Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917286F/0ADA084653BD11F1B6592A56B9833773/Hwqez8yog84ajHjPFa9I2e-VQWo.mft
File:                     Hwqez8yog84ajHjPFa9I2e-VQWo.mft (raw, json)
Hash identifier:          SWX8XqTXioDLVrdoKwn41p2Xj8xv1HIMUch+pSUhqow=
Subject key identifier:   D3:8D:3D:36:50:21:09:91:F0:6D:8A:78:22:E9:10:27:2B:82:1F:FE
Authority key identifier: 1F:0A:9E:CF:CC:A8:83:CE:1A:8C:78:CF:15:AF:48:D9:EF:95:41:6A
Certificate issuer:       /CN=A917286F/serialNumber=1F0A9ECFCCA883CE1A8C78CF15AF48D9EF95416A
Certificate serial:       20
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Hwqez8yog84ajHjPFa9I2e-VQWo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917286F/0ADA084653BD11F1B6592A56B9833773/Hwqez8yog84ajHjPFa9I2e-VQWo.mft
Manifest number:          1F
Signing time:             Fri 17 Jul 2026 10:14:34 +0000
Manifest this update:     Fri 17 Jul 2026 10:14:33 +0000
Manifest next update:     Fri 24 Jul 2026 10:14:33 +0000
Files and hashes:         1: Hwqez8yog84ajHjPFa9I2e-VQWo.crl (hash: ybt07whZvF6KyTYiJpVyxeZv90+9rjo13jivECk1sHk=)
                          2: 427F4E6653C011F1A527BD9DBA833773.roa (hash: eG5S+GARzWRbVnPna51fSv5pLFPdQ2BwMOqn8Rq4jV0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917286F/0ADA084653BD11F1B6592A56B9833773/Hwqez8yog84ajHjPFa9I2e-VQWo.crl
                          rsync://rpki.apnic.net/member_repository/A917286F/0ADA084653BD11F1B6592A56B9833773/Hwqez8yog84ajHjPFa9I2e-VQWo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Hwqez8yog84ajHjPFa9I2e-VQWo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 10:14:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917286F, serialNumber=1F0A9ECFCCA883CE1A8C78CF15AF48D9EF95416A
        Validity
            Not Before: Jul 17 10:14:33 2026 GMT
            Not After : Jul 24 10:14:33 2026 GMT
        Subject: CN=6a5a0089-0601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2e:ae:c3:3f:76:4a:bf:7d:13:db:9d:14:23:
                    59:77:03:d8:cc:3a:60:e7:82:9e:4b:0d:18:4d:28:
                    31:e3:f2:4b:ea:0e:ab:33:f1:e3:2a:f6:33:02:91:
                    3c:f2:16:73:d1:24:27:40:38:cc:e7:7e:02:7c:39:
                    85:8b:81:70:94:0c:3d:80:15:cf:b8:ef:c5:06:d2:
                    80:06:eb:c1:c8:2f:7f:79:16:e7:cf:51:15:58:2b:
                    70:92:82:2f:59:f0:c3:98:94:b0:65:d5:49:e6:da:
                    91:51:9b:85:27:7b:1d:02:fa:3a:17:24:1a:e8:8d:
                    b5:bb:29:df:21:7b:35:1b:99:e0:e3:0f:c6:93:4e:
                    8f:c7:20:7e:d6:7c:97:9c:08:e0:2b:2b:2b:ab:d3:
                    f4:1a:4b:2c:01:89:12:6d:31:6a:c6:a5:58:54:2b:
                    a2:98:62:f9:ad:e5:4f:37:cb:47:5b:4e:dc:69:07:
                    db:1f:8c:55:c0:41:91:2b:8e:92:ae:c8:af:a4:a4:
                    37:08:88:2c:10:66:35:c5:b8:ad:01:b1:17:3a:f2:
                    c0:10:fe:a3:0e:72:cc:f6:ab:73:27:aa:d0:20:97:
                    e0:9b:a6:13:87:73:09:39:92:c3:bd:64:93:ad:a3:
                    92:e6:bd:d9:49:d7:e8:02:d6:83:f4:8e:71:a3:f1:
                    ae:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:8D:3D:36:50:21:09:91:F0:6D:8A:78:22:E9:10:27:2B:82:1F:FE
            X509v3 Authority Key Identifier:
                keyid:1F:0A:9E:CF:CC:A8:83:CE:1A:8C:78:CF:15:AF:48:D9:EF:95:41:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917286F/0ADA084653BD11F1B6592A56B9833773/Hwqez8yog84ajHjPFa9I2e-VQWo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Hwqez8yog84ajHjPFa9I2e-VQWo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917286F/0ADA084653BD11F1B6592A56B9833773/Hwqez8yog84ajHjPFa9I2e-VQWo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:8d:e7:0d:54:f6:74:5a:30:da:c3:d0:3b:c6:8a:57:aa:bd:
         99:4f:51:31:22:44:11:9e:2c:8a:8a:1b:ca:f4:9e:5f:08:00:
         e8:d0:1b:f2:30:a4:73:86:1e:e3:a3:a0:3c:99:ad:c8:73:5a:
         ce:87:b1:a0:7c:0a:fd:b8:fc:d1:c0:6b:49:63:c1:22:0d:6e:
         74:4f:f2:db:a5:79:f1:9b:47:af:96:0a:1d:d4:4d:45:8d:51:
         e4:a5:58:6f:35:1a:70:ee:8a:d3:bb:ec:ac:55:14:3d:ee:aa:
         16:0b:82:74:c3:a6:db:18:3b:70:e0:16:da:1d:65:8c:1f:8e:
         bf:31:4b:0d:1f:67:cf:a1:03:7c:a7:ff:e6:f0:76:50:e5:04:
         2e:65:33:c8:2a:e7:30:0a:a8:4a:66:4f:65:6e:5e:17:fb:f6:
         86:fd:ba:01:66:d3:3d:57:49:38:05:de:bd:06:c8:67:b4:d0:
         fc:21:24:7c:b4:3e:76:9e:a1:8a:06:54:6d:fc:fd:54:55:26:
         e7:ba:89:15:fd:52:2f:31:33:c9:94:3c:fc:9b:79:b1:8b:2f:
         1d:32:e2:3d:e8:36:e0:1d:83:5c:e7:d2:30:26:80:f7:82:5e:
         a8:98:73:09:eb:a1:77:ef:80:08:1d:93:30:14:69:da:78:b1:
         2e:66:d5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:30:10 2026 by rpki-client