Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft
File:                     1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft (raw, json)
Hash identifier:          zqTZLRvJo2j461qfVbctVyrIeEf9ONSf9UvgenVkTIE=
Subject key identifier:   BF:4F:F2:13:6B:68:0E:B1:3B:FA:53:4B:EE:C8:13:D7:45:D2:97:15
Authority key identifier: D4:A1:C7:1D:35:73:A6:E4:46:13:89:41:D7:F7:EF:EC:E3:97:AF:B5
Certificate issuer:       /CN=A9192920/serialNumber=D4A1C71D3573A6E446138941D7F7EFECE397AFB5
Certificate serial:       07EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft
Manifest number:          0804
Signing time:             Sat 28 Feb 2026 21:41:59 +0000
Manifest this update:     Sat 28 Feb 2026 21:41:58 +0000
Manifest next update:     Sat 07 Mar 2026 21:41:58 +0000
Files and hashes:         1: 1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl (hash: IpX7ep0gJq3/nFOS/TLRfcC8Nk7zZ+hxaf74cx080YQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl
                          rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 21:41:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2028 (0x7ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192920, serialNumber=D4A1C71D3573A6E446138941D7F7EFECE397AFB5
        Validity
            Not Before: Feb 28 21:41:58 2026 GMT
            Not After : Mar  7 21:41:58 2026 GMT
        Subject: CN=69a36127-280a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e6:da:37:5a:2f:7a:bb:07:e5:51:14:2d:c7:
                    0a:93:1d:2a:c9:cb:3f:d4:ee:c3:b6:59:cf:81:8f:
                    b9:72:48:ce:17:51:91:ba:fb:a9:29:c8:6e:c6:9c:
                    64:a6:fe:6c:a9:af:ba:96:40:81:1b:f9:4f:d0:54:
                    a7:cf:ee:11:ca:b7:7f:71:f4:9a:a9:e7:6f:9d:02:
                    ec:38:97:03:fd:5a:3f:57:48:a5:57:c7:53:c6:ef:
                    a3:16:18:82:dd:26:4a:fd:db:19:48:17:f9:69:f3:
                    37:c0:30:a6:f3:c8:12:94:d5:28:6b:14:4b:ed:cf:
                    fc:f4:bf:8d:9b:6b:93:c1:e7:0f:fe:6d:0b:0b:25:
                    bb:61:28:72:7c:7d:a6:07:c5:2f:65:4e:b9:42:9c:
                    37:44:8d:58:f2:4f:c5:8c:da:aa:ba:86:5d:cb:44:
                    a8:f9:03:9c:5b:f7:64:bb:47:07:ef:57:86:22:5b:
                    1b:66:00:ed:e5:02:bb:ed:a3:2f:78:d5:7f:8c:e6:
                    b8:15:fc:28:9e:91:b7:22:3d:92:67:af:09:30:04:
                    15:f1:0b:06:98:72:a0:99:2b:2d:a4:60:90:b1:7b:
                    9b:cb:f3:4d:0d:07:9e:7b:51:e7:e1:10:0d:bc:66:
                    ce:8f:51:bf:8d:30:bc:9a:08:f2:c0:e5:a1:4c:a9:
                    0f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:4F:F2:13:6B:68:0E:B1:3B:FA:53:4B:EE:C8:13:D7:45:D2:97:15
