Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft
File:                     7BeaWHQiKOMLffeXiCZYOHglW3g.mft (raw, json)
Hash identifier:          mZteuPcyqiW6uDHXI2vEgOJOkbiilJRuq9WCzm/Obxs=
Subject key identifier:   B2:7A:36:0A:70:DB:F9:33:D3:6D:9C:AB:26:EB:7B:67:D6:CE:C0:B5
Authority key identifier: EC:17:9A:58:74:22:28:E3:0B:7D:F7:97:88:26:58:38:78:25:5B:78
Certificate issuer:       /CN=A91AA95A/serialNumber=EC179A58742228E30B7DF7978826583878255B78
Certificate serial:       0E45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft
Manifest number:          0E40
Signing time:             Tue 24 Mar 2026 17:39:35 +0000
Manifest this update:     Tue 24 Mar 2026 17:39:34 +0000
Manifest next update:     Tue 31 Mar 2026 17:39:34 +0000
Files and hashes:         1: 7BeaWHQiKOMLffeXiCZYOHglW3g.crl (hash: E+hWapNdWQODtOgwlFB8Bwf+4RZ9oFKrl54Ol91r6Kg=)
                          2: E64999C258D611ED86C99945C4F9AE02.roa (hash: nrkALxF3N7zySp8PWyEUTbwwT/QmNcS9R8jt9N3DK2Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.crl
                          rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:39:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3653 (0xe45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA95A, serialNumber=EC179A58742228E30B7DF7978826583878255B78
        Validity
            Not Before: Mar 24 17:39:34 2026 GMT
            Not After : Mar 31 17:39:34 2026 GMT
        Subject: CN=69c2cc57-7314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:af:3d:7c:7f:e5:cd:17:d0:4a:da:d7:98:cf:
                    d1:35:a7:1b:ee:1d:28:db:de:75:28:a5:a6:14:93:
                    51:aa:82:c3:cc:85:8d:24:47:3f:62:e5:66:0d:f7:
                    3c:08:bf:b9:7e:64:4b:73:ae:9d:84:66:6f:d7:50:
                    77:b4:85:eb:96:62:99:cf:15:68:85:58:6b:95:7b:
                    91:68:89:94:a7:88:7b:21:ad:87:61:f7:fb:55:ed:
                    f3:65:80:11:71:1e:a6:c3:a5:a6:19:2e:78:4e:ea:
                    44:d3:3b:46:6a:9c:29:19:6a:b2:a1:b2:3e:02:e2:
                    b5:45:c3:23:ce:f1:e5:e3:a5:ea:e2:2b:09:aa:d6:
                    6e:ec:06:aa:fa:cf:47:35:0d:8b:4c:af:91:66:91:
                    13:f2:5b:2a:b2:3b:f3:ab:9a:49:c1:c2:e3:6d:07:
                    98:f6:79:b0:e6:4c:b9:e2:19:36:b7:f0:f9:a4:9e:
                    c0:26:a2:6c:54:08:a9:6d:bb:1d:75:a2:b7:bd:09:
                    33:bb:34:6b:45:b2:ed:9f:6d:1d:6d:a0:a5:bb:7f:
                    8b:f1:85:6f:dc:d6:80:b5:e6:fc:a6:da:46:bf:0f:
                    ac:4b:d2:38:e5:d3:7f:75:41:23:ef:f3:c4:72:e5:
                    9e:76:89:4f:e4:3e:4b:9b:f1:30:c8:73:ea:f1:35:
                    d2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:7A:36:0A:70:DB:F9:33:D3:6D:9C:AB:26:EB:7B:67:D6:CE:C0:B5
            X509v3 Authority Key Identifier:
                keyid:EC:17:9A:58:74:22:28:E3:0B:7D:F7:97:88:26:58:38:78:25:5B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:40:97:ff:79:f1:77:d2:f0:1c:af:2d:f2:49:8c:1f:01:0f:
         31:c6:6f:0e:21:86:d8:0a:ca:99:cd:ac:07:8a:e5:4d:a7:99:
         02:61:73:17:78:8e:88:5e:0a:f5:70:9f:ab:b5:15:3d:1f:b7:
         d5:08:3c:be:c0:f3:a3:e3:8c:72:6e:b3:75:b0:fc:3a:8e:84:
         ed:74:8b:cc:36:5d:62:2c:2a:2d:df:4f:06:47:5e:2f:d0:1b:
         f7:75:d5:58:a6:44:e3:3d:e8:1a:24:47:7d:b3:eb:bc:36:8d:
         69:7d:65:5e:1d:48:b8:db:10:aa:a3:45:99:db:6f:a2:e9:91:
         ca:2c:9b:a5:f1:e0:98:bc:cd:21:99:e0:78:77:a6:b8:0b:fb:
         db:5b:c6:be:06:dc:fa:5e:8c:c3:8f:24:c6:e3:61:2e:b9:f8:
         13:df:12:de:af:1b:8d:ad:30:59:db:06:c8:fd:30:d7:35:c0:
         c7:85:d8:59:70:9a:5e:9a:2e:57:06:f6:0d:aa:49:79:29:cf:
         19:ed:6e:f8:a5:6e:72:48:77:67:fe:26:77:27:8e:e7:c9:60:
         23:c0:fb:99:77:53:65:c1:4b:49:ff:e2:e3:11:a1:ad:e7:ce:
         79:9f:3a:8e:08:92:f5:57:5c:a3:69:76:f9:18:c4:ba:3c:ee:
         a5:a1:f0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:27:55 2026 by rpki-client