Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft
File:                     CDWHSXi6MJ7X2kZz53OdkyLyYps.mft (raw, json)
Hash identifier:          f/rxDITWQRmKbSlU2Uzs9YIY4u3M80FS481frowgm20=
Subject key identifier:   09:F3:78:A1:77:AF:CB:F3:DF:24:E0:C4:85:7A:9B:A1:B1:12:67:9C
Authority key identifier: 08:35:87:49:78:BA:30:9E:D7:DA:46:73:E7:73:9D:93:22:F2:62:9B
Certificate issuer:       /CN=A917E00F/serialNumber=0835874978BA309ED7DA4673E7739D9322F2629B
Certificate serial:       F1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CDWHSXi6MJ7X2kZz53OdkyLyYps.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft
Manifest number:          ED
Signing time:             Thu 16 Apr 2026 22:49:25 +0000
Manifest this update:     Thu 16 Apr 2026 22:49:25 +0000
Manifest next update:     Thu 23 Apr 2026 22:49:25 +0000
Files and hashes:         1: CDWHSXi6MJ7X2kZz53OdkyLyYps.crl (hash: m+DjJHzZbsV6KSP2iglpEBv07ssS59G1bE/2AwaYCQk=)
                          2: 2DA549EAE23E11EFB267422EC4F9AE02.roa (hash: Mr9U/6ZYvZu9qU4Dm1rrpvinPfnT7chjtNPRoJwGxK8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.crl
                          rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CDWHSXi6MJ7X2kZz53OdkyLyYps.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:49:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241 (0xf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E00F, serialNumber=0835874978BA309ED7DA4673E7739D9322F2629B
        Validity
            Not Before: Apr 16 22:49:25 2026 GMT
            Not After : Apr 23 22:49:25 2026 GMT
        Subject: CN=69e16775-a972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c7:eb:0b:36:ce:ac:0d:c7:4e:ff:1f:56:79:
                    b4:53:37:08:89:9c:f4:63:56:2e:2d:fe:e6:65:01:
                    4c:3c:e2:8b:5f:f9:4f:f1:d2:78:4d:3a:40:21:8b:
                    05:4b:3b:2b:97:03:4e:37:de:a5:8d:20:7e:c0:31:
                    d8:f3:c9:09:18:b6:b7:43:1f:9a:5e:9b:d7:ff:b6:
                    df:ef:a7:0a:12:31:24:43:a0:af:e4:7a:6b:6d:51:
                    38:62:6b:3d:f0:a8:0e:e2:f5:cd:2d:bc:78:84:bb:
                    bd:db:6f:87:ed:0c:e4:3d:71:f6:a4:a1:16:2a:72:
                    de:fb:d3:64:4d:c9:0d:1c:26:5a:60:e5:e1:02:86:
                    8b:d6:9d:2f:39:5e:a6:ec:17:f6:2a:50:3e:2d:96:
                    e4:6e:58:37:64:a7:74:de:42:00:d8:f6:ca:3f:ca:
                    16:b0:1a:f2:da:5b:1b:96:af:e0:80:0a:04:44:cf:
                    bf:7d:fe:36:05:5b:42:d7:5a:fe:4e:84:6f:62:97:
                    b1:cf:dc:77:80:43:f3:19:94:15:07:ca:d2:e0:e8:
                    b2:a0:df:96:4b:15:cd:54:ee:b4:d4:31:f9:38:89:
                    e7:6c:44:f8:7a:5a:2a:6d:df:00:ff:69:6f:be:11:
                    61:ce:2a:6c:bd:75:c0:ff:1d:09:2c:c7:ee:c2:ad:
                    81:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F3:78:A1:77:AF:CB:F3:DF:24:E0:C4:85:7A:9B:A1:B1:12:67:9C
            X509v3 Authority Key Identifier:
                keyid:08:35:87:49:78:BA:30:9E:D7:DA:46:73:E7:73:9D:93:22:F2:62:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CDWHSXi6MJ7X2kZz53OdkyLyYps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:61:50:4d:78:ef:46:db:ba:fe:5e:50:62:a2:e3:e6:08:26:
         80:7f:8d:ad:a6:7e:73:43:37:9d:be:23:95:27:60:c8:eb:ed:
         0d:80:81:0d:4b:04:2a:fd:40:c7:a4:c0:59:94:d5:32:80:f3:
         0c:cf:d6:39:8d:84:05:df:c3:4b:12:bc:69:a5:d1:16:b8:06:
         06:b9:ae:8f:49:22:c6:9f:38:bb:91:28:0d:f2:4d:88:7d:21:
         94:fd:22:79:11:63:0e:6b:a3:6d:f9:e5:8e:d3:3c:22:c6:29:
         e7:34:30:7d:fa:6c:3b:14:a9:4f:43:54:cd:00:de:6a:29:43:
         71:3a:58:d9:14:64:5b:f1:94:e7:cf:92:5e:ef:fa:69:de:12:
         bc:8e:d7:73:38:58:f4:10:0c:1c:a7:44:43:04:cd:a4:35:73:
         1d:77:b5:fe:59:e4:a3:5f:96:21:d6:ee:c0:e8:23:31:41:e4:
         ca:ea:6c:eb:8c:6e:ef:b2:e6:51:d1:63:3e:6e:52:0f:45:ea:
         cb:05:c7:9b:eb:95:31:f1:d0:68:61:f7:e7:2e:da:81:7a:85:
         87:b9:c4:c8:af:b3:5a:d4:1c:72:65:ac:07:74:b7:97:3a:e3:
         36:a4:7c:6f:47:f0:bf:d4:2b:06:7d:77:fa:9d:ca:b2:c5:0f:
         62:b1:56:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:17:06 2026 by rpki-client