            X509v3 Authority Key Identifier:
                keyid:D4:A1:C7:1D:35:73:A6:E4:46:13:89:41:D7:F7:EF:EC:E3:97:AF:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:56:0a:24:5b:fe:1c:cc:52:d6:4e:60:db:bb:e0:e1:d2:13:
         7a:3d:91:e1:98:7e:8e:13:ec:24:39:cb:be:84:29:b7:8e:ba:
         fe:46:8d:ea:8d:5c:ec:af:c8:49:14:ec:6c:00:dd:52:b8:99:
         e3:e2:e2:cc:a8:03:e5:3c:ba:91:9a:3e:ae:10:b2:1b:9b:75:
         69:95:ca:d5:a2:c8:ff:f9:ac:c7:cd:8c:d2:6b:13:f4:54:f2:
         c6:db:65:eb:b6:62:de:c2:4f:68:76:e8:a2:c4:9e:0e:61:eb:
         77:52:c3:26:11:5c:ff:09:81:e0:25:f6:47:a5:92:72:65:d1:
         fd:b0:4c:c0:54:59:3a:7e:b3:7b:fa:2c:2e:4c:c1:cf:0d:8b:
         c1:9e:6c:df:fc:d2:4d:77:90:40:47:cd:9e:cb:3a:20:8d:91:
         4b:87:a8:dd:9d:b0:fa:13:ee:ea:49:c2:46:93:26:75:a1:8d:
         47:37:bf:fe:1f:fd:d0:3f:0c:1a:2e:d4:a1:ed:b3:bb:17:73:
         35:89:79:1e:bc:b2:8f:44:35:dd:43:09:83:69:5b:7b:be:b4:
         4e:43:6d:31:85:fb:86:5a:44:04:69:6c:06:9e:62:0c:d7:eb:
         4a:86:38:ac:1e:3e:ed:08:0a:aa:27:ef:93:1b:24:2f:d8:35:
         f4:5d:8f:92
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTI5MjAxMTAvBgNVBAUTKEQ0QTFDNzFEMzU3M0E2RTQ0NjEzODk0MUQ3RjdFRkVD
RTM5N0FGQjUwHhcNMjYwMjI4MjE0MTU4WhcNMjYwMzA3MjE0MTU4WjAYMRYwFAYD
VQQDDA02OWEzNjEyNy0yODBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkebaN1oversH5VEULccKkx0qycs/1O7DtlnPgY+5ckjOF1GRuvupKchuxpxk
pv5sqa+6lkCBG/lP0FSnz+4Ryrd/cfSaqedvnQLsOJcD/Vo/V0ilV8dTxu+jFhiC
3SZK/dsZSBf5afM3wDCm88gSlNUoaxRL7c/89L+Nm2uTwecP/m0LCyW7YShyfH2m
B8UvZU65Qpw3RI1Y8k/FjNqquoZdy0So+QOcW/dku0cH71eGIlsbZgDt5QK77aMv
eNV/jOa4FfwonpG3Ij2SZ68JMAQV8QsGmHKgmSstpGCQsXuby/NNDQeee1Hn4RAN
vGbOj1G/jTC8mgjywOWhTKkP/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL9P8hNr
aA6xO/pTS+7IE9dF0pcVMB8GA1UdIwQYMBaAFNShxx01c6bkRhOJQdf37+zjl6+1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjkyMC83MEMwNDQyNjI3
RUIxMUVCODJGMjcwNDdDNEY5QUUwMi8xS0hISFRWenB1UkdFNGxCMV9mdjdPT1hy
N1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFLSEhIVFZ6cHVSR0U0bEIxX2Z2N09PWHI3VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MjkyMC83MEMwNDQyNjI3RUIxMUVCODJGMjcwNDdDNEY5QUUwMi8xS0hISFRWenB1
UkdFNGxCMV9mdjdPT1hyN1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABFYKJFv+HMxS1k5g27vg4dITej2R4Zh+jhPsJDnLvoQpt466/kaN6o1c7K/I
SRTsbADdUriZ4+LizKgD5Ty6kZo+rhCyG5t1aZXK1aLI//msx82M0msT9FTyxttl
67Zi3sJPaHboosSeDmHrd1LDJhFc/wmB4CX2R6WScmXR/bBMwFRZOn6ze/osLkzB
zw2LwZ5s3/zSTXeQQEfNnss6II2RS4eo3Z2w+hPu6knCRpMmdaGNRze//h/90D8M
Gi7Uoe2zuxdzNYl5Hryyj0Q13UMJg2lbe760TkNtMYX7hlpEBGlsBp5iDNfrSoY4
rB4+7QgKqifvkxskL9g19F2Pkg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:25:56 2026 by rpki-client