Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft
File:                     BRxkf9n6kgFgZoaDhn19Oovl2cE.mft (raw, json)
Hash identifier:          CzCQ2cH2wXAUgYCvCPnttJyBJBjnqxW45BAyoF9pVos=
Subject key identifier:   A9:09:F7:CA:52:9B:E8:E6:7D:50:B9:01:E9:98:9F:F8:42:54:D9:65
Authority key identifier: 05:1C:64:7F:D9:FA:92:01:60:66:86:83:86:7D:7D:3A:8B:E5:D9:C1
Certificate issuer:       /CN=A9176682/serialNumber=051C647FD9FA920160668683867D7D3A8BE5D9C1
Certificate serial:       355C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BRxkf9n6kgFgZoaDhn19Oovl2cE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft
Manifest number:          355B
Signing time:             Wed 22 Jul 2026 15:17:16 +0000
Manifest this update:     Wed 22 Jul 2026 15:17:16 +0000
Manifest next update:     Wed 29 Jul 2026 15:17:16 +0000
Files and hashes:         1: BRxkf9n6kgFgZoaDhn19Oovl2cE.crl (hash: o0Rdl4zBaSnpZpBXlmERaU7hmUjDZiMNaKqPoaHao+E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.crl
                          rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BRxkf9n6kgFgZoaDhn19Oovl2cE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:17:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13660 (0x355c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176682, serialNumber=051C647FD9FA920160668683867D7D3A8BE5D9C1
        Validity
            Not Before: Jul 22 15:17:16 2026 GMT
            Not After : Jul 29 15:17:16 2026 GMT
        Subject: CN=6a60defc-2f40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e7:7f:7f:22:68:d5:2b:9b:54:21:76:0a:f0:
                    7d:f3:ac:de:e1:4c:04:88:47:a8:0a:cb:e2:f6:3c:
                    df:38:62:c8:a3:10:55:41:82:bb:20:0b:40:39:0c:
                    ed:2c:df:39:3a:2c:74:df:a8:23:9f:80:8e:69:7f:
                    f9:94:e4:dc:09:a0:29:21:f4:d3:e5:88:49:29:5f:
                    fc:d0:74:77:b4:84:0b:69:71:32:37:30:69:fe:3d:
                    5c:21:42:61:e8:36:ab:51:69:c0:ec:8a:08:2b:14:
                    b2:cc:10:a7:ee:f7:b3:a9:7d:e4:4f:0c:44:71:22:
                    4c:77:68:50:6d:87:e9:07:74:09:1e:0a:45:92:3f:
                    1f:6c:00:c2:67:86:ed:3a:a0:5e:2f:ff:b2:7d:d8:
                    9e:70:39:29:0d:2f:07:86:f4:d6:06:18:48:c7:5f:
                    3f:fd:4b:3f:a7:43:d0:15:58:58:d8:ce:84:fe:d5:
                    08:bd:b3:d3:54:2b:76:9e:6b:ca:b7:b8:d1:79:f1:
                    6d:10:4e:2e:82:13:04:10:e7:2c:fa:1c:97:0b:e3:
                    b7:93:fc:8f:0a:37:74:b9:ed:04:76:85:73:a9:a9:
                    a0:f5:dd:ad:ae:d0:1a:e3:d8:a2:6e:36:cd:8c:6d:
                    ec:99:2c:c9:f5:2b:1a:55:05:b5:4b:65:e0:aa:c3:
                    6f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:09:F7:CA:52:9B:E8:E6:7D:50:B9:01:E9:98:9F:F8:42:54:D9:65
            X509v3 Authority Key Identifier:
                keyid:05:1C:64:7F:D9:FA:92:01:60:66:86:83:86:7D:7D:3A:8B:E5:D9:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BRxkf9n6kgFgZoaDhn19Oovl2cE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:8c:4f:bc:1f:ca:cd:5a:89:b7:a1:63:45:01:df:bf:c9:bd:
         39:e1:b0:78:f4:bc:6c:d7:14:e2:ed:ec:9b:0e:5a:48:3f:48:
         0a:60:d2:d9:db:6d:f0:18:df:b0:4f:a5:f6:bc:b4:92:fa:76:
         ee:87:06:9e:3b:3a:53:1c:19:6d:3d:94:64:ef:03:80:3a:d8:
         53:a5:45:1c:07:cc:61:99:88:f5:71:e4:e2:07:f1:bc:02:7b:
         a6:58:e8:6d:a1:e9:45:89:05:5b:27:b4:3c:03:75:1b:c2:84:
         56:f6:3d:f5:57:a8:d4:e8:cb:98:64:6d:e1:cf:c7:22:d1:fa:
         16:a8:60:1f:1e:c7:56:98:c5:27:05:19:de:17:fe:7a:6f:9c:
         43:d0:98:f1:4e:40:c8:ef:b1:ed:ce:65:e6:ca:b5:e9:25:38:
         93:cc:38:24:45:9a:b3:89:99:d1:43:cf:a8:b6:36:0a:9f:8a:
         04:98:f6:e5:35:15:71:75:dc:c5:62:d8:d1:f3:66:8c:26:1a:
         84:02:ba:8d:64:78:62:8a:4e:2b:4f:1d:17:23:60:b6:8d:31:
         dd:96:e2:35:b9:bd:23:ef:4d:76:03:65:59:72:1f:de:8c:b7:
         42:a2:84:70:ff:24:ff:23:2f:73:d5:ca:66:a3:7e:5b:43:4b:
         3f:12:42:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:53:54 2026 by rpki-client