Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148141/21E65F0CFC8411F0ADA3455F566F56BC/mOCW-BHfEJM5baoiDZ1rRh3dZ18.mft
File:                     mOCW-BHfEJM5baoiDZ1rRh3dZ18.mft (raw, json)
Hash identifier:          SyyIVC/FSA0Yy/M36GUpA8r9XY+uRJwKcRhVZ9i5Pc8=
Subject key identifier:   AD:52:0E:A9:18:1E:68:A5:A1:C1:19:59:FB:8F:32:D7:13:23:0A:5C
Authority key identifier: 98:E0:96:F8:11:DF:10:93:39:6D:AA:22:0D:9D:6B:46:1D:DD:67:5F
Certificate issuer:       /CN=A9148141/serialNumber=98E096F811DF1093396DAA220D9D6B461DDD675F
Certificate serial:       60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOCW-BHfEJM5baoiDZ1rRh3dZ18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148141/21E65F0CFC8411F0ADA3455F566F56BC/mOCW-BHfEJM5baoiDZ1rRh3dZ18.mft
Manifest number:          60
Signing time:             Mon 27 Jul 2026 10:23:45 +0000
Manifest this update:     Mon 27 Jul 2026 10:23:45 +0000
Manifest next update:     Mon 03 Aug 2026 10:23:45 +0000
Files and hashes:         1: mOCW-BHfEJM5baoiDZ1rRh3dZ18.crl (hash: d9ct6o37iWiUlGU9EMDc9S7xU7qIWsKFghq09uKk46c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148141/21E65F0CFC8411F0ADA3455F566F56BC/mOCW-BHfEJM5baoiDZ1rRh3dZ18.crl
                          rsync://rpki.apnic.net/member_repository/A9148141/21E65F0CFC8411F0ADA3455F566F56BC/mOCW-BHfEJM5baoiDZ1rRh3dZ18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOCW-BHfEJM5baoiDZ1rRh3dZ18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:23:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148141, serialNumber=98E096F811DF1093396DAA220D9D6B461DDD675F
        Validity
            Not Before: Jul 27 10:23:45 2026 GMT
            Not After : Aug  3 10:23:45 2026 GMT
        Subject: CN=6a6731b1-ea88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:85:61:26:7d:25:67:61:40:b7:33:2c:c7:95:
                    0d:7d:7b:fe:0b:67:9d:17:8b:23:a3:46:3a:87:a4:
                    c6:31:a2:ac:ce:4d:01:40:1c:bb:b4:d8:0f:38:7f:
                    ef:13:c0:56:4e:3a:b7:a2:ba:5b:45:42:f5:5c:3c:
                    11:d8:02:b6:5c:7d:42:bd:97:ff:6f:10:f7:8a:8b:
                    a0:cf:d3:46:a5:23:43:35:31:3b:a4:b8:30:3d:9f:
                    69:2e:32:fc:92:f6:a9:ea:23:aa:4f:bd:fb:d6:26:
                    d7:70:d1:66:36:c8:b1:36:29:5f:19:86:70:a5:22:
                    c4:35:35:b9:10:03:fd:0e:c0:1c:10:f3:ef:c0:e4:
                    9b:c5:73:e4:3a:cd:20:bd:08:d3:82:f6:8d:cc:c1:
                    5c:8a:f5:64:03:bb:46:9e:11:29:b8:ab:fd:64:b2:
                    a6:73:25:27:a2:84:14:e2:8a:cb:a3:55:21:54:4e:
                    1f:72:6b:2f:7a:58:cc:17:56:8d:90:06:49:37:ff:
                    25:e2:f1:ed:3c:dd:0d:cd:dd:cb:6e:ce:ce:03:21:
                    22:7e:6a:69:28:c6:6a:63:a5:f0:bd:cb:7b:c1:f8:
                    87:6d:d6:2f:cb:a9:b5:d0:0b:65:b2:46:58:ce:a8:
                    dd:c9:cc:bc:f3:c1:36:e0:76:df:6a:bf:7d:17:f6:
                    5d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:52:0E:A9:18:1E:68:A5:A1:C1:19:59:FB:8F:32:D7:13:23:0A:5C
            X509v3 Authority Key Identifier:
                keyid:98:E0:96:F8:11:DF:10:93:39:6D:AA:22:0D:9D:6B:46:1D:DD:67:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148141/21E65F0CFC8411F0ADA3455F566F56BC/mOCW-BHfEJM5baoiDZ1rRh3dZ18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOCW-BHfEJM5baoiDZ1rRh3dZ18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148141/21E65F0CFC8411F0ADA3455F566F56BC/mOCW-BHfEJM5baoiDZ1rRh3dZ18.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:3d:38:d7:d0:33:4f:7d:a7:10:b6:d2:28:a3:1e:ea:3c:b2:
         1f:b1:e6:3a:6b:d4:c9:c5:77:39:2e:22:e5:a1:0e:e6:b1:da:
         d5:13:86:f3:01:0d:b9:da:c4:91:1a:7d:fc:ea:11:2b:d2:27:
         58:5b:62:0a:20:1d:eb:84:57:31:3f:fd:31:ba:bb:0a:ff:cc:
         4a:8b:65:c2:78:d6:76:f2:48:a8:d6:3f:98:42:da:3d:7b:f7:
         bd:92:b0:98:2e:40:85:df:e0:4b:6e:62:b5:57:09:28:16:f6:
         b7:29:40:df:d6:74:e9:93:fd:71:40:12:29:24:0f:27:6e:00:
         c0:0c:0b:e5:da:9d:c3:32:3d:0f:76:9b:d7:67:6f:32:29:94:
         cd:c8:9d:d4:c6:6e:ce:a6:ee:33:36:fb:88:b4:00:8a:45:f5:
         b7:9d:f9:b5:af:5b:fe:3a:7b:ab:60:fa:c1:88:4d:50:43:2a:
         e6:ae:54:80:02:f3:0c:17:d4:a1:77:f5:98:4b:db:06:87:60:
         d5:24:7e:e1:e2:2f:17:a8:06:42:60:15:3f:71:1d:6a:77:5a:
         cf:3f:4a:95:c2:bd:96:3b:fe:d7:32:79:f9:a1:9b:0d:1b:7e:
         a3:bc:44:c4:8a:c2:62:74:6c:f0:69:7d:d4:4a:dc:c1:c6:33:
         e4:3e:e0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:20:46 2026 by rpki-client