Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft
File:                     HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft (raw, json)
Hash identifier:          Rphnpid6EzBJMxnFR20ki/BAOnKqn29+X+YlSOBAbdw=
Subject key identifier:   81:74:76:44:F0:58:58:0D:BC:90:30:DA:32:15:D7:08:1E:D9:DB:82
Authority key identifier: 1D:63:41:6C:47:3B:0C:09:12:BD:AB:37:10:27:01:09:5F:C6:C3:5A
Certificate issuer:       /CN=A91707D0/serialNumber=1D63416C473B0C0912BDAB37102701095FC6C35A
Certificate serial:       0102
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft
Manifest number:          0102
Signing time:             Mon 27 Jul 2026 08:14:36 +0000
Manifest this update:     Mon 27 Jul 2026 08:14:35 +0000
Manifest next update:     Mon 03 Aug 2026 08:14:35 +0000
Files and hashes:         1: HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl (hash: WznmSEEuHNbbZQFZp6oF9+G/zMM5QREcsWq3VuJ6USo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl
                          rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:14:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91707D0, serialNumber=1D63416C473B0C0912BDAB37102701095FC6C35A
        Validity
            Not Before: Jul 27 08:14:35 2026 GMT
            Not After : Aug  3 08:14:35 2026 GMT
        Subject: CN=6a67136c-67fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:04:d3:5c:d1:48:7e:65:1b:ca:ed:42:f1:34:
                    b2:18:3b:1d:5e:7a:96:6f:6b:50:1a:bc:62:c2:df:
                    49:fe:73:a9:52:46:eb:2c:d0:2c:97:29:49:06:77:
                    d3:20:20:b6:68:68:32:6c:f6:81:50:87:e8:bd:47:
                    ad:27:c2:5e:53:ad:12:1b:1d:43:da:52:0d:f1:60:
                    dd:07:5f:82:07:da:b9:6f:c5:e5:63:6f:aa:80:b3:
                    49:b6:c7:64:31:df:ae:a8:9a:f6:4e:bd:e8:7f:80:
                    07:ed:8e:1d:7d:94:51:8f:c8:b6:47:77:48:90:0c:
                    4e:58:f0:7f:9a:8d:4e:b7:87:e7:ac:ca:bd:82:17:
                    11:89:c8:22:63:fd:f6:ac:1d:65:8e:ee:8d:5c:9a:
                    ad:f9:e6:5d:6a:84:42:90:c8:dc:ed:4f:03:57:75:
                    df:a3:c9:7e:c8:d5:4f:5c:83:2a:ea:91:ee:ff:60:
                    ec:b6:a8:f4:07:b5:7a:47:a8:67:f3:9b:b1:0c:51:
                    4b:99:dd:12:c8:49:b4:52:5a:ea:20:c9:4c:d7:f3:
                    87:f8:e6:1b:70:56:5b:62:46:44:1b:46:89:42:3e:
                    34:fc:77:2c:d9:fd:cd:2f:aa:08:20:86:04:ed:c1:
                    16:d5:30:80:1e:af:76:d0:4f:2c:1e:73:a8:42:f8:
                    63:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:74:76:44:F0:58:58:0D:BC:90:30:DA:32:15:D7:08:1E:D9:DB:82
            X509v3 Authority Key Identifier:
                keyid:1D:63:41:6C:47:3B:0C:09:12:BD:AB:37:10:27:01:09:5F:C6:C3:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:13:59:26:38:a9:bf:28:4f:c6:3e:c1:60:9d:f2:ed:ee:ab:
         1c:3e:a6:1f:b4:c9:6e:62:ef:91:ee:d1:f1:a4:42:64:c5:38:
         8e:09:71:70:e1:e3:43:5c:95:41:29:93:22:0f:46:e3:f4:c7:
         94:bc:d7:ff:0c:ae:d8:c7:8d:0a:65:12:d9:05:f8:d7:69:f5:
         3d:09:f9:da:87:be:c4:26:55:f5:7a:55:66:c0:ce:fa:8a:00:
         4d:11:9f:c5:8a:02:c8:cb:b2:74:68:c1:08:61:cb:20:55:a9:
         aa:98:d3:d8:15:9e:19:bc:ba:15:4d:2b:76:b0:c7:17:2a:b7:
         e1:f1:74:d4:08:cf:e9:eb:e6:46:0b:8e:51:b3:ba:91:55:fc:
         c2:77:27:ea:3a:55:68:cf:ec:8d:c7:5f:2b:a3:9e:41:a7:a6:
         80:61:94:2d:9d:65:36:47:6d:65:3d:64:93:bb:d2:a9:99:b2:
         d6:bd:d2:b3:6a:b3:5c:1c:3e:03:5b:43:3b:85:c3:76:c7:73:
         da:36:65:4f:8d:86:f8:e5:db:ab:f0:67:fb:b4:b3:ca:ed:d5:
         a3:0d:01:d5:b2:5f:d6:6b:a6:01:81:07:6f:13:a5:19:df:84:
         70:cf:49:34:eb:b3:94:f6:ef:ce:bf:c2:46:77:d0:76:2f:b4:
         c8:c1:a3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:35:11 2026 by rpki-client