Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft
File:                     sQG1q1GcKuZKv61qVvhD3AmQqFM.mft (raw, json)
Hash identifier:          fyWgSU8BlBWgby2pc4gc5EetxXWPB0r0fXucv2D0lyk=
Subject key identifier:   73:9D:74:58:6B:C1:7A:BB:2B:7E:29:75:88:3C:09:85:F4:65:2C:F2
Authority key identifier: B1:01:B5:AB:51:9C:2A:E6:4A:BF:AD:6A:56:F8:43:DC:09:90:A8:53
Certificate issuer:       /CN=A919B06C/serialNumber=B101B5AB519C2AE64ABFAD6A56F843DC0990A853
Certificate serial:       1252
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft
Manifest number:          2134
Signing time:             Wed 22 Jul 2026 17:14:05 +0000
Manifest this update:     Wed 22 Jul 2026 17:14:05 +0000
Manifest next update:     Wed 29 Jul 2026 17:14:05 +0000
Files and hashes:         1: sQG1q1GcKuZKv61qVvhD3AmQqFM.crl (hash: TAkSh0rTeHGn7BCpm5Ga0SYo/fPu7kHlIw2dNsLEv8A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.crl
                          rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:14:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4690 (0x1252)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B06C, serialNumber=B101B5AB519C2AE64ABFAD6A56F843DC0990A853
        Validity
            Not Before: Jul 22 17:14:05 2026 GMT
            Not After : Jul 29 17:14:05 2026 GMT
        Subject: CN=6a60fa5d-c46e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:76:af:6a:ef:45:d7:84:0a:98:aa:c1:e1:2f:
                    7e:51:07:65:9e:3d:c8:90:8c:a4:b4:97:ef:32:7a:
                    ff:15:fa:ab:65:32:b3:79:25:2e:df:07:79:ee:ea:
                    bd:34:b1:c8:85:56:70:a6:ad:37:82:0e:4b:f7:1d:
                    0c:85:6c:9e:7c:28:c9:4d:d0:d0:d2:76:bd:0b:45:
                    2d:4b:b9:45:f0:46:a4:86:33:79:aa:2f:7d:76:e4:
                    42:be:f2:cd:3e:cd:24:cc:be:79:5f:a4:af:66:e0:
                    3d:e7:23:2c:d6:b0:1a:ea:20:15:d8:6d:7f:6b:c2:
                    52:11:7e:a4:bd:f8:79:a6:0b:1b:35:54:ed:42:b0:
                    0e:d5:ce:c0:a6:cb:e6:17:48:0f:91:03:d3:9c:a7:
                    46:73:89:e7:3d:65:59:a5:04:2f:2f:0a:e6:42:a8:
                    5a:a8:44:ab:32:ae:4e:59:71:89:e0:10:51:48:a6:
                    aa:e1:dc:5f:ab:60:ad:c1:db:09:5f:0b:ab:50:27:
                    57:a2:24:5d:a3:78:d9:2b:b7:e8:5a:2e:d0:34:d7:
                    57:15:23:35:d6:b8:8b:be:70:22:69:d9:fd:20:f8:
                    62:c6:3a:f9:61:11:ec:8d:2d:a4:af:96:c2:ec:e3:
                    7d:45:3b:da:69:6c:48:3c:76:73:46:c0:59:ec:29:
                    38:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:9D:74:58:6B:C1:7A:BB:2B:7E:29:75:88:3C:09:85:F4:65:2C:F2
            X509v3 Authority Key Identifier:
                keyid:B1:01:B5:AB:51:9C:2A:E6:4A:BF:AD:6A:56:F8:43:DC:09:90:A8:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:98:31:01:71:c0:18:82:01:03:06:ac:83:ae:30:ae:56:86:
         96:1f:50:5c:78:96:d1:1a:d6:29:27:0a:ae:70:4d:bd:03:4d:
         02:bb:48:d1:fa:ef:88:86:cc:af:a9:2a:f1:b8:1c:e5:be:82:
         4c:bb:ac:ad:74:cd:7c:6e:4b:65:61:f9:85:a5:5b:d0:70:b5:
         fa:ba:6f:e3:a7:3e:57:2b:92:d2:9a:77:21:f9:6f:67:0e:77:
         8b:d0:e2:5c:42:3c:5d:b7:63:a8:94:c9:8e:c3:16:aa:97:ce:
         2e:5a:fc:a3:46:e2:89:79:30:5f:ed:d6:79:15:33:57:39:5e:
         01:58:8b:43:82:c5:ec:a0:79:95:f1:af:02:f9:e6:97:c4:71:
         ec:71:24:f5:02:77:92:15:33:22:55:9e:38:e0:a1:7a:f5:db:
         71:db:5d:d8:df:5b:d6:2d:3c:0f:4e:aa:0f:89:aa:03:43:82:
         48:b9:d0:03:bd:04:a4:a8:23:76:01:6f:59:19:39:b2:56:0d:
         ff:c0:41:c2:a8:c4:59:b1:b3:61:6d:cd:97:7e:73:d9:dd:39:
         22:a3:dc:11:d5:ce:17:ac:13:9f:ac:d1:5f:5f:52:17:38:b1:
         63:79:4a:59:8a:c5:dc:6d:6d:63:6b:6e:4a:9b:a8:70:e2:ed:
         d5:5a:a5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:31:12 2026 by rpki-client