Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917286F/0ADA084653BD11F1B6592A56B9833773/Hwqez8yog84ajHjPFa9I2e-VQWo.mft
File:                     Hwqez8yog84ajHjPFa9I2e-VQWo.mft (raw, json)
Hash identifier:          7O4PT2++y2Yr0LJrKKGekLGB8nPwgSESz5FEp5VWZ/k=
Subject key identifier:   AC:4F:A5:D5:4B:F7:89:8E:26:C3:EB:76:53:39:73:BE:B9:0C:3A:A1
Authority key identifier: 1F:0A:9E:CF:CC:A8:83:CE:1A:8C:78:CF:15:AF:48:D9:EF:95:41:6A
Certificate issuer:       /CN=A917286F/serialNumber=1F0A9ECFCCA883CE1A8C78CF15AF48D9EF95416A
Certificate serial:       45
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Hwqez8yog84ajHjPFa9I2e-VQWo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917286F/0ADA084653BD11F1B6592A56B9833773/Hwqez8yog84ajHjPFa9I2e-VQWo.mft
Manifest number:          44
Signing time:             Sun 27 Sep 2026 09:02:29 +0000
Manifest this update:     Sun 27 Sep 2026 09:02:28 +0000
Manifest next update:     Sun 04 Oct 2026 09:02:28 +0000
Files and hashes:         1: Hwqez8yog84ajHjPFa9I2e-VQWo.crl (hash: HM83GVgAqxr98XxLmxpjdxG2xY6nhaqHW1ZJ5ef0Vjs=)
                          2: 427F4E6653C011F1A527BD9DBA833773.roa (hash: eG5S+GARzWRbVnPna51fSv5pLFPdQ2BwMOqn8Rq4jV0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917286F/0ADA084653BD11F1B6592A56B9833773/Hwqez8yog84ajHjPFa9I2e-VQWo.crl
                          rsync://rpki.apnic.net/member_repository/A917286F/0ADA084653BD11F1B6592A56B9833773/Hwqez8yog84ajHjPFa9I2e-VQWo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Hwqez8yog84ajHjPFa9I2e-VQWo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 09:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917286F, serialNumber=1F0A9ECFCCA883CE1A8C78CF15AF48D9EF95416A
        Validity
            Not Before: Sep 27 09:02:28 2026 GMT
            Not After : Oct  4 09:02:28 2026 GMT
        Subject: CN=6ab8dba5-4314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:de:99:50:bf:e3:16:69:7c:c2:23:00:70:81:
                    61:15:b1:09:4a:ab:49:5b:2f:0e:2d:98:cf:27:2a:
                    d8:c7:c1:22:22:aa:61:32:f9:7a:2b:75:79:9a:fa:
                    54:fb:b7:fc:46:11:5b:b6:05:2e:ce:0c:b8:47:97:
                    b7:25:70:2e:ba:7d:46:b7:09:40:3c:fb:eb:21:4a:
                    a0:a1:3b:55:23:4a:01:8d:b2:5a:0b:67:4a:e0:a5:
                    52:37:f9:3d:95:4e:79:cb:b5:8b:6c:8e:0a:21:4f:
                    91:02:1d:bb:16:07:9d:ea:43:19:9b:cc:e0:f0:66:
                    07:c0:be:cf:51:a6:95:7e:12:31:ce:a4:eb:68:31:
                    28:71:20:98:a2:b4:05:5f:c9:44:69:6d:58:47:d5:
                    e7:97:fb:ea:63:5d:51:72:22:b2:b5:39:47:52:45:
                    43:dd:07:d8:52:e0:81:d3:35:0e:24:4c:63:4f:62:
                    ed:26:20:c7:9a:45:bb:38:f1:b7:e8:6c:8c:45:96:
                    e5:bd:e6:8a:d0:da:33:ae:3c:0e:ff:d9:3f:cb:c5:
                    cb:0d:2f:12:dc:40:b6:48:82:ac:20:18:9b:5a:7a:
                    24:bf:34:26:bb:db:ec:45:60:e4:a4:2c:cc:a6:f0:
                    3e:c3:ed:55:c0:bc:76:ea:42:1a:26:06:0c:82:8b:
                    56:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:4F:A5:D5:4B:F7:89:8E:26:C3:EB:76:53:39:73:BE:B9:0C:3A:A1
            X509v3 Authority Key Identifier:
                keyid:1F:0A:9E:CF:CC:A8:83:CE:1A:8C:78:CF:15:AF:48:D9:EF:95:41:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917286F/0ADA084653BD11F1B6592A56B9833773/Hwqez8yog84ajHjPFa9I2e-VQWo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Hwqez8yog84ajHjPFa9I2e-VQWo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917286F/0ADA084653BD11F1B6592A56B9833773/Hwqez8yog84ajHjPFa9I2e-VQWo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:ba:47:a2:47:02:9b:62:32:5c:d2:41:30:42:7f:4e:c2:4a:
         a7:f0:b7:4a:92:0e:00:ee:a3:1d:d9:7d:68:65:a5:14:23:a3:
         d4:ca:d2:a6:f9:74:d7:7a:87:9e:13:ab:d3:bb:53:95:e8:a8:
         59:60:b8:bd:1d:47:52:7a:00:b0:32:ea:4f:c8:2b:59:9e:9f:
         e8:d0:15:36:79:ef:93:ce:9e:45:2e:8f:2e:8d:80:f4:9c:7c:
         96:aa:01:db:99:a6:51:39:68:96:1d:6d:df:a3:7d:34:90:28:
         80:fa:eb:60:bf:0d:4f:8c:e3:bf:51:a5:61:96:2b:b7:d7:74:
         c1:6d:f9:3c:58:12:4e:56:25:ed:78:00:ef:17:ad:06:fb:f8:
         43:57:be:ba:bf:ba:d8:a4:34:ca:bf:21:dc:2d:f5:10:bc:fc:
         80:a5:66:3b:a5:eb:00:a1:e3:d7:b8:03:cb:02:86:54:9e:62:
         bd:84:5f:40:cd:04:2f:9f:82:cb:8c:26:66:58:00:a8:a1:c7:
         f7:b0:49:5c:a8:68:20:d8:6f:c3:52:53:da:42:ac:18:08:7f:
         06:b3:24:ab:d7:00:38:b2:ff:a0:8b:87:ca:dd:77:e9:05:20:
         50:0f:1e:a6:4a:90:25:2d:49:bc:ea:6c:c7:30:52:d3:2a:c8:
         0d:cb:75:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:34:29 2026 by rpki-client