Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.mft
File:                     SQH6eyf-ZzdVM2bPjbj9q9L3sUk.mft (raw, json)
Hash identifier:          bwbTNopp/th5wh985vsWMlL0juEI1d6s+GDLlzJv9QA=
Subject key identifier:   2E:AC:7E:39:52:6A:DC:C5:6E:DE:E7:18:CB:FD:D5:5C:3E:F6:28:48
Authority key identifier: 49:01:FA:7B:27:FE:67:37:55:33:66:CF:8D:B8:FD:AB:D2:F7:B1:49
Certificate issuer:       /CN=A9198BAC/serialNumber=4901FA7B27FE6737553366CF8DB8FDABD2F7B149
Certificate serial:       5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.mft
Manifest number:          5F
Signing time:             Mon 21 Sep 2026 08:07:51 +0000
Manifest this update:     Mon 21 Sep 2026 08:07:51 +0000
Manifest next update:     Mon 28 Sep 2026 08:07:51 +0000
Files and hashes:         1: SQH6eyf-ZzdVM2bPjbj9q9L3sUk.crl (hash: sYTs44oXrhAhc9sKR1+0fA81biMIw8MUGpP5v5Aa4DI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.crl
                          rsync://rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 08:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198BAC, serialNumber=4901FA7B27FE6737553366CF8DB8FDABD2F7B149
        Validity
            Not Before: Sep 21 08:07:51 2026 GMT
            Not After : Sep 28 08:07:51 2026 GMT
        Subject: CN=6ab0e5d7-2c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:75:4b:46:98:b7:9d:75:f0:c1:db:a6:52:07:
                    10:40:7f:7e:70:e7:fc:48:f5:bf:cd:cb:41:7f:4d:
                    bb:94:3f:64:c3:78:27:83:ce:36:2e:b0:46:d0:0f:
                    cf:af:db:03:9e:8d:21:a9:37:66:1b:bc:24:a0:c0:
                    08:bb:e9:4b:a9:03:a8:6d:fd:e4:8d:29:3d:e9:d6:
                    43:e0:61:d1:3f:93:ec:ff:df:d9:7a:9c:7d:2f:95:
                    84:1b:45:21:fa:35:df:d9:a0:fa:6a:af:2a:05:f9:
                    a8:10:e4:30:78:4c:d1:65:a0:a1:0f:f7:b3:56:02:
                    a8:82:b2:f0:82:2b:91:0c:4a:50:88:4d:30:69:62:
                    4a:8e:ec:ee:d3:08:b0:7a:c3:de:97:f3:42:c8:ce:
                    3d:65:05:a5:a0:03:64:32:31:95:4d:17:30:b0:9b:
                    a8:56:f3:b7:6b:74:55:1b:75:ef:f4:93:92:b7:13:
                    c3:35:8e:f4:f4:76:f3:fa:5c:32:45:74:47:10:0c:
                    0d:82:ff:7d:ea:69:dd:c9:e8:3d:55:60:19:e1:ef:
                    5d:52:bb:7e:22:2e:0d:8c:5e:26:4a:b8:32:7c:ae:
                    e4:b1:f3:fc:34:3f:7f:31:95:0b:da:94:c4:e7:3d:
                    61:e7:bf:3b:2b:ee:44:39:17:e7:a5:90:64:90:af:
                    6a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:AC:7E:39:52:6A:DC:C5:6E:DE:E7:18:CB:FD:D5:5C:3E:F6:28:48
            X509v3 Authority Key Identifier:
                keyid:49:01:FA:7B:27:FE:67:37:55:33:66:CF:8D:B8:FD:AB:D2:F7:B1:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:ad:d7:57:ba:f5:bc:83:4c:b9:59:f1:60:de:56:6d:c1:ee:
         84:45:54:57:83:fb:ca:69:4e:15:86:72:cd:d2:53:62:e6:cb:
         92:3f:3c:0b:85:56:8a:c7:77:ee:43:b8:f8:6c:1b:48:e0:90:
         52:64:4a:fa:59:95:60:3e:a5:b7:ff:2a:56:1d:43:40:59:9a:
         da:51:96:71:26:d0:86:6e:78:47:10:1d:12:76:b3:c1:67:06:
         31:1d:5a:a8:7b:67:6e:c7:aa:d0:e4:74:b7:f4:87:52:88:07:
         a2:50:25:80:c2:61:f8:5a:2b:c0:5a:8e:80:94:25:c4:38:10:
         7b:95:98:1e:6f:70:97:8b:46:ee:66:90:13:c1:e6:1f:e1:3a:
         f2:2f:09:0b:54:68:09:4d:1f:6d:e6:50:b3:3b:55:a1:ad:9c:
         ab:c3:cf:87:f3:ba:ea:86:c8:13:a4:2d:e5:eb:38:ca:f5:65:
         ed:0a:3b:8b:a1:cc:88:c1:d0:8b:20:f8:cb:b0:d3:61:33:b5:
         74:ef:3c:91:ed:b8:96:a3:50:0b:47:0c:26:59:8d:81:f4:44:
         5f:1e:1c:25:70:60:d2:59:85:07:06:a9:b6:3e:f8:4a:d0:f6:
         43:cb:7b:c3:5f:e9:37:52:c9:4f:2e:e3:a0:d5:f7:79:1c:9f:
         34:36:50:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:58:47 2026 by rpki-client