Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148141/21E65F0CFC8411F0ADA3455F566F56BC/mOCW-BHfEJM5baoiDZ1rRh3dZ18.mft
File:                     mOCW-BHfEJM5baoiDZ1rRh3dZ18.mft (raw, json)
Hash identifier:          cDRiWbuVtxdFaulTX3C3JQNNss8fRYjqARgtd9jXntY=
Subject key identifier:   0F:B3:42:9C:8C:3B:B9:4F:08:D7:2D:4B:77:9A:7A:9A:9B:9D:24:26
Authority key identifier: 98:E0:96:F8:11:DF:10:93:39:6D:AA:22:0D:9D:6B:46:1D:DD:67:5F
Certificate issuer:       /CN=A9148141/serialNumber=98E096F811DF1093396DAA220D9D6B461DDD675F
Certificate serial:       3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOCW-BHfEJM5baoiDZ1rRh3dZ18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148141/21E65F0CFC8411F0ADA3455F566F56BC/mOCW-BHfEJM5baoiDZ1rRh3dZ18.mft
Manifest number:          3E
Signing time:             Tue 19 May 2026 08:23:34 +0000
Manifest this update:     Tue 19 May 2026 08:23:33 +0000
Manifest next update:     Tue 26 May 2026 08:23:33 +0000
Files and hashes:         1: mOCW-BHfEJM5baoiDZ1rRh3dZ18.crl (hash: BdPXKufO/2LLiawfbsg7yc3IH5TJwPj7/00rGcATh1Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148141/21E65F0CFC8411F0ADA3455F566F56BC/mOCW-BHfEJM5baoiDZ1rRh3dZ18.crl
                          rsync://rpki.apnic.net/member_repository/A9148141/21E65F0CFC8411F0ADA3455F566F56BC/mOCW-BHfEJM5baoiDZ1rRh3dZ18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOCW-BHfEJM5baoiDZ1rRh3dZ18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 May 2026 08:23:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148141, serialNumber=98E096F811DF1093396DAA220D9D6B461DDD675F
        Validity
            Not Before: May 19 08:23:33 2026 GMT
            Not After : May 26 08:23:33 2026 GMT
        Subject: CN=6a0c1e06-1dbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2a:5f:db:b6:dc:ed:dc:d6:6a:17:2a:9f:47:
                    52:b8:dd:b7:66:cb:42:7d:4e:85:3f:75:88:e1:fd:
                    1c:40:58:56:65:ca:fe:9c:4e:b0:49:39:00:f1:17:
                    37:90:87:5c:71:a5:f9:dd:10:a0:36:ad:d7:d6:66:
                    5c:04:7e:65:7e:4a:9f:6c:8e:f5:83:bb:eb:96:ee:
                    3a:01:4f:db:ff:7d:2a:99:2c:28:21:1e:79:90:0f:
                    fe:63:ae:01:2e:00:6c:2c:a9:50:e2:a4:57:59:5b:
                    3c:44:db:b4:1b:3d:2f:ec:e8:c8:2d:0d:70:b4:34:
                    d3:f0:14:f2:a1:7f:95:31:10:40:b2:17:f9:5d:63:
                    d2:b3:27:d8:01:96:ec:d8:32:eb:1e:27:c1:b8:16:
                    5b:5c:08:a1:09:65:46:0c:3e:fb:91:d1:cd:84:c4:
                    88:26:c1:88:27:6e:31:c9:fb:50:67:d3:35:f8:96:
                    1a:36:a2:97:ff:02:33:a9:49:2e:c7:bc:ad:c2:1e:
                    c5:03:53:e6:7e:b4:2f:e2:6f:d1:0f:aa:f9:2c:b6:
                    e2:61:39:b5:d6:c1:80:8e:c8:c1:aa:fa:d7:4a:3c:
                    9f:02:11:4a:02:de:71:86:7d:81:21:70:41:9e:14:
                    01:ed:01:ca:67:d7:bf:3a:6d:e8:20:eb:df:f3:16:
                    ed:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B3:42:9C:8C:3B:B9:4F:08:D7:2D:4B:77:9A:7A:9A:9B:9D:24:26
            X509v3 Authority Key Identifier:
                keyid:98:E0:96:F8:11:DF:10:93:39:6D:AA:22:0D:9D:6B:46:1D:DD:67:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148141/21E65F0CFC8411F0ADA3455F566F56BC/mOCW-BHfEJM5baoiDZ1rRh3dZ18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOCW-BHfEJM5baoiDZ1rRh3dZ18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148141/21E65F0CFC8411F0ADA3455F566F56BC/mOCW-BHfEJM5baoiDZ1rRh3dZ18.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:7f:83:20:1c:54:36:b5:1a:69:41:11:0b:aa:8e:7a:1c:d0:
         cb:b4:6e:09:7d:2d:7a:db:ab:ef:13:99:75:2a:3e:5d:e4:05:
         ac:69:40:18:18:dc:54:b8:c0:4f:1f:00:c8:8e:8c:9f:33:00:
         ae:f2:d3:09:d7:7d:2c:88:82:48:45:17:41:fa:4c:b0:71:12:
         4c:6f:88:c2:2a:8a:f1:f4:16:e5:eb:e7:2f:e8:42:07:5f:30:
         c8:74:8d:34:a1:ec:5e:68:fc:c4:0a:b0:c3:30:50:b7:b1:8b:
         c4:d6:ec:0f:e5:93:89:d1:05:a9:04:e6:4b:90:55:e3:9a:38:
         74:26:4f:e3:9e:1d:35:8b:5f:53:e8:27:27:c5:8b:40:41:4c:
         d7:07:80:d8:14:c7:77:d3:21:73:08:07:fe:df:7e:87:c4:73:
         53:4d:b5:82:cd:fb:2e:39:d2:9f:76:c3:55:a1:0b:7b:c2:f9:
         e6:66:42:a0:53:11:cd:99:8a:20:32:11:5f:18:66:3d:b1:ca:
         19:8c:58:1f:37:08:1a:33:ca:3d:fb:c3:05:ac:8b:e2:15:8b:
         69:1a:af:72:f3:89:ce:d2:b9:21:1f:c1:de:ce:52:a5:36:85:
         07:0c:10:41:b4:8f:fb:cb:24:fc:f6:ea:12:c0:79:d3:49:4f:
         d3:79:30:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:36:55 2026 by rpki-client