Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.mft
File:                     SQH6eyf-ZzdVM2bPjbj9q9L3sUk.mft (raw, json)
Hash identifier:          GCudRTwKFCg8xpKRJDxczN6CcInkb6CWYMBsNStRh3Q=
Subject key identifier:   7F:72:ED:3A:2E:B1:F8:E9:98:0F:84:89:54:59:9A:68:AA:D5:16:4C
Authority key identifier: 49:01:FA:7B:27:FE:67:37:55:33:66:CF:8D:B8:FD:AB:D2:F7:B1:49
Certificate issuer:       /CN=A9198BAC/serialNumber=4901FA7B27FE6737553366CF8DB8FDABD2F7B149
Certificate serial:       1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.mft
Manifest number:          1C
Signing time:             Mon 11 May 2026 09:08:35 +0000
Manifest this update:     Mon 11 May 2026 09:08:35 +0000
Manifest next update:     Mon 18 May 2026 09:08:35 +0000
Files and hashes:         1: SQH6eyf-ZzdVM2bPjbj9q9L3sUk.crl (hash: 0U2EA2+W4ijiIPOqQw/xSvw2rOi1kNJhJyeBuxQ3t64=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.crl
                          rsync://rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:08:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198BAC, serialNumber=4901FA7B27FE6737553366CF8DB8FDABD2F7B149
        Validity
            Not Before: May 11 09:08:35 2026 GMT
            Not After : May 18 09:08:35 2026 GMT
        Subject: CN=6a019c93-7b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4b:2c:af:6c:f4:0c:22:ee:31:1c:a4:40:20:
                    f6:f1:12:4c:00:b0:9c:1d:db:82:8c:83:d1:82:4c:
                    2d:96:f9:b2:ea:2a:9d:93:20:4f:62:63:aa:64:20:
                    2d:cf:84:2a:66:be:c2:03:f6:d3:65:7d:40:0c:d7:
                    b6:9b:49:43:2a:26:f2:93:00:8d:e7:0c:c2:30:1c:
                    68:fc:e8:b2:5e:5e:1d:77:b6:14:5f:cf:d7:e1:99:
                    16:49:09:8e:d5:13:e3:e5:ef:34:ce:78:ef:88:8e:
                    74:29:eb:a5:e8:ab:9f:23:ce:fa:56:21:b5:c4:34:
                    d7:49:df:99:d3:38:1f:57:c3:d1:a4:2f:d0:1a:ab:
                    ce:48:fc:17:ed:ff:83:42:1c:da:b5:a9:8c:15:79:
                    f8:63:37:f1:6f:48:a5:a4:89:a6:53:0e:43:32:ac:
                    fd:d1:52:67:54:0d:04:94:f1:aa:55:e6:7f:e9:b1:
                    ca:0b:1a:0e:c4:01:54:2f:dd:fd:4d:94:1e:d0:f4:
                    19:bf:ec:aa:e9:39:2e:b1:ea:20:fe:94:cf:ea:34:
                    b2:17:09:82:96:20:d0:a2:55:3f:18:bd:6e:d0:b4:
                    3d:96:2b:5d:d0:1c:5a:1e:25:40:5a:5c:b6:35:4f:
                    0b:20:e7:f9:a1:9d:78:7d:4d:ab:05:3e:9d:4c:17:
                    f0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:72:ED:3A:2E:B1:F8:E9:98:0F:84:89:54:59:9A:68:AA:D5:16:4C
            X509v3 Authority Key Identifier:
