Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft
File:                     sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft (raw, json)
Hash identifier:          vB0CtSk/cTagSb9h4lHW3Y4PSgZZBWgHGPU7c3H6WLM=
Subject key identifier:   1C:AC:67:AD:25:AD:E6:95:C1:4B:33:84:FC:A7:7D:B5:DC:7A:90:6E
Authority key identifier: B2:AD:50:F3:57:1B:DA:1E:EC:07:CC:48:DA:01:D3:F3:75:45:8D:24
Certificate issuer:       /CN=A917E7C7/serialNumber=B2AD50F3571BDA1EEC07CC48DA01D3F375458D24
Certificate serial:       0167
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft
Manifest number:          0160
Signing time:             Wed 25 Mar 2026 04:12:50 +0000
Manifest this update:     Wed 25 Mar 2026 04:12:49 +0000
Manifest next update:     Wed 01 Apr 2026 04:12:49 +0000
Files and hashes:         1: sq1Q81cb2h7sB8xI2gHT83VFjSQ.crl (hash: h68jbTX0oVni8k46KnyyXb4pGjxkc31fVFW/Mf/9iAA=)
                          2: 031A090A5C2C11F0A1180E20C4F9AE02.roa (hash: xUoZT7vuFUFMxxXgURJ7tl9II1Hg1jXwleAc2UHXW1k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.crl
                          rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:12:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 359 (0x167)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E7C7, serialNumber=B2AD50F3571BDA1EEC07CC48DA01D3F375458D24
        Validity
            Not Before: Mar 25 04:12:49 2026 GMT
            Not After : Apr  1 04:12:49 2026 GMT
        Subject: CN=69c360c2-5785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fe:e4:50:d8:3b:5c:f9:3a:30:4e:53:5e:d9:
                    a7:10:ba:9e:85:8a:94:75:74:c1:b9:bc:98:cc:40:
                    92:8f:bf:e1:4e:8d:55:85:3c:b7:ac:96:28:6b:19:
                    93:20:36:75:2d:15:02:e6:f5:f5:04:c5:80:82:3e:
                    fa:12:98:d6:6a:4f:37:fd:8a:57:27:3a:05:e0:76:
                    9f:d0:d6:d9:41:11:c3:04:f8:c0:c4:49:c6:4c:f1:
                    eb:b8:79:fe:7a:75:b5:d8:c3:3f:65:d6:83:e9:21:
                    31:7d:3b:ab:30:73:3a:32:d2:07:18:cd:cc:41:a4:
                    a5:1b:ec:93:e1:a8:e3:87:36:c7:ec:2b:e9:89:c6:
                    65:53:21:a1:60:44:33:b4:af:6b:10:c5:a2:ee:85:
                    90:3a:ed:da:a5:4e:ce:df:22:1a:54:c5:cc:df:10:
                    9b:f1:4c:c6:71:87:a0:0c:b4:61:0f:44:f4:69:74:
                    3e:44:b0:34:8e:14:21:a3:22:9c:91:ef:ea:27:1f:
                    fa:28:5f:08:f6:bc:d0:9d:c5:8e:21:42:86:bd:be:
                    75:9a:a2:60:f0:38:20:4c:b0:b1:c8:26:0b:89:12:
                    37:a8:55:f0:d5:13:ab:96:6e:ce:c0:9f:ef:cc:1e:
                    c6:4f:4e:33:bb:6b:ea:52:36:6d:19:c2:82:bc:c8:
                    a0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:AC:67:AD:25:AD:E6:95:C1:4B:33:84:FC:A7:7D:B5:DC:7A:90:6E
            X509v3 Authority Key Identifier:
                keyid:B2:AD:50:F3:57:1B:DA:1E:EC:07:CC:48:DA:01:D3:F3:75:45:8D:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:fb:95:4a:17:42:d6:61:f1:7e:3d:4c:b8:d8:dd:44:ac:a4:
         67:e3:29:2d:1e:0d:a9:0e:39:a6:b1:a8:db:c8:03:93:38:79:
         ac:fa:a1:7e:bf:6a:e8:c1:76:47:91:00:b7:a1:65:42:59:d4:
         f4:96:9d:32:9a:a0:e5:f9:fe:1b:48:bd:37:bc:aa:d5:f2:fd:
         21:19:0d:8c:f6:68:fd:2c:68:ce:e6:04:0b:53:1d:66:fa:18:
         27:f6:0a:a6:e4:74:88:73:83:00:40:e8:61:cd:59:25:b9:33:
         d7:bb:88:fa:2f:de:44:46:dd:6b:4b:2d:31:63:ed:ee:e7:2f:
         42:87:98:e3:2a:1b:a6:1b:d5:37:73:89:af:03:b3:58:6f:dd:
         87:27:2d:bb:51:f8:84:ed:12:70:31:ba:64:17:83:81:f4:4c:
         76:7d:e6:aa:a4:23:8a:27:d8:bd:75:d4:d8:9c:19:6f:36:c4:
         0d:fa:09:d7:3d:ee:d2:23:db:de:6a:ac:a6:d1:26:5a:3f:42:
         2c:48:99:20:17:dd:0a:9c:0d:68:00:7b:1a:37:17:85:84:1c:
         93:d7:81:7c:51:54:0a:fa:81:af:a0:3a:fc:cb:b4:60:c3:b1:
         6d:df:9c:b7:3a:41:28:df:6e:30:59:a1:85:2e:b0:92:8d:6f:
         59:64:83:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:25:33 2026 by rpki-client