Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915E0B3/24632E9C745511F193088CA56FA30FBC/BEABAtdWe9ATEcJwCXEr2_Mv7gk.mft
File:                     BEABAtdWe9ATEcJwCXEr2_Mv7gk.mft (raw, json)
Hash identifier:          J6K9RjqQeURSvW60OstU03aldLKxCmiy+YLkglx9aII=
Subject key identifier:   FC:4B:91:1F:62:A0:1F:92:78:5C:D3:FC:F7:29:FD:65:ED:00:FF:7D
Authority key identifier: 04:40:01:02:D7:56:7B:D0:13:11:C2:70:09:71:2B:DB:F3:2F:EE:09
Certificate issuer:       /CN=A915E0B3/serialNumber=04400102D7567BD01311C27009712BDBF32FEE09
Certificate serial:       36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BEABAtdWe9ATEcJwCXEr2_Mv7gk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E0B3/24632E9C745511F193088CA56FA30FBC/BEABAtdWe9ATEcJwCXEr2_Mv7gk.mft
Manifest number:          34
Signing time:             Sat 03 Oct 2026 09:24:26 +0000
Manifest this update:     Sat 03 Oct 2026 09:24:26 +0000
Manifest next update:     Sat 10 Oct 2026 09:24:26 +0000
Files and hashes:         1: BEABAtdWe9ATEcJwCXEr2_Mv7gk.crl (hash: NdsP23SPdIQmwhmGAsCLJXdJc3yY2aJtfhJ2Wlf5jm0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E0B3/24632E9C745511F193088CA56FA30FBC/BEABAtdWe9ATEcJwCXEr2_Mv7gk.crl
                          rsync://rpki.apnic.net/member_repository/A915E0B3/24632E9C745511F193088CA56FA30FBC/BEABAtdWe9ATEcJwCXEr2_Mv7gk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BEABAtdWe9ATEcJwCXEr2_Mv7gk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 09:24:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E0B3, serialNumber=04400102D7567BD01311C27009712BDBF32FEE09
        Validity
            Not Before: Oct  3 09:24:26 2026 GMT
            Not After : Oct 10 09:24:26 2026 GMT
        Subject: CN=6ac0c9ca-98c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:49:f5:f5:b7:1e:e9:23:d4:93:37:03:20:25:
                    d7:64:c9:51:e8:a1:2e:51:63:4e:56:5b:32:a5:eb:
                    a8:22:53:fe:3a:1d:0d:08:d6:46:1a:d9:83:fb:05:
                    ba:ed:8c:2a:99:32:bb:bb:66:c2:03:e1:47:8f:43:
                    aa:f5:19:69:d2:ee:da:5a:28:4b:9a:cb:ac:be:e6:
                    09:38:52:33:1a:05:b5:fb:48:76:39:bf:58:d6:ef:
                    d7:0a:5e:d9:ea:58:d9:a4:9f:c7:eb:ff:88:99:3e:
                    44:2d:7a:a4:64:e0:37:de:66:1f:7d:8d:d3:c4:fa:
                    59:50:c7:b7:04:c9:94:21:d1:fc:1e:81:73:c3:9c:
                    dc:95:59:01:cd:34:5b:81:0a:87:3c:04:ee:2d:cd:
                    2b:13:48:44:a1:e4:57:8f:92:7e:74:21:ba:92:72:
                    e4:2a:8b:a2:bf:50:19:3b:77:b1:23:f8:36:38:38:
                    18:02:25:a3:56:55:f8:85:71:82:34:67:4b:bc:cc:
                    79:c7:01:4c:bb:d4:d5:9d:40:f1:53:a5:2d:6d:8f:
                    c4:34:bf:48:f6:58:5b:5b:32:0c:72:bf:7c:89:58:
                    e3:c2:ba:0c:ca:86:d4:5a:fc:96:a4:80:44:16:c7:
                    30:65:33:ef:4d:de:37:84:ca:3a:8f:7b:e9:75:c3:
                    7f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:4B:91:1F:62:A0:1F:92:78:5C:D3:FC:F7:29:FD:65:ED:00:FF:7D
            X509v3 Authority Key Identifier:
                keyid:04:40:01:02:D7:56:7B:D0:13:11:C2:70:09:71:2B:DB:F3:2F:EE:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E0B3/24632E9C745511F193088CA56FA30FBC/BEABAtdWe9ATEcJwCXEr2_Mv7gk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BEABAtdWe9ATEcJwCXEr2_Mv7gk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E0B3/24632E9C745511F193088CA56FA30FBC/BEABAtdWe9ATEcJwCXEr2_Mv7gk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:89:0c:50:6d:06:cc:a0:b7:1e:37:4b:2a:3e:6f:43:7c:37:
         3d:df:f2:08:9f:37:3b:d6:fe:ac:1e:f7:a7:4c:8d:e9:6c:0d:
         6c:d2:f8:32:94:3a:97:6d:e6:43:7b:c7:5d:ad:35:9a:56:f3:
         20:19:74:93:ae:65:41:32:50:1c:c4:49:0b:47:f5:75:c7:63:
         cd:86:56:da:9f:04:fa:ea:a7:9f:60:ab:8d:73:70:6f:44:41:
         de:3b:b5:c5:dd:99:79:05:1e:e6:cc:f8:4c:dd:82:9a:28:b4:
         9c:8c:ed:51:88:7b:91:16:f8:ec:7e:25:54:54:18:86:01:39:
         1e:3d:23:05:95:83:27:ab:99:d0:50:68:59:b9:87:49:54:51:
         75:d2:5b:43:3f:26:67:f6:36:4d:6f:0d:a7:f0:fa:5a:fb:02:
         a8:53:2a:2f:c6:3d:60:2a:5d:48:13:3d:e0:55:a3:67:4f:f9:
         19:d8:d8:f4:cc:af:f5:4a:a6:1d:74:29:d1:56:c3:0f:41:a8:
         f9:27:d3:19:1e:4f:c8:a1:10:3e:cd:49:ac:39:e0:eb:99:04:
         47:dd:71:3d:32:f5:32:6b:01:3f:9f:51:6d:73:98:87:f2:94:
         36:cc:78:51:0c:71:1e:93:9e:37:5f:13:df:21:f9:dc:2d:9a:
         ed:d2:80:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:38:24 2026 by rpki-client