Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft
File:                     msqKXCR04g_6ZzTz9yVL__GFE_4.mft (raw, json)
Hash identifier:          HfMj6shMeOjJv03eGdGGjMmvwoX1+a7BvC3CZXoB4W4=
Subject key identifier:   D0:28:6F:FA:EE:81:FE:CD:7F:DF:3D:E7:CB:D4:39:04:AF:F1:B2:81
Authority key identifier: 9A:CA:8A:5C:24:74:E2:0F:FA:67:34:F3:F7:25:4B:FF:F1:85:13:FE
Certificate issuer:       /CN=A91A8A96/serialNumber=9ACA8A5C2474E20FFA6734F3F7254BFFF18513FE
Certificate serial:       352A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft
Manifest number:          352A
Signing time:             Thu 16 Apr 2026 15:06:05 +0000
Manifest this update:     Thu 16 Apr 2026 15:06:04 +0000
Manifest next update:     Thu 23 Apr 2026 15:06:04 +0000
Files and hashes:         1: msqKXCR04g_6ZzTz9yVL__GFE_4.crl (hash: i4zf/JqtwPNnC4aua+CV9fOEP+5H2OpqrDMIn3f+v6o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.crl
                          rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:06:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13610 (0x352a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8A96, serialNumber=9ACA8A5C2474E20FFA6734F3F7254BFFF18513FE
        Validity
            Not Before: Apr 16 15:06:04 2026 GMT
            Not After : Apr 23 15:06:04 2026 GMT
        Subject: CN=69e0fadd-4d03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:52:91:14:12:2d:e0:24:8e:15:b7:ae:60:bf:
                    89:73:fa:ff:ae:9c:48:05:2b:c7:e9:1b:c9:ba:c4:
                    38:4c:4d:2c:f5:58:ee:12:fc:fc:39:46:fc:15:c2:
                    b3:1b:e6:f0:1a:d6:ca:70:36:e9:7f:d5:b5:35:3a:
                    eb:ab:5c:57:70:84:20:e8:ec:74:4d:e6:fa:34:0b:
                    60:c2:7a:53:1f:0a:2a:e8:2a:31:be:c9:af:02:1d:
                    ff:a4:69:56:1a:30:99:6a:e5:43:68:28:a8:d2:81:
                    a4:20:64:5f:84:7f:0c:33:1e:31:3a:4b:f0:5a:65:
                    c1:09:29:2a:35:4c:f2:d3:20:6b:36:03:3b:d2:02:
                    9d:01:a9:93:cb:b3:fe:e3:9e:8c:b8:45:c8:29:e7:
                    18:f3:30:ab:de:52:5b:86:4b:a8:6a:89:65:85:3e:
                    8c:78:ea:00:5a:d9:56:fa:2c:ce:6f:a0:5c:3f:da:
                    ba:41:93:83:a5:e1:e3:ed:23:f7:b3:05:e4:24:82:
                    25:df:35:23:67:a5:0e:58:41:4a:75:cd:7d:57:55:
                    c7:a4:0b:aa:c3:3e:a5:3b:76:91:8f:95:91:ee:ca:
                    fd:e8:65:8e:7b:e9:e2:fa:b5:04:b3:2f:0f:ca:44:
                    f0:08:75:af:11:91:5e:5e:44:fc:51:20:c7:c9:d4:
                    84:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:28:6F:FA:EE:81:FE:CD:7F:DF:3D:E7:CB:D4:39:04:AF:F1:B2:81
            X509v3 Authority Key Identifier:
                keyid:9A:CA:8A:5C:24:74:E2:0F:FA:67:34:F3:F7:25:4B:FF:F1:85:13:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:38:e5:2b:80:78:0a:b7:e1:8d:5b:8d:85:66:aa:e3:18:3c:
         c7:42:12:95:62:1c:b8:67:3c:2c:e6:76:8c:0f:59:10:94:4c:
         af:10:2f:e9:b1:a1:9b:46:a4:70:25:cc:11:f6:aa:fc:2c:31:
         0f:57:83:35:e8:41:41:ef:47:de:9a:ab:4b:27:c8:a3:6d:22:
         c8:90:31:15:23:12:68:2c:dd:73:b8:eb:e2:bd:fa:d6:18:f7:
         f8:d9:c5:28:aa:89:90:52:4b:9f:af:8e:6c:f6:1c:e7:d5:7e:
         08:89:99:a4:04:d1:46:fc:cd:cb:d9:aa:c9:07:8f:e8:15:71:
         d2:f3:21:70:18:c0:44:80:d7:99:ca:29:cc:0e:ac:d6:42:84:
         83:d0:72:fb:4d:dd:15:9d:a0:f7:6a:af:6e:c2:fe:b4:0b:b7:
         6b:d0:62:1c:50:02:04:48:74:8c:7f:48:48:59:06:e9:b4:e2:
         99:80:74:5f:d2:6f:b5:8d:23:70:64:9a:80:ba:15:e3:d2:39:
         3c:b8:ff:7d:38:d3:fd:44:3a:f7:03:0c:33:0c:71:2e:00:55:
         63:fc:1e:ed:1d:38:2a:50:d1:c3:79:54:7a:17:82:b3:06:c8:
         ed:52:ad:24:38:cb:ba:d1:cf:88:08:e9:b8:8d:f4:5c:be:b9:
         e2:da:1e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:34:56 2026 by rpki-client