Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.mft
File:                     SQH6eyf-ZzdVM2bPjbj9q9L3sUk.mft (raw, json)
Hash identifier:          D46NEni7jU+NpYhcApvAVt0UdOc88cZ0LgEyL4h6i+A=
Subject key identifier:   AC:7C:B7:03:27:97:95:6A:C9:94:BD:F3:B8:4B:BA:3B:4E:90:29:4E
Authority key identifier: 49:01:FA:7B:27:FE:67:37:55:33:66:CF:8D:B8:FD:AB:D2:F7:B1:49
Certificate issuer:       /CN=A9198BAC/serialNumber=4901FA7B27FE6737553366CF8DB8FDABD2F7B149
Certificate serial:       2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.mft
Manifest number:          2C
Signing time:             Sat 13 Jun 2026 08:49:13 +0000
Manifest this update:     Sat 13 Jun 2026 08:49:13 +0000
Manifest next update:     Sat 20 Jun 2026 08:49:13 +0000
Files and hashes:         1: SQH6eyf-ZzdVM2bPjbj9q9L3sUk.crl (hash: hQVMMLTI39ALzHiFNi7ALD9sH9+O3KJ1N6/wIApOXLU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.crl
                          rsync://rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:49:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198BAC, serialNumber=4901FA7B27FE6737553366CF8DB8FDABD2F7B149
        Validity
            Not Before: Jun 13 08:49:13 2026 GMT
            Not After : Jun 20 08:49:13 2026 GMT
        Subject: CN=6a2d1989-3506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:78:f9:14:00:2d:51:cd:1b:90:dd:b7:b0:8a:
                    74:5b:77:cd:88:1b:f1:6b:bb:a5:6d:9a:34:e6:11:
                    5a:a0:4e:af:88:3c:b5:0a:16:e5:78:35:3c:8d:33:
                    29:f1:c3:26:bf:7a:88:df:ad:b3:eb:8d:86:53:78:
                    a4:dc:90:36:4e:58:94:4d:5c:dc:f9:49:d1:eb:b5:
                    6e:05:8a:cb:58:58:e3:85:bb:44:5b:f3:2a:a7:f4:
                    34:81:1a:8b:03:63:bf:51:03:51:04:b1:7d:20:14:
                    f0:05:a0:ce:de:bb:98:77:4d:40:8c:88:9b:e1:8d:
                    68:bb:b4:aa:f2:b4:7b:22:b9:dc:d4:6f:6f:b3:79:
                    45:43:61:29:9c:31:5c:27:d8:17:cd:5a:ee:60:ac:
                    fe:f8:25:1e:06:d4:9a:55:c1:73:4e:f7:af:61:dc:
                    ab:e4:4e:f7:a4:11:fd:96:e9:93:9f:bc:5d:69:67:
                    66:bf:92:8b:15:38:54:24:ef:55:83:3b:95:de:fb:
                    a1:a9:05:0e:09:34:19:8e:84:1a:3e:bf:8f:68:88:
                    4f:7d:c9:8b:e0:dc:d5:8a:d9:02:02:aa:27:e2:41:
                    28:c0:38:a2:77:a6:3c:5f:bc:99:75:4d:d9:e1:ab:
                    fd:ac:87:f4:da:95:50:c8:76:f0:5f:bd:6d:e6:da:
                    03:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:7C:B7:03:27:97:95:6A:C9:94:BD:F3:B8:4B:BA:3B:4E:90:29:4E
            X509v3 Authority Key Identifier:
                keyid:49:01:FA:7B:27:FE:67:37:55:33:66:CF:8D:B8:FD:AB:D2:F7:B1:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:53:cc:00:6e:3b:a0:81:96:3d:9e:de:ce:5b:e3:aa:73:2f:
         79:74:0a:5f:28:c1:6a:fd:c0:02:5f:e7:21:77:4d:74:a1:e5:
         28:25:69:cc:20:3d:4d:f1:7e:18:3f:39:c3:f5:7b:73:fd:41:
         19:4a:94:6e:ef:d2:eb:a3:f2:17:8f:85:86:d0:de:ea:20:3a:
         14:01:47:87:8a:0e:ab:bb:af:15:4b:7a:2d:a8:f8:e3:d6:83:
         f8:16:f8:d6:79:c9:63:0a:f9:a3:06:5a:fd:ed:c8:61:da:ae:
         67:48:ff:cf:67:2f:bb:26:60:0d:5f:65:da:36:b5:c9:21:5a:
         82:19:6f:15:75:ff:60:b4:68:c6:db:4c:bf:ef:20:d9:07:d3:
         9e:66:77:e2:0a:8e:93:e2:06:b4:58:91:42:24:25:35:cc:d1:
         6c:fd:ca:75:3a:eb:bb:bc:6c:6a:58:68:4a:a7:b0:56:68:de:
         10:fb:f7:0b:6b:19:9a:cd:86:9b:41:b7:6b:57:fb:28:d5:b5:
         ea:2c:bf:1a:8c:92:ee:92:42:c8:e3:85:a6:86:e4:9d:04:79:
         65:53:1c:41:80:1b:3c:56:a2:60:84:85:eb:44:bb:53:63:81:
         33:07:5e:67:cb:59:01:24:34:4d:3e:e0:30:86:f7:df:7f:27:
         14:ee:eb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:32:32 2026 by rpki-client