Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.mft
File:                     hwGGtlfRGymKhLAkIO504fu1woI.mft (raw, json)
Hash identifier:          +fNk+gkFEnlejr9CEFIUmcqLc6S1bq64++gQGpx7Hdk=
Subject key identifier:   A6:62:5C:5D:60:8E:13:67:15:DB:4C:D3:83:9B:10:FD:31:EF:10:E0
Authority key identifier: 87:01:86:B6:57:D1:1B:29:8A:84:B0:24:20:EE:74:E1:FB:B5:C2:82
Certificate issuer:       /CN=A9191885/serialNumber=870186B657D11B298A84B02420EE74E1FBB5C282
Certificate serial:       01B8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hwGGtlfRGymKhLAkIO504fu1woI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.mft
Manifest number:          01AF
Signing time:             Mon 01 Jun 2026 04:47:07 +0000
Manifest this update:     Mon 01 Jun 2026 04:47:07 +0000
Manifest next update:     Mon 08 Jun 2026 04:47:07 +0000
Files and hashes:         1: hwGGtlfRGymKhLAkIO504fu1woI.crl (hash: AMEuoSU4L8Db4MlzzldqLbygMz5DGNvjdwt3prj73h0=)
                          2: 8E31656CC9FF11EEA53CA25CC4F9AE02.roa (hash: nklLe8rD44I5yJJy7aHPD+A/b+2jYTeXcDSJkM8vc6I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.crl
                          rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hwGGtlfRGymKhLAkIO504fu1woI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 04:47:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 440 (0x1b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191885, serialNumber=870186B657D11B298A84B02420EE74E1FBB5C282
        Validity
            Not Before: Jun  1 04:47:07 2026 GMT
            Not After : Jun  8 04:47:07 2026 GMT
        Subject: CN=6a1d0ecb-d1ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:31:f4:f0:46:36:85:79:01:93:2a:d8:7c:de:
                    ff:d3:a1:4e:97:88:ac:86:85:c4:08:c8:d9:fd:a1:
                    9b:2f:11:1c:df:ef:a6:57:7d:20:61:4f:96:a5:b9:
                    95:54:84:34:fd:e8:9c:57:c0:45:95:ed:3a:ea:59:
                    8a:a2:a4:7b:1a:31:03:fd:4f:7d:ca:00:3a:02:37:
                    a1:28:5d:f9:a4:54:7d:52:3b:f4:b5:76:7d:94:a0:
                    8b:54:02:37:b3:26:9f:73:57:d9:40:95:85:b9:2f:
                    e2:d8:d8:c6:a9:5d:0a:0a:a7:8c:49:28:94:d8:be:
                    82:36:09:ec:8c:b5:ae:30:1e:f5:5d:0d:a8:d2:fe:
                    23:5f:99:cd:c2:3e:9b:48:76:6c:5e:10:b3:7d:e6:
                    3e:be:09:70:77:2a:b8:a3:7b:b9:da:71:a8:9e:f2:
                    4e:c9:da:a0:fe:0e:88:10:f7:0e:08:1a:5c:bb:48:
                    e4:55:a5:fc:22:69:ce:db:ed:5c:c7:24:c5:b8:3b:
                    50:98:2c:1f:cc:e5:57:77:e4:d8:f6:b5:63:6e:5b:
                    0d:a9:fd:a5:b0:5a:99:d2:a9:be:06:0c:d8:31:10:
                    e1:09:1b:62:3b:d6:ba:bb:6b:75:3f:78:5c:37:c7:
                    f4:25:fa:07:2b:d4:6e:33:3b:b9:7c:25:50:56:c4:
                    6a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:62:5C:5D:60:8E:13:67:15:DB:4C:D3:83:9B:10:FD:31:EF:10:E0
            X509v3 Authority Key Identifier:
                keyid:87:01:86:B6:57:D1:1B:29:8A:84:B0:24:20:EE:74:E1:FB:B5:C2:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hwGGtlfRGymKhLAkIO504fu1woI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:ac:1e:4b:d3:8a:a5:17:d6:85:cf:74:44:e5:84:10:a0:b4:
         be:ee:67:3c:23:7f:a3:f1:09:e3:33:6e:b0:5e:d6:96:8a:96:
         e6:5a:55:57:60:4a:7f:d9:11:59:50:0f:98:f5:5e:61:da:40:
         19:94:61:d1:bd:dc:35:d5:d9:f1:44:f6:2d:b5:51:89:55:ed:
         b5:21:f6:ee:27:46:e0:3c:14:75:3f:75:3a:ab:e0:1c:82:5c:
         75:5f:1e:84:ef:07:22:b8:86:92:9c:78:5b:60:e1:42:68:9e:
         79:90:24:08:22:1c:ad:09:82:87:01:06:46:7f:6c:1c:42:17:
         75:db:b8:60:3e:17:d8:dc:ef:c9:7b:72:cc:0b:37:3a:49:f6:
         90:a5:6d:e7:47:18:de:17:b6:5d:45:5c:24:e9:d1:3b:48:5b:
         71:a8:25:c3:bb:fa:eb:9f:44:0d:af:04:81:fa:ae:d1:7a:2a:
         a0:5a:79:e3:42:65:c7:03:7b:16:95:81:ee:fe:9d:43:0f:1e:
         3f:eb:3f:85:59:7d:f4:bb:77:c8:a2:51:a0:3c:be:c7:84:1e:
         a7:86:9e:4f:fa:69:b9:56:87:09:aa:49:bb:5a:ff:d7:f1:b6:
         f0:20:d5:6c:b9:1d:da:9b:84:0c:45:eb:f8:4d:a2:61:01:7e:
         1a:3c:eb:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:31 2026 by rpki-client