Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148141/21E65F0CFC8411F0ADA3455F566F56BC/mOCW-BHfEJM5baoiDZ1rRh3dZ18.mft
File:                     mOCW-BHfEJM5baoiDZ1rRh3dZ18.mft (raw, json)
Hash identifier:          k79cEHMBN5AsGJSnFW9iLQWQXeAlZx8jB1LMCRQQ2xI=
Subject key identifier:   6B:BF:56:5B:BF:A8:BD:B2:BA:3B:C1:A5:3C:3D:E2:25:FC:0B:F9:F5
Authority key identifier: 98:E0:96:F8:11:DF:10:93:39:6D:AA:22:0D:9D:6B:46:1D:DD:67:5F
Certificate issuer:       /CN=A9148141/serialNumber=98E096F811DF1093396DAA220D9D6B461DDD675F
Certificate serial:       16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOCW-BHfEJM5baoiDZ1rRh3dZ18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148141/21E65F0CFC8411F0ADA3455F566F56BC/mOCW-BHfEJM5baoiDZ1rRh3dZ18.mft
Manifest number:          16
Signing time:             Sun 01 Mar 2026 10:30:34 +0000
Manifest this update:     Sun 01 Mar 2026 10:30:33 +0000
Manifest next update:     Sun 08 Mar 2026 10:30:33 +0000
Files and hashes:         1: mOCW-BHfEJM5baoiDZ1rRh3dZ18.crl (hash: W9CqDuNOnBr/Coy/XHpN2YNF4HYOi9vrFVj9qnhxi6I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148141/21E65F0CFC8411F0ADA3455F566F56BC/mOCW-BHfEJM5baoiDZ1rRh3dZ18.crl
                          rsync://rpki.apnic.net/member_repository/A9148141/21E65F0CFC8411F0ADA3455F566F56BC/mOCW-BHfEJM5baoiDZ1rRh3dZ18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOCW-BHfEJM5baoiDZ1rRh3dZ18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148141, serialNumber=98E096F811DF1093396DAA220D9D6B461DDD675F
        Validity
            Not Before: Mar  1 10:30:33 2026 GMT
            Not After : Mar  8 10:30:33 2026 GMT
        Subject: CN=69a41549-bbc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:40:07:13:4a:8d:fb:8c:7c:2c:df:7b:fd:7a:
                    6b:1e:2a:bd:d9:9f:0b:6a:f3:15:76:15:79:d3:92:
                    f6:92:45:80:a9:b9:d2:9b:30:f1:4d:1e:95:a2:df:
                    d4:ee:39:b6:fa:42:22:0b:dc:c9:51:65:48:4e:ef:
                    df:29:03:b4:20:fe:df:55:e3:67:4f:60:08:aa:58:
                    2e:46:65:8b:1c:15:13:f8:57:eb:72:f6:a8:a1:43:
                    3c:a9:2f:b3:b9:f8:55:c7:46:e8:52:fb:3a:1d:eb:
                    cd:e6:17:9c:5f:b3:a0:79:f2:e5:91:fd:53:aa:fe:
                    ff:10:aa:d4:35:5d:a3:11:fd:77:b3:5e:15:18:11:
                    83:8b:86:85:18:b4:f3:2a:16:32:2e:7f:41:22:5d:
                    2f:ef:a2:5a:41:15:43:6a:9f:a2:45:c4:2f:c5:ae:
                    bc:3b:bd:91:5f:9e:aa:1a:f2:4e:b1:dc:52:bd:34:
                    5e:b4:25:58:48:12:16:4e:60:4b:b3:0d:aa:c0:c1:
                    41:8b:16:d4:1d:87:89:bf:33:14:5f:3b:77:00:17:
                    e9:52:a9:c6:79:df:ac:e3:d6:3f:aa:15:f2:4a:b2:
                    6b:c5:92:c4:31:78:80:92:b3:1a:b2:78:ad:18:5b:
                    a1:26:71:70:88:7c:a9:dc:82:10:28:8f:39:9f:72:
                    6b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:BF:56:5B:BF:A8:BD:B2:BA:3B:C1:A5:3C:3D:E2:25:FC:0B:F9:F5
            X509v3 Authority Key Identifier:
                keyid:98:E0:96:F8:11:DF:10:93:39:6D:AA:22:0D:9D:6B:46:1D:DD:67:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148141/21E65F0CFC8411F0ADA3455F566F56BC/mOCW-BHfEJM5baoiDZ1rRh3dZ18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOCW-BHfEJM5baoiDZ1rRh3dZ18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148141/21E65F0CFC8411F0ADA3455F566F56BC/mOCW-BHfEJM5baoiDZ1rRh3dZ18.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:31:54:30:9f:d3:07:ce:88:11:24:db:58:11:ae:37:49:5d:
         b2:ba:a3:6f:be:69:09:78:de:33:45:c1:c8:2f:1a:fe:69:dc:
         d1:da:eb:50:47:41:85:0f:5a:46:a6:5d:20:24:07:6e:0f:b2:
         d5:16:af:ce:ad:47:95:b4:5b:92:c1:df:13:8e:70:a1:80:93:
         82:86:77:01:85:0c:75:07:36:ab:0e:ae:ec:b1:7f:87:61:42:
         17:8c:fe:e0:d6:be:17:10:98:9e:c7:44:14:93:b0:79:0d:a3:
         f0:48:3f:14:ef:58:b8:71:53:99:8d:28:8a:57:37:d0:dd:aa:
         44:5b:04:04:77:a2:0a:15:24:41:18:eb:ec:7c:9a:84:15:3c:
         aa:be:f2:39:c4:44:f5:70:73:83:2e:00:ea:70:66:c1:b5:6d:
         45:b5:6d:ae:fd:5f:cc:6e:ea:bc:12:78:7a:14:29:da:b7:7a:
         99:c6:fe:8b:d9:51:d1:fe:e8:d7:31:e8:b3:1b:f8:92:06:ac:
         62:81:3f:47:30:81:7b:8b:bb:63:6d:8d:36:24:87:1b:45:bb:
         57:e2:78:4a:39:c2:01:2b:de:e3:4e:c3:f3:10:cb:68:d2:8f:
         69:15:bc:15:56:7f:d6:0f:fa:8f:73:07:2c:ab:bf:e3:97:a2:
         24:66:23:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:59:48 2026 by rpki-client