Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.mft
File:                     SQH6eyf-ZzdVM2bPjbj9q9L3sUk.mft (raw, json)
Hash identifier:          wRnTgTwkT6Y653xJfOUt/Y/LMhCtRLarVIvh72vd5oA=
Subject key identifier:   52:43:5F:25:06:6C:E9:F2:CF:FE:0A:27:31:E7:53:3E:03:28:EA:63
Authority key identifier: 49:01:FA:7B:27:FE:67:37:55:33:66:CF:8D:B8:FD:AB:D2:F7:B1:49
Certificate issuer:       /CN=A9198BAC/serialNumber=4901FA7B27FE6737553366CF8DB8FDABD2F7B149
Certificate serial:       0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.mft
Manifest number:          0A
Signing time:             Sun 05 Apr 2026 08:29:40 +0000
Manifest this update:     Sun 05 Apr 2026 08:29:39 +0000
Manifest next update:     Sun 12 Apr 2026 08:29:39 +0000
Files and hashes:         1: SQH6eyf-ZzdVM2bPjbj9q9L3sUk.crl (hash: AaPaWO3uXfGi/FDZa4KeK/CBd1JALSsaqsmTpLtqIVk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.crl
                          rsync://rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 08:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198BAC, serialNumber=4901FA7B27FE6737553366CF8DB8FDABD2F7B149
        Validity
            Not Before: Apr  5 08:29:39 2026 GMT
            Not After : Apr 12 08:29:39 2026 GMT
        Subject: CN=69d21d73-7ab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f5:19:7e:c6:71:73:de:64:b4:21:16:b2:e0:
                    31:30:95:50:41:d7:51:b7:ea:04:99:d9:cc:2d:d5:
                    af:98:a8:aa:95:52:c7:2a:24:c1:15:15:d5:69:22:
                    2e:a0:ef:93:ab:1a:7c:9a:83:95:7d:b4:3e:7f:53:
                    6f:f7:1f:a7:76:9e:5c:10:be:e0:f6:8c:7c:f1:ff:
                    23:20:2b:ae:ee:2d:fc:4b:bf:71:67:47:33:4b:f8:
                    21:26:14:f2:96:6a:3a:07:31:1b:03:e1:5c:3e:42:
                    0f:a1:8a:4e:e0:03:ab:bb:f3:80:54:39:fa:03:f3:
                    4a:6d:cb:f0:f2:af:02:79:9a:8a:a7:0d:d3:48:3a:
                    ba:93:50:bc:f9:d5:7d:92:44:12:32:11:31:82:09:
                    a0:7b:72:3c:da:13:57:5c:e4:83:9a:ea:a5:2c:fa:
                    b5:f0:5f:f7:ba:b0:f7:22:51:1c:35:30:be:7b:d1:
                    fd:bc:d4:f5:b0:fd:ed:bb:33:df:55:e5:b7:46:db:
                    97:52:d7:3a:04:df:41:0a:94:05:fc:fb:17:c6:dd:
                    2f:98:97:32:27:d9:d6:01:84:87:00:07:c4:16:0a:
                    85:71:b6:c5:cb:bf:51:8c:ec:72:41:31:d9:b7:a6:
                    4c:a8:fd:b7:78:67:e7:6d:41:8f:ba:8e:f9:46:21:
                    f6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:43:5F:25:06:6C:E9:F2:CF:FE:0A:27:31:E7:53:3E:03:28:EA:63
            X509v3 Authority Key Identifier:
                keyid:49:01:FA:7B:27:FE:67:37:55:33:66:CF:8D:B8:FD:AB:D2:F7:B1:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:81:65:15:ec:63:fb:49:ca:ff:a6:9d:e3:c7:2a:10:51:a2:
         ea:51:f9:57:5a:7c:ca:f9:4d:6b:30:63:ba:79:04:ab:95:ce:
         bd:4d:a1:3e:89:82:df:86:6d:3b:8d:bd:e5:23:51:cf:e8:7f:
         b4:29:99:75:2f:e0:d8:2f:49:c2:1a:dc:30:7a:06:91:59:86:
         3f:cc:b6:00:17:0a:b9:24:67:7f:b8:18:93:db:bf:c0:44:c5:
         cb:2e:15:6a:04:67:d9:8a:0a:0c:39:46:9b:0d:cb:6c:20:e7:
         d2:c6:19:34:e3:bd:9a:89:c9:b6:ee:e7:4a:65:94:fc:da:02:
         14:5d:ac:ac:91:b5:f2:37:5a:14:e9:dc:48:c4:f0:18:83:b0:
         0f:f5:50:ac:07:69:b5:44:b8:9a:4e:51:32:2a:29:46:99:40:
         64:44:39:69:1b:2a:36:69:b5:29:06:e6:2f:3e:49:95:88:a3:
         0b:6c:11:b6:45:cb:bd:8c:b9:f7:7d:2f:fd:58:7a:d5:c6:8d:
         87:9a:6a:72:e5:d8:ff:22:3c:c6:1d:b1:2b:ae:10:93:ce:dd:
         a6:4b:8c:e1:72:f0:21:f3:0a:66:00:b3:d0:eb:3b:80:90:2e:
         16:68:c9:c3:1c:bf:b0:0c:ea:41:57:eb:ee:53:69:7a:38:70:
         50:4a:b3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:57:44 2026 by rpki-client