Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
File:                     Br1EFUedLHUIN8XJQzYTuyWIrrg.mft (raw, json)
Hash identifier:          13lRqbnCi63VSD90xiuYG/htUusFQ2SXP52OwS3Jm20=
Subject key identifier:   BA:6F:BA:2B:78:A4:91:6E:90:03:70:45:DB:04:C0:90:F1:F1:08:B5
Authority key identifier: 06:BD:44:15:47:9D:2C:75:08:37:C5:C9:43:36:13:BB:25:88:AE:B8
Certificate issuer:       /CN=A9177FC9/serialNumber=06BD4415479D2C750837C5C9433613BB2588AEB8
Certificate serial:       EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
Manifest number:          E1
Signing time:             Mon 11 May 2026 06:49:07 +0000
Manifest this update:     Mon 11 May 2026 06:49:06 +0000
Manifest next update:     Mon 18 May 2026 06:49:06 +0000
Files and hashes:         1: Br1EFUedLHUIN8XJQzYTuyWIrrg.crl (hash: I55urwpzYWvbADy/PUivdwafmr/lt1mj3+YD+P8VIiY=)
                          2: FDD39BD607B811F0AB98B333C4F9AE02.roa (hash: 9d80apncQwaKTAG06R4mIWLTbRCpdrLELAUO00snQkE=)
                          3: FD6DA4D407B811F0AB98B333C4F9AE02.roa (hash: aLK8sAzxMSPrhRCMqldgKmzdDH1pIToEHi3LcYvbeYk=)
                          4: 51B36E9EF52911F0B0B7B3125D6F56BC.roa (hash: +YeqTwufzvgzhnkt/mIw5JG1iBbYnBY3vNzMAfLJODo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.crl
                          rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:49:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 239 (0xef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177FC9, serialNumber=06BD4415479D2C750837C5C9433613BB2588AEB8
        Validity
            Not Before: May 11 06:49:06 2026 GMT
            Not After : May 18 06:49:06 2026 GMT
        Subject: CN=6a017be2-10c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:b1:02:5b:ca:4f:92:9c:d8:48:e4:cc:02:0a:
                    19:39:4f:21:ab:69:c9:ec:70:fd:33:4c:85:19:02:
                    56:80:72:d9:29:cd:b4:3e:50:e4:9d:96:15:70:a3:
                    b8:a8:2f:b5:18:55:99:73:c3:fb:f2:ad:89:9e:03:
                    08:13:6a:cd:03:c5:d6:68:90:76:60:96:8b:a8:44:
                    4d:a6:8a:94:e7:e6:4d:a1:9e:07:cf:88:a9:ec:3d:
                    c8:8f:52:70:f8:d4:ff:0f:de:77:ed:fe:c3:d5:90:
                    ce:15:6d:95:dd:47:c9:2b:2a:d4:52:8b:79:55:85:
                    44:0e:cb:b9:74:12:f3:ed:8f:8a:72:5d:fc:65:ec:
                    b5:14:69:53:3c:4d:f1:a7:a8:7d:b1:1e:26:c2:8a:
                    15:58:d9:af:a3:4e:45:e4:de:10:25:bd:6f:62:00:
                    4a:db:ea:28:69:c8:dc:0b:28:b9:21:87:72:4f:8d:
                    da:18:36:86:84:0a:89:4f:a8:7d:53:b4:f7:2b:ea:
                    03:5a:13:cf:5b:aa:74:34:03:a7:cf:06:d2:da:fc:
                    99:62:a1:86:92:2f:fc:69:53:e0:60:21:6c:5d:5d:
                    f5:93:04:96:07:55:fb:5d:b2:75:6f:d3:2a:8e:59:
                    34:14:d2:ce:59:a5:54:5c:b0:96:a6:a3:da:b5:2b:
                    9c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:6F:BA:2B:78:A4:91:6E:90:03:70:45:DB:04:C0:90:F1:F1:08:B5
            X509v3 Authority Key Identifier:
                keyid:06:BD:44:15:47:9D:2C:75:08:37:C5:C9:43:36:13:BB:25:88:AE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:a9:f7:a2:a0:86:c6:09:a6:91:72:0b:30:43:90:22:b6:10:
         ac:1e:40:df:16:65:07:dd:fc:3e:01:fc:43:e5:93:f5:f4:b5:
         26:0c:62:ee:fc:c0:c3:b2:58:10:ae:b6:90:b5:d8:6a:70:0c:
         53:3f:a9:35:c3:92:44:d0:30:9f:ed:eb:f8:2e:f1:9c:1d:e3:
         b1:58:e0:53:fc:f8:a4:af:67:ad:d5:51:6f:36:00:e5:64:e7:
         d6:d0:74:65:23:82:d2:1d:1c:d0:2c:0c:7a:10:62:e3:f2:54:
         e7:9b:78:20:4e:0e:52:01:0a:70:37:e3:e5:36:ee:ed:e2:a6:
         cd:2d:00:56:51:86:c6:a2:a9:8b:5d:7c:1b:68:64:d5:5b:aa:
         49:80:2d:38:27:2b:51:e9:85:c6:11:9c:36:be:38:6a:09:51:
         0b:5d:ea:e0:b6:d1:63:a6:41:a4:29:62:41:8e:22:23:bb:75:
         35:a3:86:b8:84:cc:d7:b4:d7:9e:f3:8a:fc:e8:2b:9f:3c:d8:
         51:90:7f:3b:8f:92:77:6a:3f:3d:3c:0f:4b:7e:18:96:d5:31:
         6a:79:8d:8c:ed:36:6a:1a:8e:1e:38:d1:c3:37:66:ac:e9:69:
         23:33:f5:4c:83:bd:16:2a:c6:0d:5e:a8:79:fb:82:df:72:e0:
         9f:73:c4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:20:32 2026 by rpki-client