Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft
File:                     sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft (raw, json)
Hash identifier:          7XFDe/JIu8S2SzTj/3oRcgBLdV0bJTUq5XRY2CQskLs=
Subject key identifier:   2F:41:18:4D:BF:89:6E:6D:D9:0D:26:CF:50:18:BF:AF:E0:9C:D9:65
Authority key identifier: B2:AD:50:F3:57:1B:DA:1E:EC:07:CC:48:DA:01:D3:F3:75:45:8D:24
Certificate issuer:       /CN=A917E7C7/serialNumber=B2AD50F3571BDA1EEC07CC48DA01D3F375458D24
Certificate serial:       016D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft
Manifest number:          0166
Signing time:             Sun 05 Apr 2026 04:20:14 +0000
Manifest this update:     Sun 05 Apr 2026 04:20:14 +0000
Manifest next update:     Sun 12 Apr 2026 04:20:14 +0000
Files and hashes:         1: sq1Q81cb2h7sB8xI2gHT83VFjSQ.crl (hash: 5MWnzsx2UWapbCz106hk4ekE/sWIyudJZCA1TbzQ/sM=)
                          2: 031A090A5C2C11F0A1180E20C4F9AE02.roa (hash: xUoZT7vuFUFMxxXgURJ7tl9II1Hg1jXwleAc2UHXW1k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.crl
                          rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:20:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365 (0x16d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E7C7, serialNumber=B2AD50F3571BDA1EEC07CC48DA01D3F375458D24
        Validity
            Not Before: Apr  5 04:20:14 2026 GMT
            Not After : Apr 12 04:20:14 2026 GMT
        Subject: CN=69d1e2fe-1b2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b0:08:7e:b6:ac:62:06:1e:ff:37:b6:7d:00:
                    24:54:c8:b8:45:3d:95:1e:f2:31:a2:a2:74:d5:fb:
                    7a:29:b8:bb:af:9b:9b:08:55:65:0c:46:9a:0a:ce:
                    e8:c4:15:a7:1f:43:6b:ed:f1:94:62:01:ab:eb:73:
                    f5:8b:b6:fe:fd:b2:49:30:e8:30:ef:df:49:f7:e9:
                    4c:a5:e0:c6:8e:6b:7a:54:b3:cc:6b:0a:13:34:89:
                    f1:39:3f:52:55:90:e4:0f:66:a4:ed:98:0b:f0:fd:
                    1f:8b:dd:73:07:67:5a:d6:4e:e9:1d:22:a0:32:9f:
                    b3:a8:b3:71:4a:b4:34:63:79:07:90:01:b9:59:04:
                    a4:aa:9b:1a:f8:b8:c6:ba:b5:d6:05:14:58:f4:cd:
                    8e:62:a3:44:cb:12:b5:b5:89:d1:81:f3:6d:6d:1d:
                    bd:47:d7:96:e0:f4:a6:56:69:d7:77:ae:8e:f2:a0:
                    2e:af:e5:c8:98:d6:68:77:28:40:34:0c:4d:1d:16:
                    c9:91:7f:6c:95:8a:ac:92:25:c2:ce:5e:45:70:04:
                    8e:1a:39:bf:af:65:33:e2:0e:48:a5:6c:eb:91:53:
                    9f:05:78:81:58:37:f7:6f:9d:88:8c:15:84:71:ba:
                    86:a0:d4:b5:17:c1:ba:0b:f7:35:ee:1d:9b:d2:85:
                    28:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:41:18:4D:BF:89:6E:6D:D9:0D:26:CF:50:18:BF:AF:E0:9C:D9:65
            X509v3 Authority Key Identifier:
                keyid:B2:AD:50:F3:57:1B:DA:1E:EC:07:CC:48:DA:01:D3:F3:75:45:8D:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:5e:94:35:65:a8:fb:50:a9:3c:35:00:50:73:2d:d4:e6:27:
         94:b3:ac:99:0a:2f:0c:de:6b:7c:4c:49:0f:31:27:8c:4c:92:
         b1:09:43:5b:e7:58:d3:39:78:cb:23:be:d9:7b:2d:50:4a:c7:
         d0:d3:b5:1d:1e:42:7d:4f:ce:7c:b4:ff:fd:84:fe:d8:2e:20:
         92:e9:ff:67:7e:c7:0d:88:f5:1d:08:c7:8b:b8:4c:03:6b:a6:
         29:6d:ff:71:27:d4:df:7c:ae:6c:17:5b:55:49:60:7d:25:47:
         72:a8:ab:25:33:36:0f:a8:82:d0:ac:0c:34:0d:66:93:c8:0d:
         20:fc:54:b1:3d:45:d9:9b:2c:a6:7f:6b:94:27:32:c5:4f:36:
         41:46:dd:c3:ab:eb:da:f4:e2:bb:3b:6b:6a:b5:19:2d:09:fb:
         44:21:04:87:68:45:dc:2d:81:da:76:b3:71:74:f8:28:3c:12:
         af:b8:dd:d3:44:2d:25:0f:03:84:26:48:53:17:a3:6d:8c:64:
         a7:06:6e:a6:c0:75:04:b9:d5:9e:38:44:e1:6b:f5:d4:88:71:
         3b:c8:1f:c8:90:98:64:d3:f2:db:f7:2f:32:96:b2:f8:98:44:
         76:72:d5:af:5e:6f:3d:14:88:d3:36:21:a2:27:96:65:86:56:
         99:9b:d6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:34:58 2026 by rpki-client