Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft
File:                     CDWHSXi6MJ7X2kZz53OdkyLyYps.mft (raw, json)
Hash identifier:          8XwfaUdg3Gn56TlFNuVZR/bzttpfc425krF3e84aRvQ=
Subject key identifier:   10:7B:74:F8:15:42:C7:E7:EC:02:3F:ED:AE:94:4B:47:65:C5:11:E0
Authority key identifier: 08:35:87:49:78:BA:30:9E:D7:DA:46:73:E7:73:9D:93:22:F2:62:9B
Certificate issuer:       /CN=A917E00F/serialNumber=0835874978BA309ED7DA4673E7739D9322F2629B
Certificate serial:       E5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CDWHSXi6MJ7X2kZz53OdkyLyYps.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft
Manifest number:          E1
Signing time:             Tue 24 Mar 2026 22:38:21 +0000
Manifest this update:     Tue 24 Mar 2026 22:38:21 +0000
Manifest next update:     Tue 31 Mar 2026 22:38:21 +0000
Files and hashes:         1: CDWHSXi6MJ7X2kZz53OdkyLyYps.crl (hash: QNjSEGIj+cdlzp8pv9WO3ZOPUxoeNVSxxa+LRlfuKCA=)
                          2: 2DA549EAE23E11EFB267422EC4F9AE02.roa (hash: Mr9U/6ZYvZu9qU4Dm1rrpvinPfnT7chjtNPRoJwGxK8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.crl
                          rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CDWHSXi6MJ7X2kZz53OdkyLyYps.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229 (0xe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E00F, serialNumber=0835874978BA309ED7DA4673E7739D9322F2629B
        Validity
            Not Before: Mar 24 22:38:21 2026 GMT
            Not After : Mar 31 22:38:21 2026 GMT
        Subject: CN=69c3125d-9471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c6:f4:4a:14:80:35:b7:90:1e:6a:d3:13:bf:
                    30:a5:bd:0d:7c:7e:40:e3:52:02:2e:e3:36:ae:16:
                    8a:db:86:11:80:ea:28:98:4f:9e:fd:23:5f:82:7c:
                    73:ee:57:86:81:40:67:8a:52:b0:12:17:40:95:8e:
                    dc:98:f2:e4:11:ff:5b:bf:66:b8:e0:d2:b4:ad:bb:
                    d1:45:15:a2:0d:71:54:cc:fa:72:21:5b:2d:ac:ba:
                    6f:03:77:06:d6:21:3d:f2:97:3e:cb:ab:df:1e:3c:
                    8e:5b:1f:4d:cb:fb:38:2f:45:b2:d8:cc:c5:f3:58:
                    d5:a3:4f:fc:bc:3a:8b:5c:70:f5:94:1a:5b:2f:49:
                    1a:e6:cf:f9:30:7c:a2:83:fd:2b:e4:00:ff:ca:2d:
                    96:d6:7f:0d:be:d4:bc:30:32:d8:9d:f8:88:44:27:
                    5b:bf:3c:18:d7:35:ad:8a:82:41:4d:84:63:9b:ce:
                    68:47:d5:92:1c:13:bc:5a:66:cd:2e:87:3d:47:28:
                    59:d7:cd:1f:1c:5a:2c:8d:18:cc:d5:73:9a:2f:63:
                    7b:a6:05:73:e5:84:ca:8a:7d:ac:41:81:dd:71:17:
                    62:44:7f:81:5e:fc:8a:66:b5:c2:79:2e:fa:93:25:
                    05:32:67:4c:37:ec:00:fa:6d:e5:f7:1e:81:eb:34:
                    9d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:7B:74:F8:15:42:C7:E7:EC:02:3F:ED:AE:94:4B:47:65:C5:11:E0
            X509v3 Authority Key Identifier:
                keyid:08:35:87:49:78:BA:30:9E:D7:DA:46:73:E7:73:9D:93:22:F2:62:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CDWHSXi6MJ7X2kZz53OdkyLyYps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:1f:70:7d:de:50:f8:d8:f5:b6:f8:30:7a:29:1c:a9:29:b9:
         e7:b3:9d:b1:c1:17:3f:53:17:7e:82:6e:1b:14:45:08:80:5a:
         53:3e:a0:88:9d:6a:80:a3:05:21:96:25:8a:0a:00:3a:78:f6:
         7e:3f:83:f0:25:53:63:4e:e4:6e:02:8c:f6:e8:b3:0e:77:00:
         28:c5:89:5a:10:33:30:ac:5a:1d:40:73:1d:3e:40:d9:37:1c:
         05:ff:af:d6:4b:11:84:5d:b5:8d:0e:eb:ff:83:a1:3e:a4:34:
         bf:78:33:a5:40:21:fb:7c:06:fd:76:30:6a:4d:98:86:43:b6:
         55:44:3d:24:e6:0c:6c:88:33:88:a9:71:75:88:a2:60:95:6a:
         b4:26:81:ff:f3:f6:d1:b7:fd:b2:39:48:1c:2e:c2:f9:66:26:
         b0:f7:8c:13:e7:df:fe:2b:b0:6e:e4:4d:b3:42:1a:05:cf:f9:
         5a:e3:21:a3:1f:7b:ae:73:b9:28:34:36:ea:64:6d:3d:af:5b:
         74:fe:b4:e6:75:4a:48:5a:27:d7:5a:7e:97:17:a7:2e:a7:90:
         b5:7a:17:23:d7:e2:39:42:78:aa:c2:04:c7:9a:59:7b:1d:8c:
         cc:09:19:e8:28:69:18:b0:98:46:e9:ae:3c:21:1a:62:74:a1:
         57:1b:6a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:41:32 2026 by rpki-client