Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft
File:                     HWw-nEchLuSN-fVOZJCpphbUEYk.mft (raw, json)
Hash identifier:          46/Q4Mp9Z+pVe5+5sceUi1TrGF5ajhmlYNOWpQA55vM=
Subject key identifier:   4F:6A:D1:B1:72:0E:B3:2B:44:AC:FA:46:18:C6:54:AE:5A:56:54:F9
Authority key identifier: 1D:6C:3E:9C:47:21:2E:E4:8D:F9:F5:4E:64:90:A9:A6:16:D4:11:89
Certificate issuer:       /CN=A91B6AEE/serialNumber=1D6C3E9C47212EE48DF9F54E6490A9A616D41189
Certificate serial:       02BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWw-nEchLuSN-fVOZJCpphbUEYk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft
Manifest number:          02B3
Signing time:             Thu 23 Jul 2026 02:29:53 +0000
Manifest this update:     Thu 23 Jul 2026 02:29:53 +0000
Manifest next update:     Thu 30 Jul 2026 02:29:53 +0000
Files and hashes:         1: HWw-nEchLuSN-fVOZJCpphbUEYk.crl (hash: GoBZdsJivpB7UGfsRbf9pmoM+aPisW4WItHDwWvRAj8=)
                          2: 3B7794D2664A11EDB095B812C4F9AE02.roa (hash: Iimyc3Pw8e+jVyrMv/gbC063P+WqofRd4H1VyiZ+JmI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.crl
                          rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWw-nEchLuSN-fVOZJCpphbUEYk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 698 (0x2ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6AEE, serialNumber=1D6C3E9C47212EE48DF9F54E6490A9A616D41189
        Validity
            Not Before: Jul 23 02:29:53 2026 GMT
            Not After : Jul 30 02:29:53 2026 GMT
        Subject: CN=6a617ca1-74e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:91:25:52:63:15:43:db:74:7a:a9:56:d7:06:
                    80:2d:f9:c8:73:4c:a0:50:04:10:31:49:62:d8:d5:
                    d2:e6:e2:00:e8:21:7c:df:94:c4:f3:6a:ce:1f:30:
                    67:3d:3a:f9:7a:40:17:8f:8e:da:41:00:3b:b9:3d:
                    9a:b9:8a:f1:bc:0f:2c:01:96:2f:a5:85:ce:50:20:
                    31:36:73:1f:78:ff:de:1f:c4:67:3b:ac:f3:19:bb:
                    7f:d0:af:00:f3:56:42:af:55:b6:9c:82:93:89:6f:
                    7b:ae:d8:87:66:77:20:04:91:20:b5:40:df:28:39:
                    ee:38:f0:9a:34:c0:5e:28:01:c0:53:bd:bd:cd:05:
                    9e:c5:f4:6d:78:29:d3:c3:f3:d8:eb:ba:f6:6f:0c:
                    eb:dc:fe:8f:ef:c2:64:11:8a:40:e9:92:41:0d:e0:
                    27:c4:3b:3d:39:46:3c:00:88:14:f5:e3:9b:e8:a8:
                    be:a5:73:38:50:fb:15:81:d6:8d:07:f2:62:1a:45:
                    8c:c1:9b:06:af:e3:ea:b6:13:34:ba:93:f1:a5:0f:
                    d3:9b:a0:8b:b5:b7:d7:9c:5c:28:56:c8:ce:76:2c:
                    07:e4:6d:32:72:ae:76:0b:0b:4c:09:74:9c:02:d6:
                    03:14:68:eb:a0:12:ac:c7:f3:dd:1d:8e:56:42:ab:
                    b1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:6A:D1:B1:72:0E:B3:2B:44:AC:FA:46:18:C6:54:AE:5A:56:54:F9
            X509v3 Authority Key Identifier:
                keyid:1D:6C:3E:9C:47:21:2E:E4:8D:F9:F5:4E:64:90:A9:A6:16:D4:11:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWw-nEchLuSN-fVOZJCpphbUEYk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:89:43:ee:74:97:04:a4:f0:67:47:e6:7d:24:7d:64:89:c5:
         9f:c9:6d:72:06:f9:5b:7c:a1:80:fd:56:9d:e5:3c:07:08:4a:
         4d:a6:01:73:37:6a:43:9c:dc:d9:15:73:0d:97:27:3f:e6:6b:
         da:b4:ce:ea:f3:c4:99:f9:aa:b6:4c:8f:67:8f:01:a7:48:ec:
         48:7c:29:c3:30:a7:a5:fe:29:a2:92:ac:c8:99:ca:fb:8e:c9:
         37:60:a9:0b:d2:de:91:44:98:3d:19:f3:c3:64:5c:a9:46:fb:
         df:41:da:06:66:fb:0b:b9:01:44:02:e3:11:51:aa:79:3d:87:
         d7:29:d9:b0:46:4b:ed:ed:96:19:97:d8:54:5f:f5:c8:d6:85:
         25:90:e4:bd:7b:9e:06:d3:94:e1:72:17:29:1f:f5:4d:e9:c7:
         f2:5f:d2:e9:f3:0f:32:02:f4:25:f7:10:63:15:a0:8e:c4:43:
         fe:b6:c8:9d:41:d9:ab:28:5c:a0:dd:b7:aa:81:ba:09:a6:0b:
         a2:70:00:30:70:6e:f8:5a:7d:fd:e2:39:14:3e:d4:6a:1f:49:
         f4:a7:a4:35:34:5c:90:ed:5b:98:7c:39:f5:7d:7c:dd:fd:75:
         e3:10:94:31:7c:65:91:d0:c2:6c:e4:d7:79:e2:c6:a0:76:3b:
         1d:40:c3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:06:45 2026 by rpki-client