Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.mft
File:                     HA69woHQL52iTsEXS6nPGEWbk-A.mft (raw, json)
Hash identifier:          wLD7IvxnZEFUnTS0NXQiVgTikFMvqkmubPg+JnD6mG4=
Subject key identifier:   6E:64:89:05:CB:20:B5:1F:F4:56:5B:99:01:52:5C:41:FA:BC:FB:7E
Authority key identifier: 1C:0E:BD:C2:81:D0:2F:9D:A2:4E:C1:17:4B:A9:CF:18:45:9B:93:E0
Certificate issuer:       /CN=A9179D1F/serialNumber=1C0EBDC281D02F9DA24EC1174BA9CF18459B93E0
Certificate serial:       048A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA69woHQL52iTsEXS6nPGEWbk-A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.mft
Manifest number:          0484
Signing time:             Mon 27 Jul 2026 01:03:28 +0000
Manifest this update:     Mon 27 Jul 2026 01:03:27 +0000
Manifest next update:     Mon 03 Aug 2026 01:03:27 +0000
Files and hashes:         1: HA69woHQL52iTsEXS6nPGEWbk-A.crl (hash: B2RwFDK303BqGnwK57kT4oVAWvOnqUwssZK3aHqmKl4=)
                          2: ED816DEC95DA11EC993BD050C4F9AE02.roa (hash: fDOU5iTnJ9Tf4/wEKmB/yast8lh3cbWWkQ+UhkQy1GI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.crl
                          rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA69woHQL52iTsEXS6nPGEWbk-A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 01:03:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1162 (0x48a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179D1F, serialNumber=1C0EBDC281D02F9DA24EC1174BA9CF18459B93E0
        Validity
            Not Before: Jul 27 01:03:27 2026 GMT
            Not After : Aug  3 01:03:27 2026 GMT
        Subject: CN=6a66ae5f-2501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:65:b9:04:00:ac:36:e5:bb:ea:94:ed:55:34:
                    92:8a:4f:7b:1a:05:ad:76:ea:52:9f:19:79:d3:2c:
                    39:1b:2e:5a:d9:b1:bd:52:12:7d:b3:47:48:30:fa:
                    13:e5:92:f1:d8:34:ea:cd:33:43:ca:c8:d7:b6:4b:
                    48:c1:5b:dd:1e:20:d3:8e:d3:b7:0e:aa:db:18:06:
                    7c:b8:9c:3b:1b:a8:bb:56:4e:40:31:f6:a6:67:85:
                    12:39:e0:3e:ec:83:50:ca:a3:8f:3a:9f:1c:4b:6a:
                    33:79:97:fb:73:f7:39:04:67:aa:21:19:94:6f:ff:
                    fd:83:bd:47:3c:54:7e:e0:9e:b3:19:48:2c:ae:95:
                    59:58:e6:d4:01:1e:af:bc:5f:15:ca:ea:e1:50:50:
                    34:c6:80:01:48:44:f0:40:f2:0b:78:1d:3a:19:f7:
                    2c:7c:62:5a:35:51:d4:fb:59:02:2e:f6:60:e5:ad:
                    78:a6:42:0c:6e:ba:c0:96:1f:00:f8:49:72:93:35:
                    a7:7c:86:e1:52:2b:50:ea:ac:ae:9a:c5:2a:d1:78:
                    b3:61:4d:2b:7f:ec:a9:b7:ae:d3:8b:2f:5b:28:8e:
                    72:db:c4:8e:ef:86:a1:ee:e6:a7:c4:33:d6:a6:a0:
                    9e:be:15:a6:61:96:72:1a:9d:06:8a:81:a9:00:f8:
                    f0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:64:89:05:CB:20:B5:1F:F4:56:5B:99:01:52:5C:41:FA:BC:FB:7E
            X509v3 Authority Key Identifier:
                keyid:1C:0E:BD:C2:81:D0:2F:9D:A2:4E:C1:17:4B:A9:CF:18:45:9B:93:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA69woHQL52iTsEXS6nPGEWbk-A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:e4:ce:8f:cc:3e:c0:bb:f5:f4:a6:12:db:70:19:e9:c9:95:
         91:a6:37:20:d9:94:35:c7:ab:f8:ac:c7:91:78:90:b3:59:a8:
         e4:5b:11:80:07:ba:2c:69:23:84:5e:6c:8b:7f:ec:1c:5b:5f:
         e4:df:9d:b2:1b:af:98:fd:c2:f8:e2:70:31:d6:11:89:2f:ac:
         10:9b:e0:ef:11:cc:8a:29:99:79:8e:0a:e6:7c:7c:c0:0a:ad:
         b3:da:30:7a:9a:85:41:5e:af:ac:8e:b6:13:98:31:e8:29:22:
         a3:d0:91:5d:81:83:7b:11:f5:3f:fd:e4:2b:82:c4:73:ed:1f:
         73:f7:fd:8f:30:cd:e5:9c:0b:f2:9e:47:6f:b5:ef:0c:11:eb:
         5d:0b:2f:15:15:46:c7:86:87:32:16:0d:73:fb:96:2f:4a:e2:
         c1:73:87:a2:fd:b1:bc:80:c7:81:82:f8:14:f7:fc:c7:ed:52:
         03:86:ba:2f:01:d6:eb:e9:d3:d6:a0:ec:b3:d5:e5:2e:59:e7:
         45:52:92:2a:26:0f:49:83:77:8e:26:29:5b:a4:7b:58:58:e8:
         28:80:55:b8:c6:ff:4e:97:b6:15:75:dd:0e:db:c2:9b:04:00:
         ab:76:26:d4:64:5f:25:53:a9:25:f0:2c:e2:b4:28:15:26:be:
         bf:59:db:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:25:41 2026 by rpki-client