Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft
File:                     sQG1q1GcKuZKv61qVvhD3AmQqFM.mft (raw, json)
Hash identifier:          bKfzBjsVkEiFC7uttXRyqgzQ8Rd48RWFEzQWS23pAdg=
Subject key identifier:   F7:9A:96:A9:F1:39:1A:7C:DB:68:30:9D:5F:88:8F:3E:A5:ED:8B:C8
Authority key identifier: B1:01:B5:AB:51:9C:2A:E6:4A:BF:AD:6A:56:F8:43:DC:09:90:A8:53
Certificate issuer:       /CN=A919B06C/serialNumber=B101B5AB519C2AE64ABFAD6A56F843DC0990A853
Certificate serial:       1207
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft
Manifest number:          2097
Signing time:             Sat 28 Feb 2026 17:14:19 +0000
Manifest this update:     Sat 28 Feb 2026 17:14:19 +0000
Manifest next update:     Sat 07 Mar 2026 17:14:19 +0000
Files and hashes:         1: sQG1q1GcKuZKv61qVvhD3AmQqFM.crl (hash: DOz6NqUdyDiV+WIPkx3hKEns3XCDSVOADfoOBg4xhPM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.crl
                          rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 17:14:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4615 (0x1207)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B06C, serialNumber=B101B5AB519C2AE64ABFAD6A56F843DC0990A853
        Validity
            Not Before: Feb 28 17:14:19 2026 GMT
            Not After : Mar  7 17:14:19 2026 GMT
        Subject: CN=69a3226b-346b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9c:65:70:63:6f:65:16:61:e6:df:04:7d:4c:
                    17:75:e5:30:2c:af:eb:9c:b2:cd:39:2b:17:40:de:
                    2f:89:ab:e7:ec:09:a7:ff:e6:54:60:ec:58:34:f5:
                    e8:7b:0a:ae:15:82:7d:10:57:a8:5d:f1:4b:6a:7b:
                    99:ac:f5:4c:7b:1d:3a:a0:64:49:95:f5:dc:22:c5:
                    e9:0d:c2:71:d4:98:c5:32:c8:fb:6c:e5:1b:3f:66:
                    b7:85:2b:28:33:57:a0:cb:91:bd:e0:77:7a:12:1a:
                    f5:9d:1f:7a:b7:71:b9:f1:2b:c3:6a:f4:58:87:bf:
                    78:13:0a:5e:6a:42:2d:4d:5a:78:2c:0e:86:55:e1:
                    93:a8:34:73:4c:2c:a0:10:af:16:19:4c:c6:0b:d6:
                    a5:b0:b0:0e:d1:c2:60:d3:59:6b:9a:29:d8:77:2e:
                    3f:85:ab:b4:10:5c:4e:2e:a2:9e:83:f4:71:03:65:
                    9d:1d:1c:56:97:43:d4:42:74:62:3b:81:87:2c:34:
                    e4:9e:e8:f4:24:c3:08:a7:ce:8b:22:2b:2f:af:be:
                    87:60:db:9f:65:f4:f6:12:b3:c1:d7:0b:95:8b:1c:
                    42:f5:f8:74:59:31:5e:24:c5:c8:77:8b:54:b9:c7:
                    ec:f4:47:81:65:d7:38:d0:db:46:11:d4:0c:e3:c7:
                    80:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:9A:96:A9:F1:39:1A:7C:DB:68:30:9D:5F:88:8F:3E:A5:ED:8B:C8
            X509v3 Authority Key Identifier:
                keyid:B1:01:B5:AB:51:9C:2A:E6:4A:BF:AD:6A:56:F8:43:DC:09:90:A8:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:1b:c8:ff:fc:d6:c8:44:4f:a5:34:09:af:11:42:b9:aa:b0:
         85:74:2e:39:1d:e0:66:ef:2c:6a:3c:87:76:20:9e:fb:1a:88:
         58:81:00:d7:99:df:92:c7:af:b9:0b:a8:82:db:8d:93:39:e5:
         b4:8c:21:86:44:bd:93:dd:47:70:bd:f8:bf:37:c3:99:d4:b7:
         28:44:cf:1d:ff:33:c4:d3:4e:8a:72:c6:ad:ff:5c:fe:73:fe:
         29:fe:66:f9:a4:b1:b2:c8:90:21:e2:e7:60:59:46:be:af:b4:
         5a:ec:c1:28:ac:2a:d9:71:8b:bc:b3:90:54:d6:07:5a:2b:12:
         25:3a:3f:39:92:55:cb:f8:19:02:49:51:87:85:69:4e:54:77:
         fb:ee:51:e2:0b:21:0b:cf:6a:8c:68:9c:df:7e:80:f1:37:2c:
         d5:63:ad:ea:1e:48:76:c9:08:1c:1f:40:ca:17:7d:9c:43:d7:
         ad:c2:80:27:bf:15:f3:b3:38:12:6e:f0:24:e2:f1:59:8e:3e:
         97:99:79:ef:2f:df:22:88:d1:aa:2d:50:99:ef:f2:e9:55:9d:
         73:72:f2:ac:cb:47:3b:df:1d:e3:d5:c6:98:26:30:03:4c:95:
         5c:20:f8:bd:af:a2:b3:2c:73:25:34:87:93:e6:ba:f8:87:db:
         78:64:39:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:07:29 2026 by rpki-client