Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft
File:                     BRxkf9n6kgFgZoaDhn19Oovl2cE.mft (raw, json)
Hash identifier:          g39445K/nfdiHvjx2xCGRcVwe2fqRI/FCVzBnSFUFj8=
Subject key identifier:   A0:D9:FC:79:79:D3:C5:FD:01:2E:06:19:A0:D1:07:C3:99:33:77:98
Authority key identifier: 05:1C:64:7F:D9:FA:92:01:60:66:86:83:86:7D:7D:3A:8B:E5:D9:C1
Certificate issuer:       /CN=A9176682/serialNumber=051C647FD9FA920160668683867D7D3A8BE5D9C1
Certificate serial:       34AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BRxkf9n6kgFgZoaDhn19Oovl2cE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft
Manifest number:          34AC
Signing time:             Wed 20 Aug 2025 15:15:25 +0000
Manifest this update:     Wed 20 Aug 2025 15:15:24 +0000
Manifest next update:     Wed 27 Aug 2025 15:15:24 +0000
Files and hashes:         1: BRxkf9n6kgFgZoaDhn19Oovl2cE.crl (hash: qFF9ROax5mO6Ttlw+uJMes6okAdBD8BSM4/8ppW6Jv8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.crl
                          rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BRxkf9n6kgFgZoaDhn19Oovl2cE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Aug 2025 15:15:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13485 (0x34ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176682, serialNumber=051C647FD9FA920160668683867D7D3A8BE5D9C1
        Validity
            Not Before: Aug 20 15:15:24 2025 GMT
            Not After : Aug 27 15:15:24 2025 GMT
        Subject: CN=68a5e68c-a17f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e2:a6:a5:a3:f7:fa:0f:93:cd:46:38:dd:f5:
                    42:3a:8c:67:f1:f4:05:3e:86:73:d8:44:71:09:1f:
                    54:1e:dd:88:d7:d0:39:8a:17:c7:16:96:ff:c0:c6:
                    8b:4f:4b:a7:1b:42:dc:c2:17:72:83:7b:66:aa:6d:
                    06:5f:ae:6c:4a:ce:4a:37:e1:53:af:e3:90:cc:b6:
                    5a:23:78:44:6e:60:81:be:ac:b8:f4:5b:7c:bd:3c:
                    a0:53:7c:7c:ae:7e:de:6f:d2:22:cf:c8:38:c8:63:
                    2a:43:de:d3:36:aa:da:0c:b6:73:49:f1:86:b2:ad:
                    dc:61:ce:0d:36:af:08:08:55:ee:d1:e4:d8:39:3c:
                    1a:8a:62:bf:06:c3:f9:27:7b:7c:bd:15:be:87:f3:
                    98:9e:ca:98:cd:84:45:d3:00:e2:94:0c:8e:fc:04:
                    b8:ae:04:d3:f8:f0:3b:a7:53:bd:02:e8:5a:68:95:
                    25:56:50:2c:24:2b:6a:61:ab:af:f9:ca:b2:6a:5a:
                    5b:ae:8b:93:19:ed:f8:15:45:b2:bc:e3:01:0f:b9:
                    29:ec:cd:04:76:fc:c9:78:38:06:d1:83:cf:f1:44:
                    7b:2b:bb:68:45:c4:08:7a:f3:61:e3:83:71:92:92:
                    74:a3:e5:22:84:7a:c4:11:e6:56:d3:5f:51:d3:80:
                    f8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D9:FC:79:79:D3:C5:FD:01:2E:06:19:A0:D1:07:C3:99:33:77:98
            X509v3 Authority Key Identifier:
                keyid:05:1C:64:7F:D9:FA:92:01:60:66:86:83:86:7D:7D:3A:8B:E5:D9:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BRxkf9n6kgFgZoaDhn19Oovl2cE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:b7:48:6f:6f:f5:ff:6e:a0:45:ee:73:74:93:41:21:c4:19:
         ff:16:03:d5:6b:e2:81:c2:8b:3d:82:6d:0b:ab:4d:44:36:60:
         43:b6:f8:28:d8:64:cc:53:f5:af:9c:08:14:22:49:a1:f4:a1:
         67:6b:e4:42:5b:09:fb:0e:06:41:32:f5:bc:3f:b5:36:55:9f:
         24:ca:ad:33:0d:7a:9e:85:44:ad:6e:64:97:0d:af:89:cb:13:
         47:4f:88:81:06:fb:56:94:0b:a8:6b:d3:64:73:90:f7:19:a0:
         59:c7:b5:39:c3:61:7c:8c:a5:aa:b1:f0:56:bd:38:d8:f2:20:
         b1:37:d7:b1:50:75:45:67:48:e2:02:77:04:33:37:70:27:20:
         ba:4b:61:71:77:a1:f8:37:d8:28:fb:8d:0c:fd:cc:75:97:42:
         04:4a:3b:a6:bb:74:61:6d:94:84:7c:4b:bc:e6:b6:b7:16:04:
         68:21:d8:46:36:16:7b:55:93:22:59:2d:1e:50:fd:4d:2e:f1:
         db:68:96:c7:f1:ed:f6:95:fb:c8:37:82:05:77:8b:5f:48:3f:
         e9:09:f5:bb:1b:96:b9:eb:c0:18:57:59:01:28:e0:65:08:e0:
         f8:b1:6a:bc:0d:1c:36:7f:e2:24:fb:48:9c:10:f1:f6:f5:f4:
         68:29:da:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 16:35:15 2025 by rpki-client