Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft
File:                     WsdhXEWbeIEDfXXlZRpM7Db375E.mft (raw, json)
Hash identifier:          c9bsLontsqEoFhbfsKVGT60zlHy/Hv07ZQ89m/DkrJc=
Subject key identifier:   7C:4F:D4:FD:9B:13:EE:C1:2B:B8:1A:EA:43:57:4C:64:16:47:55:9E
Authority key identifier: 5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91
Certificate issuer:       /CN=A915BFDA/serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91
Certificate serial:       0CFD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft
Manifest number:          0CAF
Signing time:             Thu 26 Mar 2026 18:23:33 +0000
Manifest this update:     Thu 26 Mar 2026 18:23:32 +0000
Manifest next update:     Thu 02 Apr 2026 18:23:32 +0000
Files and hashes:         1: WsdhXEWbeIEDfXXlZRpM7Db375E.crl (hash: 5hr8dmTcsyJOh+HPxDCVuzWCu2Iowd+O/NOop7Y5Gjs=)
                          2: 998B917421DA11EBAA441F75C4F9AE02.roa (hash: AHwHR5P2unOzFbZF5/kMyWr9jBEmZP7l5z9TXIMdKwk=)
                          3: 9888A21221DA11EBAA441F75C4F9AE02.roa (hash: 3FuLmxDCD+MP2E5xN50Lj/x322ZG9I8Yf6S6pBk1v9I=)
                          4: 091F81047A5411EB9AC2283DC4F9AE02.roa (hash: ljKSat9M5iVgEMjN0irLGI7aCNi5tcJLeC8QiDxfwJM=)
                          5: 26F408FA027011EB98FEC44BC4F9AE02.roa (hash: 9QLph5XKLgZKwZp92nb4WN3QSXDopmzK9+Xmf9Dp/gQ=)
                          6: E1AF45B0232211EB8E8FB50AC4F9AE02.roa (hash: EvFkN9ZYuEFDBnjNtq9mVeqEYzT9yDvOX5AijaVncLY=)
                          7: 97EC93B821DA11EBAA441F75C4F9AE02.roa (hash: AHjXiMIEVnSzV4RLfQ08q+VyTYzKnjva9QjgZk6PmpU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl
                          rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 18:23:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3325 (0xcfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BFDA, serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91
        Validity
            Not Before: Mar 26 18:23:32 2026 GMT
            Not After : Apr  2 18:23:32 2026 GMT
        Subject: CN=69c579a5-99ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:67:7a:f4:55:cd:b3:9d:96:0c:d6:da:1b:0a:
                    ee:b5:0d:4c:3a:43:59:e6:ad:b9:60:f9:7c:61:30:
                    dc:24:3d:14:f0:37:de:30:64:78:cd:4b:3f:06:f7:
                    6f:e0:39:1f:93:59:73:97:a9:1b:98:5b:5a:b9:34:
                    39:c3:4e:db:b5:ad:e2:52:b3:7c:6c:d8:d1:dc:db:
                    1d:6c:f4:5d:96:72:c4:b2:cd:09:8e:b3:bb:ee:fc:
                    4b:ba:92:f7:b0:59:b6:f2:16:3f:c4:bb:f5:c6:24:
                    fa:28:97:20:d6:48:20:94:f7:69:42:c2:1e:cb:cf:
                    cf:c9:d9:13:f7:38:d3:e6:31:1c:23:f1:bf:71:f3:
                    d9:63:ef:e2:f5:0b:34:96:67:82:36:bd:b9:1d:8f:
                    8c:a9:ec:5f:14:5b:15:20:a9:94:83:33:f6:28:43:
                    42:7b:c6:1a:09:2d:8b:a7:4d:fc:15:cb:d5:17:af:
                    f8:3c:69:b7:1a:15:58:7e:3f:cc:69:4f:9c:11:9b:
                    53:4c:fa:e0:6d:2c:9a:fb:d0:43:68:29:89:18:22:
                    bf:05:a3:74:2a:0d:c6:26:38:6a:4a:50:c4:3c:3a:
                    46:87:03:31:f7:31:ec:76:52:f4:35:47:5d:2d:2d:
                    d1:fd:f1:f8:56:c9:72:32:a7:b1:34:48:28:42:84:
                    54:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:4F:D4:FD:9B:13:EE:C1:2B:B8:1A:EA:43:57:4C:64:16:47:55:9E
            X509v3 Authority Key Identifier:
                keyid:5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:9f:80:8d:b8:77:26:46:40:d3:5f:20:26:52:b3:04:20:5d:
         b0:51:24:f3:55:ec:02:02:58:53:67:3d:a7:d6:da:7a:79:00:
         ed:00:a3:23:99:dc:f4:72:97:97:ac:25:72:d6:a0:02:f7:32:
         ae:61:6f:5f:bb:0b:2e:39:b7:14:3e:ed:aa:6b:19:b4:4c:2c:
         e5:a0:06:3e:c4:7f:d6:4b:48:66:1e:a1:10:b5:8c:bf:fa:5b:
         2a:e1:26:8f:28:63:a3:aa:3e:33:35:5d:4b:45:fd:8e:ce:b2:
         63:85:92:a5:69:79:48:f4:75:a4:2f:92:57:f6:a3:d5:50:74:
         1f:e6:0d:0d:5d:c2:cb:7b:f4:2a:85:f8:d2:ca:3f:01:3c:25:
         6d:5d:2a:f9:53:a6:7a:08:b4:87:ec:9f:e4:05:b5:13:bf:bd:
         78:15:d7:f7:41:e2:c0:7b:4b:09:22:bd:a0:7d:9f:2b:c1:f6:
         49:a8:0d:27:27:c4:31:07:58:1d:91:6a:d8:c0:1f:4d:d7:c5:
         bd:72:91:dc:94:4b:6d:ce:61:1a:c7:8a:29:55:21:01:86:10:
         5c:23:66:f5:07:f4:e3:8b:66:06:d4:dc:5d:d0:d6:82:7b:6e:
         a2:71:93:ac:96:38:73:c7:9b:15:0a:eb:ee:e3:ac:23:21:dc:
         91:6a:b6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:09:34 2026 by rpki-client