Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft
File:                     msqKXCR04g_6ZzTz9yVL__GFE_4.mft (raw, json)
Hash identifier:          5KpGyYH9mohGZY58kBKBO9bHlBmNw+7ZnsQGSB++Nl8=
Subject key identifier:   45:F0:D1:91:80:17:E2:39:36:2B:28:65:76:C2:6D:38:B8:23:09:96
Authority key identifier: 9A:CA:8A:5C:24:74:E2:0F:FA:67:34:F3:F7:25:4B:FF:F1:85:13:FE
Certificate issuer:       /CN=A91A8A96/serialNumber=9ACA8A5C2474E20FFA6734F3F7254BFFF18513FE
Certificate serial:       3510
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft
Manifest number:          3510
Signing time:             Sat 28 Feb 2026 15:08:09 +0000
Manifest this update:     Sat 28 Feb 2026 15:08:08 +0000
Manifest next update:     Sat 07 Mar 2026 15:08:08 +0000
Files and hashes:         1: msqKXCR04g_6ZzTz9yVL__GFE_4.crl (hash: 6HnCnOP//Zm+bYh3WtC0EdSOC4/f9PDlKD1QJTzT9ms=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.crl
                          rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 15:08:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13584 (0x3510)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8A96, serialNumber=9ACA8A5C2474E20FFA6734F3F7254BFFF18513FE
        Validity
            Not Before: Feb 28 15:08:08 2026 GMT
            Not After : Mar  7 15:08:08 2026 GMT
        Subject: CN=69a304d9-6f97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:19:ed:12:3a:71:34:77:60:a0:91:3d:22:bf:
                    64:20:f0:8a:35:6c:70:33:6f:1e:04:c2:53:6d:5f:
                    1b:b1:27:2e:4b:93:5a:cf:26:fe:85:cb:61:d9:21:
                    a6:79:a9:f2:24:41:99:04:c4:9e:6f:54:f0:d0:89:
                    e1:44:ae:5c:a4:00:a4:35:f6:63:a8:17:b1:c7:54:
                    98:15:f6:08:4c:e2:d2:98:9a:34:99:0a:9d:56:72:
                    71:ed:41:1f:58:d2:55:9c:df:a6:7e:74:bf:94:1a:
                    e5:af:5f:8b:8a:f7:cc:3f:47:27:79:32:1e:4c:81:
                    59:01:9f:a0:a5:92:4d:4a:59:bc:a3:45:a3:13:04:
                    f5:2c:f9:09:eb:58:a3:50:8a:b2:9a:a4:5c:6d:95:
                    97:0b:bc:09:d1:8e:af:da:06:8d:7f:63:fc:c4:bd:
                    02:78:ea:5a:83:62:1c:2a:03:cd:ad:4c:54:5c:bc:
                    8d:fd:1c:27:72:45:8e:e1:92:6a:ae:ff:bf:b5:48:
                    d0:f0:7e:ca:36:52:c6:67:0a:3f:bb:ab:c4:22:36:
                    d3:3a:fb:85:49:1e:c5:9f:1c:70:ea:80:5b:90:98:
                    64:c1:1e:00:9f:cd:19:32:43:31:0d:65:36:9e:53:
                    b6:e5:25:86:02:b2:eb:42:ee:d7:e8:74:e0:48:01:
                    8e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F0:D1:91:80:17:E2:39:36:2B:28:65:76:C2:6D:38:B8:23:09:96
            X509v3 Authority Key Identifier:
                keyid:9A:CA:8A:5C:24:74:E2:0F:FA:67:34:F3:F7:25:4B:FF:F1:85:13:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:ba:a0:f2:6a:7c:9d:bf:5b:06:a5:ca:80:de:62:0d:e5:8d:
         01:6a:10:7b:69:f0:c1:50:fe:d2:64:68:ee:cb:51:05:f7:ad:
         32:7b:bc:62:8d:4a:5d:0f:75:95:34:81:1b:51:ba:34:af:1c:
         a4:bd:2f:59:16:6c:bf:f7:1f:9e:a9:64:d6:bb:0d:ae:8f:2e:
         ac:9e:50:6a:e5:04:fb:a0:11:e6:19:63:e2:09:f9:bd:83:da:
         75:f1:08:80:5e:46:71:bf:a7:e8:50:c2:3f:97:f0:d0:ad:77:
         a0:54:a5:1a:5a:05:9d:b4:01:6f:e3:3a:b8:22:f1:1e:68:55:
         d0:3c:7b:9c:82:42:e4:6f:21:19:71:b4:90:93:b3:33:72:b8:
         c6:e7:ce:1d:c2:37:bd:a9:10:eb:ab:d8:49:17:9d:89:11:74:
         21:fc:8c:4c:4a:9b:74:3e:bb:74:d4:a2:82:23:09:0a:54:ff:
         9b:ba:2d:40:40:fe:cd:2d:ac:0c:36:d0:8d:ae:5c:9c:e7:14:
         92:1a:d5:e7:f3:ee:0c:a4:14:bd:2f:14:f5:5b:50:09:8a:f0:
         fa:8a:8f:66:84:96:f3:aa:6b:d8:15:43:7c:f8:a4:ee:1b:43:
         aa:56:39:59:2d:6f:3d:2a:72:12:bc:1d:d9:28:8f:f7:0d:e1:
         94:68:89:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:36 2026 by rpki-client