Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.mft
File:                     BrsRoyhN4e7OJvuvvOs7TNI13Eg.mft (raw, json)
Hash identifier:          2tL6ulvrCUvzPmzHzUTtwxAWAsI8z5wxQGbv1LBD7d4=
Subject key identifier:   76:C7:23:A3:CB:B5:43:A7:1E:AF:0A:02:5E:93:13:4F:33:1F:24:EB
Authority key identifier: 06:BB:11:A3:28:4D:E1:EE:CE:26:FB:AF:BC:EB:3B:4C:D2:35:DC:48
Certificate issuer:       /CN=A9158015/serialNumber=06BB11A3284DE1EECE26FBAFBCEB3B4CD235DC48
Certificate serial:       061A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BrsRoyhN4e7OJvuvvOs7TNI13Eg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.mft
Manifest number:          0611
Signing time:             Wed 22 Jul 2026 23:35:09 +0000
Manifest this update:     Wed 22 Jul 2026 23:35:08 +0000
Manifest next update:     Wed 29 Jul 2026 23:35:08 +0000
Files and hashes:         1: BrsRoyhN4e7OJvuvvOs7TNI13Eg.crl (hash: TbkdHkaYAjl2pAy6PHFX0Jx8ATwboFR4gblV0WfPn+c=)
                          2: A2529A38F90611EBB8E0C27FC4F9AE02.roa (hash: Ncf8GDDw4+FiqMVesAXaSES5S6M474Vu7PoElD+66qc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.crl
                          rsync://rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BrsRoyhN4e7OJvuvvOs7TNI13Eg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:35:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1562 (0x61a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158015, serialNumber=06BB11A3284DE1EECE26FBAFBCEB3B4CD235DC48
        Validity
            Not Before: Jul 22 23:35:08 2026 GMT
            Not After : Jul 29 23:35:08 2026 GMT
        Subject: CN=6a6153ac-3a48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a1:da:2e:60:eb:a7:dc:3f:69:cd:03:07:e9:
                    3d:b0:8a:c5:69:cf:8f:21:45:52:79:d0:c2:ee:d3:
                    4c:dd:65:f4:a8:ce:fb:af:f2:fc:8b:9b:0d:81:6b:
                    9c:c2:df:ee:18:19:5c:e3:94:2c:12:36:e5:3e:35:
                    36:18:ed:95:06:81:5c:ef:5f:30:05:b7:ff:eb:5b:
                    90:36:d3:5a:59:2a:5d:82:18:2c:aa:45:d1:30:1a:
                    8e:ff:ad:37:7e:bb:a1:b1:50:8d:a0:19:28:79:64:
                    9e:b9:ba:34:4f:55:a0:5a:f0:95:c9:5d:a8:81:0c:
                    4d:47:b5:1a:43:81:7d:57:ee:45:bf:15:02:e7:81:
                    e7:c5:ad:74:5d:41:af:24:5e:18:ef:2c:9f:3e:53:
                    61:40:5e:31:23:ae:5c:6d:69:23:cb:54:26:b3:39:
                    e7:0a:17:b0:e6:c1:b8:eb:07:03:4d:d5:a5:2d:24:
                    89:fa:8f:1a:35:5c:f2:0f:6c:44:d6:28:0a:5e:db:
                    2f:a5:3f:02:fa:1e:ca:c1:28:6e:f5:0e:16:54:bc:
                    0a:df:31:c1:f5:de:53:32:04:2e:58:17:9b:bd:8b:
                    fd:83:47:c7:62:f0:19:88:4f:76:b2:e9:93:bd:ac:
                    f4:9d:63:a2:a2:40:5b:27:89:64:cf:ee:23:18:09:
                    b5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C7:23:A3:CB:B5:43:A7:1E:AF:0A:02:5E:93:13:4F:33:1F:24:EB
            X509v3 Authority Key Identifier:
                keyid:06:BB:11:A3:28:4D:E1:EE:CE:26:FB:AF:BC:EB:3B:4C:D2:35:DC:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BrsRoyhN4e7OJvuvvOs7TNI13Eg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:2c:b9:c5:0f:13:9b:cb:f6:dc:94:12:55:c5:9e:08:6f:a6:
         d5:0c:f1:e3:89:23:e0:a2:82:76:e4:08:29:aa:38:13:65:fc:
         c4:1b:3e:b4:32:22:85:6b:93:e9:fe:d8:1a:9d:db:b8:88:78:
         af:50:99:6d:4a:e1:8a:46:8e:c8:3e:ce:d9:10:2a:d8:59:89:
         99:4e:65:7c:fd:91:f5:a1:55:90:3a:5d:ee:45:ab:3c:c7:ad:
         93:64:a6:3b:e3:eb:e3:2a:9e:45:e8:54:d5:89:fd:a4:3c:27:
         23:35:05:92:cb:a6:b4:c2:10:d8:fd:4a:90:9e:aa:93:14:37:
         c6:2f:b6:12:31:38:7d:a5:17:47:dc:e9:af:b3:11:fc:8b:9c:
         f4:f9:da:4e:fe:61:6c:00:ad:93:58:1c:ed:b3:36:ad:1c:cf:
         04:05:ed:19:a2:33:a2:e2:cd:a9:53:38:6a:3b:16:91:79:3e:
         9f:c9:83:e4:64:ae:f4:27:df:10:80:4c:70:58:16:40:a6:aa:
         b9:2c:7b:d8:9a:42:a0:ff:5a:4a:3f:1e:0f:2a:e3:3f:f1:e3:
         fa:13:a2:61:12:68:a9:39:ba:13:db:5b:03:3e:2e:35:3f:f9:
         ef:74:36:d1:71:f4:15:1b:7b:8e:ac:42:4f:8b:08:8b:40:33:
         84:44:5b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:45:00 2026 by rpki-client