                keyid:49:01:FA:7B:27:FE:67:37:55:33:66:CF:8D:B8:FD:AB:D2:F7:B1:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:28:28:77:d6:6c:d6:b4:44:89:db:3b:85:dd:9c:a0:f3:2f:
         5b:20:d0:20:a0:8f:6a:25:ff:01:a6:59:67:c2:59:81:4d:ce:
         0f:cb:ba:d6:6f:ea:4c:d7:eb:78:cd:38:64:97:ed:97:bc:c5:
         b3:45:e4:07:00:ce:6c:cd:a3:b7:20:a4:5c:82:cf:b0:1d:3b:
         28:ac:ab:6f:77:df:f6:53:ea:56:a3:5e:fb:d1:43:a1:38:4e:
         94:0c:0b:59:8c:64:51:88:2e:14:c9:8d:81:26:57:df:e3:1c:
         c8:67:c5:fd:a2:d9:e4:5c:8a:70:9b:68:aa:5b:16:d3:ba:1e:
         c7:88:c3:82:6c:de:59:48:ea:f0:13:1c:56:0c:19:46:c6:7b:
         97:40:6b:9e:cc:be:2f:49:ed:fd:46:3c:d7:30:3e:27:38:90:
         e6:82:7b:29:8a:6e:2c:0a:c1:0b:33:e3:ed:16:ae:51:dd:35:
         fc:60:07:fe:dd:51:4b:3d:10:34:ba:59:ba:a9:8c:41:68:92:
         81:db:9d:92:1a:dd:7d:45:19:6d:61:c7:a7:d8:8b:e6:91:7a:
         05:e4:18:ab:25:99:ec:bb:e1:29:f3:30:c7:4a:81:7d:12:b1:
         85:d3:13:56:91:eb:48:14:58:c8:d0:a6:24:45:33:6e:6b:91:
         3c:17:cc:4c
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
OEJBQzExMC8GA1UEBRMoNDkwMUZBN0IyN0ZFNjczNzU1MzM2NkNGOERCOEZEQUJE
MkY3QjE0OTAeFw0yNjA1MTEwOTA4MzVaFw0yNjA1MTgwOTA4MzVaMBgxFjAUBgNV
BAMTDTZhMDE5YzkzLTdiNmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCiSyyvbPQMIu4xHKRAIPbxEkwAsJwd24KMg9GCTC2W+bLqKp2TIE9iY6pkIC3P
hCpmvsID9tNlfUAM17abSUMqJvKTAI3nDMIwHGj86LJeXh13thRfz9fhmRZJCY7V
E+Pl7zTOeO+IjnQp66Xoq58jzvpWIbXENNdJ35nTOB9Xw9GkL9Aaq85I/Bft/4NC
HNq1qYwVefhjN/FvSKWkiaZTDkMyrP3RUmdUDQSU8apV5n/pscoLGg7EAVQv3f1N
lB7Q9Bm/7KrpOS6x6iD+lM/qNLIXCYKWINCiVT8YvW7QtD2WK13QHFoeJUBaXLY1
Twsg5/mhnXh9TasFPp1MF/C3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUf3LtOi6x
+OmYD4SJVFmaaKrVFkwwHwYDVR0jBBgwFoAUSQH6eyf+ZzdVM2bPjbj9q9L3sUkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4QkFDL0E1QzU4NjBFMjRG
QzExRjE5RjYyQTRDNUI2ODMzNzczL1NRSDZleWYtWnpkVk0yYlBqYmo5cTlMM3NV
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvU1FINmV5Zi1aemRWTTJiUGpiajlxOUwzc1VrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4
QkFDL0E1QzU4NjBFMjRGQzExRjE5RjYyQTRDNUI2ODMzNzczL1NRSDZleWYtWnpk
Vk0yYlBqYmo5cTlMM3NVay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA5KCh31mzWtESJ2zuF3Zyg8y9bINAgoI9qJf8BpllnwlmBTc4Py7rWb+pM1+t4
zThkl+2XvMWzReQHAM5szaO3IKRcgs+wHTsorKtvd9/2U+pWo1770UOhOE6UDAtZ
jGRRiC4UyY2BJlff4xzIZ8X9otnkXIpwm2iqWxbTuh7HiMOCbN5ZSOrwExxWDBlG
xnuXQGuezL4vSe39RjzXMD4nOJDmgnspim4sCsELM+PtFq5R3TX8YAf+3VFLPRA0
ulm6qYxBaJKB252SGt19RRltYcen2IvmkXoF5BirJZnsu+Ep8zDHSoF9ErGF0xNW
ketIFFjI0KYkRTNua5E8F8xM
-----END CERTIFICATE-----
Generated at Wed May 13 04:52:26 2026 by rpki-client