Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft
File:                     HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft (raw, json)
Hash identifier:          c0lDAsxHxMVa13pdJonnY4YeNieIQ3rcxTLhWde3olA=
Subject key identifier:   63:C5:9D:5C:96:B8:3A:62:3D:F4:AA:C4:49:87:3B:88:F6:A7:5C:A5
Authority key identifier: 1D:63:41:6C:47:3B:0C:09:12:BD:AB:37:10:27:01:09:5F:C6:C3:5A
Certificate issuer:       /CN=A91707D0/serialNumber=1D63416C473B0C0912BDAB37102701095FC6C35A
Certificate serial:       DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft
Manifest number:          DC
Signing time:             Mon 11 May 2026 06:46:16 +0000
Manifest this update:     Mon 11 May 2026 06:46:15 +0000
Manifest next update:     Mon 18 May 2026 06:46:15 +0000
Files and hashes:         1: HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl (hash: Zni7HE+O9LkOshF8BR/ZxrYFXptd6vsFJDmFtHQb3nU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl
                          rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:46:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91707D0, serialNumber=1D63416C473B0C0912BDAB37102701095FC6C35A
        Validity
            Not Before: May 11 06:46:15 2026 GMT
            Not After : May 18 06:46:15 2026 GMT
        Subject: CN=6a017b38-f7c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b4:80:96:d8:5d:2c:19:27:af:28:b6:0a:27:
                    9c:1b:c0:a7:77:9a:de:5a:ad:5a:dd:d5:fb:5b:e6:
                    7d:63:18:36:cc:d6:8a:47:97:d6:f3:97:2b:eb:4d:
                    fa:d2:88:f9:2c:d1:4c:27:14:77:fc:89:bd:4d:7f:
                    d0:e6:bf:1d:9e:43:36:92:ec:f6:8a:58:ad:11:24:
                    1b:25:5e:e1:0b:b2:cb:1f:03:56:7a:3a:bb:3c:63:
                    f0:90:4e:93:ba:d3:d9:62:61:56:1c:53:68:f1:c9:
                    62:32:bf:1c:b9:9b:a6:9f:12:5e:76:49:43:82:76:
                    9f:8b:fa:b9:23:7c:f4:ff:27:9a:47:e9:dd:18:6e:
                    d4:4e:67:4f:93:96:2c:da:2a:1e:29:eb:6d:c3:91:
                    b4:16:b4:b8:81:83:3b:bb:31:8c:78:d9:fe:a4:16:
                    cb:e2:57:aa:45:f5:c1:57:1f:18:cc:db:ce:93:8c:
                    4e:b4:4b:a0:61:f3:3f:4c:16:72:4b:17:cf:0f:39:
                    c5:ed:1b:f5:9f:fa:a5:3a:89:2c:20:25:a8:54:13:
                    ce:21:a5:89:04:49:92:59:23:d7:b2:87:bb:22:65:
                    d2:cd:22:6f:88:51:9e:d0:89:c0:70:9a:e8:c2:57:
                    c6:9c:c7:66:aa:d7:71:73:09:1f:7a:94:ba:a2:51:
                    60:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C5:9D:5C:96:B8:3A:62:3D:F4:AA:C4:49:87:3B:88:F6:A7:5C:A5
            X509v3 Authority Key Identifier:
                keyid:1D:63:41:6C:47:3B:0C:09:12:BD:AB:37:10:27:01:09:5F:C6:C3:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:d3:af:53:24:95:7e:9a:f2:f1:85:ab:17:1f:ad:ab:c6:dd:
         d4:9d:a7:54:15:95:72:5f:72:f0:25:25:33:bd:1f:c8:80:4d:
         25:c9:33:31:c8:7e:fe:fe:0b:f2:c3:f3:5f:b9:4a:8c:a5:10:
         84:d2:d0:ab:61:9c:92:f4:51:35:99:0b:01:88:ae:79:db:ff:
         a6:a3:5b:00:d3:52:b8:7b:f7:da:ed:19:24:38:91:7b:a6:0d:
         bf:51:4e:bf:64:9f:55:4a:4b:be:4d:0f:a1:9f:d2:ac:42:b8:
         c9:02:9b:88:1d:19:dd:16:f4:58:ea:d5:6d:59:18:a0:26:d0:
         b7:45:e2:e9:40:6b:1f:bb:5a:29:d7:c9:95:81:e9:b6:3a:80:
         3a:e8:46:44:06:54:55:e7:b5:38:65:aa:ed:89:c6:e7:cd:f6:
         be:2e:99:97:82:46:2c:5a:b7:f0:26:6c:7d:7f:d9:b2:4d:b9:
         f6:b3:74:96:8a:46:7a:b1:15:14:cb:01:5c:d4:69:6c:60:fd:
         81:34:94:38:9f:65:07:e5:0a:bd:9b:aa:7e:04:a0:30:d5:f5:
         89:6b:e1:c9:03:3d:3c:47:f5:30:f2:8f:87:57:26:e8:a4:c9:
         36:6d:81:bd:31:62:1a:5f:86:ec:7a:25:6b:75:8a:0a:d0:8a:
         fe:70:54:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:28:21 2026 by rpki-client