Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.mft
File:                     MSV13k1GQ_rfrkiHbfRWfX18aFY.mft (raw, json)
Hash identifier:          ujcPzdoXSEC3OwUD7OYVTMzDB9aQXWjW5BGxY0+Fwh8=
Subject key identifier:   F7:F8:32:22:67:36:05:A5:A6:E4:D2:35:8F:9C:AD:B0:A1:DB:DB:DC
Authority key identifier: 31:25:75:DE:4D:46:43:FA:DF:AE:48:87:6D:F4:56:7D:7D:7C:68:56
Certificate issuer:       /CN=A91BD7A3/serialNumber=312575DE4D4643FADFAE48876DF4567D7D7C6856
Certificate serial:       38
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MSV13k1GQ_rfrkiHbfRWfX18aFY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.mft
Manifest number:          36
Signing time:             Sun 01 Mar 2026 09:57:48 +0000
Manifest this update:     Sun 01 Mar 2026 09:57:48 +0000
Manifest next update:     Sun 08 Mar 2026 09:57:48 +0000
Files and hashes:         1: MSV13k1GQ_rfrkiHbfRWfX18aFY.crl (hash: AnjI/eBeT/A6Jtf2VYX2iwbRlVIvxHsjADGcniMRdYg=)
                          2: 127C35B4C52511F09456F21BC4F9AE02.roa (hash: wyxXuyIC5WUaxAyzD2PyMOcBQ4OB6Gp2VhwVjUIddbE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.crl
                          rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MSV13k1GQ_rfrkiHbfRWfX18aFY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:57:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD7A3, serialNumber=312575DE4D4643FADFAE48876DF4567D7D7C6856
        Validity
            Not Before: Mar  1 09:57:48 2026 GMT
            Not After : Mar  8 09:57:48 2026 GMT
        Subject: CN=69a40d9c-5b8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:56:6d:68:b9:b5:e6:14:bd:84:8e:85:03:34:
                    be:97:cf:6d:31:4f:7e:cc:d6:e0:49:8a:a2:82:e1:
                    57:51:39:44:bb:be:9f:8d:ab:fa:4e:3e:df:3c:ec:
                    dd:7e:34:dd:ce:67:38:ce:cc:11:f4:fc:4b:ac:8e:
                    2e:d4:39:c0:7d:14:24:91:91:d9:ec:a3:6e:55:7e:
                    0d:30:2d:16:01:f6:08:e4:66:9a:73:56:cb:ad:bb:
                    80:b9:43:6c:84:17:9c:b4:90:71:7c:b7:a0:62:a3:
                    9d:dc:e7:e7:9e:58:62:69:83:2b:d4:24:ae:97:37:
                    5c:d7:10:98:fd:85:6d:81:39:72:89:a8:64:f7:30:
                    55:4b:0f:c5:57:27:56:83:5e:39:a0:b3:7e:a0:c4:
                    3c:06:60:2e:38:c1:82:5b:47:25:43:a3:d6:6b:96:
                    fb:35:f5:e7:dc:d7:b5:52:8a:0b:32:aa:b3:86:64:
                    8c:b9:91:e5:0e:df:c4:7d:31:5e:eb:69:c8:d2:3e:
                    3a:12:83:d8:66:e2:fe:64:b7:f1:d7:c1:f4:c7:53:
                    67:32:4c:6d:b0:8b:70:c7:69:85:28:17:29:2a:cf:
                    0c:46:9a:e2:02:5e:e5:86:6b:59:5f:bc:38:fc:2e:
                    25:8f:cd:2c:36:58:1e:05:f1:f6:30:98:df:47:d9:
                    a3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F8:32:22:67:36:05:A5:A6:E4:D2:35:8F:9C:AD:B0:A1:DB:DB:DC
            X509v3 Authority Key Identifier:
                keyid:31:25:75:DE:4D:46:43:FA:DF:AE:48:87:6D:F4:56:7D:7D:7C:68:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MSV13k1GQ_rfrkiHbfRWfX18aFY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:95:fb:06:15:15:83:2a:bf:71:94:f9:dc:b4:8a:bf:75:44:
         21:81:a5:04:e2:f8:02:ee:b6:15:74:5b:9a:5b:74:b0:0c:e8:
         59:5c:de:62:8b:c5:e9:75:ed:02:4a:10:50:a9:f1:17:7b:01:
         07:80:ed:0e:cb:3a:df:bf:51:9d:98:33:73:ec:09:1b:2a:c7:
         25:81:e6:f0:96:ac:a5:be:0c:26:54:71:37:ea:f6:3e:dc:ec:
         a1:c7:88:71:19:23:ce:5b:0e:6f:a1:54:e9:d9:31:c6:29:cf:
         56:4e:b4:4b:05:c5:3b:a5:25:e2:fe:ca:ce:cd:5f:25:4a:3c:
         c9:39:2d:4d:15:b3:77:24:26:0e:1f:52:3b:c4:b9:91:30:e0:
         e4:1f:9a:79:80:43:20:bf:92:c9:60:1d:d4:ea:30:dc:72:db:
         71:11:1b:10:67:b3:c3:da:53:f3:01:a6:84:01:99:87:90:02:
         99:dd:78:5c:65:f4:5a:ed:f5:29:3f:f8:7e:3f:21:0b:03:a1:
         a7:95:89:42:55:0a:25:6f:d3:99:fb:c3:50:33:a9:8e:f9:8c:
         c1:5a:33:ba:de:17:e3:cf:49:92:e3:5e:81:e4:26:b9:e5:d5:
         41:7d:8f:91:d8:fa:63:8d:df:cf:fd:29:43:06:21:41:e9:51:
         c1:fd:17:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:00:43 2026 by rpki-client