Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.mft
File:                     HWGssMZyy01A7T6U08CbIMdFJa4.mft (raw, json)
Hash identifier:          AlSZWXjwSXooWx6xOSG2+ELpQKUCnqCLaDww+B0XL3I=
Subject key identifier:   87:B1:8D:B4:39:14:77:47:18:90:18:53:9F:C8:44:A2:DD:40:E4:96
Authority key identifier: 1D:61:AC:B0:C6:72:CB:4D:40:ED:3E:94:D3:C0:9B:20:C7:45:25:AE
Certificate issuer:       /CN=A9176BDB/serialNumber=1D61ACB0C672CB4D40ED3E94D3C09B20C74525AE
Certificate serial:       0419
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HWGssMZyy01A7T6U08CbIMdFJa4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.mft
Manifest number:          040B
Signing time:             Wed 23 Sep 2026 00:02:29 +0000
Manifest this update:     Wed 23 Sep 2026 00:02:29 +0000
Manifest next update:     Wed 30 Sep 2026 00:02:29 +0000
Files and hashes:         1: HWGssMZyy01A7T6U08CbIMdFJa4.crl (hash: aEhayeyFP17UNVM95NyO8nNrqOrtC1fHRXxrts36O8Y=)
                          2: 72AFB32C559211F1B22C82B592833773.roa (hash: TMbP6L3Em89acCRjO434FFkbgmcYoUU8SeaJFFKDkHo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.crl
                          rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HWGssMZyy01A7T6U08CbIMdFJa4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 00:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1049 (0x419)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176BDB, serialNumber=1D61ACB0C672CB4D40ED3E94D3C09B20C74525AE
        Validity
            Not Before: Sep 23 00:02:29 2026 GMT
            Not After : Sep 30 00:02:29 2026 GMT
        Subject: CN=6ab31715-14a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8d:b0:75:52:ea:80:df:3b:22:97:8b:f8:e2:
                    5c:02:1d:31:45:80:51:95:7a:14:cc:4e:e6:81:20:
                    1a:41:fd:87:92:4b:84:84:bc:7e:0d:fb:54:b4:90:
                    a9:21:df:21:f9:d5:67:03:b5:86:b5:d9:ce:85:8e:
                    5f:05:b1:55:49:66:6e:ae:79:31:5f:a8:68:3f:10:
                    ae:6e:75:53:3a:32:a4:ac:3e:1a:89:48:47:8b:c9:
                    2b:c9:22:d1:ff:98:9e:d5:25:71:1b:38:ba:30:0e:
                    77:62:ab:bf:40:6a:e6:71:93:18:a9:1a:e0:c9:ed:
                    b0:e9:b9:ae:41:72:3e:6c:ea:0c:be:34:b3:8d:ae:
                    2b:ac:53:6f:e6:2b:bd:34:53:3f:7d:66:aa:fe:c5:
                    d7:37:7d:f8:be:15:37:da:ce:25:07:19:ee:b7:19:
                    a8:e7:e8:46:54:f1:67:f9:35:e2:80:fe:64:f3:70:
                    66:cc:cc:d9:90:b2:17:74:8c:72:81:4a:57:f4:77:
                    ba:97:75:67:34:d0:58:9f:f9:ea:b1:2e:a7:28:87:
                    03:5e:ed:4b:aa:53:40:2f:75:b2:66:fc:85:1d:93:
                    b1:9f:84:e1:b2:8b:ee:fc:97:e7:69:f6:e0:22:dc:
                    42:c7:64:d0:dc:a0:85:29:da:ec:9a:87:29:1d:82:
                    fb:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B1:8D:B4:39:14:77:47:18:90:18:53:9F:C8:44:A2:DD:40:E4:96
            X509v3 Authority Key Identifier:
                keyid:1D:61:AC:B0:C6:72:CB:4D:40:ED:3E:94:D3:C0:9B:20:C7:45:25:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HWGssMZyy01A7T6U08CbIMdFJa4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:1e:05:69:58:72:23:2d:99:8e:dd:a1:5a:d6:a3:c1:56:40:
         ad:7a:df:6e:38:1d:93:f2:c3:40:2a:40:01:d0:b6:9f:bb:5f:
         ea:d7:6d:f7:6d:52:7a:53:22:17:c7:98:2e:1e:0a:c8:c6:a9:
         fc:d4:07:fc:8d:f0:18:11:dc:3c:15:36:4c:2b:42:b0:b0:b5:
         de:3c:f6:5b:d9:d1:5c:8c:78:dc:57:bd:1c:55:81:7b:c7:e5:
         3b:94:3e:e7:fc:c3:01:fe:be:25:8a:b6:98:11:60:72:28:98:
         1a:a9:f7:47:07:63:a3:35:c5:9e:9c:60:91:3f:03:f8:0d:29:
         4a:da:61:b9:75:34:c5:c5:9e:82:94:8c:1e:24:c8:d8:82:aa:
         6a:4b:f3:87:93:a2:4d:e6:e8:e2:ce:5e:76:05:fb:80:22:2c:
         0c:7c:91:59:b0:3d:82:96:10:3d:90:3f:e3:f8:38:58:80:28:
         be:1d:00:68:99:e4:c2:e2:51:0c:d9:1e:a9:63:17:fa:5b:34:
         64:92:6e:7f:3f:e6:88:28:9c:f8:29:a2:15:03:f5:a5:a1:7a:
         ab:52:b0:57:b0:29:0c:4d:87:de:5f:86:bb:c1:06:0f:5e:69:
         c1:89:36:05:80:23:00:0c:58:43:38:41:8f:4c:d6:7c:ec:9c:
         08:dc:60:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:14:08 2026 by rpki-client