Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft
File:                     BRxkf9n6kgFgZoaDhn19Oovl2cE.mft (raw, json)
Hash identifier:          tfxmiEU5YHKxr4ka7aiWUnyW0oL8Y+nDm+QMaTeEvzA=
Subject key identifier:   B3:A9:0B:15:A0:0E:C0:FF:81:23:10:BC:CD:57:CE:A3:F8:C2:A3:30
Authority key identifier: 05:1C:64:7F:D9:FA:92:01:60:66:86:83:86:7D:7D:3A:8B:E5:D9:C1
Certificate issuer:       /CN=A9176682/serialNumber=051C647FD9FA920160668683867D7D3A8BE5D9C1
Certificate serial:       34CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BRxkf9n6kgFgZoaDhn19Oovl2cE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft
Manifest number:          34CB
Signing time:             Mon 20 Oct 2025 15:22:26 +0000
Manifest this update:     Mon 20 Oct 2025 15:22:25 +0000
Manifest next update:     Mon 27 Oct 2025 15:22:25 +0000
Files and hashes:         1: BRxkf9n6kgFgZoaDhn19Oovl2cE.crl (hash: FYpbc/1D1+3OEAEWZ9YANz4N+Cp4k0EXjNnuXSLQpv8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.crl
                          rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BRxkf9n6kgFgZoaDhn19Oovl2cE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 15:22:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13516 (0x34cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176682, serialNumber=051C647FD9FA920160668683867D7D3A8BE5D9C1
        Validity
            Not Before: Oct 20 15:22:25 2025 GMT
            Not After : Oct 27 15:22:25 2025 GMT
        Subject: CN=68f653b2-1d43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f9:1d:f6:ab:86:81:52:87:52:84:16:47:62:
                    f6:4a:6c:f8:02:b1:d8:76:87:e8:a9:15:76:b6:f7:
                    d9:c5:58:88:63:42:fd:c0:3a:e2:4c:47:5a:29:c6:
                    e7:31:db:89:5b:c0:91:f1:77:f2:18:11:0c:a5:b7:
                    00:a5:ab:af:a7:6d:93:76:02:5d:cb:31:c8:31:5f:
                    f2:1d:59:ea:db:f5:c5:fc:50:b4:89:a1:be:0a:90:
                    f7:77:b6:8b:5d:83:0c:2b:48:85:05:77:7c:f2:cd:
                    7a:45:d4:43:cf:7e:0b:87:81:86:84:7f:46:d8:5d:
                    60:c0:82:d2:68:8a:62:1a:10:bc:a2:a5:fe:78:6e:
                    26:d3:42:0d:1c:a5:3e:dd:d5:5b:3d:4e:4d:47:d0:
                    15:38:72:c5:7c:bf:c8:ed:d6:5b:9e:15:74:53:cd:
                    67:f2:84:29:7b:d0:8e:93:de:ea:de:19:27:27:40:
                    f3:2a:c3:85:bf:55:0d:26:81:b8:a7:84:9c:9e:b5:
                    0d:40:a5:88:76:75:f1:9e:ec:ae:64:0f:7b:ff:dc:
                    c5:a0:c2:f9:3c:71:28:c2:8c:9e:40:6d:e2:51:88:
                    77:0d:95:e5:78:93:b0:61:ec:95:30:c7:7a:90:89:
                    17:2b:9e:72:af:d1:a7:15:49:46:d2:65:eb:d7:c3:
                    89:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A9:0B:15:A0:0E:C0:FF:81:23:10:BC:CD:57:CE:A3:F8:C2:A3:30
            X509v3 Authority Key Identifier:
                keyid:05:1C:64:7F:D9:FA:92:01:60:66:86:83:86:7D:7D:3A:8B:E5:D9:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BRxkf9n6kgFgZoaDhn19Oovl2cE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:5d:2b:f8:49:30:a0:ee:7b:6b:91:6e:72:87:64:e7:f6:72:
         96:01:c6:c2:3d:19:60:46:70:99:65:fa:49:4f:06:45:b4:53:
         6a:59:ae:e1:88:c9:f6:ba:ff:a5:52:9e:a5:ee:f6:a5:51:2b:
         83:78:ca:72:15:76:2f:2c:67:e1:25:1d:2c:b9:50:c4:ca:8d:
         81:5f:ea:f3:42:6b:ad:58:ed:95:84:fc:cb:09:4d:5f:ee:0b:
         b1:59:79:fa:f5:03:32:d3:5d:8e:2d:9b:99:60:2f:48:44:a0:
         d1:2e:6f:7c:c1:d2:1a:ef:22:ac:0d:9a:59:91:bc:bc:9b:0c:
         f8:66:ee:65:f2:49:82:d3:02:07:ad:d7:a8:05:a8:49:5e:a0:
         92:dc:60:6b:7d:4b:3d:ec:9c:af:ff:ec:12:92:de:0c:7a:9d:
         62:7b:31:0e:c5:79:d7:5a:35:41:0b:44:50:d6:a2:b9:9e:01:
         10:b2:06:b3:a1:1a:98:6f:44:08:bc:9e:c4:1e:9b:e1:e1:05:
         89:25:f1:6e:03:55:27:f7:d4:4a:9c:d9:d0:84:2f:9a:05:4f:
         67:84:51:7b:39:df:a0:38:59:d8:5c:9e:c4:66:95:d6:01:95:
         aa:81:48:66:2d:ba:3b:ae:73:09:f0:6d:96:a7:91:56:0d:b0:
         5a:ed:77:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:30:41 2025 by rpki-client