Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft
File:                     HWw-nEchLuSN-fVOZJCpphbUEYk.mft (raw, json)
Hash identifier:          tQUb/ISDvU1tLI8MA8syaY8tuqhLl8sUBwEBFhVfY04=
Subject key identifier:   F6:A0:9F:FD:5A:94:27:D2:30:16:C7:EC:3E:2B:02:DE:C1:7A:4B:E0
Authority key identifier: 1D:6C:3E:9C:47:21:2E:E4:8D:F9:F5:4E:64:90:A9:A6:16:D4:11:89
Certificate issuer:       /CN=A91B6AEE/serialNumber=1D6C3E9C47212EE48DF9F54E6490A9A616D41189
Certificate serial:       02DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWw-nEchLuSN-fVOZJCpphbUEYk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft
Manifest number:          02D7
Signing time:             Sun 27 Sep 2026 01:26:06 +0000
Manifest this update:     Sun 27 Sep 2026 01:26:05 +0000
Manifest next update:     Sun 04 Oct 2026 01:26:05 +0000
Files and hashes:         1: HWw-nEchLuSN-fVOZJCpphbUEYk.crl (hash: qklM+mzJwRykYOtsH/QusuEiH9jgEzA3LJAO60I07Ds=)
                          2: 3B7794D2664A11EDB095B812C4F9AE02.roa (hash: ZIr2apk71YLUZpnRbpwK15/NMysCEMo14Up36kPk0Wg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.crl
                          rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWw-nEchLuSN-fVOZJCpphbUEYk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 01:26:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 735 (0x2df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6AEE, serialNumber=1D6C3E9C47212EE48DF9F54E6490A9A616D41189
        Validity
            Not Before: Sep 27 01:26:05 2026 GMT
            Not After : Oct  4 01:26:05 2026 GMT
        Subject: CN=6ab870ae-2ea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7e:5f:cd:da:2a:32:1d:11:46:bf:85:b6:ef:
                    cd:4e:fd:9a:11:e0:15:ee:02:7e:21:20:4f:5a:39:
                    50:67:26:9d:09:19:ca:7c:69:e4:06:a5:74:f4:3b:
                    6f:96:5b:90:9c:05:f5:71:0a:fd:22:ea:f1:88:12:
                    f8:02:53:62:57:28:46:b5:ab:0d:a3:c1:83:b8:f3:
                    b3:92:5b:31:cf:8b:14:94:51:21:50:c1:fb:dc:bc:
                    60:9a:18:74:db:b1:70:7f:ed:3b:b5:9d:15:f5:74:
                    54:de:c5:3b:ae:dd:45:fd:63:45:83:36:84:1e:88:
                    a7:cd:bc:cc:7c:76:e8:ed:e5:93:d2:74:4d:de:3d:
                    0e:17:ae:e2:79:92:40:86:9d:9e:9f:33:90:df:a8:
                    ae:af:47:fb:33:bd:12:9b:2a:b4:ab:5d:5b:0a:41:
                    02:e4:d0:22:07:c6:fe:51:ed:9f:a1:3e:a7:1b:86:
                    bd:59:c3:12:17:e2:43:8f:ba:76:5e:c1:be:31:55:
                    84:43:6d:ae:3c:ff:ff:b2:53:53:44:2d:fe:4b:b1:
                    dd:27:ee:34:2f:71:f9:84:a8:db:ec:4a:fe:c9:21:
                    04:14:3c:8a:e4:0c:db:02:09:f5:75:b2:5f:54:e4:
                    ba:34:db:1c:fa:90:4f:39:d8:c7:7f:21:fd:0a:56:
                    91:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A0:9F:FD:5A:94:27:D2:30:16:C7:EC:3E:2B:02:DE:C1:7A:4B:E0
            X509v3 Authority Key Identifier:
                keyid:1D:6C:3E:9C:47:21:2E:E4:8D:F9:F5:4E:64:90:A9:A6:16:D4:11:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWw-nEchLuSN-fVOZJCpphbUEYk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:56:53:91:eb:e0:1a:54:eb:fd:b7:8e:96:df:51:c1:b4:50:
         ad:34:76:f7:f7:19:1f:95:7d:d9:09:80:e4:d1:e5:f5:74:5b:
         44:8e:01:14:5d:9d:8f:d8:01:f7:3d:6e:1a:d1:9a:6b:86:b8:
         14:7a:e7:2c:46:14:3d:74:10:d2:8c:34:a9:d3:63:28:01:d5:
         14:1c:4f:4a:e1:a1:e7:bd:86:ba:d1:d4:1a:ae:6e:f1:2d:cd:
         98:cd:46:d2:4c:94:b0:a0:be:ba:be:25:aa:45:03:b1:2a:06:
         1f:bb:80:39:6c:6d:1a:7c:b5:95:22:5b:5f:81:fb:39:9d:e5:
         e5:f5:3f:09:46:02:1d:3d:8e:16:f9:08:f4:db:c6:6c:b2:b4:
         f2:84:1c:e5:6e:1b:74:2d:54:fc:1c:be:ff:85:c3:4a:f0:a9:
         3a:f1:d8:66:5d:9b:6a:af:16:0c:a9:48:f8:89:40:18:9a:05:
         7a:01:20:ce:d1:75:9b:58:bf:df:08:a6:be:7a:a9:29:44:a3:
         de:fa:ed:27:be:a3:42:13:8a:0c:9f:9f:ea:e0:5f:9b:fe:e9:
         b7:51:a1:ee:49:c6:10:50:db:52:cc:fb:82:98:03:3e:63:39:
         5b:cd:ac:47:d8:f4:bc:0c:2c:0e:3b:e9:3c:fd:25:55:f6:33:
         15:ba:f7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:40:19 2026 by rpki-client