Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
File:                     Br1EFUedLHUIN8XJQzYTuyWIrrg.mft (raw, json)
Hash identifier:          Mxa4+yz1Ub8Nnk/+rjz1xyKy5DuFJfvpL/7/VnOeHDE=
Subject key identifier:   87:C9:66:34:AC:13:B3:89:EC:B1:79:2C:B7:BA:7F:2D:E8:91:DF:8A
Authority key identifier: 06:BD:44:15:47:9D:2C:75:08:37:C5:C9:43:36:13:BB:25:88:AE:B8
Certificate issuer:       /CN=A9177FC9/serialNumber=06BD4415479D2C750837C5C9433613BB2588AEB8
Certificate serial:       0134
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
Manifest number:          0126
Signing time:             Fri 25 Sep 2026 05:56:54 +0000
Manifest this update:     Fri 25 Sep 2026 05:56:54 +0000
Manifest next update:     Fri 02 Oct 2026 05:56:54 +0000
Files and hashes:         1: Br1EFUedLHUIN8XJQzYTuyWIrrg.crl (hash: F1CTLGt6bejkSHELVHmctz9Yy5HckDnUL2gLPmpCpn8=)
                          2: 51B36E9EF52911F0B0B7B3125D6F56BC.roa (hash: +YeqTwufzvgzhnkt/mIw5JG1iBbYnBY3vNzMAfLJODo=)
                          3: FDD39BD607B811F0AB98B333C4F9AE02.roa (hash: 9d80apncQwaKTAG06R4mIWLTbRCpdrLELAUO00snQkE=)
                          4: FD6DA4D407B811F0AB98B333C4F9AE02.roa (hash: aLK8sAzxMSPrhRCMqldgKmzdDH1pIToEHi3LcYvbeYk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.crl
                          rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 05:56:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 308 (0x134)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177FC9, serialNumber=06BD4415479D2C750837C5C9433613BB2588AEB8
        Validity
            Not Before: Sep 25 05:56:54 2026 GMT
            Not After : Oct  2 05:56:54 2026 GMT
        Subject: CN=6ab60d26-3dc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4f:41:4f:0c:69:be:4f:4a:11:8a:ac:c4:8a:
                    c4:eb:bb:6c:37:55:8c:d7:3a:9f:25:6c:57:c8:ca:
                    c9:50:7c:20:7a:8f:98:7d:3c:7c:27:2c:c5:7c:8c:
                    5f:33:92:c9:7a:10:f7:11:2d:a2:7d:e8:40:6c:de:
                    14:c9:df:89:fb:90:0e:2d:4b:af:90:6c:f0:72:7d:
                    f9:6a:26:6d:1a:96:5c:15:67:f6:b2:e5:b4:ab:fe:
                    74:4c:c4:30:ea:34:1f:8b:87:78:fb:b2:fc:00:4a:
                    d2:60:1e:89:97:88:45:b7:66:5f:10:ba:a1:6e:7f:
                    ea:9c:3b:1e:e6:45:0a:21:60:79:f1:ff:2b:dc:21:
                    43:ce:88:1e:e3:b1:97:37:5c:22:6e:82:ca:6a:b9:
                    b0:40:97:9a:20:c2:fb:75:95:0b:90:b8:a0:2e:36:
                    c6:dd:64:3f:d9:df:f5:c4:8e:53:55:83:db:c2:2a:
                    20:1c:d4:2d:fb:57:28:8c:14:66:cd:04:2a:92:6e:
                    64:a6:15:27:c3:99:0b:67:2b:88:01:7c:77:e7:75:
                    22:01:f6:d2:6b:12:b5:63:07:3a:1b:ff:b1:6e:3b:
                    88:9b:4c:91:c9:8f:0a:0d:66:d1:f2:82:24:76:5c:
                    29:8a:57:a6:61:93:f9:32:a3:d7:85:53:ea:3d:17:
                    56:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C9:66:34:AC:13:B3:89:EC:B1:79:2C:B7:BA:7F:2D:E8:91:DF:8A
            X509v3 Authority Key Identifier:
                keyid:06:BD:44:15:47:9D:2C:75:08:37:C5:C9:43:36:13:BB:25:88:AE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:b5:c1:c2:fb:f4:c0:ad:16:cb:22:55:fa:a0:57:a5:a8:e1:
         90:a0:54:4c:e0:21:3b:04:69:80:78:7f:25:42:82:c8:3c:b7:
         61:78:7e:7a:8b:8d:e0:7c:d9:22:a9:2f:31:6a:45:bf:c4:af:
         1d:7d:96:5d:cf:3f:d3:6f:c5:f8:0e:c7:e9:36:cb:68:f1:8b:
         84:dd:20:da:d3:8f:18:86:47:59:36:c6:d3:0a:82:d6:ed:7e:
         1a:a9:79:62:62:9a:fa:84:4a:6a:e3:f0:59:72:39:e0:bf:00:
         a2:81:84:b0:d0:14:d5:f1:6d:cb:35:a1:b0:e6:1d:dc:3f:42:
         ba:94:3b:6d:51:39:9a:19:44:b1:b2:98:7d:76:e6:e9:7e:ef:
         f8:0a:15:9b:36:2b:ef:41:ab:b5:04:df:75:ad:4d:68:cb:e4:
         e0:b9:7a:9d:e2:a3:dd:5d:1a:a1:a4:35:89:7e:76:98:97:ae:
         8c:3f:92:90:40:9c:72:57:28:45:f4:da:d7:5b:77:a0:e0:81:
         7f:cb:9e:28:32:90:78:ce:5f:4b:ef:87:12:26:c5:61:03:2a:
         b5:93:1c:6b:af:9a:0d:77:3f:c3:76:ac:4c:8c:c9:f9:94:2d:
         99:2d:05:ae:b9:f6:2e:19:90:6b:f7:78:53:55:24:94:a1:5e:
         02:b8:69:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:08:45 2026 by rpki-client