Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.mft
File:                     hwGGtlfRGymKhLAkIO504fu1woI.mft (raw, json)
Hash identifier:          Qu+YUtnruO1ifkqOQmhO0qJeYhsrCl8EsdjUU3BJqig=
Subject key identifier:   20:BA:DB:11:B6:FD:84:74:B7:22:A0:DD:97:34:7F:81:48:8E:1A:43
Authority key identifier: 87:01:86:B6:57:D1:1B:29:8A:84:B0:24:20:EE:74:E1:FB:B5:C2:82
Certificate issuer:       /CN=A9191885/serialNumber=870186B657D11B298A84B02420EE74E1FBB5C282
Certificate serial:       01A1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hwGGtlfRGymKhLAkIO504fu1woI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.mft
Manifest number:          0198
Signing time:             Fri 17 Apr 2026 04:00:34 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:34 +0000
Manifest next update:     Fri 24 Apr 2026 04:00:34 +0000
Files and hashes:         1: hwGGtlfRGymKhLAkIO504fu1woI.crl (hash: z6X3vNthN2X22jEPsEgTS5QGG/E5tNU/nsiCdzYJv00=)
                          2: 8E31656CC9FF11EEA53CA25CC4F9AE02.roa (hash: nklLe8rD44I5yJJy7aHPD+A/b+2jYTeXcDSJkM8vc6I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.crl
                          rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hwGGtlfRGymKhLAkIO504fu1woI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 417 (0x1a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191885, serialNumber=870186B657D11B298A84B02420EE74E1FBB5C282
        Validity
            Not Before: Apr 17 04:00:34 2026 GMT
            Not After : Apr 24 04:00:34 2026 GMT
        Subject: CN=69e1b062-fac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c1:9a:d6:29:e9:7d:50:eb:db:68:84:a7:5b:
                    74:cd:50:5b:2c:5b:2a:f2:95:fc:f7:52:45:a2:75:
                    af:3d:c6:28:74:ab:26:63:4c:f5:1c:05:4d:9e:93:
                    0e:e0:4a:7d:7c:f1:76:72:fd:bd:87:f6:47:76:0e:
                    1f:be:7c:a8:7f:a0:41:d9:ae:2b:3b:2c:91:7a:cb:
                    69:fb:93:cf:e0:e1:35:f7:f6:62:30:88:6f:7c:03:
                    84:f3:58:e6:b5:b0:61:b2:be:ef:e0:42:19:96:5f:
                    06:26:31:11:f3:d1:f1:71:67:bd:d4:3a:f8:97:e5:
                    5c:82:d9:ba:c1:96:66:ce:29:e4:82:91:bb:f8:87:
                    54:88:12:5c:8a:9d:c8:54:3c:4a:24:50:50:69:21:
                    04:d0:25:6f:89:07:52:65:7f:4f:3a:18:92:19:0b:
                    dc:b4:75:ee:e6:03:3f:f0:03:4d:24:6b:5c:93:5b:
                    a1:29:fa:0b:d3:1a:f7:dc:02:4c:00:33:4c:5c:ab:
                    aa:58:dc:b1:ed:55:ca:75:d6:f4:91:6b:eb:6d:fa:
                    16:1b:2f:51:53:0c:7c:fb:d4:40:a4:3d:37:f2:28:
                    92:66:f9:13:26:21:ab:bb:d5:87:fb:8a:4a:15:0e:
                    9e:ad:3f:6a:b4:f7:36:56:65:6c:82:78:30:1a:be:
                    81:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:BA:DB:11:B6:FD:84:74:B7:22:A0:DD:97:34:7F:81:48:8E:1A:43
            X509v3 Authority Key Identifier:
                keyid:87:01:86:B6:57:D1:1B:29:8A:84:B0:24:20:EE:74:E1:FB:B5:C2:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hwGGtlfRGymKhLAkIO504fu1woI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:4a:24:c7:f2:ea:59:6a:6c:ce:09:68:40:ee:a1:b8:e5:91:
         3e:05:cc:8f:f3:3c:ac:8b:d7:9a:30:28:03:8d:7d:86:ee:03:
         73:9c:0e:95:41:df:d1:e4:ed:7c:43:a3:07:59:bc:50:ee:11:
         72:82:42:d8:3f:dd:6b:d9:3c:6f:51:9d:ea:8a:db:12:0b:fb:
         68:5e:99:6f:c4:8a:cf:e6:f0:cd:2a:dc:57:c6:34:fe:cc:97:
         59:59:4b:fe:2c:93:1f:8c:38:41:ec:a3:dc:1a:50:8e:0d:29:
         72:76:95:4d:55:33:3d:e7:92:5c:c6:84:92:dd:c9:07:5e:ec:
         00:8e:3e:0a:f0:ce:af:8b:36:2e:57:54:58:db:2b:1e:22:93:
         c8:ea:db:fc:fc:e1:e7:fa:ca:06:bb:a3:12:24:66:1d:ef:91:
         f3:75:b9:de:57:d0:8e:45:37:ef:85:ba:72:13:44:ba:94:ef:
         80:cc:3b:83:3c:3a:a5:9d:c0:69:e9:21:e8:4e:32:bd:09:c8:
         65:2f:86:c7:5e:a9:d6:83:df:33:da:6e:40:0e:8f:25:8a:79:
         63:b0:66:ed:21:cc:de:b3:14:9e:3e:e6:15:b4:8e:da:01:07:
         30:1b:40:e2:37:7f:31:86:e2:26:e6:d3:2a:85:3a:ed:74:d4:
         5d:5c:c3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:26:08 2026 by rpki-client