Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft
File:                     woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft (raw, json)
Hash identifier:          VvQyu/DGNX6Tnp7mUdCEGr0tyP9dw41S0bqoQRJh9x0=
Subject key identifier:   16:39:D4:8C:9C:2A:69:B7:11:48:D0:91:57:67:65:E7:11:C8:A8:E4
Authority key identifier: C2:84:BA:8A:88:A0:21:16:BE:E4:34:10:E0:39:E9:09:E3:02:9D:0D
Certificate issuer:       /CN=A91C7B68/serialNumber=C284BA8A88A02116BEE43410E039E909E3029D0D
Certificate serial:       09EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woS6ioigIRa-5DQQ4DnpCeMCnQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft
Manifest number:          0C3D
Signing time:             Sun 26 Jul 2026 20:28:38 +0000
Manifest this update:     Sun 26 Jul 2026 20:28:37 +0000
Manifest next update:     Sun 02 Aug 2026 20:28:37 +0000
Files and hashes:         1: woS6ioigIRa-5DQQ4DnpCeMCnQ0.crl (hash: 68slofrMQmzGZ082vvfjqmzKWyFSaS1+hA1lLPbOCrg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.crl
                          rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woS6ioigIRa-5DQQ4DnpCeMCnQ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 20:28:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2543 (0x9ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7B68, serialNumber=C284BA8A88A02116BEE43410E039E909E3029D0D
        Validity
            Not Before: Jul 26 20:28:37 2026 GMT
            Not After : Aug  2 20:28:37 2026 GMT
        Subject: CN=6a666df5-07b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a6:78:25:ff:dd:80:59:90:ea:35:69:d5:ae:
                    f4:6d:61:f5:87:47:22:b3:fe:0e:25:cd:9a:a5:4a:
                    33:a2:0d:79:a0:b1:fb:06:1d:d5:8e:a2:65:78:a0:
                    e5:f3:a2:1b:fe:5f:42:f3:59:ae:1d:d5:55:a8:4a:
                    89:e3:73:5a:0b:e3:18:25:37:9d:89:64:9d:90:39:
                    c5:f8:9f:29:ff:96:dc:f0:20:ed:ed:11:f2:60:e2:
                    ed:aa:a4:6c:79:5c:a7:d8:e2:0c:d1:4f:82:e9:22:
                    d7:30:71:7d:d8:7e:00:23:3c:3f:bd:c2:0a:d0:ac:
                    df:1a:45:ce:d3:5b:97:f8:e9:f2:86:41:18:1a:32:
                    43:d6:8c:1f:78:7c:44:49:2d:ae:42:34:68:aa:f7:
                    98:53:94:3c:8b:a6:c4:34:0b:11:02:7d:08:df:51:
                    ff:e5:0b:89:fd:ce:f8:14:10:65:f7:d5:a9:89:00:
                    63:36:60:3d:ce:0d:03:67:dd:73:70:45:a9:df:bd:
                    29:69:9a:90:9c:06:c0:67:ea:b7:55:2a:f4:53:9f:
                    5f:71:ab:30:a2:de:13:a7:2a:5c:64:1e:8f:1e:ec:
                    70:66:0f:eb:1c:26:f3:d6:cd:1e:2a:f3:ab:d4:45:
                    f0:2e:da:6c:a8:4d:a4:bd:4c:cb:5b:40:2b:af:de:
                    33:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:39:D4:8C:9C:2A:69:B7:11:48:D0:91:57:67:65:E7:11:C8:A8:E4
            X509v3 Authority Key Identifier:
                keyid:C2:84:BA:8A:88:A0:21:16:BE:E4:34:10:E0:39:E9:09:E3:02:9D:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woS6ioigIRa-5DQQ4DnpCeMCnQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:4f:ba:13:22:3b:c1:1a:01:d9:54:22:1c:1e:8f:ed:ae:9d:
         58:35:c5:8e:3d:11:6a:51:0f:0c:08:0e:a9:f5:8a:40:f0:2d:
         0d:89:6f:ca:68:40:2d:74:52:c1:89:77:7d:f5:e3:ad:e0:27:
         b9:e7:ba:9a:27:3e:e2:71:e4:8a:b4:0a:9c:df:f3:47:08:45:
         4d:9d:00:ca:1d:55:c1:57:b2:b5:c8:36:98:c4:69:fc:1c:7c:
         c7:16:c0:77:da:fb:b9:57:4e:09:d4:10:9f:1d:2a:ec:c8:c6:
         a4:b6:e0:f6:22:26:ca:57:45:d6:89:b8:97:0a:f3:db:2a:fd:
         2e:e8:9b:63:97:f8:d9:9e:64:0b:e0:7f:ed:44:19:49:91:11:
         d8:94:cb:58:d3:6e:bd:06:86:a1:f7:74:66:97:08:b5:ca:af:
         ed:bc:2a:3a:ad:8b:6f:ba:06:ad:0a:82:53:6c:8c:8e:f4:8c:
         0b:e0:af:51:e0:0a:e5:cf:14:33:9e:3c:86:6d:39:5a:27:7f:
         23:94:05:bb:ac:3e:ca:4e:ef:d3:1e:94:95:dc:a0:2f:a3:d8:
         03:8d:a5:86:74:22:75:1d:bb:23:99:06:d2:2e:6b:97:98:30:
         9f:06:4b:be:8c:21:3a:d8:3c:2f:8b:79:48:5c:da:a4:4d:1b:
         23:d9:18:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:53:55 2026 by rpki-client