Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft
File:                     CDWHSXi6MJ7X2kZz53OdkyLyYps.mft (raw, json)
Hash identifier:          Mp8igSwFcRIoPSP5nNVo5Ah79h/F44u197du/TzLyoU=
Subject key identifier:   9D:71:F1:7C:1E:6C:7E:78:2B:AE:17:14:92:7E:4D:22:50:0E:4B:06
Authority key identifier: 08:35:87:49:78:BA:30:9E:D7:DA:46:73:E7:73:9D:93:22:F2:62:9B
Certificate issuer:       /CN=A917E00F/serialNumber=0835874978BA309ED7DA4673E7739D9322F2629B
Certificate serial:       0108
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CDWHSXi6MJ7X2kZz53OdkyLyYps.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft
Manifest number:          0104
Signing time:             Sun 31 May 2026 23:30:23 +0000
Manifest this update:     Sun 31 May 2026 23:30:23 +0000
Manifest next update:     Sun 07 Jun 2026 23:30:23 +0000
Files and hashes:         1: CDWHSXi6MJ7X2kZz53OdkyLyYps.crl (hash: P7/KrsGYaVx3xU0g/4SmpvVNX4BalV6SqihHZl7GA8M=)
                          2: 2DA549EAE23E11EFB267422EC4F9AE02.roa (hash: Mr9U/6ZYvZu9qU4Dm1rrpvinPfnT7chjtNPRoJwGxK8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.crl
                          rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CDWHSXi6MJ7X2kZz53OdkyLyYps.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Jun 2026 23:30:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 264 (0x108)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E00F, serialNumber=0835874978BA309ED7DA4673E7739D9322F2629B
        Validity
            Not Before: May 31 23:30:23 2026 GMT
            Not After : Jun  7 23:30:23 2026 GMT
        Subject: CN=6a1cc48f-bc50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7c:dc:4e:fe:1e:4f:77:39:fb:95:75:1a:6f:
                    e3:10:99:a8:bf:09:10:db:f3:ef:23:53:56:b2:19:
                    01:73:95:e0:38:ed:f5:c8:1b:49:fd:f2:ed:f3:fd:
                    cc:32:21:4b:b4:27:50:21:a3:80:32:f9:68:ad:86:
                    d1:7d:9f:cd:90:a3:8d:e5:a0:ef:1e:2c:80:ae:e3:
                    62:53:fc:9d:e2:73:ee:c6:a9:23:67:ec:0d:6c:72:
                    10:79:12:ac:91:a0:84:b9:67:43:86:a6:0f:2b:f2:
                    e7:3e:fb:f8:e1:2f:78:60:99:c0:72:08:46:99:fa:
                    4d:18:49:9e:88:e6:4b:90:0b:5f:1d:63:e2:28:7f:
                    10:f1:26:a9:da:ba:5e:58:9a:5c:e9:a3:0d:7e:b8:
                    6f:81:6d:f5:e4:3c:24:c7:ab:a6:b6:4e:0b:6c:0e:
                    a1:4c:75:cb:b8:e4:aa:b0:45:e8:a0:50:72:c8:d8:
                    9f:a6:57:6e:b5:6b:a6:8c:14:ed:87:e1:27:16:a6:
                    86:74:88:d2:55:15:45:b0:5f:7f:6f:0f:9b:52:30:
                    41:2f:46:b0:ed:aa:76:45:cd:eb:ee:2a:c1:80:98:
                    64:31:14:14:bb:be:06:e1:43:92:2e:ba:3a:9a:88:
                    8e:41:1a:b3:9f:85:73:7d:6f:ef:90:3a:98:55:37:
