Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.mft
File:                     HA69woHQL52iTsEXS6nPGEWbk-A.mft (raw, json)
Hash identifier:          SwCXvY0LohOfWH7z4Bcem+OJ5vxYI/P4qgbGpYJDhFo=
Subject key identifier:   32:74:F5:2C:1C:B1:94:C0:D5:77:BD:A1:7C:C7:33:32:AD:BA:D5:B5
Authority key identifier: 1C:0E:BD:C2:81:D0:2F:9D:A2:4E:C1:17:4B:A9:CF:18:45:9B:93:E0
Certificate issuer:       /CN=A9179D1F/serialNumber=1C0EBDC281D02F9DA24EC1174BA9CF18459B93E0
Certificate serial:       04A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA69woHQL52iTsEXS6nPGEWbk-A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.mft
Manifest number:          04A2
Signing time:             Tue 22 Sep 2026 23:34:24 +0000
Manifest this update:     Tue 22 Sep 2026 23:34:24 +0000
Manifest next update:     Tue 29 Sep 2026 23:34:24 +0000
Files and hashes:         1: HA69woHQL52iTsEXS6nPGEWbk-A.crl (hash: nhPza2267LUTwSM/3FN7Wyc7lFDkhtwOfpnv7//t1VA=)
                          2: ED816DEC95DA11EC993BD050C4F9AE02.roa (hash: fDOU5iTnJ9Tf4/wEKmB/yast8lh3cbWWkQ+UhkQy1GI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.crl
                          rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA69woHQL52iTsEXS6nPGEWbk-A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 23:34:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1192 (0x4a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179D1F, serialNumber=1C0EBDC281D02F9DA24EC1174BA9CF18459B93E0
        Validity
            Not Before: Sep 22 23:34:24 2026 GMT
            Not After : Sep 29 23:34:24 2026 GMT
        Subject: CN=6ab31080-c994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:59:3a:53:c3:27:cd:4a:71:be:c8:f3:0a:68:
                    bb:92:17:5d:69:c4:68:98:aa:1e:54:93:9f:b2:c8:
                    38:b5:a8:21:20:e0:56:bd:84:87:4e:61:77:83:d6:
                    a7:ad:68:98:78:36:62:2f:dd:c1:0f:49:ee:06:cb:
                    46:2e:27:32:46:32:06:ee:4e:b6:ea:34:0e:d7:e9:
                    de:ab:9a:74:1f:13:97:07:4f:ef:e6:d6:80:12:98:
                    83:a3:26:b4:e6:30:31:db:92:ea:45:c6:8e:f3:b2:
                    81:3c:9e:c9:df:92:cd:14:d7:7c:d3:c2:43:74:3e:
                    0f:34:74:5e:12:3e:d5:86:67:b5:af:bc:c9:25:63:
                    e0:6f:03:91:2e:2b:46:5f:84:d4:6b:d0:8f:1a:27:
                    5b:60:3e:9d:8f:da:a2:eb:3f:18:e0:b7:a3:b2:3e:
                    0f:3e:5c:d6:c7:d1:e9:9c:ca:87:9f:fe:af:df:43:
                    dd:26:2d:a4:2d:47:30:26:b8:b8:c0:dd:7f:70:63:
                    7d:ae:cf:a8:e6:6c:d7:ae:42:3a:15:8a:21:41:65:
                    7b:cc:b5:ca:26:2d:cd:ee:11:03:19:37:52:7c:ac:
                    ba:74:3b:4f:d2:7e:fc:0f:7f:ed:2f:7e:82:99:e1:
                    99:c9:18:e4:9f:d7:95:35:66:a2:cd:d3:bf:94:8b:
                    3d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:74:F5:2C:1C:B1:94:C0:D5:77:BD:A1:7C:C7:33:32:AD:BA:D5:B5
            X509v3 Authority Key Identifier:
                keyid:1C:0E:BD:C2:81:D0:2F:9D:A2:4E:C1:17:4B:A9:CF:18:45:9B:93:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA69woHQL52iTsEXS6nPGEWbk-A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:9b:54:8f:83:2e:f1:04:1a:06:76:25:85:b1:45:3d:e7:f2:
         70:21:69:69:2a:da:42:a9:b9:d5:2d:93:0b:15:6b:c8:3e:c2:
         03:61:86:3b:b0:a3:a1:46:42:8b:a1:11:54:72:15:fe:66:75:
         34:7c:c8:10:1e:a6:1c:c5:94:56:9e:5f:56:6e:60:ab:cb:0c:
         4c:02:a9:c9:7f:cf:d2:ce:bb:90:8b:4d:95:27:8b:b3:f1:9e:
         47:0b:84:c5:b9:2e:f8:99:da:09:90:01:66:cf:a3:26:20:4d:
         da:79:3d:e4:79:54:fd:60:c8:53:14:72:ae:08:5a:e8:e9:0c:
         bc:7a:04:06:07:64:1c:2c:8c:c2:74:ab:03:0a:69:c7:41:63:
         85:3a:3d:a7:e0:52:7e:d6:d1:ff:65:b0:72:31:45:7d:58:df:
         11:f0:9a:de:1e:22:78:f3:ac:cd:07:65:98:cb:c8:9f:98:7a:
         30:61:92:29:a8:fb:4a:56:8f:00:93:d1:07:d0:84:0e:3c:82:
         bd:20:de:d6:c9:e7:f7:ef:7e:d6:75:79:75:d8:27:78:70:79:
         ee:31:6c:fc:45:4f:0b:c5:c8:0c:bb:be:8a:91:55:6f:62:da:
         6e:62:c3:28:1d:9f:8c:67:a0:aa:4e:07:e8:47:ce:d0:68:0e:
         26:de:a3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:30:16 2026 by rpki-client