Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft
File:                     HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft (raw, json)
Hash identifier:          8kdV+nl5rEetqkMQQ/ZAo+4aStxL+1ySGMUrHEgkkOg=
Subject key identifier:   CD:A7:B9:75:C5:E2:33:7E:0F:AC:3D:E0:FF:74:3E:6D:C5:68:13:E5
Authority key identifier: 1D:63:41:6C:47:3B:0C:09:12:BD:AB:37:10:27:01:09:5F:C6:C3:5A
Certificate issuer:       /CN=A91707D0/serialNumber=1D63416C473B0C0912BDAB37102701095FC6C35A
Certificate serial:       0138
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft
Manifest number:          0138
Signing time:             Mon 09 Nov 2026 05:42:13 +0000
Manifest this update:     Mon 09 Nov 2026 05:42:12 +0000
Manifest next update:     Mon 16 Nov 2026 05:42:12 +0000
Files and hashes:         1: HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl (hash: Fgg1YsNduoBUrukXZ7N0Pvqg3tFM2GK7/kIvVBTQawg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl
                          rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Nov 2026 05:42:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312 (0x138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91707D0, serialNumber=1D63416C473B0C0912BDAB37102701095FC6C35A
        Validity
            Not Before: Nov  9 05:42:12 2026 GMT
            Not After : Nov 16 05:42:12 2026 GMT
        Subject: CN=6af15d34-61c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:64:31:22:2a:c4:14:9b:9b:04:06:81:88:cc:
                    1a:94:3a:dc:b6:69:b1:f3:47:45:46:c9:d0:74:d5:
                    97:48:1d:61:64:40:19:f5:3f:1f:5b:06:64:31:0b:
                    3d:a1:5e:5e:2a:85:2f:0c:2d:45:e3:28:9c:81:c1:
                    f0:d3:46:b2:84:f5:fc:60:15:8c:70:c6:3b:63:a1:
                    81:44:55:94:00:1a:32:bc:42:4a:2a:9d:e4:2f:54:
                    2c:36:f2:e6:3a:36:50:c8:b1:df:f7:6f:5e:e4:88:
                    89:0a:ec:d9:18:bb:a0:db:19:0f:bb:4d:d4:d7:5d:
                    82:7c:3c:dc:cb:dd:bc:83:df:a2:24:1e:72:c0:96:
                    a8:21:fe:b9:77:b1:80:7c:38:ba:12:e4:4d:0e:26:
                    3b:be:c9:75:24:76:1e:68:29:b6:b4:40:84:d1:87:
                    14:db:3e:16:f4:2c:e0:1c:28:50:29:24:55:a3:a7:
                    2d:0d:46:a6:ce:a1:0a:00:10:87:83:45:55:28:71:
                    c4:7e:21:1f:85:1b:37:34:88:e3:4f:49:84:02:cf:
                    29:3e:39:4b:6e:34:85:1a:ea:55:33:e2:00:36:dc:
                    55:33:4c:52:c7:44:90:1c:16:86:8f:aa:bb:79:c0:
                    46:8a:69:a1:7e:d8:10:9b:81:f8:82:33:87:a6:82:
                    fc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A7:B9:75:C5:E2:33:7E:0F:AC:3D:E0:FF:74:3E:6D:C5:68:13:E5
            X509v3 Authority Key Identifier:
                keyid:1D:63:41:6C:47:3B:0C:09:12:BD:AB:37:10:27:01:09:5F:C6:C3:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:ce:46:27:b8:59:da:d7:72:1a:cc:0a:d1:8a:ab:bf:0c:d2:
         7b:c6:24:c6:94:f8:2e:7d:6a:be:41:9b:3d:78:bb:5e:26:e3:
         70:6d:1a:ee:8f:6c:52:1f:b3:90:2a:a0:96:f1:4e:73:91:e6:
         cd:34:4a:d2:40:62:f4:d8:e9:5f:73:ff:55:64:d3:f2:8c:a2:
         a4:26:10:89:8c:e4:ad:6e:2c:f1:1e:77:68:78:55:6f:f6:2f:
         3e:9e:2d:79:d7:ef:1c:03:d7:08:ed:25:3a:77:ba:c5:69:c9:
         fc:b4:3a:35:3c:75:19:88:24:1c:f2:42:19:8a:d2:73:3e:27:
         b1:50:e4:8f:77:ce:2f:bb:d6:7e:a6:60:b0:6c:2d:b9:d9:d7:
         0c:d5:98:ea:87:0b:ec:02:07:ac:65:51:ff:4e:38:45:73:bc:
         e2:67:69:1c:bf:29:17:f1:31:79:ce:69:d4:3e:c5:89:57:c9:
         3f:a7:63:f7:13:48:8d:4d:4e:f9:5a:6b:bc:77:69:6a:7c:3b:
         dc:f1:c5:61:11:d7:e9:18:e8:5b:6e:c1:c1:b6:2a:18:de:db:
         f0:bb:c9:36:77:16:83:e6:79:5b:0d:26:56:d9:d3:07:a0:be:
         9a:d8:11:9b:51:b3:67:09:da:12:88:0e:d7:9b:36:e3:85:27:
         fa:f4:7d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 06:55:25 2026 by rpki-client