Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft
File:                     1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft (raw, json)
Hash identifier:          LkzOjTABV6++bv25J06Dd8nRvhHaxVZM3kvnVQpwD7c=
Subject key identifier:   87:0C:D5:67:F7:9D:9E:A0:8C:07:E5:0E:4E:30:E8:F3:2E:D4:A4:F9
Authority key identifier: D4:A1:C7:1D:35:73:A6:E4:46:13:89:41:D7:F7:EF:EC:E3:97:AF:B5
Certificate issuer:       /CN=A9192920/serialNumber=D4A1C71D3573A6E446138941D7F7EFECE397AFB5
Certificate serial:       07A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft
Manifest number:          0798
Signing time:             Sat 18 Oct 2025 22:47:16 +0000
Manifest this update:     Sat 18 Oct 2025 22:47:15 +0000
Manifest next update:     Sat 25 Oct 2025 22:47:15 +0000
Files and hashes:         1: 1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl (hash: R3R6hya5z4sQctL8MM3aZEpzL2IG3kzeuXTRtuWPYak=)
                          2: 213D6260B68511EC81F0D430C4F9AE02.roa (hash: ORWgLETy9xdLV6va58PYuRXQugFIvAZqmcO/bSIQ6Ds=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl
                          rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1954 (0x7a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192920, serialNumber=D4A1C71D3573A6E446138941D7F7EFECE397AFB5
        Validity
            Not Before: Oct 18 22:47:15 2025 GMT
            Not After : Oct 25 22:47:15 2025 GMT
        Subject: CN=68f418f3-4fb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:39:fd:b5:b0:8a:e6:71:fe:a3:28:d7:c6:95:
                    63:6d:9c:59:b7:c0:d0:97:1e:a1:10:60:79:82:03:
                    39:eb:ba:1d:0c:e9:8e:15:1a:ac:80:a1:a4:8d:3f:
                    06:23:dd:8c:ea:b1:53:56:ec:b6:e8:ec:65:08:36:
                    15:9f:32:c3:2b:bc:a6:d8:e5:a7:fa:e8:28:91:49:
                    88:56:a6:b7:79:d7:b3:6e:e7:ea:c4:40:df:13:af:
                    05:8f:6d:17:2c:6a:20:2a:26:c4:d9:99:33:cc:a5:
                    a5:a3:ef:89:fc:e8:c2:19:cc:29:17:e3:9d:d1:01:
                    b6:94:7e:41:5b:f0:0e:c3:5e:50:ea:ae:f1:25:cf:
                    37:50:f8:fe:cc:3f:b3:65:ec:da:1d:93:41:11:1d:
                    5c:5b:90:8f:8b:08:28:c7:a8:f2:5b:57:fe:81:d7:
                    7a:4a:a1:c6:ab:1f:c3:61:80:14:9f:ba:c8:b9:a6:
                    4b:22:2e:58:06:92:4e:79:70:8e:27:bb:70:ff:16:
                    11:f9:fa:58:b1:13:ed:4f:03:68:fe:5e:4f:f0:b3:
                    f8:eb:35:0f:6e:ce:55:41:6b:cc:5c:f6:6b:fe:e6:
                    67:fa:ca:c3:a0:89:c0:16:be:b2:91:df:2d:3f:97:
                    22:1d:34:fe:2b:6e:27:39:ca:3b:bf:06:45:5e:6c:
                    1c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:0C:D5:67:F7:9D:9E:A0:8C:07:E5:0E:4E:30:E8:F3:2E:D4:A4:F9
            X509v3 Authority Key Identifier:
                keyid:D4:A1:C7:1D:35:73:A6:E4:46:13:89:41:D7:F7:EF:EC:E3:97:AF:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:34:a3:90:a8:b9:ae:2b:59:e5:ab:b6:f3:88:ba:8a:bc:e0:
         52:58:77:dd:5f:f6:f3:86:6b:6c:bd:e2:c3:54:0f:b7:8e:0a:
         a2:ab:93:e4:24:2d:18:3b:fe:2d:80:bc:76:78:df:8b:45:cc:
         5a:61:2a:8d:3c:99:a1:87:0c:6b:73:ae:78:2a:f7:4b:f2:e5:
         57:9d:df:27:59:48:b8:09:ea:1e:af:6e:fb:56:8f:76:b7:ca:
         51:d0:67:c4:8e:94:c0:ba:63:df:44:0d:3a:97:14:b4:b5:43:
         a6:59:32:1a:94:c0:66:d9:c0:1a:8b:af:f4:73:29:1a:f6:9e:
         de:16:eb:f8:5c:9d:64:ea:2f:b9:f9:83:69:de:90:7b:eb:26:
         76:58:cc:41:92:46:25:7a:15:4b:47:90:6d:44:02:f9:38:d9:
         57:94:4a:22:39:08:de:11:b7:c8:42:00:16:46:54:ec:c5:48:
         3d:d2:d4:74:9b:50:4f:b3:07:c3:83:d2:4b:70:a6:1e:20:f8:
         f2:12:53:cc:15:83:93:4e:e0:7a:97:b0:6b:0b:8d:0f:70:f2:
         aa:ef:b3:1b:15:ed:44:73:27:87:60:69:e3:db:e4:a2:96:28:
         87:9b:66:1c:0b:71:32:51:d4:85:50:d9:7b:19:b1:5e:6c:32:
         2d:4f:97:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:07:03 2025 by rpki-client