Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.mft
File:                     HlwQfv0DzxPSFKOaaizo3a0wRw4.mft (raw, json)
Hash identifier:          9Zgrhh4V8RFnOnqhQTZgKW9uUyU/U4hK4RKfT+9NdrY=
Subject key identifier:   A8:24:04:F6:73:68:AC:CD:C9:1F:77:89:68:B2:D8:C8:D9:0C:31:E8
Authority key identifier: 1E:5C:10:7E:FD:03:CF:13:D2:14:A3:9A:6A:2C:E8:DD:AD:30:47:0E
Certificate issuer:       /CN=A914D9C3/serialNumber=1E5C107EFD03CF13D214A39A6A2CE8DDAD30470E
Certificate serial:       0189
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlwQfv0DzxPSFKOaaizo3a0wRw4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.mft
Manifest number:          0184
Signing time:             Sat 17 Oct 2026 05:16:19 +0000
Manifest this update:     Sat 17 Oct 2026 05:16:19 +0000
Manifest next update:     Sat 24 Oct 2026 05:16:19 +0000
Files and hashes:         1: HlwQfv0DzxPSFKOaaizo3a0wRw4.crl (hash: RqsoSUqepuXqrf+fyCJQer396F0ljSz+WWEn0i5iY2k=)
                          2: F7B3707C806911EF8C30A03DC4F9AE02.roa (hash: aiqE7GBN+l3YOlzTvalxpxvHOLBHG0Z/5JCvpwlar2o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.crl
                          rsync://rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlwQfv0DzxPSFKOaaizo3a0wRw4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Oct 2026 05:16:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D9C3, serialNumber=1E5C107EFD03CF13D214A39A6A2CE8DDAD30470E
        Validity
            Not Before: Oct 17 05:16:19 2026 GMT
            Not After : Oct 24 05:16:19 2026 GMT
        Subject: CN=6ad304a3-2428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:77:39:61:39:17:7f:8d:a1:04:37:b4:23:a7:
                    b8:02:4f:49:e3:04:3b:b3:4b:d2:97:2b:e8:21:0a:
                    81:e1:2b:f3:64:1d:56:4a:77:74:13:44:2c:f7:64:
                    b9:d5:9f:42:ef:62:22:63:22:af:7a:3d:9c:4c:46:
                    f1:27:96:2d:bd:ed:05:1d:ca:f8:e3:79:45:8b:0e:
                    dd:36:52:b1:91:72:17:d9:5c:9c:5b:81:c0:16:c6:
                    68:35:b6:38:ce:70:24:c1:51:3f:c0:2f:18:a7:53:
                    69:36:36:ce:f2:69:74:8a:a8:12:94:ac:fb:8d:51:
                    f8:6c:8d:e4:c7:8f:52:90:e0:bf:db:8b:c6:c1:17:
                    7b:f3:fd:45:59:da:b2:dd:58:e2:5c:26:36:89:1d:
                    55:ad:06:03:9b:92:9b:a1:6d:cf:ac:1b:85:c3:da:
                    a6:80:89:26:82:b4:b7:35:fc:1c:37:b1:3d:6e:c5:
                    8a:71:18:b8:5e:41:2b:e0:fd:de:de:a5:d2:ff:c3:
                    86:33:79:48:ff:51:cd:49:35:0b:f3:ca:46:eb:30:
                    70:c0:4c:28:3a:21:db:d4:9b:ee:34:7f:96:18:4b:
                    28:0c:05:b2:b5:54:99:fd:20:4f:23:87:02:f7:9d:
                    65:b2:0d:a2:a2:06:e3:19:8f:a3:e3:14:ca:18:49:
                    7d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:24:04:F6:73:68:AC:CD:C9:1F:77:89:68:B2:D8:C8:D9:0C:31:E8
            X509v3 Authority Key Identifier:
                keyid:1E:5C:10:7E:FD:03:CF:13:D2:14:A3:9A:6A:2C:E8:DD:AD:30:47:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlwQfv0DzxPSFKOaaizo3a0wRw4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:81:9c:cb:e4:a3:74:89:63:27:67:f7:20:80:b3:23:15:7f:
         e6:ae:0f:2e:df:d4:44:79:12:25:e0:69:51:21:8b:da:15:4c:
         fc:bd:07:24:27:a4:bd:58:ea:58:b0:c8:c0:4a:93:e1:d7:31:
         d3:74:65:e1:91:9e:89:8d:c3:b5:c6:e9:1f:36:4a:06:05:d2:
         98:98:be:0c:dc:58:eb:bb:e2:c8:af:e4:38:fe:f8:f7:c8:c3:
         a8:ef:3a:ee:45:d9:25:10:93:ee:7c:b4:5e:db:55:64:f1:4b:
         50:56:4e:1f:d5:f0:2e:22:db:36:70:ff:ef:d0:ce:16:af:15:
         f6:fb:9a:dd:65:1e:f7:3b:7a:c3:48:f4:1c:c9:e2:5e:ef:f2:
         a7:16:eb:10:d7:37:5f:b4:37:a5:4b:ba:5a:7b:c2:4e:28:dd:
         a7:30:28:ed:60:0c:29:a6:55:8d:f9:80:12:68:0c:93:97:2d:
         e4:88:db:69:86:73:9c:b0:a3:9b:69:bf:26:2e:4e:82:5e:6e:
         71:e9:7e:c7:89:af:a1:ae:61:c1:77:27:f8:1a:6c:d0:af:85:
         85:79:9d:35:41:a5:7a:1e:9b:38:0f:db:d1:bd:74:df:c8:bb:
         9f:83:1f:5f:a6:ae:64:3c:03:1a:ba:b9:89:d9:bc:c4:8b:82:
         ae:63:39:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:08:08 2026 by rpki-client