Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft
File:                     7BeaWHQiKOMLffeXiCZYOHglW3g.mft (raw, json)
Hash identifier:          ThHEPROJcOG09Fdc6Ng5GVNLxkNmDtRVvgsKcItbSiM=
Subject key identifier:   B5:28:83:88:69:9E:81:51:0A:70:7B:84:C0:D0:08:06:28:D6:11:53
Authority key identifier: EC:17:9A:58:74:22:28:E3:0B:7D:F7:97:88:26:58:38:78:25:5B:78
Certificate issuer:       /CN=A91AA95A/serialNumber=EC179A58742228E30B7DF7978826583878255B78
Certificate serial:       0E93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft
Manifest number:          0E8D
Signing time:             Tue 18 Aug 2026 17:56:42 +0000
Manifest this update:     Tue 18 Aug 2026 17:56:41 +0000
Manifest next update:     Tue 25 Aug 2026 17:56:41 +0000
Files and hashes:         1: 7BeaWHQiKOMLffeXiCZYOHglW3g.crl (hash: 4J+mhnasSOAuPzasg8fPanhC2StdNrk3TgNo1fDUZp8=)
                          2: E64999C258D611ED86C99945C4F9AE02.roa (hash: cElPbY7K42ZgHRo0Rm4vFkLcjVWBwNFQ8So0RPXc2fY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.crl
                          rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 17:56:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3731 (0xe93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA95A, serialNumber=EC179A58742228E30B7DF7978826583878255B78
        Validity
            Not Before: Aug 18 17:56:41 2026 GMT
            Not After : Aug 25 17:56:41 2026 GMT
        Subject: CN=6a849cda-93c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1f:69:1b:3b:d3:1c:6d:31:08:66:f6:b5:50:
                    d8:db:ed:b9:8e:a2:eb:3d:18:c0:56:db:a6:9e:6c:
                    27:70:6b:3d:c7:e7:ea:d0:c9:5b:dd:21:0d:f9:22:
                    7a:f0:74:f6:0f:92:16:a5:8e:1a:d5:95:f4:cf:c3:
                    b8:25:09:1d:7e:f8:56:e3:55:68:01:36:47:9b:5f:
                    65:3e:a6:11:60:91:a7:02:97:94:82:fe:9e:fe:f9:
                    4e:08:0a:8e:3f:7c:59:bd:a9:38:3d:89:d0:f0:9e:
                    85:99:c1:4a:8e:ff:55:cc:20:b7:67:a8:ec:23:56:
                    c1:60:5a:a6:fc:55:95:c6:f6:42:f5:56:61:95:ca:
                    a6:a7:0b:20:e1:ab:0a:a9:64:37:f6:b2:8a:0e:ac:
                    7e:93:76:05:b9:07:f3:7c:15:96:d9:05:2a:b2:f9:
                    7d:55:87:c4:6e:7b:f5:c2:cb:9e:c0:c7:c2:b9:5b:
                    dd:3b:ea:64:55:59:1f:ad:d4:3f:b7:64:34:cf:26:
                    45:17:64:aa:bd:70:a3:54:6c:0d:28:00:d0:46:72:
                    6b:c8:82:c7:de:3b:46:9d:c8:b8:b6:c9:25:2e:55:
                    04:7f:da:7f:eb:61:1d:83:69:57:4c:dc:21:f5:70:
                    5b:64:24:1a:c3:c9:dc:52:42:d9:8f:d2:3f:6e:78:
                    ef:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:28:83:88:69:9E:81:51:0A:70:7B:84:C0:D0:08:06:28:D6:11:53
