Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft
File:                     sQG1q1GcKuZKv61qVvhD3AmQqFM.mft (raw, json)
Hash identifier:          pg67gUeXt50oxzREQZD1+ha/JKkYBKcNK5P/pRCXlm4=
Subject key identifier:   46:2F:ED:18:88:2E:31:45:87:63:65:98:D4:C5:F4:6E:9E:E0:2A:DF
Authority key identifier: B1:01:B5:AB:51:9C:2A:E6:4A:BF:AD:6A:56:F8:43:DC:09:90:A8:53
Certificate issuer:       /CN=A919B06C/serialNumber=B101B5AB519C2AE64ABFAD6A56F843DC0990A853
Certificate serial:       1232
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft
Manifest number:          20F4
Signing time:             Wed 20 May 2026 17:08:04 +0000
Manifest this update:     Wed 20 May 2026 17:08:03 +0000
Manifest next update:     Wed 27 May 2026 17:08:03 +0000
Files and hashes:         1: sQG1q1GcKuZKv61qVvhD3AmQqFM.crl (hash: Klw+X9mcuTo9G77a50af8wBJ4JkCQW1Nja4dx8bslus=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.crl
                          rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 17:08:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4658 (0x1232)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B06C, serialNumber=B101B5AB519C2AE64ABFAD6A56F843DC0990A853
        Validity
            Not Before: May 20 17:08:03 2026 GMT
            Not After : May 27 17:08:03 2026 GMT
        Subject: CN=6a0dea74-af2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c8:f2:9d:ba:55:6e:40:6c:29:09:88:b5:9f:
                    d5:ab:7f:07:ae:12:d1:b8:27:1e:10:d2:e8:90:6c:
                    45:fb:d2:f5:b8:cc:47:03:c7:f6:94:60:d2:e8:73:
                    6d:68:b9:91:3f:92:7b:21:af:da:14:13:9e:6c:4f:
                    9c:0f:8f:02:c3:c2:3f:9a:06:a5:a1:4a:9b:81:4c:
                    f8:4e:0b:c1:16:e9:12:3d:81:0a:c7:74:10:37:2b:
                    dc:af:01:f0:fc:6d:7c:01:92:b8:97:29:e2:db:e9:
                    19:f8:af:f5:6d:a3:7a:03:94:da:45:46:bf:f3:78:
                    a5:f7:bf:21:ae:d3:af:15:57:fe:a2:57:72:94:56:
                    0a:a6:74:9b:e7:13:d5:1b:d8:07:8f:d9:1a:a2:70:
                    da:9d:ae:b0:52:16:4f:42:52:7e:7c:5f:c6:30:50:
                    26:28:ec:55:d4:98:7e:24:1d:bc:d2:32:14:9c:c3:
                    4c:2e:d4:f5:8a:5f:19:0e:d5:04:a1:81:70:19:0a:
                    80:f9:be:94:5a:17:ac:ea:12:0a:3e:56:8e:7a:f8:
                    91:bb:7a:f3:01:41:3b:f9:0c:98:5f:e5:3a:0e:f9:
                    50:a9:0c:ca:33:98:2a:58:cd:f9:2c:61:21:2b:c7:
                    57:71:d0:33:1b:2f:37:11:8b:d1:38:68:f2:05:3e:
                    02:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:2F:ED:18:88:2E:31:45:87:63:65:98:D4:C5:F4:6E:9E:E0:2A:DF
            X509v3 Authority Key Identifier:
                keyid:B1:01:B5:AB:51:9C:2A:E6:4A:BF:AD:6A:56:F8:43:DC:09:90:A8:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:85:bf:95:56:52:f5:b0:a0:72:b1:ea:21:b2:a1:cb:42:62:
         03:fa:98:94:ec:19:fc:22:07:41:10:5f:4c:6c:26:08:ba:fe:
         f7:bf:1b:9d:8a:89:24:f6:35:66:fc:88:4e:3f:d5:90:1c:3e:
         bd:02:d3:97:b5:d1:66:47:12:f1:ac:5f:72:cd:bc:75:4d:79:
         b1:19:5b:5f:2a:f4:2d:0e:46:10:16:8c:fd:13:61:c2:19:1a:
         aa:fe:a0:0a:03:fd:14:31:72:30:8a:76:60:ba:76:df:6c:9a:
         f3:61:e8:e7:07:79:21:e9:35:bf:0d:9c:65:03:9e:0f:a9:bb:
         24:4d:90:76:97:0f:dd:90:77:3b:d0:fd:37:c5:72:f2:7e:c0:
         a3:c0:c9:15:38:6d:ed:bb:91:d5:33:41:9a:8a:c1:3b:28:47:
         24:01:58:91:dc:c4:a4:80:46:5d:52:a4:25:9f:84:b4:28:7a:
         b9:03:71:d1:b2:b5:c5:f0:a8:c3:08:c3:da:fe:61:2b:e4:80:
         c4:82:61:c5:37:a1:ab:82:10:ed:9f:13:e6:f6:ab:57:03:52:
         ec:bb:79:37:2d:c6:49:3c:76:37:49:5e:2c:d1:7c:d1:49:cf:
         d3:b4:f2:d9:de:2e:cb:c6:cd:13:d6:8a:13:cc:de:53:50:b0:
         60:e2:5f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:28:45 2026 by rpki-client