Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.mft
File:                     BrsRoyhN4e7OJvuvvOs7TNI13Eg.mft (raw, json)
Hash identifier:          olmEHyVroL/hYFWpsxHKs8lmaF8nGv0D9tZjYvN7wjc=
Subject key identifier:   8F:A9:F5:39:FC:EA:A9:29:74:D1:C8:10:5E:02:44:46:9D:7A:4A:D3
Authority key identifier: 06:BB:11:A3:28:4D:E1:EE:CE:26:FB:AF:BC:EB:3B:4C:D2:35:DC:48
Certificate issuer:       /CN=A9158015/serialNumber=06BB11A3284DE1EECE26FBAFBCEB3B4CD235DC48
Certificate serial:       0562
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BrsRoyhN4e7OJvuvvOs7TNI13Eg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.mft
Manifest number:          055C
Signing time:             Fri 08 Aug 2025 23:49:58 +0000
Manifest this update:     Fri 08 Aug 2025 23:49:58 +0000
Manifest next update:     Fri 15 Aug 2025 23:49:58 +0000
Files and hashes:         1: BrsRoyhN4e7OJvuvvOs7TNI13Eg.crl (hash: M8lJsrcQ8AEzw5k2a5Jm8zgJBOPwUYDoQuBMcXKFNA0=)
                          2: A2529A38F90611EBB8E0C27FC4F9AE02.roa (hash: lySgXIbTeI773mGGKtKXC8wJwgy1NnARqmSlG1Myyf8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.crl
                          rsync://rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BrsRoyhN4e7OJvuvvOs7TNI13Eg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1378 (0x562)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158015, serialNumber=06BB11A3284DE1EECE26FBAFBCEB3B4CD235DC48
        Validity
            Not Before: Aug  8 23:49:58 2025 GMT
            Not After : Aug 15 23:49:58 2025 GMT
        Subject: CN=68968d26-0b7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:53:af:84:69:b4:50:78:9a:c8:97:2f:01:06:
                    10:c7:ed:34:f7:da:4a:26:d5:ff:56:b1:2b:f8:12:
                    19:0f:77:04:93:de:e0:16:db:8b:32:17:f9:47:eb:
                    37:38:bc:02:2d:47:c0:39:51:47:c4:61:80:c5:69:
                    b1:3f:47:1d:ba:51:ca:36:62:be:3e:7f:da:80:a7:
                    86:31:29:f1:70:a4:48:c3:10:8f:30:61:3c:91:52:
                    57:94:b3:7b:13:38:d3:bd:31:f3:47:fe:e7:60:39:
                    9b:fa:f1:af:a8:5d:71:f0:ac:1c:ca:c1:46:d6:44:
                    6a:98:d5:3b:f6:b4:6a:35:e5:cb:76:55:f6:26:d2:
                    56:28:16:bc:11:dc:1a:30:e7:b2:1f:39:19:b0:a6:
                    0a:30:aa:98:a2:d8:29:e9:61:48:8f:43:25:6f:9d:
                    39:9f:b8:b2:70:61:5e:3e:63:91:db:38:9d:31:24:
                    ce:ad:1d:a3:f7:a0:27:fd:58:4b:58:89:2f:13:c8:
                    83:23:2a:f2:29:38:50:cd:85:b4:fb:ca:e3:91:55:
                    64:68:a3:e6:5d:43:a0:64:e0:df:c2:76:4b:20:f8:
                    63:20:b6:d1:5e:c9:90:0d:57:00:45:31:2e:85:fa:
                    53:f4:70:e1:93:44:af:f3:91:83:16:bb:cc:09:d2:
                    42:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A9:F5:39:FC:EA:A9:29:74:D1:C8:10:5E:02:44:46:9D:7A:4A:D3
            X509v3 Authority Key Identifier:
                keyid:06:BB:11:A3:28:4D:E1:EE:CE:26:FB:AF:BC:EB:3B:4C:D2:35:DC:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BrsRoyhN4e7OJvuvvOs7TNI13Eg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:c8:40:41:c8:00:93:10:d6:a6:e9:f0:2c:db:8a:2f:92:3e:
         f1:05:1b:6e:f6:ed:ef:25:cc:86:39:6f:d3:4b:bd:27:41:c2:
         5e:f8:96:75:6d:9b:4e:ea:c3:39:72:f0:d2:ff:7f:83:50:15:
         99:96:e5:b8:64:d7:82:83:38:1c:0b:50:72:3d:42:27:c9:a9:
         79:3b:1c:bd:b8:09:d5:67:b7:f8:6d:1e:a5:6f:fe:76:4b:ba:
         81:3c:ff:45:54:ea:79:56:ec:a3:83:72:c8:a7:30:43:08:38:
         76:ff:cb:5f:0d:53:50:8b:35:eb:3a:4b:67:cd:8f:7d:09:ee:
         f0:09:d3:ab:94:24:64:04:f2:65:8a:c9:19:bb:29:c2:6b:74:
         f0:25:7d:10:8e:2e:b0:2b:82:1c:4e:0c:58:3a:7e:b2:c2:93:
         a4:b6:6f:94:0f:41:42:19:7d:48:4f:1e:da:3e:74:9e:c7:91:
         eb:a0:20:8a:25:4b:fe:e8:ec:46:13:a9:b2:53:c2:72:da:1d:
         07:a4:5a:ce:1a:bc:92:64:42:df:30:1b:4d:a0:df:d2:15:94:
         a0:9a:83:99:2f:19:82:fd:cc:d6:2c:39:f5:84:8a:b6:b8:ae:
         1a:3b:9b:e9:d8:e5:42:61:6c:9d:80:ed:2a:de:c8:49:6f:3c:
         6b:0b:b2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:07:19 2025 by rpki-client