Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft
File:                     0WaBZz8RihAOwgFHTM-7UYeD2WA.mft (raw, json)
Hash identifier:          JwFz/PtMnYdb8h3SGttvLBNUgjObNu3cek6nAO2huzs=
Subject key identifier:   B7:C9:31:BF:C9:1C:F5:AD:F8:E5:EF:52:D0:3D:EC:63:96:7C:35:D0
Authority key identifier: D1:66:81:67:3F:11:8A:10:0E:C2:01:47:4C:CF:BB:51:87:83:D9:60
Certificate issuer:       /CN=A91C9E82/serialNumber=D16681673F118A100EC201474CCFBB518783D960
Certificate serial:       9F
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft
Manifest number:          9C
Signing time:             Thu 03 Sep 2026 02:56:59 +0000
Manifest this update:     Thu 03 Sep 2026 02:56:58 +0000
Manifest next update:     Thu 10 Sep 2026 02:56:58 +0000
Files and hashes:         1: 0WaBZz8RihAOwgFHTM-7UYeD2WA.crl (hash: AKVqhZjMj9leuKVaYqrV6PQxc36sfCGxa86Kv2vV+lY=)
                          2: D798F0A0C04B11F0A85A7449C4F9AE02.roa (hash: j8RPUxU1i8jQNbwP8gL4o72qQiyb5SB1xrhWEeZuKzw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.crl
                          rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 02:56:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159 (0x9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9E82, serialNumber=D16681673F118A100EC201474CCFBB518783D960
        Validity
            Not Before: Sep  3 02:56:58 2026 GMT
            Not After : Sep 10 02:56:58 2026 GMT
        Subject: CN=6a98e1fb-b0e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d4:aa:a6:21:61:2d:44:92:4e:7f:e8:ee:1c:
                    9d:7a:a0:9b:46:3c:94:10:32:1d:c6:bd:b9:a0:dc:
                    32:d9:d5:82:41:c6:08:a4:cc:fe:45:2c:ed:38:36:
                    b3:ca:19:e7:59:c2:79:44:5e:f5:8a:2f:92:a8:05:
                    55:e9:e1:21:17:02:14:b5:70:34:32:d0:66:bd:aa:
                    0d:29:33:ad:12:88:ea:31:eb:94:d1:09:c8:ec:55:
                    6a:13:0d:a7:b7:38:58:7c:8d:50:dc:d5:56:59:b8:
                    69:f6:28:31:05:ec:bb:7a:f3:89:91:6d:9b:9b:fc:
                    c5:22:dc:11:19:03:bd:e1:1c:f8:36:3e:9c:0a:6f:
                    a3:be:46:40:6c:d1:d9:70:d4:83:91:45:ab:d1:5c:
                    07:a8:73:be:ac:4f:6f:d3:65:4e:f9:2e:4e:6b:57:
                    68:e6:b5:35:ea:07:d9:e0:22:70:ed:8c:b3:f0:17:
                    8c:67:39:7d:f9:88:0a:6a:60:96:26:62:80:42:e7:
                    4a:79:4b:38:de:a3:6e:0c:48:6a:6f:f0:62:96:50:
                    23:cc:9d:56:d2:38:4a:a2:80:cc:0d:43:e5:c6:f2:
                    9b:78:7b:ee:5f:aa:91:3d:38:5b:11:13:33:5b:78:
                    e5:15:7f:d4:48:8a:e9:9b:81:5a:00:4a:b4:68:f2:
                    dc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C9:31:BF:C9:1C:F5:AD:F8:E5:EF:52:D0:3D:EC:63:96:7C:35:D0
            X509v3 Authority Key Identifier:
                keyid:D1:66:81:67:3F:11:8A:10:0E:C2:01:47:4C:CF:BB:51:87:83:D9:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:6e:15:b5:44:df:d0:73:9b:f3:c5:4a:b3:a5:1f:61:f3:61:
         ce:22:64:7f:48:e6:d0:fe:7b:9d:6b:99:93:64:10:d2:2b:51:
         ec:d0:34:11:b0:fe:cc:ac:16:b7:7b:1a:5c:01:41:a1:ed:32:
         4a:aa:74:63:77:3b:70:4f:45:c9:ae:f5:86:b3:91:86:e6:ba:
         1b:3f:73:c7:82:d2:3c:75:c8:c1:14:63:d7:57:26:96:35:ee:
         28:93:18:5b:de:74:3e:11:a4:e2:13:8f:a6:e3:fb:9d:22:c2:
         20:79:98:75:8c:0a:03:14:d1:5c:a3:86:82:cf:0c:cd:03:e7:
         34:24:6e:82:30:a5:af:e0:93:d8:0f:1e:7c:c9:bc:ce:f8:16:
         34:d2:0b:5a:d2:97:91:63:d8:70:f8:d6:1c:a5:98:50:4c:28:
         06:cf:d5:bf:3a:b0:a5:27:ef:eb:0e:c5:40:31:20:a3:3b:55:
         a5:07:29:dd:81:35:76:a0:a8:b3:57:17:d0:e5:9f:c3:98:c5:
         1a:65:40:b0:eb:4a:6f:63:6e:c9:b1:4c:77:70:17:4d:9a:b7:
         b9:c3:69:25:1f:ca:2b:d6:f6:cc:82:e2:d2:cf:73:ad:3b:d1:
         32:e8:5f:5f:c6:7b:82:de:dd:08:bc:19:5b:3b:57:13:c2:2c:
         3a:ac:52:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:43:04 2026 by rpki-client