Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft
File:                     peMSM_m0rMgiKz_WfG288kF5CbE.mft (raw, json)
Hash identifier:          gSAP9z/FxX4qUJkHywGekVtdENqkvMad3ckx7Qkqw9s=
Subject key identifier:   F8:A6:BF:8C:03:12:EB:B5:95:A8:22:9E:AA:C3:9F:52:8C:EA:0F:D3
Authority key identifier: A5:E3:12:33:F9:B4:AC:C8:22:2B:3F:D6:7C:6D:BC:F2:41:79:09:B1
Certificate issuer:       /CN=A912E411/serialNumber=A5E31233F9B4ACC8222B3FD67C6DBCF2417909B1
Certificate serial:       0CA7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peMSM_m0rMgiKz_WfG288kF5CbE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft
Manifest number:          1602
Signing time:             Sat 04 Jul 2026 18:37:02 +0000
Manifest this update:     Sat 04 Jul 2026 18:37:01 +0000
Manifest next update:     Sat 11 Jul 2026 18:37:01 +0000
Files and hashes:         1: peMSM_m0rMgiKz_WfG288kF5CbE.crl (hash: gZlpMkI5AEwbvH1pmRHakPgEkgGpxP7P9JTDm6E/Auw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.crl
                          rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peMSM_m0rMgiKz_WfG288kF5CbE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Jul 2026 18:37:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3239 (0xca7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E411, serialNumber=A5E31233F9B4ACC8222B3FD67C6DBCF2417909B1
        Validity
            Not Before: Jul  4 18:37:01 2026 GMT
            Not After : Jul 11 18:37:01 2026 GMT
        Subject: CN=6a4952cd-b794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:74:17:38:00:d2:21:94:20:83:a6:82:2e:9b:
                    9f:f6:73:a2:f5:29:1b:52:86:05:ee:93:bd:40:5f:
                    82:8d:00:16:d8:3d:75:9d:08:8e:a1:de:0b:82:c5:
                    71:a3:e3:3b:bd:b4:b3:4e:e0:fd:88:d2:d1:1b:c5:
                    52:79:ac:6a:2a:8f:d6:67:20:b7:1c:cc:4b:57:cb:
                    a9:ad:d7:ca:e2:72:15:31:7c:cc:32:09:60:d6:5b:
                    c3:98:3a:18:fd:62:53:e4:7a:1f:5f:f7:02:03:7d:
                    50:19:ef:3c:b5:b6:a5:48:48:5f:25:07:6a:c4:ee:
                    94:f2:75:81:a0:70:e5:70:4f:99:82:25:b7:21:79:
                    27:00:80:86:a1:ac:30:69:ed:fd:ba:fb:9d:2c:f8:
                    80:9f:50:44:f1:f1:da:bc:2c:47:5e:58:c0:52:e3:
                    b7:3d:80:ee:91:bd:61:07:22:cf:8c:a5:2b:7a:7c:
                    37:ea:c9:0b:44:cd:f0:c6:93:c0:ae:77:99:c6:bb:
                    9e:8c:85:de:78:b9:8c:bd:c1:14:1b:d1:78:ff:fc:
                    61:82:6e:e3:42:ab:6b:3e:a1:8a:41:4c:9f:f1:77:
                    e6:3b:65:84:ba:ac:d2:d9:d0:5e:75:32:9c:e3:b9:
                    30:bf:01:ca:0c:0f:14:d5:c3:30:9b:71:d9:4e:44:
                    1c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A6:BF:8C:03:12:EB:B5:95:A8:22:9E:AA:C3:9F:52:8C:EA:0F:D3
