Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft
File:                     7BeaWHQiKOMLffeXiCZYOHglW3g.mft (raw, json)
Hash identifier:          bBgdv6fNkRtjLKzvZZWoJ8Rm3juP2BmGpBt3E7Yhq6k=
Subject key identifier:   28:29:2C:0B:92:F1:81:49:5A:C8:71:20:58:61:69:8C:6D:52:34:14
Authority key identifier: EC:17:9A:58:74:22:28:E3:0B:7D:F7:97:88:26:58:38:78:25:5B:78
Certificate issuer:       /CN=A91AA95A/serialNumber=EC179A58742228E30B7DF7978826583878255B78
Certificate serial:       0E61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft
Manifest number:          0E5B
Signing time:             Tue 12 May 2026 17:48:12 +0000
Manifest this update:     Tue 12 May 2026 17:48:12 +0000
Manifest next update:     Tue 19 May 2026 17:48:12 +0000
Files and hashes:         1: 7BeaWHQiKOMLffeXiCZYOHglW3g.crl (hash: GBuvUkXhnaJ8xhgIA6aEUNMyLjEYSKGK9Ry4ZqciAAo=)
                          2: E64999C258D611ED86C99945C4F9AE02.roa (hash: cElPbY7K42ZgHRo0Rm4vFkLcjVWBwNFQ8So0RPXc2fY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.crl
                          rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:48:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3681 (0xe61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA95A, serialNumber=EC179A58742228E30B7DF7978826583878255B78
        Validity
            Not Before: May 12 17:48:12 2026 GMT
            Not After : May 19 17:48:12 2026 GMT
        Subject: CN=6a0367dc-c17d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0d:74:6a:3e:7c:ee:db:f2:71:c5:67:78:fe:
                    46:59:02:f9:26:d9:2b:02:1d:81:0a:49:c5:05:df:
                    ac:a3:a4:e0:17:0a:16:5f:24:7b:0a:fb:5e:ff:79:
                    86:1a:82:a5:72:10:35:9a:a9:65:ca:e8:97:83:05:
                    b8:69:00:49:ae:4f:60:cb:59:78:4a:c0:d7:85:1c:
                    4f:58:11:43:9c:33:e7:6c:87:b9:1e:b8:40:bb:64:
                    f0:3d:fc:80:74:75:06:64:2d:c4:ef:d3:ac:25:0c:
                    af:8f:b0:85:df:71:c1:00:5d:12:cf:af:8a:71:67:
                    79:ea:0a:24:0e:81:fd:74:bb:99:f8:dd:4d:75:4b:
                    39:07:27:d9:1e:3f:16:16:bf:b8:fd:df:0b:64:30:
                    14:b8:cb:ce:fe:1a:be:8b:46:17:30:3a:a7:71:ef:
                    87:52:03:46:9d:0e:c9:ec:08:fc:d5:82:39:f0:a3:
                    cc:61:ca:6c:42:d7:35:9e:00:02:02:4d:f7:ea:77:
                    86:b9:13:1f:fa:23:3e:63:73:18:d3:1d:f0:b6:3f:
                    e6:28:e8:2c:0e:32:bd:9a:ee:3c:3a:37:3b:8f:38:
                    0e:27:43:1b:06:6d:f1:43:37:31:94:5c:c8:34:d1:
                    3b:d6:5e:52:d5:78:62:d8:0f:a9:67:c2:68:9d:9f:
                    10:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:29:2C:0B:92:F1:81:49:5A:C8:71:20:58:61:69:8C:6D:52:34:14
            X509v3 Authority Key Identifier:
                keyid:EC:17:9A:58:74:22:28:E3:0B:7D:F7:97:88:26:58:38:78:25:5B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:ec:ce:29:89:de:52:f8:91:15:4c:3c:7a:3e:48:51:73:36:
         3b:cf:e0:91:95:e5:02:57:2d:88:23:d2:03:ed:23:4a:50:04:
         aa:f3:19:da:48:02:37:ff:3b:76:88:fb:02:7f:ca:e6:b4:5d:
         a1:3d:9f:93:fe:fe:41:f6:23:a2:71:eb:b1:2f:22:52:2c:4b:
         4b:68:f3:b8:2c:ba:38:d8:56:3d:7b:4d:66:1f:12:f7:3c:30:
         cc:4f:e0:8b:72:76:cf:d5:91:ca:72:f0:cc:0f:dc:f6:ba:01:
         1b:4e:5b:3a:a3:2f:ed:67:05:c8:7c:cf:e6:6f:b5:45:7f:6f:
         c3:51:dc:95:fa:a3:5c:d6:2a:12:5d:ad:81:e6:2b:d4:5d:6e:
         9d:d3:e5:7b:29:14:df:cc:49:f6:8e:78:5b:07:24:eb:1a:61:
         0f:ec:86:a4:08:3d:f7:fe:07:77:0e:1d:a7:0f:fd:12:23:ae:
         40:03:a8:e5:76:05:e0:4e:40:dc:78:2b:d8:2b:b8:ee:09:cc:
         2d:ca:6e:25:93:6d:b3:a0:6e:8e:f2:78:de:71:23:e5:2e:1f:
         37:00:46:03:8a:da:76:dc:d7:98:7a:3f:a3:13:3c:db:fd:a3:
         d7:0d:53:97:7b:07:dc:4b:a2:ad:10:14:71:e5:b3:ea:ee:a4:
         e4:5f:94:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:05:40 2026 by rpki-client