            X509v3 Authority Key Identifier:
                keyid:EC:17:9A:58:74:22:28:E3:0B:7D:F7:97:88:26:58:38:78:25:5B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:ab:63:76:6f:4e:d8:96:4d:e6:46:6b:05:8b:8b:fa:90:25:
         a9:26:ff:a9:e0:34:0b:4c:27:67:1d:ac:1d:1b:88:b2:6e:26:
         e6:7c:83:ef:75:76:63:a5:c7:94:8d:df:e6:f2:dc:0b:99:43:
         98:86:b7:d0:0d:ba:47:5c:7f:d6:08:4f:58:c8:3d:db:1d:e8:
         d3:93:9f:8e:4f:02:75:ef:d5:c6:67:4e:fc:5a:f0:84:9c:6c:
         51:ae:74:53:7f:be:1d:e2:00:a1:39:e5:18:79:1b:fc:26:ce:
         f6:88:a5:2c:48:12:c5:f4:b0:60:10:d0:24:a3:39:fc:5a:09:
         16:e5:9e:05:bd:0c:67:69:30:ad:1a:9d:73:5b:8e:94:63:cb:
         19:9f:a4:5a:d8:f9:99:fc:33:b1:96:09:f9:77:bf:ee:75:78:
         96:2f:09:1c:2c:c1:7e:a7:f4:56:03:6b:b2:b9:7c:39:56:57:
         e7:ad:6b:1e:d0:9b:c6:3d:ee:41:4e:88:5e:95:87:31:05:38:
         d2:7a:23:59:ff:20:18:c8:b8:81:09:34:58:e3:56:1e:b9:98:
         7f:3e:91:0a:dd:98:c1:3d:00:13:03:aa:6b:84:c8:10:e4:91:
         08:d7:3d:96:d4:05:aa:d4:23:2a:c5:f8:38:2b:38:e3:c0:ff:
         05:85:4a:0c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDpMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUE5NUExMTAvBgNVBAUTKEVDMTc5QTU4NzQyMjI4RTMwQjdERjc5Nzg4MjY1ODM4
NzgyNTVCNzgwHhcNMjYwODE4MTc1NjQxWhcNMjYwODI1MTc1NjQxWjAYMRYwFAYD
VQQDEw02YTg0OWNkYS05M2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuR9pGzvTHG0xCGb2tVDY2+25jqLrPRjAVtumnmwncGs9x+fq0Mlb3SEN+SJ6
8HT2D5IWpY4a1ZX0z8O4JQkdfvhW41VoATZHm19lPqYRYJGnApeUgv6e/vlOCAqO
P3xZvak4PYnQ8J6FmcFKjv9VzCC3Z6jsI1bBYFqm/FWVxvZC9VZhlcqmpwsg4asK
qWQ39rKKDqx+k3YFuQfzfBWW2QUqsvl9VYfEbnv1wsuewMfCuVvdO+pkVVkfrdQ/
t2Q0zyZFF2SqvXCjVGwNKADQRnJryILH3jtGnci4tsklLlUEf9p/62Edg2lXTNwh
9XBbZCQaw8ncUkLZj9I/bnjvswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLUog4hp
noFRCnB7hMDQCAYo1hFTMB8GA1UdIwQYMBaAFOwXmlh0IijjC333l4gmWDh4JVt4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTk1QS9CMEQxRDVGQ0JF
NzQxMUU5OEY5NUZBNjRDNEY5QUUwMi83QmVhV0hRaUtPTUxmZmVYaUNaWU9IZ2xX
M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdCZWFXSFFpS09NTGZmZVhpQ1pZT0hnbFczZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QTk1QS9CMEQxRDVGQ0JFNzQxMUU5OEY5NUZBNjRDNEY5QUUwMi83QmVhV0hRaUtP
TUxmZmVYaUNaWU9IZ2xXM2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOatjdm9O2JZN5kZrBYuL+pAlqSb/qeA0C0wnZx2sHRuIsm4m5nyD73V2Y6XH
lI3f5vLcC5lDmIa30A26R1x/1ghPWMg92x3o05Ofjk8Cde/VxmdO/FrwhJxsUa50
U3++HeIAoTnlGHkb/CbO9oilLEgSxfSwYBDQJKM5/FoJFuWeBb0MZ2kwrRqdc1uO
lGPLGZ+kWtj5mfwzsZYJ+Xe/7nV4li8JHCzBfqf0VgNrsrl8OVZX561rHtCbxj3u
QU6IXpWHMQU40nojWf8gGMi4gQk0WONWHrmYfz6RCt2YwT0AEwOqa4TIEOSRCNc9
ltQFqtQjKsX4OCs448D/BYVKDA==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:28 2026 by rpki-client