Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.mft
File:                     SQH6eyf-ZzdVM2bPjbj9q9L3sUk.mft (raw, json)
Hash identifier:          vVRmvGuKht7VKlPIlkJMsdTZ7UkyA1651L+dlew9HRs=
Subject key identifier:   BE:B7:EE:F5:FB:A6:45:CC:97:FC:5D:C6:0F:D5:DF:BD:8D:2B:C6:7D
Authority key identifier: 49:01:FA:7B:27:FE:67:37:55:33:66:CF:8D:B8:FD:AB:D2:F7:B1:49
Certificate issuer:       /CN=A9198BAC/serialNumber=4901FA7B27FE6737553366CF8DB8FDABD2F7B149
Certificate serial:       20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.mft
Manifest number:          20
Signing time:             Tue 19 May 2026 08:46:45 +0000
Manifest this update:     Tue 19 May 2026 08:46:45 +0000
Manifest next update:     Tue 26 May 2026 08:46:45 +0000
Files and hashes:         1: SQH6eyf-ZzdVM2bPjbj9q9L3sUk.crl (hash: Zqfdb+LgGJ+7rlNAv3X0a1jIrguwro27uiWbcJ7E5qI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.crl
                          rsync://rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 May 2026 08:46:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198BAC, serialNumber=4901FA7B27FE6737553366CF8DB8FDABD2F7B149
        Validity
            Not Before: May 19 08:46:45 2026 GMT
            Not After : May 26 08:46:45 2026 GMT
        Subject: CN=6a0c2375-e80f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:01:c4:87:72:75:ca:7b:5a:ba:9e:b9:6b:30:
                    14:97:14:eb:30:96:43:6e:2c:a9:01:0c:a1:d0:17:
                    e9:0c:67:ce:fd:cf:1c:0b:38:24:f4:36:08:51:8c:
                    ba:2c:97:53:26:0a:e9:43:d2:01:05:53:ca:bf:c7:
                    8a:74:58:92:33:4a:eb:a6:57:95:c2:ea:40:f4:9d:
                    76:16:db:48:b5:d1:98:d4:ea:46:e3:96:86:20:b4:
                    4b:a8:3b:a3:b8:38:ea:dc:20:85:c2:c1:52:f5:c7:
                    32:ad:4a:2b:4d:34:79:4b:63:30:b6:62:5e:5f:48:
                    c3:71:05:48:43:e0:e9:21:11:0c:0c:46:9c:dd:db:
                    24:0a:e9:f1:ca:a0:99:c5:34:bb:1a:90:4b:a2:fc:
                    99:41:cc:c1:a9:ac:01:dc:77:6d:28:ea:d7:54:ce:
                    ea:3a:04:3e:40:24:9e:aa:21:1d:b7:f2:14:74:e7:
                    7d:f1:c3:89:fb:2b:97:49:f1:6d:29:74:ee:f9:5f:
                    cb:4f:31:4e:d9:b8:96:af:b2:b7:44:7d:ef:fa:69:
                    6a:09:54:a2:b4:cb:0a:ee:53:f1:4b:88:02:8a:ca:
                    13:ed:1b:9e:74:15:8c:11:d9:4c:e3:98:24:02:3d:
                    38:89:79:fd:dc:c3:fe:6f:cd:38:39:53:ea:fe:53:
                    0c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B7:EE:F5:FB:A6:45:CC:97:FC:5D:C6:0F:D5:DF:BD:8D:2B:C6:7D
            X509v3 Authority Key Identifier:
                keyid:49:01:FA:7B:27:FE:67:37:55:33:66:CF:8D:B8:FD:AB:D2:F7:B1:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:a4:54:16:27:02:aa:10:4f:4f:a2:36:04:8b:ff:83:3a:7c:
         f9:73:9e:c5:49:8a:eb:4a:63:69:c5:d6:78:01:c8:ba:7e:63:
         dc:05:9f:ee:ec:22:a4:2c:f9:f4:68:53:2e:f4:cd:11:38:1d:
         db:dc:f6:b4:88:94:66:79:fd:f3:d2:bb:49:c7:7a:7a:11:a0:
         6d:ce:8d:bb:2b:a9:aa:10:6f:fd:91:a0:26:d4:9a:f4:40:7c:
         ef:dd:e6:0c:96:68:1b:13:a2:83:77:96:7f:a2:5e:97:c6:23:
         7f:d8:7e:2e:15:a7:89:5b:3d:8d:43:ef:b3:bb:cf:ee:61:d0:
         77:49:aa:5f:ca:c4:a3:c4:70:0b:fe:fe:79:cc:ef:cd:8e:e6:
         71:98:56:8f:0b:fb:62:c4:95:9f:f1:65:c6:c9:8e:65:cf:43:
         79:07:45:d7:2e:51:81:f8:aa:18:c1:ea:07:ad:cb:92:3f:c2:
         6c:99:ab:11:4b:75:03:7b:42:70:08:79:97:87:a3:21:81:64:
         30:d7:29:f5:07:57:dd:f0:f8:7a:83:fc:64:b6:3b:89:dc:b8:
         9c:c3:5e:c1:14:ab:a5:66:94:58:11:75:ad:d3:d9:21:9a:96:
         5c:ec:c0:58:97:61:b7:5f:da:ac:9d:7b:3e:ff:21:08:ee:ea:
         94:54:5b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:54:43 2026 by rpki-client