Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.mft
File:                     HWGssMZyy01A7T6U08CbIMdFJa4.mft (raw, json)
Hash identifier:          8D2pT9iODlrNgEJEyGgHAHnoFP+nb8FJZ008KvdKgrE=
Subject key identifier:   52:95:C3:1E:F2:75:C8:DE:84:F4:58:94:BD:8C:FD:EC:08:DC:06:82
Authority key identifier: 1D:61:AC:B0:C6:72:CB:4D:40:ED:3E:94:D3:C0:9B:20:C7:45:25:AE
Certificate issuer:       /CN=A9176BDB/serialNumber=1D61ACB0C672CB4D40ED3E94D3C09B20C74525AE
Certificate serial:       035A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HWGssMZyy01A7T6U08CbIMdFJa4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.mft
Manifest number:          0354
Signing time:             Sun 19 Oct 2025 03:03:18 +0000
Manifest this update:     Sun 19 Oct 2025 03:03:18 +0000
Manifest next update:     Sun 26 Oct 2025 03:03:18 +0000
Files and hashes:         1: HWGssMZyy01A7T6U08CbIMdFJa4.crl (hash: N1z6ATmBREvySZE0BdSchFRA79DpS1S96TwuecCyw8Y=)
                          2: CBA514345AD611F0B344B779C4F9AE02.roa (hash: J8n4mPedZrA/XF+XvL0Z511Ein+0uaP3PjSJKtqS6XU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.crl
                          rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HWGssMZyy01A7T6U08CbIMdFJa4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:03:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 858 (0x35a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176BDB, serialNumber=1D61ACB0C672CB4D40ED3E94D3C09B20C74525AE
        Validity
            Not Before: Oct 19 03:03:18 2025 GMT
            Not After : Oct 26 03:03:18 2025 GMT
        Subject: CN=68f454f6-21d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2a:6e:23:a1:1e:88:df:ff:4c:17:c6:27:68:
                    5c:c5:08:e6:ad:f0:c3:b4:73:4f:f4:c9:a6:6b:d1:
                    dc:67:20:07:1c:fd:17:3d:80:fc:d6:54:0c:80:a6:
                    2c:4c:12:0b:1a:cb:f3:a7:24:72:a6:b8:a7:b4:98:
                    eb:9e:c6:2f:3f:14:e8:fc:cb:62:fb:90:66:3e:60:
                    a6:8c:4c:72:fd:18:87:63:89:a2:0c:bb:f9:72:16:
                    cb:6d:5e:f0:cc:70:33:1a:43:05:5b:ec:22:74:6d:
                    b1:f9:61:aa:09:04:bc:1d:6b:68:4a:9c:d3:75:b1:
                    ce:e8:08:57:1e:b3:f1:ad:f0:47:c1:e7:d7:bf:b1:
                    d0:53:4c:58:9b:de:92:d9:44:44:f7:4f:fd:c7:10:
                    af:96:cb:54:8d:29:aa:d6:08:97:97:2f:c2:9b:2d:
                    dd:76:bb:2d:2d:b1:34:9f:2c:5f:a8:fa:70:54:da:
                    50:5c:56:46:c2:6e:dd:fb:fc:f5:75:23:f7:79:21:
                    f3:93:82:da:4a:9d:8b:84:b7:91:5f:16:06:45:79:
                    75:10:14:81:3e:75:c9:0a:fa:35:03:83:61:43:dd:
                    26:b3:30:62:80:af:cb:f2:42:36:6f:dd:ba:dd:b8:
                    de:d7:46:69:16:c6:6a:92:2c:79:d7:ff:3e:ff:56:
