Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft
File:                     RwHPLSggCdbG6vRVb7DcGw1VV-8.mft (raw, json)
Hash identifier:          yQfKdZLrgqQTpZBprKspdpLWFhavTA9G3dMk4vop7C0=
Subject key identifier:   47:36:52:CF:DE:2D:4F:36:00:1C:95:40:D5:03:45:4F:4C:5F:8E:53
Authority key identifier: 47:01:CF:2D:28:20:09:D6:C6:EA:F4:55:6F:B0:DC:1B:0D:55:57:EF
Certificate issuer:       /CN=A918DAC5/serialNumber=4701CF2D282009D6C6EAF4556FB0DC1B0D5557EF
Certificate serial:       010D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft
Manifest number:          0102
Signing time:             Wed 25 Mar 2026 05:26:30 +0000
Manifest this update:     Wed 25 Mar 2026 05:26:30 +0000
Manifest next update:     Wed 01 Apr 2026 05:26:30 +0000
Files and hashes:         1: RwHPLSggCdbG6vRVb7DcGw1VV-8.crl (hash: hnuWezb/FDdeGysvu+0CPeRmug6AhD/XvJBhGWwWDUc=)
                          2: ECB98052057511F1AF941BA6343D8C67.roa (hash: 29KxdPQG9ynzrMx8tx0q3SkLdwBifjAYKiCjhv/9CKE=)
                          3: 2EA5BC6EE71811F0B23E26476E6F56BC.roa (hash: lCmAQOrZ2kPo2z1WrTRR5Ga4bExHmOCUErDXwba52rk=)
                          4: D2D1A4B45BD711F089C6844AC4F9AE02.roa (hash: 7/PYR2UzhNdyaVe+j4NKzC7NkrhIUWRjvvNuf/ZKIrg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.crl
                          rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:26:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 269 (0x10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918DAC5, serialNumber=4701CF2D282009D6C6EAF4556FB0DC1B0D5557EF
        Validity
            Not Before: Mar 25 05:26:30 2026 GMT
            Not After : Apr  1 05:26:30 2026 GMT
        Subject: CN=69c37206-fd0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c7:c5:0d:94:05:8d:b1:dd:60:28:b5:2d:8b:
                    e2:55:d9:db:71:fe:fb:72:bf:8e:47:e3:22:0a:2d:
                    80:bf:3d:2e:30:40:d9:1c:e1:46:cd:7e:b7:4d:be:
                    44:eb:70:53:fa:13:ec:c0:28:54:33:59:e8:40:71:
                    86:17:79:8c:c0:16:af:b1:9f:93:f7:02:d7:31:78:
                    72:4e:87:d4:b3:f0:bf:b7:e6:ea:e3:71:ca:64:c1:
                    f8:0f:2c:26:7a:cc:81:eb:5e:8d:c0:6e:c5:16:6c:
                    44:79:0e:52:e4:51:30:7e:74:39:4d:9a:22:cf:26:
                    48:84:0e:6f:62:1c:0e:9b:6c:16:a7:55:0f:bb:ac:
                    8b:18:12:04:58:7c:64:52:81:cd:fe:69:73:86:46:
                    3d:9e:cd:83:72:dd:4a:91:44:36:33:44:3d:d5:b6:
                    03:38:37:dd:72:06:1c:8d:00:7d:50:57:ef:35:03:
                    de:cc:aa:88:59:72:40:a0:4c:04:d5:56:fb:1f:05:
                    a3:64:39:e8:17:75:73:4c:f2:70:59:7b:29:ab:a5:
                    64:4e:12:05:53:40:9c:a4:36:38:21:1f:31:46:5d:
                    6d:4b:74:96:bc:56:8f:db:42:4b:9c:fa:a3:d3:b3:
                    46:4c:2a:0d:d3:d1:3f:50:b8:3d:8d:73:5b:18:47:
                    4b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:36:52:CF:DE:2D:4F:36:00:1C:95:40:D5:03:45:4F:4C:5F:8E:53
            X509v3 Authority Key Identifier:
                keyid:47:01:CF:2D:28:20:09:D6:C6:EA:F4:55:6F:B0:DC:1B:0D:55:57:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:57:e7:95:e8:c6:e6:42:35:a6:2a:92:85:98:4b:11:be:70:
         31:2a:a9:7c:4a:39:2b:0b:b1:71:80:39:9a:9c:a7:f7:1f:80:
         22:8f:9f:d5:c8:ac:c4:e0:f7:8d:48:20:d2:df:f1:1b:65:0c:
         91:7e:6a:d8:df:1f:bf:e3:f5:d1:eb:ee:9d:7e:7e:c4:f7:85:
         fc:68:10:c4:ce:2e:36:87:78:cc:15:c6:20:29:28:1a:eb:4c:
         38:ee:0c:64:a0:f0:7b:40:f0:95:24:f4:f0:06:b4:d6:2c:d8:
         01:4b:84:21:ce:3b:2b:64:fb:62:18:56:37:52:bf:59:d9:4f:
         12:9c:c0:67:3f:d8:62:fc:6d:dc:96:a9:b2:bf:2b:0c:5e:82:
         5a:3d:ef:85:b8:f3:1a:9c:78:64:0a:a3:d2:16:9b:ca:4a:4e:
         34:c8:ad:b8:b0:38:3e:b2:60:3e:f4:d2:80:1f:ee:66:0d:88:
         86:6b:68:05:27:7f:74:87:a0:59:45:7c:c5:47:5b:29:d6:bf:
         f8:1a:6b:69:80:d5:22:93:75:8f:3f:40:87:5d:17:0e:d7:92:
         9b:e8:3c:ca:e4:d3:83:81:8f:0a:d0:d4:c9:32:a4:c5:60:43:
         44:d7:61:62:c9:1c:c1:3f:e4:19:af:fd:08:6d:42:4e:58:38:
         49:c7:ab:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:24:27 2026 by rpki-client