Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft
File:                     wOMbX0XP5SusXO243MahoyL0cF0.mft (raw, json)
Hash identifier:          ZjFAS4z36Ag0WrPyi6ESbx8UXBZov5g/ajVdzWy3VSM=
Subject key identifier:   7C:4F:35:27:6C:89:CE:54:A0:17:6B:5E:17:7C:66:43:68:F5:A9:B5
Authority key identifier: C0:E3:1B:5F:45:CF:E5:2B:AC:5C:ED:B8:DC:C6:A1:A3:22:F4:70:5D
Certificate issuer:       /CN=A9196F7C/serialNumber=C0E31B5F45CFE52BAC5CEDB8DCC6A1A322F4705D
Certificate serial:       0181
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOMbX0XP5SusXO243MahoyL0cF0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft
Manifest number:          0177
Signing time:             Sun 01 Mar 2026 23:21:37 +0000
Manifest this update:     Sun 01 Mar 2026 23:21:36 +0000
Manifest next update:     Sun 08 Mar 2026 23:21:36 +0000
Files and hashes:         1: wOMbX0XP5SusXO243MahoyL0cF0.crl (hash: rLa5FThwyqTDhyWSDXNrtC0eavo1FHQjxk9ofLxAGOY=)
                          2: E37CCF70718911EFA0C30257C4F9AE02.roa (hash: eZTkKpEdsXZh7bnVdbEZMZWBeam9asfrWzHelRoKtEk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.crl
                          rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOMbX0XP5SusXO243MahoyL0cF0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:21:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 385 (0x181)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196F7C, serialNumber=C0E31B5F45CFE52BAC5CEDB8DCC6A1A322F4705D
        Validity
            Not Before: Mar  1 23:21:36 2026 GMT
            Not After : Mar  8 23:21:36 2026 GMT
        Subject: CN=69a4ca01-7987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:71:ea:27:3d:d8:69:92:1d:ff:13:4b:c2:d7:
                    af:c6:6a:41:3e:af:f3:0c:06:dc:1d:5a:ab:2a:bd:
                    40:10:72:3a:17:3a:d4:5d:c7:5e:12:fe:02:cb:83:
                    4a:80:6e:f1:f8:22:36:87:f5:6c:1f:c1:a4:df:e9:
                    6c:31:b0:6a:af:df:a2:f7:5e:29:6e:b4:56:0c:76:
                    87:ff:39:2c:80:a6:af:ff:bb:5c:b6:76:c1:0f:fe:
                    85:59:d7:35:c2:56:54:04:08:f9:c7:c6:61:36:a5:
                    79:74:9e:dd:5d:5e:64:15:c6:56:e4:33:94:ed:d8:
                    ca:42:3d:2a:03:49:9d:19:0d:0b:ad:43:88:22:fa:
                    97:03:51:81:a2:24:94:44:e2:66:64:8b:69:d8:3e:
                    ec:e5:b9:50:1b:78:19:52:53:f5:3f:0f:37:f0:9e:
                    16:9b:d3:39:0f:98:19:f1:0f:88:c3:db:b0:ac:45:
                    89:28:e3:c0:03:a3:94:75:0c:15:04:2f:04:f3:ab:
                    bd:ff:d3:a8:27:ee:93:04:17:63:ef:ec:93:8f:7b:
                    5a:7a:d9:f9:06:4b:da:bb:84:03:1e:b8:5f:e5:f3:
                    bb:1e:ea:07:04:d7:39:ed:08:ca:02:91:0f:04:04:
                    91:03:e8:22:f8:a8:9d:9d:1b:87:78:69:05:0f:ba:
                    99:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:4F:35:27:6C:89:CE:54:A0:17:6B:5E:17:7C:66:43:68:F5:A9:B5
            X509v3 Authority Key Identifier:
                keyid:C0:E3:1B:5F:45:CF:E5:2B:AC:5C:ED:B8:DC:C6:A1:A3:22:F4:70:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOMbX0XP5SusXO243MahoyL0cF0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:ed:a9:ae:79:f0:36:d1:72:ab:22:54:a8:2f:83:5b:b5:e0:
         bb:3b:96:a1:8c:ba:60:88:a6:5d:10:5c:a2:1b:ac:56:94:cd:
         b0:35:9d:ea:86:13:63:d8:24:4b:1b:1b:48:b5:55:2e:83:d9:
         2b:1a:6b:d2:2e:75:bb:7f:26:d8:50:39:9f:90:00:ed:4d:b7:
         18:85:77:6f:0c:5d:e1:20:a0:a1:4e:ee:ab:c8:c5:fe:f6:6e:
         40:26:1e:50:1e:c2:68:8a:f5:bf:d0:23:4d:bd:55:5f:a8:99:
         2a:89:c0:f3:dd:0b:bb:69:c2:fd:5d:bc:aa:80:ec:6d:e2:6c:
         7d:83:0b:77:37:11:a3:bd:e6:16:d5:06:74:6f:e6:01:27:79:
         de:1a:9c:75:b3:5f:cf:79:ad:5a:07:47:8e:06:fe:fb:f0:8e:
         85:5a:34:c9:39:bb:6a:28:10:08:d3:93:15:fc:98:c0:89:98:
         17:fc:b9:44:50:81:05:47:d5:5e:76:59:3a:26:f0:b8:47:7f:
         70:e7:cc:69:f2:cf:6a:06:65:fb:22:0d:3d:f5:6d:4e:c8:8c:
         08:3b:5f:29:aa:e4:1e:39:d0:02:20:1c:cf:38:c3:e8:bd:f1:
         67:49:56:71:53:b3:cb:92:a2:d7:08:b7:19:bf:cf:70:51:cc:
         bb:b7:e7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:16 2026 by rpki-client