            X509v3 Authority Key Identifier:
                keyid:A5:E3:12:33:F9:B4:AC:C8:22:2B:3F:D6:7C:6D:BC:F2:41:79:09:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peMSM_m0rMgiKz_WfG288kF5CbE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:4b:09:b7:55:ad:bc:d6:bf:1f:d2:5f:b1:fb:0a:46:45:73:
         d8:6d:d2:f0:44:c8:5f:58:86:b4:ae:30:8f:b6:27:c0:a5:da:
         54:7c:03:ca:62:f6:ba:98:16:08:9f:10:e8:e9:f8:a2:f5:d6:
         92:99:46:9b:c1:79:71:25:65:6b:33:f1:f5:4f:9c:66:f2:52:
         8a:0c:ce:34:e0:ba:89:29:0e:8e:c9:fa:53:8a:32:57:d3:d1:
         d6:62:40:78:9b:6c:2b:2f:25:73:cf:00:f6:f7:ef:40:3e:76:
         3f:4f:16:87:ee:7e:c0:c5:58:28:58:9a:7a:e0:c0:9b:32:6b:
         a0:10:df:96:b3:35:3f:f4:d7:49:5b:5b:99:de:4e:28:cf:90:
         e1:68:8a:0c:f1:f4:8d:89:bb:d6:a8:a5:6e:57:c7:22:a5:85:
         da:1b:6d:c5:50:64:f6:b2:4e:cc:7c:e2:7f:4c:16:6d:62:f3:
         fe:7c:67:16:40:53:bc:44:05:f8:70:21:3c:08:8e:08:59:81:
         d1:e3:d9:48:9a:9e:91:58:31:dd:a3:eb:dc:b7:b7:96:4c:78:
         ff:49:88:7c:68:cb:eb:66:09:6a:8d:2a:bb:97:83:88:02:71:
         9e:a6:4f:38:bf:8c:5a:1e:ea:fd:c1:84:39:dd:03:f6:04:8f:
         60:44:0b:c0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkU0MTExMTAvBgNVBAUTKEE1RTMxMjMzRjlCNEFDQzgyMjJCM0ZENjdDNkRCQ0Yy
NDE3OTA5QjEwHhcNMjYwNzA0MTgzNzAxWhcNMjYwNzExMTgzNzAxWjAYMRYwFAYD
VQQDEw02YTQ5NTJjZC1iNzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr3QXOADSIZQgg6aCLpuf9nOi9SkbUoYF7pO9QF+CjQAW2D11nQiOod4LgsVx
o+M7vbSzTuD9iNLRG8VSeaxqKo/WZyC3HMxLV8uprdfK4nIVMXzMMglg1lvDmDoY
/WJT5HofX/cCA31QGe88tbalSEhfJQdqxO6U8nWBoHDlcE+ZgiW3IXknAICGoaww
ae39uvudLPiAn1BE8fHavCxHXljAUuO3PYDukb1hByLPjKUrenw36skLRM3wxpPA
rneZxruejIXeeLmMvcEUG9F4//xhgm7jQqtrPqGKQUyf8XfmO2WEuqzS2dBedTKc
47kwvwHKDA8U1cMwm3HZTkQcaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPimv4wD
Euu1laginqrDn1KM6g/TMB8GA1UdIwQYMBaAFKXjEjP5tKzIIis/1nxtvPJBeQmx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTQxMS9GMEIwMEVCNDE5
MTQxMUVBODZGMjQ4MUVDNEY5QUUwMi9wZU1TTV9tMHJNZ2lLel9XZkcyODhrRjVD
YkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BlTVNNX20wck1naUt6X1dmRzI4OGtGNUNiRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RTQxMS9GMEIwMEVCNDE5MTQxMUVBODZGMjQ4MUVDNEY5QUUwMi9wZU1TTV9tMHJN
Z2lLel9XZkcyODhrRjVDYkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkksJt1WtvNa/H9JfsfsKRkVz2G3S8ETIX1iGtK4wj7YnwKXaVHwDymL2upgW
CJ8Q6On4ovXWkplGm8F5cSVlazPx9U+cZvJSigzONOC6iSkOjsn6U4oyV9PR1mJA
eJtsKy8lc88A9vfvQD52P08Wh+5+wMVYKFiaeuDAmzJroBDflrM1P/TXSVtbmd5O
KM+Q4WiKDPH0jYm71qilblfHIqWF2httxVBk9rJOzHzif0wWbWLz/nxnFkBTvEQF
+HAhPAiOCFmB0ePZSJqekVgx3aPr3Le3lkx4/0mIfGjL62YJao0qu5eDiAJxnqZP
OL+MWh7q/cGEOd0D9gSPYEQLwA==
-----END CERTIFICATE-----
Generated at Sun Jul 5 07:52:39 2026 by rpki-client