Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft
File:                     BRxkf9n6kgFgZoaDhn19Oovl2cE.mft (raw, json)
Hash identifier:          H0NrHZeTWJf4faVxn+WoZqPfgiQModEcWQ2JmeD3QW0=
Subject key identifier:   38:5F:A5:52:C1:53:1B:D1:B0:39:11:C9:E4:D4:09:57:36:56:D2:6F
Authority key identifier: 05:1C:64:7F:D9:FA:92:01:60:66:86:83:86:7D:7D:3A:8B:E5:D9:C1
Certificate issuer:       /CN=A9176682/serialNumber=051C647FD9FA920160668683867D7D3A8BE5D9C1
Certificate serial:       347B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BRxkf9n6kgFgZoaDhn19Oovl2cE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft
Manifest number:          347A
Signing time:             Fri 16 May 2025 15:22:52 +0000
Manifest this update:     Fri 16 May 2025 15:22:52 +0000
Manifest next update:     Fri 23 May 2025 15:22:52 +0000
Files and hashes:         1: BRxkf9n6kgFgZoaDhn19Oovl2cE.crl (hash: LOBJxnf4rHYDmmH7uvXreHBpQqdgwYhUKmuB05aMmu4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.crl
                          rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BRxkf9n6kgFgZoaDhn19Oovl2cE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 15:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13435 (0x347b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176682, serialNumber=051C647FD9FA920160668683867D7D3A8BE5D9C1
        Validity
            Not Before: May 16 15:22:52 2025 GMT
            Not After : May 23 15:22:52 2025 GMT
        Subject: CN=6827584c-1c83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3c:58:e3:0a:e9:dd:92:ef:bf:83:72:14:9c:
                    1d:38:b2:e7:a8:3d:87:48:0e:e8:40:fa:ee:91:c1:
                    99:4f:67:bd:0b:bc:38:dd:97:92:dc:5d:6f:0d:ec:
                    0c:b3:7b:e2:5c:26:0a:78:05:a8:38:02:58:9f:0c:
                    85:29:9b:36:07:64:04:78:77:45:7d:08:ff:3b:44:
                    ca:23:a7:29:39:e2:b3:04:48:98:79:db:5a:cc:84:
                    44:61:f8:47:8f:4f:f8:36:5e:84:95:b6:8d:95:3c:
                    91:e7:7c:a8:7c:23:2e:db:c5:d9:ad:b4:67:c6:a4:
                    b2:60:ed:69:cb:56:b0:11:4c:75:85:ac:36:e1:79:
                    fc:7e:0e:8c:aa:dc:b4:ce:97:99:7e:70:9a:cd:c3:
                    6d:a5:34:0c:b7:50:45:70:9c:26:ed:b0:d5:6d:09:
                    a5:82:2a:a4:0a:a5:f7:67:9b:1e:71:bb:56:7f:7d:
                    8c:2d:51:a0:7c:2a:c1:b7:60:e9:88:04:9b:4d:ca:
                    32:db:1c:f9:c6:98:33:8a:12:32:a6:05:80:e3:21:
                    49:d8:f5:17:be:0f:98:13:c8:e7:cc:7d:72:32:3c:
                    5e:2a:16:dc:46:20:f8:a6:e4:11:2c:3a:2f:54:2d:
                    ab:80:6f:25:18:54:8b:97:f1:82:2e:58:10:7e:5d:
                    c5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:5F:A5:52:C1:53:1B:D1:B0:39:11:C9:E4:D4:09:57:36:56:D2:6F
            X509v3 Authority Key Identifier:
                keyid:05:1C:64:7F:D9:FA:92:01:60:66:86:83:86:7D:7D:3A:8B:E5:D9:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BRxkf9n6kgFgZoaDhn19Oovl2cE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:88:18:79:6d:f9:d2:32:5d:50:64:f7:42:dd:f2:76:7b:0c:
         1e:eb:76:c5:d4:a6:7a:cf:6f:6b:cd:62:88:e3:1a:90:cb:97:
         6e:3e:89:f8:d8:d0:1f:8d:d3:df:9b:00:80:44:c5:13:cb:eb:
         d9:33:4a:c7:0c:ed:07:c1:90:12:34:c1:12:f5:27:14:f8:42:
         98:97:2c:b4:18:56:a3:89:dd:d0:26:e0:80:89:09:5e:fc:67:
         88:9d:db:1f:98:e8:aa:0e:d5:37:53:b8:b4:fc:08:f6:37:c0:
         2a:a0:61:3b:cb:d9:0b:aa:4b:3c:dc:6b:36:11:c8:47:c8:1d:
         8a:58:50:5c:25:9f:59:50:54:c4:54:8b:af:24:ee:13:7f:71:
         57:37:93:06:8f:82:9d:7f:12:72:56:aa:34:2f:ee:5d:dd:1a:
         6a:4c:d6:5f:2f:61:0e:d4:10:36:40:f5:ab:cb:27:e0:9f:55:
         0d:f8:cf:bc:4a:2b:37:a5:79:11:db:26:b5:78:e4:0c:71:c8:
         16:e9:42:c0:d6:36:d0:7a:b6:b1:0d:d0:c2:34:20:59:9a:91:
         a5:4a:9a:c3:69:dc:bb:ba:00:13:0a:14:d9:cb:89:28:61:0a:
         45:93:04:93:ab:b4:3d:af:48:1e:5e:7c:1b:a3:f0:63:7e:5e:
         e1:f0:10:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 03:25:50 2025 by rpki-client