Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E0B3/24632E9C745511F193088CA56FA30FBC/BEABAtdWe9ATEcJwCXEr2_Mv7gk.mft
File:                     BEABAtdWe9ATEcJwCXEr2_Mv7gk.mft (raw, json)
Hash identifier:          h9/8bCsNPZJF0TmcuZnW6JGhJfnc/uf/ox+d0pjBJJc=
Subject key identifier:   3A:7D:50:3A:05:A8:05:E1:5D:02:D1:EC:13:82:13:B4:63:D1:60:50
Authority key identifier: 04:40:01:02:D7:56:7B:D0:13:11:C2:70:09:71:2B:DB:F3:2F:EE:09
Certificate issuer:       /CN=A915E0B3/serialNumber=04400102D7567BD01311C27009712BDBF32FEE09
Certificate serial:       13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BEABAtdWe9ATEcJwCXEr2_Mv7gk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E0B3/24632E9C745511F193088CA56FA30FBC/BEABAtdWe9ATEcJwCXEr2_Mv7gk.mft
Manifest number:          11
Signing time:             Mon 27 Jul 2026 11:29:38 +0000
Manifest this update:     Mon 27 Jul 2026 11:29:37 +0000
Manifest next update:     Mon 03 Aug 2026 11:29:37 +0000
Files and hashes:         1: BEABAtdWe9ATEcJwCXEr2_Mv7gk.crl (hash: 4u+3YKYFXcYt/xsjZqdghs4g05QHbwTYtH9XwP/D6eY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E0B3/24632E9C745511F193088CA56FA30FBC/BEABAtdWe9ATEcJwCXEr2_Mv7gk.crl
                          rsync://rpki.apnic.net/member_repository/A915E0B3/24632E9C745511F193088CA56FA30FBC/BEABAtdWe9ATEcJwCXEr2_Mv7gk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BEABAtdWe9ATEcJwCXEr2_Mv7gk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E0B3, serialNumber=04400102D7567BD01311C27009712BDBF32FEE09
        Validity
            Not Before: Jul 27 11:29:37 2026 GMT
            Not After : Aug  3 11:29:37 2026 GMT
        Subject: CN=6a674122-29e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5a:c9:1a:94:3f:31:05:0a:42:38:db:70:c6:
                    04:58:44:24:3e:cb:b3:63:80:a1:3a:88:50:a8:26:
                    c0:6c:55:22:09:c0:4e:da:52:3b:ca:31:1f:06:74:
                    b7:a5:57:84:1b:3a:8d:62:c1:01:6e:f1:0a:d3:49:
                    ba:e1:8c:fb:3d:c4:7a:1f:3f:91:fd:ff:0d:a9:4a:
                    81:26:9f:ce:5d:f9:52:9f:cc:c8:5e:0c:0f:0b:36:
                    75:d9:32:db:af:69:b1:cf:a0:c6:30:68:ca:a2:01:
                    ca:d6:64:8f:d6:93:3a:95:d1:ef:12:bc:14:94:14:
                    cf:c2:75:37:9f:ac:fc:46:80:92:37:da:af:1a:74:
                    cf:3c:04:1a:fe:14:af:34:42:72:b0:00:ea:f8:eb:
                    a1:87:2b:b7:37:11:a3:5a:40:4f:7b:48:bb:ac:29:
                    4e:1a:6b:d0:e0:f1:d6:e5:00:f6:ea:a3:6b:4e:7e:
                    e2:9b:58:bf:5e:e3:25:9a:c7:57:34:15:a6:f6:99:
                    67:37:2a:9f:dc:29:68:f9:ea:87:70:a6:87:63:6b:
                    b5:b1:e3:3d:6a:83:16:ad:b5:c9:91:37:8e:3c:3a:
                    ae:82:78:0c:6e:f6:01:ca:70:e1:09:cb:46:00:ad:
                    b6:15:bb:d0:40:eb:7f:a8:5e:01:0b:ae:23:d5:42:
                    21:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:7D:50:3A:05:A8:05:E1:5D:02:D1:EC:13:82:13:B4:63:D1:60:50
            X509v3 Authority Key Identifier:
                keyid:04:40:01:02:D7:56:7B:D0:13:11:C2:70:09:71:2B:DB:F3:2F:EE:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E0B3/24632E9C745511F193088CA56FA30FBC/BEABAtdWe9ATEcJwCXEr2_Mv7gk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BEABAtdWe9ATEcJwCXEr2_Mv7gk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E0B3/24632E9C745511F193088CA56FA30FBC/BEABAtdWe9ATEcJwCXEr2_Mv7gk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:24:52:19:75:50:73:62:67:ed:d4:55:bd:11:77:ea:bc:ef:
         1c:36:4a:19:a0:7e:5d:dc:da:18:8f:3d:93:33:d8:6a:1d:34:
         0e:36:4d:fd:f8:87:7f:64:70:8e:14:33:e1:c7:ae:12:db:09:
         01:3e:25:12:d3:2b:8e:72:16:36:69:d8:6a:12:a8:5c:bf:4e:
         dd:19:ac:29:36:e6:f1:5d:df:f0:43:d0:5b:e2:bb:13:d3:0d:
         47:ad:03:be:e0:86:f1:52:77:2b:f8:ee:6a:55:9d:4f:52:cc:
         75:33:ed:2a:8c:05:5b:07:cd:0f:5e:ca:c1:b5:ca:c8:78:86:
         82:ec:a2:13:dc:82:41:93:11:33:f9:98:e8:d2:f7:8a:57:75:
         3d:e5:43:af:53:4d:32:af:65:bb:e8:c7:22:2d:65:0e:13:12:
         f5:c1:83:1d:0b:1c:6f:da:44:a2:a5:67:76:28:d5:55:fc:57:
         c2:eb:53:eb:cf:6f:0f:f6:ad:19:da:3e:ba:8d:02:51:06:ff:
         59:6f:53:ad:ea:da:e5:c2:1a:d2:5a:f8:82:90:eb:ba:ac:21:
         c4:ee:bf:53:18:6b:2b:6b:bc:ce:cf:33:c5:24:fa:66:8f:37:
         f3:c2:7b:f7:3c:a1:92:d6:12:9c:44:c2:14:a2:dc:fc:63:37:
         3c:4f:75:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:04:28 2026 by rpki-client