Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft
File:                     hwrlmks42vxqMavjKcz4eP33Kow.mft (raw, json)
Hash identifier:          6BEm4hMUKG8PZbgZuUTdKDkJ9PZUh+azHjyCA1ZkSNg=
Subject key identifier:   E3:02:CF:FE:AD:42:8D:DE:7B:AD:69:F8:3C:DD:F1:0F:C3:CD:51:32
Authority key identifier: 87:0A:E5:9A:4B:38:DA:FC:6A:31:AB:E3:29:CC:F8:78:FD:F7:2A:8C
Certificate issuer:       /CN=A9110795/serialNumber=870AE59A4B38DAFC6A31ABE329CCF878FDF72A8C
Certificate serial:       176A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwrlmks42vxqMavjKcz4eP33Kow.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft
Manifest number:          174E
Signing time:             Mon 08 Sep 2025 16:37:49 +0000
Manifest this update:     Mon 08 Sep 2025 16:37:48 +0000
Manifest next update:     Mon 15 Sep 2025 16:37:48 +0000
Files and hashes:         1: hwrlmks42vxqMavjKcz4eP33Kow.crl (hash: i6MD02+msfR+V33xFnexegNL/q/j1NeW6jmaB1qqA0s=)
                          2: 5F94C5B814A311EDA489B80DC4F9AE02.roa (hash: XyzIpfrUbto0rfGP9IHU1JGtafpES9uIZwg0p8MvTWc=)
                          3: F439D662AAAE11E8B3984735C4F9AE02.roa (hash: kHnwcqLd+ooMUoGW137pCI47RE/wdVDs3o8ixQ6QT2U=)
                          4: E734D3DE6E7F11ECB1C0E439C4F9AE02.roa (hash: pMIajmGLygMESQUwJkOiEaozCb6jiY71Ki9rmZF+YSw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.crl
                          rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwrlmks42vxqMavjKcz4eP33Kow.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Sep 2025 16:37:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5994 (0x176a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110795, serialNumber=870AE59A4B38DAFC6A31ABE329CCF878FDF72A8C
        Validity
            Not Before: Sep  8 16:37:48 2025 GMT
            Not After : Sep 15 16:37:48 2025 GMT
        Subject: CN=68bf065d-a765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:68:43:31:de:17:38:7c:ea:b8:74:c2:1c:96:
                    73:4c:cb:15:18:e0:c4:33:39:24:b3:25:80:81:00:
                    53:41:87:08:fa:00:62:f4:4b:ce:86:38:37:60:4a:
                    39:6c:50:0f:da:81:22:a5:61:3b:ba:51:4a:2a:fd:
                    94:84:20:9c:ab:65:45:e9:f6:48:45:45:48:63:82:
                    e8:1c:bb:d1:0e:db:18:73:ff:03:ad:8c:b9:46:12:
                    08:6a:09:2c:1f:31:71:96:2c:7f:4f:0f:e5:8b:f9:
                    7a:b1:32:75:0e:1d:6d:a8:22:b2:40:7d:75:6f:ba:
                    6d:85:91:37:89:47:ef:88:b9:68:79:c4:16:a9:ea:
                    14:f6:5a:7c:5c:30:e6:8f:f0:5f:46:6d:b2:50:ae:
                    c8:02:1f:ae:fc:5d:36:8c:34:ae:56:98:11:1a:48:
                    cb:d1:04:fb:4c:5b:80:9e:f9:3c:17:28:53:ea:d6:
                    c1:7c:2f:93:f0:43:d8:51:27:56:eb:dc:2a:c4:6d:
                    6c:9e:0d:51:66:97:51:8e:9f:c8:17:fd:db:90:2a:
                    c2:66:a5:f7:f1:ad:dc:3f:a5:97:39:b9:92:b7:0c:
                    3e:98:c4:32:f4:75:c3:ba:ce:37:22:62:e2:c3:77:
                    ad:c8:41:d4:68:e1:11:f7:44:b9:d7:8d:e7:98:b7:
                    7f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:02:CF:FE:AD:42:8D:DE:7B:AD:69:F8:3C:DD:F1:0F:C3:CD:51:32
            X509v3 Authority Key Identifier:
                keyid:87:0A:E5:9A:4B:38:DA:FC:6A:31:AB:E3:29:CC:F8:78:FD:F7:2A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwrlmks42vxqMavjKcz4eP33Kow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:21:fa:f3:08:62:75:9e:7e:2d:86:2e:a1:61:9e:46:32:e3:
         17:bd:d4:fe:b7:e6:2b:17:99:a5:72:da:6f:8c:de:05:8e:fb:
         24:dd:62:b0:5c:6a:0d:b2:1e:53:4b:01:3e:47:73:d5:d4:c5:
         81:66:30:e8:35:64:cb:38:11:f6:9c:00:ba:39:65:a2:79:b2:
         eb:30:9c:a7:4a:34:a3:e0:a0:dc:2f:71:de:90:90:57:2a:92:
         5a:ed:9f:88:93:ce:8b:e3:60:96:f5:d2:2c:2b:61:5d:d8:28:
         75:49:23:4a:8f:71:65:ad:19:a3:bb:d1:f3:3a:a9:d2:48:5d:
         5f:23:23:dd:5e:6e:77:7d:4b:a5:cc:dd:12:7f:95:cf:74:ea:
         38:2f:ce:24:55:d4:3f:59:ee:5e:cf:a6:96:bc:35:93:7b:d1:
         1b:9e:82:70:8b:40:54:95:c3:c1:bc:35:a3:1f:0c:68:32:99:
         78:89:58:42:41:18:96:a0:1d:8d:7d:20:56:9b:20:5d:1c:e8:
         06:7c:a8:70:7e:2f:5e:47:f4:95:1a:78:0e:ee:e3:fc:0b:05:
         c3:ac:d7:87:dc:b9:06:97:0c:7c:db:1b:00:c7:e2:37:17:e6:
         93:a0:1a:29:01:6f:df:33:d5:24:33:9c:25:6e:55:b4:53:b1:
         14:3a:f1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:38:38 2025 by rpki-client