Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft
File:                     peMSM_m0rMgiKz_WfG288kF5CbE.mft (raw, json)
Hash identifier:          ubf2Hkix3An0nRA59nrBuoKGd/VV4XWyi4P69TfRrLU=
Subject key identifier:   68:3E:32:C2:87:DC:B1:38:11:72:2C:64:FD:C7:2B:2E:50:B9:B6:62
Authority key identifier: A5:E3:12:33:F9:B4:AC:C8:22:2B:3F:D6:7C:6D:BC:F2:41:79:09:B1
Certificate issuer:       /CN=A912E411/serialNumber=A5E31233F9B4ACC8222B3FD67C6DBCF2417909B1
Certificate serial:       0C72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peMSM_m0rMgiKz_WfG288kF5CbE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft
Manifest number:          1593
Signing time:             Tue 24 Mar 2026 18:25:50 +0000
Manifest this update:     Tue 24 Mar 2026 18:25:49 +0000
Manifest next update:     Tue 31 Mar 2026 18:25:49 +0000
Files and hashes:         1: peMSM_m0rMgiKz_WfG288kF5CbE.crl (hash: Fsrxo7VKfvdl7SURayMrVr5GY+eh25fkPbE+7wgUxlU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.crl
                          rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peMSM_m0rMgiKz_WfG288kF5CbE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:25:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3186 (0xc72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E411, serialNumber=A5E31233F9B4ACC8222B3FD67C6DBCF2417909B1
        Validity
            Not Before: Mar 24 18:25:49 2026 GMT
            Not After : Mar 31 18:25:49 2026 GMT
        Subject: CN=69c2d72d-83b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ee:c3:f5:d2:ee:d1:78:83:b2:c0:1b:d1:d2:
                    ab:c3:98:21:9f:05:34:4d:34:ef:d1:80:8a:13:92:
                    6a:77:10:69:7c:95:90:08:86:83:de:45:78:1d:df:
                    5e:02:1c:de:01:51:0d:ae:3c:a2:0e:40:60:8c:b8:
                    d3:a1:6d:b7:13:f1:0b:dc:94:39:af:61:86:7c:df:
                    7f:76:fa:ac:f2:1e:0e:c9:66:08:0f:e2:ec:05:5e:
                    8a:97:93:64:7d:9b:75:4a:5f:cd:de:f1:2b:05:d8:
                    89:e9:0a:2c:62:d7:71:8d:fb:2e:55:6d:50:4c:88:
                    1d:64:69:3c:60:f3:f8:66:8b:bc:50:b0:54:89:a6:
                    72:f1:55:cb:fd:6b:5a:ac:f1:26:82:13:e3:b2:5e:
                    e5:7c:ac:99:1c:c9:83:2a:41:a8:2d:60:c8:c4:cc:
                    e3:c9:e9:1f:9c:ed:54:fe:35:cd:a0:e2:be:16:9d:
                    b5:4a:5b:3e:ef:24:c2:6b:2e:e2:a0:1a:80:81:fd:
                    04:b9:4c:1f:cb:c1:4d:c7:7b:d7:08:a6:88:e4:76:
                    1b:25:b7:77:4a:f3:02:11:62:80:1f:9a:26:aa:c6:
                    08:64:1d:86:36:32:43:e5:0e:86:e5:05:27:37:70:
                    d4:80:df:7c:f6:41:d2:ed:56:4a:be:9f:ee:5a:9d:
                    86:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3E:32:C2:87:DC:B1:38:11:72:2C:64:FD:C7:2B:2E:50:B9:B6:62
            X509v3 Authority Key Identifier:
                keyid:A5:E3:12:33:F9:B4:AC:C8:22:2B:3F:D6:7C:6D:BC:F2:41:79:09:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peMSM_m0rMgiKz_WfG288kF5CbE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:52:db:96:70:34:06:66:14:80:5c:c3:1c:e9:75:33:e4:57:
         38:aa:0c:d0:c8:0e:60:9d:a3:ea:3a:73:7b:b2:f4:a1:d7:e3:
         d6:42:b1:2a:cc:56:25:93:2a:84:90:d0:8f:b6:ec:83:2a:4d:
         08:04:17:63:d9:84:2c:50:66:25:db:aa:a0:3c:55:77:09:48:
         61:86:46:66:be:55:4d:45:85:6c:29:ce:17:aa:f9:b0:f4:23:
         f1:55:d3:e8:bc:af:dc:0c:1b:6f:b6:7c:75:20:b6:cc:5e:02:
         f1:c2:df:0f:71:54:4e:4d:20:72:d8:83:50:78:8d:47:fa:12:
         e6:2c:5b:8f:56:5b:85:2d:fe:76:d3:f9:a6:e7:2c:28:cb:b8:
         2b:56:96:e7:ac:25:b0:f3:93:db:6d:36:f2:f7:c8:81:83:24:
         83:fe:bf:66:b4:2c:ea:52:95:b1:22:06:8b:f1:3a:8e:83:e0:
         df:aa:79:e5:8f:e6:a5:1f:58:27:1c:a7:7c:8f:16:7e:ab:8a:
         4d:38:8b:f4:b0:eb:8c:eb:e7:85:1a:2d:b4:f6:97:66:22:a3:
         50:c4:65:f6:36:7e:df:c4:78:84:ab:2c:34:35:28:84:74:ea:
         ff:0b:7a:de:cc:bf:0f:c9:cd:2b:9b:9e:1f:c7:c3:3a:96:46:
         28:9d:f3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:53 2026 by rpki-client