Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft
File:                     HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft (raw, json)
Hash identifier:          5I+B9FXOTAqszWclM8CfnhQrJpxc8J/dLvbcXjzP+jI=
Subject key identifier:   27:7A:4E:48:B8:AC:CF:5E:91:1B:DF:BF:9E:BA:13:B9:11:CA:EF:14
Authority key identifier: 1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB
Certificate issuer:       /CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB
Certificate serial:       3631
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft
Manifest number:          35DC
Signing time:             Sun 04 Oct 2026 14:39:33 +0000
Manifest this update:     Sun 04 Oct 2026 14:39:33 +0000
Manifest next update:     Sun 11 Oct 2026 14:39:33 +0000
Files and hashes:         1: HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl (hash: 7pce1Vcxs9bekybUJbJZdSj67m9f+HtFo92ZBePzUSU=)
                          2: 2B622E1282F511EF9090F681C4F9AE02.roa (hash: JS+c9sL3L+WCOEhTvnP+XpOyBuJ/6R/u9Qm2AM/cHpk=)
                          3: C2DFDA20DE0611EF9DC6A135C4F9AE02.roa (hash: vKe+s1AjVTC2tWxyer0iCi6sE34mb63o5/xf7YiZBp8=)
                          4: B403FEF04F7A11F1B793142BCC833773.roa (hash: IKEvB9HOIvcPiPrVCDKQordv8ZQb5XOZI7Vg1pWDv1I=)
                          5: 7BC92742ADA611F18F55423F6E11F970.roa (hash: ai7pgQHXoz7YgQfjtoOzeruV6ucLwGuomU9kU9c7KlM=)
                          6: 0FCDEA68113B11F09E3A4157C4F9AE02.roa (hash: t4/ezhxy8Yfpe9cG1UobV4ijgY6RGmsFly/MX9OY10A=)
                          7: 725D1810BD0E11EA8CEF0681C4F9AE02.roa (hash: 4K+Xr5cEWGU3CtoxwVoZf3ocwZzyt3Pe/yTV1VWV7A0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl
                          rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 14:39:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13873 (0x3631)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0770, serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB
        Validity
            Not Before: Oct  4 14:39:33 2026 GMT
            Not After : Oct 11 14:39:33 2026 GMT
        Subject: CN=6ac26525-a8c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6e:45:3b:93:f3:99:c9:0e:2d:d5:43:b8:d9:
                    88:da:d3:92:a2:e6:68:42:e6:1b:3a:01:94:67:96:
                    38:ff:af:e1:3f:5e:05:ce:f8:99:4a:c1:cf:c8:cb:
                    a1:a8:72:a6:7c:0a:57:76:47:58:96:0e:af:42:e6:
                    4c:33:37:2d:af:0a:52:83:c2:f3:ba:94:51:fd:16:
                    af:37:54:2b:c4:cd:5f:7d:9a:67:1c:0e:03:70:4d:
                    f3:3a:d4:89:27:b5:fd:ce:db:2a:ba:62:f6:91:71:
                    d1:f0:c9:20:37:e1:27:ba:79:d1:43:4b:8f:b9:6e:
                    50:6a:f3:1b:e7:8f:69:b5:21:9e:a6:ce:8d:0a:00:
                    9d:7d:e2:f0:34:cb:58:6e:7c:13:69:d0:21:f4:58:
                    5f:a9:64:f0:3d:79:dd:35:32:16:eb:c3:de:fe:2a:
                    da:2d:2d:f0:c3:20:8b:d8:97:d0:41:85:ee:0a:67:
                    38:ae:37:ed:47:f4:81:6e:0f:43:7d:00:e7:e1:ec:
                    8a:54:8e:e8:7d:52:d2:d6:94:32:85:95:e8:4b:43:
                    ca:46:2d:46:c3:d4:5c:ac:34:b0:4f:38:21:51:af:
                    bd:ec:25:9e:1c:d8:19:2c:f8:bd:f0:1c:83:9f:b9:
                    cf:11:a4:38:cc:7c:9c:78:99:7e:fd:09:d0:bf:20:
                    98:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:7A:4E:48:B8:AC:CF:5E:91:1B:DF:BF:9E:BA:13:B9:11:CA:EF:14
            X509v3 Authority Key Identifier:
                keyid:1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:cc:ab:ca:5c:a7:02:20:d4:49:ac:bd:9f:ae:bb:dc:eb:4f:
         6d:06:d4:c2:94:22:45:89:8b:69:2f:6c:af:0d:eb:c7:54:e8:
         5d:7b:35:52:c5:69:bf:c0:26:63:33:a5:a5:df:9c:66:59:c2:
         17:32:c6:f9:4f:52:1f:92:5b:f4:ed:df:e7:5a:40:e1:2c:d6:
         5a:40:1b:d1:a4:51:6a:b5:4c:7c:de:3f:a9:d0:fa:9a:c4:f0:
         c0:47:6f:d3:29:70:7f:98:7a:d7:42:74:03:b7:2d:f1:66:19:
         3a:94:8b:9c:41:49:a1:22:99:96:f2:c6:1e:11:11:02:74:ee:
         02:db:eb:8a:d7:ef:b4:d6:92:e0:3f:fc:f3:60:a7:92:89:50:
         a1:81:01:ce:1e:2c:b8:0f:14:94:4e:5c:38:21:59:77:61:5e:
         c5:2a:61:63:96:b9:e0:9e:34:f5:f2:bc:20:3d:f6:15:68:fc:
         43:76:59:f8:56:a2:e5:a7:a9:e9:ca:5e:b7:a9:c9:d2:c9:f7:
         fc:66:d7:41:68:ec:b3:18:2e:79:5c:2c:93:03:6a:03:e8:a6:
         95:e3:17:f8:d4:66:4e:da:92:47:91:71:5c:eb:0a:e0:d7:4e:
         f1:2f:b3:47:80:3f:65:c2:f6:62:25:49:0b:d1:2d:47:1c:de:
         31:71:ec:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:45:46 2026 by rpki-client