Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft
File:                     7BeaWHQiKOMLffeXiCZYOHglW3g.mft (raw, json)
Hash identifier:          JuHP1nhHbxIR5IkflavrIYzeTOIlKtakTG5DluTBAMw=
Subject key identifier:   DD:78:C6:F0:7C:3A:E0:EF:3E:80:3C:D3:59:EC:B2:9B:30:7A:02:37
Authority key identifier: EC:17:9A:58:74:22:28:E3:0B:7D:F7:97:88:26:58:38:78:25:5B:78
Certificate issuer:       /CN=A91AA95A/serialNumber=EC179A58742228E30B7DF7978826583878255B78
Certificate serial:       0E54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft
Manifest number:          0E4E
Signing time:             Thu 16 Apr 2026 17:42:22 +0000
Manifest this update:     Thu 16 Apr 2026 17:42:22 +0000
Manifest next update:     Thu 23 Apr 2026 17:42:22 +0000
Files and hashes:         1: 7BeaWHQiKOMLffeXiCZYOHglW3g.crl (hash: zjTY+RvwcugbSqJ/0eyLDngR7PlAwXv98Uq6bTFsZNc=)
                          2: E64999C258D611ED86C99945C4F9AE02.roa (hash: cElPbY7K42ZgHRo0Rm4vFkLcjVWBwNFQ8So0RPXc2fY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.crl
                          rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:42:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3668 (0xe54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA95A, serialNumber=EC179A58742228E30B7DF7978826583878255B78
        Validity
            Not Before: Apr 16 17:42:22 2026 GMT
            Not After : Apr 23 17:42:22 2026 GMT
        Subject: CN=69e11f7e-0722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:38:06:a3:0e:73:9a:a6:d7:8a:26:e6:46:5f:
                    a9:a0:ba:af:c7:65:27:a7:f2:1c:f3:99:24:ca:6f:
                    e4:1f:97:bf:c2:43:e7:bb:a1:d7:9d:59:58:d3:7b:
                    cb:02:3e:67:93:77:c9:58:e2:c4:d2:b5:4e:4a:d2:
                    9d:f9:a1:6a:bb:b8:83:de:cf:b2:61:54:80:7e:ff:
                    7a:35:3c:d0:7d:3e:56:60:79:cf:12:a4:88:89:01:
                    0e:07:9d:37:38:96:bd:ac:62:92:93:1d:82:c1:68:
                    a9:f2:7b:de:94:c9:a8:61:09:df:f6:81:39:39:46:
                    c5:72:7b:b3:9a:d6:32:2f:31:de:ed:a7:10:9c:6c:
                    7c:d4:a7:20:da:a6:55:9e:58:97:51:6c:f8:7f:bd:
                    c8:00:58:c0:71:00:18:af:a0:c4:5d:a3:01:36:2f:
                    c2:5c:58:7f:15:42:16:a9:81:7b:64:47:82:7f:66:
                    b6:4e:e6:8b:92:3d:75:5f:b6:10:d4:31:7f:af:65:
                    c5:49:bd:04:64:bf:94:97:8a:4a:de:1b:55:7b:f1:
                    35:4e:26:1e:c3:f5:37:ea:58:2b:c8:a3:19:8c:ab:
                    ab:f3:a8:44:ec:ae:09:b6:eb:9d:37:5b:f1:93:2b:
                    ce:26:07:84:6c:e2:e6:08:95:df:8c:62:43:e1:41:
                    f9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:78:C6:F0:7C:3A:E0:EF:3E:80:3C:D3:59:EC:B2:9B:30:7A:02:37
            X509v3 Authority Key Identifier:
                keyid:EC:17:9A:58:74:22:28:E3:0B:7D:F7:97:88:26:58:38:78:25:5B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:01:dc:68:41:8b:04:b8:c5:b3:ac:e7:c4:28:5f:80:af:df:
         5a:2c:59:aa:1f:93:c3:a9:85:e6:c7:31:37:64:92:6f:45:5a:
         da:75:21:d2:48:b2:ed:ee:05:20:22:da:a1:62:43:1e:7d:1e:
         94:ff:b1:d3:63:dd:91:f2:d4:f2:9c:f4:b8:eb:ed:b2:09:68:
         db:dc:02:71:b2:aa:91:da:b2:68:64:73:6f:e5:69:99:1e:44:
         40:86:c4:3c:cd:d4:b7:b4:31:60:7c:40:5d:02:0c:70:63:54:
         aa:9a:9f:3d:41:e9:2b:77:77:fb:a4:ec:5d:d9:67:ac:50:46:
         78:57:1d:59:df:70:08:be:81:8c:55:84:5e:f3:60:a4:30:de:
         6f:a3:4f:91:2e:4e:c4:55:af:6e:ef:c8:d1:1b:15:9d:39:ba:
         c3:1b:d7:65:f5:d3:e9:91:2c:bd:72:9c:3e:a8:a5:ea:68:33:
         08:34:a2:6e:49:c3:27:74:dd:f5:ca:30:16:ef:ac:25:5b:b7:
         63:33:90:7e:2c:6a:15:9d:34:b2:f7:5e:0b:67:96:72:13:f5:
         07:87:0f:a2:22:cf:64:69:bd:44:60:74:d7:0c:95:05:0b:50:
         64:ee:0c:39:bb:ef:12:04:8b:99:e6:33:6e:16:53:1d:48:ba:
         24:e8:b9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:31:57 2026 by rpki-client