                    0b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:71:F1:7C:1E:6C:7E:78:2B:AE:17:14:92:7E:4D:22:50:0E:4B:06
            X509v3 Authority Key Identifier:
                keyid:08:35:87:49:78:BA:30:9E:D7:DA:46:73:E7:73:9D:93:22:F2:62:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CDWHSXi6MJ7X2kZz53OdkyLyYps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:ac:17:6b:9b:e5:45:96:80:5e:fd:91:f2:64:ec:05:57:62:
         21:a1:2e:65:41:15:2d:3f:93:1c:de:74:9d:0e:a2:0d:4d:47:
         78:e8:b5:04:b2:41:68:d5:68:79:0c:fa:40:5d:18:a3:29:01:
         83:fb:07:6e:4d:d2:b2:cd:07:fc:fa:31:d2:8b:05:d7:6e:3a:
         1f:47:b9:77:c1:a4:84:e3:2b:1d:94:15:86:75:49:1f:02:84:
         ec:c3:41:57:cf:8b:e8:18:71:6f:ee:84:5c:c1:f3:6d:00:ba:
         d1:b4:14:3d:fb:f9:ab:b1:9c:79:e3:99:54:30:02:f9:db:56:
         7b:6a:e4:19:ce:23:50:cc:9c:ef:a6:a8:6b:a3:71:2c:a9:99:
         45:ee:32:29:48:21:e4:7d:72:2d:90:a7:f9:35:06:8d:4d:8c:
         92:f9:d2:7b:3d:6a:3c:03:a2:d5:d4:ec:c6:d7:2c:d6:d6:70:
         c3:a6:40:36:e0:f2:22:b8:d1:ed:25:ff:a7:dd:c3:30:70:49:
         b2:c0:ac:a7:8d:1e:7a:c4:6e:2a:41:39:44:53:39:70:b6:7b:
         de:98:f2:4f:b3:db:1d:3c:35:e9:3d:44:a0:5f:f9:21:cb:95:
         2f:4f:c8:31:7e:62:64:76:0c:6b:02:8a:3c:04:7b:0e:56:cc:
         5e:0a:be:61
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0UwMEYxMTAvBgNVBAUTKDA4MzU4NzQ5NzhCQTMwOUVEN0RBNDY3M0U3NzM5RDkz
MjJGMjYyOUIwHhcNMjYwNTMxMjMzMDIzWhcNMjYwNjA3MjMzMDIzWjAYMRYwFAYD
VQQDEw02YTFjYzQ4Zi1iYzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx3zcTv4eT3c5+5V1Gm/jEJmovwkQ2/PvI1NWshkBc5XgOO31yBtJ/fLt8/3M
MiFLtCdQIaOAMvlorYbRfZ/NkKON5aDvHiyAruNiU/yd4nPuxqkjZ+wNbHIQeRKs
kaCEuWdDhqYPK/LnPvv44S94YJnAcghGmfpNGEmeiOZLkAtfHWPiKH8Q8Sap2rpe
WJpc6aMNfrhvgW315Dwkx6umtk4LbA6hTHXLuOSqsEXooFByyNifpldutWumjBTt
h+EnFqaGdIjSVRVFsF9/bw+bUjBBL0aw7ap2Rc3r7irBgJhkMRQUu74G4UOSLro6
moiOQRqzn4VzfW/vkDqYVTcLGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ1x8Xwe
bH54K64XFJJ+TSJQDksGMB8GA1UdIwQYMBaAFAg1h0l4ujCe19pGc+dznZMi8mKb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTAwRi83RDJCMURGMEQ3
RDAxMUVGOUVGQzkxMERDNEY5QUUwMi9DRFdIU1hpNk1KN1gya1p6NTNPZGt5THlZ
cHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0NEV0hTWGk2TUo3WDJrWno1M09ka3lMeVlwcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTAwRi83RDJCMURGMEQ3RDAxMUVGOUVGQzkxMERDNEY5QUUwMi9DRFdIU1hpNk1K
N1gya1p6NTNPZGt5THlZcHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAf6wXa5vlRZaAXv2R8mTsBVdiIaEuZUEVLT+THN50nQ6iDU1HeOi1BLJBaNVo
eQz6QF0YoykBg/sHbk3Sss0H/Pox0osF1246H0e5d8GkhOMrHZQVhnVJHwKE7MNB
V8+L6Bhxb+6EXMHzbQC60bQUPfv5q7GceeOZVDAC+dtWe2rkGc4jUMyc76aoa6Nx
LKmZRe4yKUgh5H1yLZCn+TUGjU2MkvnSez1qPAOi1dTsxtcs1tZww6ZANuDyIrjR
7SX/p93DMHBJssCsp40eesRuKkE5RFM5cLZ73pjyT7PbHTw16T1EoF/5IcuVL0/I
MX5iZHYMawKKPAR7DlbMXgq+YQ==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:18:59 2026 by rpki-client