Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
File:                     Br1EFUedLHUIN8XJQzYTuyWIrrg.mft (raw, json)
Hash identifier:          +RxRwQjywEe+uHhfwwUYu1jd9ckbF3x2wm3s9CCGCKY=
Subject key identifier:   08:CE:72:66:EF:98:BE:AD:7F:C2:8F:FB:78:1B:D4:44:2F:6F:4F:19
Authority key identifier: 06:BD:44:15:47:9D:2C:75:08:37:C5:C9:43:36:13:BB:25:88:AE:B8
Certificate issuer:       /CN=A9177FC9/serialNumber=06BD4415479D2C750837C5C9433613BB2588AEB8
Certificate serial:       F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
Manifest number:          E6
Signing time:             Thu 21 May 2026 06:43:12 +0000
Manifest this update:     Thu 21 May 2026 06:43:11 +0000
Manifest next update:     Thu 28 May 2026 06:43:11 +0000
Files and hashes:         1: Br1EFUedLHUIN8XJQzYTuyWIrrg.crl (hash: JW/HUKLPJ4d7JfRBdAUZjrihg2AukaDdRFQEAYCe83s=)
                          2: 51B36E9EF52911F0B0B7B3125D6F56BC.roa (hash: +YeqTwufzvgzhnkt/mIw5JG1iBbYnBY3vNzMAfLJODo=)
                          3: FDD39BD607B811F0AB98B333C4F9AE02.roa (hash: 9d80apncQwaKTAG06R4mIWLTbRCpdrLELAUO00snQkE=)
                          4: FD6DA4D407B811F0AB98B333C4F9AE02.roa (hash: aLK8sAzxMSPrhRCMqldgKmzdDH1pIToEHi3LcYvbeYk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.crl
                          rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 06:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177FC9, serialNumber=06BD4415479D2C750837C5C9433613BB2588AEB8
        Validity
            Not Before: May 21 06:43:11 2026 GMT
            Not After : May 28 06:43:11 2026 GMT
        Subject: CN=6a0ea980-8234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:62:d4:0c:d7:df:85:4e:4c:f1:be:c5:f2:34:
                    0c:3d:35:53:4f:87:2c:af:df:a0:22:cd:ed:be:b4:
                    22:4a:d0:2c:b0:a6:45:77:8f:7e:40:30:c0:a8:52:
                    88:32:eb:f2:0e:75:ee:64:e6:57:fd:ce:b6:ce:32:
                    5a:89:36:fc:63:99:89:7f:d5:d7:64:7d:57:12:3d:
                    bd:5c:68:f5:f5:55:6c:a7:50:a4:5f:cb:ce:dd:a4:
                    c1:fe:d4:a6:fc:c8:79:4d:ef:65:34:90:13:d9:62:
                    ac:02:78:e0:b9:19:f3:e0:06:48:9a:fd:75:7b:db:
                    f6:aa:63:21:b0:a1:a6:0e:89:9d:44:b6:28:4a:a7:
                    40:f0:37:aa:0c:87:af:83:79:da:44:49:5c:ef:0e:
                    24:c7:c6:91:9f:ac:fe:26:e1:6a:6d:9f:13:09:d2:
                    7f:b7:7a:e2:06:ca:b3:b0:4c:7c:c2:a3:49:94:96:
                    68:2d:2b:67:47:15:de:9e:a5:6e:a9:dd:80:93:de:
                    15:85:a7:7b:f2:68:fe:0f:58:0c:a2:32:b7:2c:99:
                    49:ef:f1:89:34:e3:1c:45:c1:14:8b:73:38:df:24:
                    fc:70:16:5f:07:4e:67:10:6c:49:27:64:19:fd:8a:
                    76:b1:1e:c2:37:79:f4:99:50:b0:72:79:64:f0:38:
                    8d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:CE:72:66:EF:98:BE:AD:7F:C2:8F:FB:78:1B:D4:44:2F:6F:4F:19
            X509v3 Authority Key Identifier:
                keyid:06:BD:44:15:47:9D:2C:75:08:37:C5:C9:43:36:13:BB:25:88:AE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:ee:7f:5a:01:3a:11:f7:10:e5:83:19:dc:a5:00:96:74:b7:
         2b:f4:06:d0:c7:a3:05:ff:3f:b0:d2:e9:f6:27:3f:30:3c:ef:
         fa:2c:bd:82:cb:65:c9:df:14:ac:22:64:db:d0:1f:74:45:4d:
         f9:dc:35:c1:64:91:80:36:48:ab:66:6b:e0:cf:9e:ee:d0:c8:
         6b:64:2e:0a:f4:20:73:3c:bf:d0:c0:a1:73:8e:57:44:fd:8c:
         e8:db:be:ef:9c:9f:52:da:80:1a:a2:3f:24:28:e1:82:16:1f:
         22:8c:cc:a9:99:40:bd:75:74:30:55:0f:41:f5:3a:d7:e7:cb:
         fe:18:d2:41:3c:d4:47:5a:99:22:1c:cb:7b:63:9c:20:db:80:
         5c:79:e9:59:d2:6d:64:77:40:ad:e6:9c:2b:66:8d:b3:25:2d:
         04:1d:e9:64:45:e0:71:57:0f:c0:ce:e7:de:36:3d:4d:24:fa:
         c8:98:f6:9e:59:be:04:58:8c:2a:8e:b4:ee:95:78:ed:e8:24:
         92:e9:62:12:9e:9b:34:35:ab:81:05:01:14:ca:ce:5d:11:cd:
         ad:6d:f3:c2:3f:33:f5:6d:c2:fa:27:8b:49:5e:2a:e3:17:cb:
         76:f7:c3:72:ec:3d:24:71:aa:bb:48:6f:ef:cd:8e:45:05:17:
         22:72:2c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 14:43:57 2026 by rpki-client