                    46:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:95:C3:1E:F2:75:C8:DE:84:F4:58:94:BD:8C:FD:EC:08:DC:06:82
            X509v3 Authority Key Identifier:
                keyid:1D:61:AC:B0:C6:72:CB:4D:40:ED:3E:94:D3:C0:9B:20:C7:45:25:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HWGssMZyy01A7T6U08CbIMdFJa4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:d7:43:aa:6c:b4:35:86:10:7f:0b:22:24:07:70:5e:40:bd:
         e0:94:92:f9:ef:ef:72:4e:14:05:5c:ba:cd:b5:48:5b:12:5d:
         10:a6:7e:de:28:7c:e0:bf:8f:18:f5:fd:a3:ac:ca:04:f8:ba:
         a5:a4:82:70:a0:48:4f:75:92:ce:b6:ad:ee:88:26:16:9e:4d:
         95:f5:47:f4:11:c2:2d:9d:53:a3:7d:87:7b:fa:b4:61:07:43:
         20:8e:59:6a:ac:66:f1:96:2a:23:1b:b5:7c:58:a1:39:bd:fd:
         3c:ed:77:87:7e:75:6a:ad:3d:e5:1b:ff:96:6b:49:7c:ed:3a:
         09:5e:b9:f8:45:53:49:96:f0:6b:b1:64:ea:50:2d:a4:4f:fb:
         54:94:de:5e:0d:4f:96:e7:96:d7:e6:be:d8:d4:5a:16:74:39:
         fe:97:f6:e5:44:9c:56:d3:30:d4:58:63:9b:af:03:2d:50:b7:
         7a:a5:89:16:d7:2d:5e:32:83:53:82:34:8d:b0:b5:57:3a:4a:
         00:1c:8d:51:82:09:84:72:12:0a:b2:e6:28:92:bf:d9:35:4b:
         68:6b:dc:1a:45:07:16:2f:23:16:27:07:e9:7b:92:42:64:1a:
         a7:d9:82:1e:73:ff:cc:60:00:2d:0b:ea:b8:47:3a:1f:8a:f2:
         73:c3:54:ff
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzZCREIxMTAvBgNVBAUTKDFENjFBQ0IwQzY3MkNCNEQ0MEVEM0U5NEQzQzA5QjIw
Qzc0NTI1QUUwHhcNMjUxMDE5MDMwMzE4WhcNMjUxMDI2MDMwMzE4WjAYMRYwFAYD
VQQDEw02OGY0NTRmNi0yMWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzipuI6EeiN//TBfGJ2hcxQjmrfDDtHNP9Mmma9HcZyAHHP0XPYD81lQMgKYs
TBILGsvzpyRyprintJjrnsYvPxTo/Mti+5BmPmCmjExy/RiHY4miDLv5chbLbV7w
zHAzGkMFW+widG2x+WGqCQS8HWtoSpzTdbHO6AhXHrPxrfBHwefXv7HQU0xYm96S
2URE90/9xxCvlstUjSmq1giXly/Cmy3ddrstLbE0nyxfqPpwVNpQXFZGwm7d+/z1
dSP3eSHzk4LaSp2LhLeRXxYGRXl1EBSBPnXJCvo1A4NhQ90mszBigK/L8kI2b926
3bje10ZpFsZqkix51/8+/1ZGqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKVwx7y
dcjehPRYlL2M/ewI3AaCMB8GA1UdIwQYMBaAFB1hrLDGcstNQO0+lNPAmyDHRSWu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkJEQi82NTdFMEYzNEQ2
NEIxMUVDQUIyMEUzNkJDNEY5QUUwMi9IV0dzc01aeXkwMUE3VDZVMDhDYklNZEZK
YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0hXR3NzTVp5eTAxQTdUNlUwOENiSU1kRkphNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NkJEQi82NTdFMEYzNEQ2NEIxMUVDQUIyMEUzNkJDNEY5QUUwMi9IV0dzc01aeXkw
MUE3VDZVMDhDYklNZEZKYTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAG10OqbLQ1hhB/CyIkB3BeQL3glJL57+9yThQFXLrNtUhbEl0Qpn7e
KHzgv48Y9f2jrMoE+LqlpIJwoEhPdZLOtq3uiCYWnk2V9Uf0EcItnVOjfYd7+rRh
B0MgjllqrGbxliojG7V8WKE5vf087XeHfnVqrT3lG/+Wa0l87ToJXrn4RVNJlvBr
sWTqUC2kT/tUlN5eDU+W55bX5r7Y1FoWdDn+l/blRJxW0zDUWGObrwMtULd6pYkW
1y1eMoNTgjSNsLVXOkoAHI1RggmEchIKsuYokr/ZNUtoa9waRQcWLyMWJwfpe5JC
ZBqn2YIec//MYAAtC+q4RzofivJzw1T/
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:45:32 2025 by rpki-client