Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148141/21E65F0CFC8411F0ADA3455F566F56BC/mOCW-BHfEJM5baoiDZ1rRh3dZ18.mft
File:                     mOCW-BHfEJM5baoiDZ1rRh3dZ18.mft (raw, json)
Hash identifier:          6nporpLPrTlEJg3WTOjPG6BuO1Ua9MYeV38XQtgVhgw=
Subject key identifier:   24:D6:19:A5:56:A3:81:C8:84:94:67:04:F9:3F:99:3E:7F:0E:9A:18
Authority key identifier: 98:E0:96:F8:11:DF:10:93:39:6D:AA:22:0D:9D:6B:46:1D:DD:67:5F
Certificate issuer:       /CN=A9148141/serialNumber=98E096F811DF1093396DAA220D9D6B461DDD675F
Certificate serial:       7D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOCW-BHfEJM5baoiDZ1rRh3dZ18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148141/21E65F0CFC8411F0ADA3455F566F56BC/mOCW-BHfEJM5baoiDZ1rRh3dZ18.mft
Manifest number:          7D
Signing time:             Mon 21 Sep 2026 07:45:44 +0000
Manifest this update:     Mon 21 Sep 2026 07:45:44 +0000
Manifest next update:     Mon 28 Sep 2026 07:45:44 +0000
Files and hashes:         1: mOCW-BHfEJM5baoiDZ1rRh3dZ18.crl (hash: eX7vaDDCxajAFnbOA02rmgFDLzua8rl25XCOYSmnONw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148141/21E65F0CFC8411F0ADA3455F566F56BC/mOCW-BHfEJM5baoiDZ1rRh3dZ18.crl
                          rsync://rpki.apnic.net/member_repository/A9148141/21E65F0CFC8411F0ADA3455F566F56BC/mOCW-BHfEJM5baoiDZ1rRh3dZ18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOCW-BHfEJM5baoiDZ1rRh3dZ18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:45:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148141, serialNumber=98E096F811DF1093396DAA220D9D6B461DDD675F
        Validity
            Not Before: Sep 21 07:45:44 2026 GMT
            Not After : Sep 28 07:45:44 2026 GMT
        Subject: CN=6ab0e0a8-415e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:66:e6:b3:c1:4b:43:ba:c4:77:61:ab:25:f3:
                    7c:4c:41:5e:c5:42:7c:75:35:9d:77:7e:03:cc:37:
                    5d:5f:6b:c1:0a:c2:9e:2c:c1:a8:82:87:12:5b:13:
                    d8:38:57:ab:91:4b:cc:af:aa:3e:0b:c7:05:d3:cd:
                    f7:dd:9a:c7:cf:18:8f:83:75:a6:d0:f9:e7:96:77:
                    ab:9e:9b:2e:28:54:3a:7b:58:92:9a:06:38:6b:c1:
                    4c:6f:11:bf:96:b8:5e:47:7f:c9:ee:a1:62:50:d4:
                    82:c3:b1:d0:77:7d:a3:fb:36:0d:99:7c:f2:f1:df:
                    25:47:d0:3e:ea:a1:ea:12:23:ef:55:ed:ff:3b:1d:
                    f0:62:96:c6:62:5a:29:99:c0:75:66:83:bb:79:81:
                    14:2a:a8:30:8d:0d:a3:17:ee:c9:1f:08:2d:c6:a0:
                    67:7f:1e:cb:11:74:5e:04:7e:6f:4a:63:dd:9c:68:
                    59:64:92:46:dd:32:9a:43:e3:0b:d1:6c:c4:88:ba:
                    e6:79:f4:59:d1:5e:c1:39:fc:40:46:c3:2b:5d:13:
                    b7:b0:3a:39:bf:22:0e:f5:90:dd:ea:74:9c:49:6f:
                    ea:c3:36:8e:db:4f:7a:86:dc:bb:1a:0b:9d:af:1b:
                    db:7f:5a:62:b1:06:59:94:8a:8a:60:91:6f:62:14:
                    ab:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D6:19:A5:56:A3:81:C8:84:94:67:04:F9:3F:99:3E:7F:0E:9A:18
            X509v3 Authority Key Identifier:
                keyid:98:E0:96:F8:11:DF:10:93:39:6D:AA:22:0D:9D:6B:46:1D:DD:67:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148141/21E65F0CFC8411F0ADA3455F566F56BC/mOCW-BHfEJM5baoiDZ1rRh3dZ18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOCW-BHfEJM5baoiDZ1rRh3dZ18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148141/21E65F0CFC8411F0ADA3455F566F56BC/mOCW-BHfEJM5baoiDZ1rRh3dZ18.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:8d:e1:7e:50:27:b6:9a:8b:d7:0a:9e:96:6e:14:ec:17:bb:
         2a:7a:25:d1:20:39:18:ea:49:ea:ab:d2:95:1d:d1:0b:c7:3e:
         5c:bd:76:51:22:ac:db:ab:7e:97:23:7d:e7:60:de:c5:39:24:
         5a:df:11:8c:d1:34:ad:2e:9d:c0:4b:5c:bd:f6:b9:bc:86:8f:
         a5:9f:21:50:da:8f:2b:00:ee:52:06:1e:41:fd:b1:da:5c:52:
         2f:a3:c1:ef:21:cc:02:3b:84:65:4a:36:b7:21:a7:4d:49:1a:
         c5:a9:b6:02:6d:bc:a7:9e:0d:3a:6a:73:a5:26:b2:fd:2a:80:
         2c:5b:31:a1:a7:83:33:6c:7e:a2:25:71:35:42:a8:b5:d2:b8:
         49:ba:6d:bf:da:b5:7e:58:27:82:93:63:91:a3:b2:5c:15:30:
         c2:26:36:12:3a:90:be:55:c5:c9:3e:59:a9:8c:e9:5d:9a:0e:
         fc:d6:dd:46:84:62:29:d0:86:61:3f:9c:36:5d:7d:49:0f:57:
         18:41:5f:b8:52:a6:de:b7:d8:fe:d7:fc:9c:2d:f8:52:e3:21:
         5d:a0:1d:69:0b:8a:94:5a:e7:0c:a0:be:8f:63:0c:97:50:97:
         37:dc:77:6f:5a:d9:d6:8f:8a:e1:cf:21:62:9e:c2:cc:4b:1b:
         a2:30:57:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:25:54 2026 by rpki-client