:7d:fa:d8:01:c2:bd:f2:
         9a:28:59:a1:97:ed:da:ce:d2:55:8f:00:78:0c:c7:d5:52:34:
         08:55:d1:95:0e:49:69:37:16:4b:0e:39:e7:dd:37:11:9a:d1:
         0e:9e:7e:75:7f:db:ae:2c:3f:c4:50:1b:6e:dc:f2:86:45:19:
         0b:b2:38:11:a7:38:3c:2d:bb:c6:a0:d4:17:da:d6:a0:3c:bc:
         63:6f:66:b3:ce:cb:b8:1f:2e:c1:43:b0:77:c3:da:b6:93:93:
         23:52:a4:82:17:d8:d4:bb:97:96:33:ed:74:88:5c:32:4e:d9:
         73:7f:e6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:12:46 2026 by rpki-client