Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft
File:                     sQG1q1GcKuZKv61qVvhD3AmQqFM.mft (raw, json)
Hash identifier:          3LkV8XChEeTmUVbdvwczUAlcO4lU6hyO2xdYBx8bVyU=
Subject key identifier:   89:85:48:54:AF:25:2D:D6:89:8C:92:BC:D0:42:76:B4:4C:B1:48:88
Authority key identifier: B1:01:B5:AB:51:9C:2A:E6:4A:BF:AD:6A:56:F8:43:DC:09:90:A8:53
Certificate issuer:       /CN=A919B06C/serialNumber=B101B5AB519C2AE64ABFAD6A56F843DC0990A853
Certificate serial:       1220
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft
Manifest number:          20CF
Signing time:             Thu 16 Apr 2026 17:04:30 +0000
Manifest this update:     Thu 16 Apr 2026 17:04:30 +0000
Manifest next update:     Thu 23 Apr 2026 17:04:30 +0000
Files and hashes:         1: sQG1q1GcKuZKv61qVvhD3AmQqFM.crl (hash: zXGaJwo+/+vj6BdObwPH88hDw2XJ11sjT9p6KdfCIpw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.crl
                          rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:04:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4640 (0x1220)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B06C, serialNumber=B101B5AB519C2AE64ABFAD6A56F843DC0990A853
        Validity
            Not Before: Apr 16 17:04:30 2026 GMT
            Not After : Apr 23 17:04:30 2026 GMT
        Subject: CN=69e1169e-70ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f5:90:e3:81:25:74:d5:c4:28:90:b0:0a:d7:
                    ba:25:2e:cf:2b:7a:aa:34:98:23:e9:99:e5:1a:94:
                    95:96:17:1a:62:64:a1:4d:d6:aa:24:5d:b0:47:07:
                    e6:9d:f7:14:78:f4:18:07:9b:8b:d5:99:5e:71:eb:
                    a2:e8:53:a4:a0:d6:fd:15:8b:ff:66:bf:40:28:35:
                    f4:4a:7e:c0:f8:50:4a:dc:0d:5d:6d:b1:ee:23:3b:
                    73:dc:ed:bf:43:f2:33:66:90:df:f3:b6:5c:e6:3a:
                    9a:df:49:2c:81:7d:6d:a6:12:3f:bb:83:f3:0f:cf:
                    78:8b:62:7d:79:47:ee:bc:18:d5:df:71:5f:07:46:
                    27:c3:0d:28:b6:91:f6:9e:66:05:7c:e4:4c:04:cf:
                    f1:19:e4:bc:07:ce:d2:b0:a3:d4:78:28:c4:32:70:
                    08:d1:21:1a:16:ad:03:12:d0:47:3f:9e:3b:3c:08:
                    ff:42:fd:3e:6d:9f:a9:d1:13:4b:6d:a9:d4:2d:05:
                    12:cf:dc:27:d9:d0:49:cd:c6:f7:7b:47:68:fe:f7:
                    96:47:85:f7:08:13:09:87:8d:5a:e1:93:84:d0:c6:
                    29:b7:b7:89:c8:8d:a2:b5:1a:64:30:ab:5c:b3:8b:
                    10:ec:fb:c4:24:3c:0c:ee:7c:e3:a0:84:a7:88:6e:
                    2d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:85:48:54:AF:25:2D:D6:89:8C:92:BC:D0:42:76:B4:4C:B1:48:88
            X509v3 Authority Key Identifier:
                keyid:B1:01:B5:AB:51:9C:2A:E6:4A:BF:AD:6A:56:F8:43:DC:09:90:A8:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:5d:62:af:b0:da:f6:c2:b9:d1:46:5d:e9:45:fa:ee:62:fb:
         27:ac:ca:05:9f:dd:2f:40:d3:5b:24:bb:91:e1:ab:aa:e9:eb:
         b0:36:2f:e9:4e:03:43:4c:33:4c:71:89:55:8e:5b:ce:ba:84:
         8b:23:f9:f6:8c:bd:d6:f3:06:fe:cb:95:66:91:89:3d:23:ed:
         4b:31:1f:72:39:04:e8:a7:07:42:bf:e7:1d:f3:1e:61:b1:70:
         25:cd:82:14:09:d7:7d:27:a9:24:81:72:48:f8:4e:10:94:5d:
         61:4c:e1:c3:96:c4:6e:c3:83:3b:1b:5e:28:d2:6f:9c:5b:5c:
         fb:2e:42:6b:09:76:55:0f:60:d4:d2:8e:42:2e:8e:95:8c:26:
         16:14:fc:c6:29:91:36:71:69:f1:db:4f:8a:43:29:e3:a8:7d:
         fb:99:a3:f2:b2:11:8a:d0:ce:66:9c:a3:6d:9c:ca:f6:a5:bb:
         31:fa:a4:c2:f7:7e:36:a3:cb:31:fc:7f:ff:15:e5:3f:a6:2e:
         0c:d2:41:40:d0:0e:d8:2f:56:d9:d5:7f:06:0a:71:74:53:f4:
         60:41:b9:86:b4:89:6f:a9:8b:4b:b5:18:7e:50:6a:30:a8:50:
         0f:8d:2b:e8:bd:b5:ef:f5:ad:b9:3f:ca:b3:ab:59:4a:39:70:
         c6:0e:c2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:16:58 2026 by rpki-client