Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft
File:                     7BeaWHQiKOMLffeXiCZYOHglW3g.mft (raw, json)
Hash identifier:          tlZ8/Y/oQTxmOnrGsJx3oFSbuIkhtXY02BgzCt21dB0=
Subject key identifier:   3F:46:5D:1E:2E:41:B9:AA:B0:97:1F:F4:5B:06:4F:0C:0C:EA:3F:2C
Authority key identifier: EC:17:9A:58:74:22:28:E3:0B:7D:F7:97:88:26:58:38:78:25:5B:78
Certificate issuer:       /CN=A91AA95A/serialNumber=EC179A58742228E30B7DF7978826583878255B78
Certificate serial:       0E65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft
Manifest number:          0E5F
Signing time:             Wed 20 May 2026 17:46:36 +0000
Manifest this update:     Wed 20 May 2026 17:46:35 +0000
Manifest next update:     Wed 27 May 2026 17:46:35 +0000
Files and hashes:         1: 7BeaWHQiKOMLffeXiCZYOHglW3g.crl (hash: RGFAnj5/C6fFEpwAue/epWw7a+ajjlJoDzNGcTjhqBg=)
                          2: E64999C258D611ED86C99945C4F9AE02.roa (hash: cElPbY7K42ZgHRo0Rm4vFkLcjVWBwNFQ8So0RPXc2fY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.crl
                          rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 17:46:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3685 (0xe65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA95A, serialNumber=EC179A58742228E30B7DF7978826583878255B78
        Validity
            Not Before: May 20 17:46:35 2026 GMT
            Not After : May 27 17:46:35 2026 GMT
        Subject: CN=6a0df37b-9c3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7b:c1:49:0e:ae:a5:14:f0:92:08:b9:26:87:
                    82:25:c9:56:ea:84:9f:ab:3f:55:97:ca:d6:f7:8a:
                    b8:d7:0b:d4:9d:10:93:c5:7b:ab:33:96:d5:a9:60:
                    6e:30:6c:18:10:93:d2:10:5b:e8:89:c2:db:72:7d:
                    88:69:c6:e4:4d:4b:3f:e9:1e:28:8e:3d:dd:89:98:
                    9a:a5:f0:52:bf:fe:f2:b5:fc:6f:ff:4c:ed:ba:35:
                    23:09:7f:34:7c:80:d3:57:a2:c3:bc:45:1a:78:0e:
                    a5:53:20:b8:d3:cf:5f:0e:f8:f9:41:e6:d9:bf:54:
                    17:82:d8:21:9c:67:d9:7d:71:2f:3a:61:62:e4:52:
                    f2:42:91:b0:96:9d:c1:72:ee:ad:86:2a:8b:26:ca:
                    dd:2b:6a:1a:eb:26:8b:ca:20:f1:f5:b7:cf:d2:61:
                    54:52:8a:b3:2a:1d:3e:7c:f7:69:ff:f8:eb:94:f1:
                    87:23:e3:86:05:26:b7:df:a3:40:8d:35:ee:15:13:
                    07:28:85:c7:ec:4c:12:f1:b6:b0:07:e2:9e:97:c9:
                    5f:5a:05:c8:5d:b1:3c:09:37:50:8e:ac:24:3f:71:
                    21:81:0a:53:5c:e6:18:68:1d:58:48:ec:71:dc:84:
                    6b:42:31:bb:3d:a9:2c:28:2d:40:a2:08:bf:62:a5:
                    1b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:46:5D:1E:2E:41:B9:AA:B0:97:1F:F4:5B:06:4F:0C:0C:EA:3F:2C
            X509v3 Authority Key Identifier:
                keyid:EC:17:9A:58:74:22:28:E3:0B:7D:F7:97:88:26:58:38:78:25:5B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:fd:b4:a3:fe:e2:12:8b:61:94:0d:2e:5e:c2:e0:1e:6a:cd:
         58:34:9b:de:fa:51:4e:30:0d:65:10:cd:cf:00:71:88:75:1b:
         84:01:19:f4:ba:b6:75:c1:f4:22:f9:1c:7a:63:ef:de:6a:1e:
         b4:ea:c4:3f:ea:dc:3f:05:47:3d:37:1c:6c:84:d3:c6:2a:32:
         65:3f:e0:cb:40:b2:7b:6e:83:59:77:72:d7:3d:be:97:ac:d8:
         fb:71:fd:41:93:82:d8:f6:05:1a:97:28:64:9c:4c:96:e9:52:
         3d:f8:06:57:3c:48:4b:e8:9e:82:8e:60:d6:85:04:9e:d3:dc:
         c8:18:46:53:3d:85:1f:f3:10:43:95:6d:6c:a0:13:7a:9f:82:
         65:54:96:62:23:0f:83:d5:2f:2f:82:bb:a4:2d:76:6f:3b:df:
         34:f0:f5:0f:4e:3b:5d:70:96:df:ba:f3:8b:e8:56:c2:d5:bd:
         02:f5:45:66:48:3f:b8:80:97:4c:d1:3e:e9:05:b5:c9:00:b8:
         ae:37:94:31:9a:d3:89:f7:e9:14:8e:b4:21:26:ed:48:0d:2e:
         02:2d:95:3f:11:e1:82:bc:de:49:d5:0b:c6:3c:99:04:ee:48:
         15:e8:a3:9d:c9:a8:3a:c7:1c:c0:5a:5f:66:bc:f7:0c:b7:23:
         41:fd:a3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:22:35 2026 by rpki-client