Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.mft
File:                     SQH6eyf-ZzdVM2bPjbj9q9L3sUk.mft (raw, json)
Hash identifier:          KhiARqzxNaEqx84BzzXpYKdY5BN0tUDKJkR3bogTvQo=
Subject key identifier:   99:23:23:AB:29:3F:C4:F3:C0:90:0F:C5:7D:FB:DC:C0:F5:42:BA:76
Authority key identifier: 49:01:FA:7B:27:FE:67:37:55:33:66:CF:8D:B8:FD:AB:D2:F7:B1:49
Certificate issuer:       /CN=A9198BAC/serialNumber=4901FA7B27FE6737553366CF8DB8FDABD2F7B149
Certificate serial:       04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.mft
Manifest number:          04
Signing time:             Wed 25 Mar 2026 08:25:52 +0000
Manifest this update:     Wed 25 Mar 2026 08:25:52 +0000
Manifest next update:     Wed 01 Apr 2026 08:25:52 +0000
Files and hashes:         1: SQH6eyf-ZzdVM2bPjbj9q9L3sUk.crl (hash: d7qRhqgaRAihx+9dYQvxB86aJe5uBAzY4EWcUY4wFRY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.crl
                          rsync://rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:25:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198BAC, serialNumber=4901FA7B27FE6737553366CF8DB8FDABD2F7B149
        Validity
            Not Before: Mar 25 08:25:52 2026 GMT
            Not After : Apr  1 08:25:52 2026 GMT
        Subject: CN=69c39c10-2260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fb:c7:5c:f3:ab:df:98:93:1f:ac:0b:e0:4a:
                    7e:47:c0:be:5e:3e:5c:87:35:d8:a8:85:5d:73:0b:
                    40:22:bf:bc:3b:d1:01:66:54:ea:54:3a:96:37:e9:
                    47:64:ef:a1:91:a3:7c:97:59:86:95:88:64:f0:a3:
                    8d:1b:78:d1:a5:92:20:86:a4:f8:61:0d:47:c6:27:
                    8e:f6:55:f4:b7:ca:fa:83:4f:22:f4:60:3e:23:7c:
                    88:c2:2f:dd:45:e8:bf:a4:c6:cb:59:69:fb:3c:1f:
                    8f:47:a0:c5:d8:4e:5a:48:9c:d5:85:a9:f0:75:d9:
                    1c:b2:46:cb:1e:77:0d:53:11:a7:d1:37:e2:99:1f:
                    48:b1:15:85:f8:dd:5c:ad:7e:39:d5:6b:38:4f:87:
                    c7:90:26:7b:47:c6:ce:d6:9c:14:d2:1e:84:4c:2e:
                    1a:a9:15:95:4f:a7:53:ce:3d:eb:63:cf:24:38:ae:
                    dd:5a:53:bd:b1:08:72:76:35:a6:48:0a:17:9e:2f:
                    b2:56:ea:26:c9:f8:14:95:ef:04:22:10:c5:f7:28:
                    38:10:58:81:5a:66:04:42:7a:fb:5f:07:04:75:b6:
                    41:5d:95:fd:48:35:3c:9b:0e:03:0b:20:32:c7:ac:
                    25:64:a0:b3:eb:df:a0:6a:07:3b:7f:e4:f4:b3:68:
                    8b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:23:23:AB:29:3F:C4:F3:C0:90:0F:C5:7D:FB:DC:C0:F5:42:BA:76
            X509v3 Authority Key Identifier:
                keyid:49:01:FA:7B:27:FE:67:37:55:33:66:CF:8D:B8:FD:AB:D2:F7:B1:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:eb:95:87:6f:ac:02:9b:b4:d5:27:a6:06:59:65:6d:fd:c2:
         f1:6e:e4:03:6d:c3:76:6f:7a:e7:77:5a:c7:28:bf:92:e1:6c:
         56:d1:48:a7:28:e1:0c:4b:1a:92:5e:06:5d:d1:f3:2f:44:19:
         39:4e:8d:14:65:8c:b8:09:ba:2a:b3:5f:29:d5:e4:92:21:8b:
         94:43:26:33:2d:56:9c:f7:c9:7f:28:28:0d:10:47:fc:58:0c:
         2e:24:ae:73:db:f0:0f:cb:a2:63:6d:f7:8f:4d:97:99:33:cb:
         4a:cb:65:f4:52:01:58:88:b4:77:86:f8:5a:b5:57:a7:39:3e:
         48:b0:dd:1d:d8:c9:0d:88:06:a0:b0:05:80:b0:81:29:e7:39:
         6a:e7:af:8e:2a:52:30:54:e2:69:b6:6a:f6:5f:20:30:5f:a6:
         5e:5e:fa:9f:9f:3a:6b:de:7e:6e:6e:ab:57:e2:66:91:8a:1e:
         63:83:a0:7a:94:25:16:79:46:f3:be:92:0e:92:98:83:6b:60:
         11:43:56:cb:a9:e4:66:77:8b:9e:69:4f:d4:a2:13:58:d7:6b:
         8d:d2:2c:13:51:53:e9:87:6a:f1:9e:1e:45:6d:be:65:5f:90:
         02:cf:5b:97:9c:39:aa:59:90:e3:33:6b:13:6c:0a:cc:20:d4:
         7a:31:13:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:58:39 2026 by rpki-client