Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft
File:                     peMSM_m0rMgiKz_WfG288kF5CbE.mft (raw, json)
Hash identifier:          F97KGF2VrxC1LxQiTBCIlP0/pVm7v6L/aP8/f+N9u6A=
Subject key identifier:   7C:F4:B6:E5:1D:8B:CC:28:05:4A:DB:4F:8D:43:5F:38:A3:E8:FF:95
Authority key identifier: A5:E3:12:33:F9:B4:AC:C8:22:2B:3F:D6:7C:6D:BC:F2:41:79:09:B1
Certificate issuer:       /CN=A912E411/serialNumber=A5E31233F9B4ACC8222B3FD67C6DBCF2417909B1
Certificate serial:       0C78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peMSM_m0rMgiKz_WfG288kF5CbE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft
Manifest number:          15A3
Signing time:             Sat 04 Apr 2026 18:25:40 +0000
Manifest this update:     Sat 04 Apr 2026 18:25:40 +0000
Manifest next update:     Sat 11 Apr 2026 18:25:40 +0000
Files and hashes:         1: peMSM_m0rMgiKz_WfG288kF5CbE.crl (hash: U7DUkMCcn39kbuT/gzVm4XNB4gVPMECzcjp1hPArRJk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.crl
                          rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peMSM_m0rMgiKz_WfG288kF5CbE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 18:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3192 (0xc78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E411, serialNumber=A5E31233F9B4ACC8222B3FD67C6DBCF2417909B1
        Validity
            Not Before: Apr  4 18:25:40 2026 GMT
            Not After : Apr 11 18:25:40 2026 GMT
        Subject: CN=69d157a4-563f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:03:1d:27:f6:f0:16:6d:f0:e1:ef:65:54:b8:
                    0b:67:5d:2f:41:e9:a5:88:cf:08:c3:d3:c8:95:9d:
                    d6:55:d5:1a:3d:f3:3d:72:aa:50:25:22:72:f4:56:
                    f0:2f:cd:66:1a:5d:2b:b8:5c:9c:6c:85:23:ad:e5:
                    8a:d6:b3:7e:0b:99:3a:b8:69:f7:54:88:12:72:08:
                    06:4b:43:f7:8e:04:87:ee:ba:91:cf:1d:5d:95:c3:
                    e5:13:82:1a:8a:44:18:7c:98:70:f3:04:14:bc:e4:
                    f0:f5:03:ae:69:a9:d0:b1:b7:f8:2b:80:10:09:7e:
                    36:73:ce:cf:05:db:b2:f5:42:4b:bd:41:1b:f2:bb:
                    d9:3f:96:3c:9c:24:7b:9a:8b:0b:43:26:d4:1a:e3:
                    66:10:11:40:50:17:c8:9e:c6:c6:c7:f5:1d:53:cf:
                    ca:1c:26:66:ca:29:5c:df:49:5d:e8:36:a2:a5:b3:
                    43:24:47:e6:e0:ce:63:4d:6d:63:c4:4c:53:42:b7:
                    ff:1b:e1:84:aa:e2:fe:ba:e9:75:18:a8:59:f6:b1:
                    0b:26:3b:08:9b:51:f9:92:fb:0c:23:8d:e5:68:95:
                    bc:8c:04:a2:e2:41:78:5c:a4:42:7a:ed:88:43:ec:
                    c8:a8:a5:08:8c:03:0c:f5:06:7c:a5:13:82:3c:73:
                    be:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F4:B6:E5:1D:8B:CC:28:05:4A:DB:4F:8D:43:5F:38:A3:E8:FF:95
            X509v3 Authority Key Identifier:
                keyid:A5:E3:12:33:F9:B4:AC:C8:22:2B:3F:D6:7C:6D:BC:F2:41:79:09:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peMSM_m0rMgiKz_WfG288kF5CbE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:f5:46:fe:14:71:6c:c8:bc:f8:65:7b:0b:96:cf:25:44:6c:
         80:db:50:e4:6a:ac:dc:01:87:8c:e1:00:e1:20:ea:4a:95:c1:
         ed:e5:45:2e:71:76:0e:37:fd:0f:6f:98:34:2a:51:0a:f3:71:
         51:98:6e:4f:b1:3c:41:d4:72:6d:1e:d4:10:36:02:29:9b:a7:
         0f:b4:e7:2b:47:e8:cd:ab:f9:a2:2b:ad:5a:9f:71:a4:c2:6a:
         4d:38:49:17:e5:b0:44:2b:e2:68:93:a6:30:5c:1d:4b:96:2f:
         88:b7:9f:f9:58:b3:4d:2b:5b:66:c3:01:b7:cf:aa:99:57:d3:
         58:7a:12:e7:a9:e4:84:69:b6:4a:26:80:e5:40:55:c0:ce:31:
         d7:3d:31:58:6c:08:b0:0f:06:57:ee:9a:a7:2d:10:19:f4:77:
         3b:ca:50:c7:70:6d:c9:1b:81:ad:78:72:ed:e1:de:6e:1b:ea:
         0f:af:db:32:77:19:62:52:52:2e:38:53:1d:b4:7a:ee:a4:22:
         a1:c6:85:cb:af:7d:45:8a:d2:c4:3e:18:24:7d:af:fc:27:86:
         7f:f4:9f:61:92:71:95:57:89:7b:e4:5b:7b:52:e5:af:6c:f2:
         08:d8:67:bd:b8:3e:5d:6f:e7:ea:93:88:38:81:45:b9:12:56:
         11:f3:9a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 21:09:27 2026 by rpki-client