Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft
File:                     BRxkf9n6kgFgZoaDhn19Oovl2cE.mft (raw, json)
Hash identifier:          ohJrKMlrZl6QgMnyiL8UH8OuD8ugoay+dWAjgz+bfWg=
Subject key identifier:   B4:6B:C4:29:DB:DD:F0:EB:E3:8F:A5:F7:48:EA:37:C9:83:14:35:C9
Authority key identifier: 05:1C:64:7F:D9:FA:92:01:60:66:86:83:86:7D:7D:3A:8B:E5:D9:C1
Certificate issuer:       /CN=A9176682/serialNumber=051C647FD9FA920160668683867D7D3A8BE5D9C1
Certificate serial:       3512
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BRxkf9n6kgFgZoaDhn19Oovl2cE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft
Manifest number:          3511
Signing time:             Sat 28 Feb 2026 15:14:54 +0000
Manifest this update:     Sat 28 Feb 2026 15:14:54 +0000
Manifest next update:     Sat 07 Mar 2026 15:14:54 +0000
Files and hashes:         1: BRxkf9n6kgFgZoaDhn19Oovl2cE.crl (hash: 5UQ/aK0c2+LS/OIFRJTbbBmw/6PiRRBicG+pscTSvQ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.crl
                          rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BRxkf9n6kgFgZoaDhn19Oovl2cE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 15:14:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13586 (0x3512)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176682, serialNumber=051C647FD9FA920160668683867D7D3A8BE5D9C1
        Validity
            Not Before: Feb 28 15:14:54 2026 GMT
            Not After : Mar  7 15:14:54 2026 GMT
        Subject: CN=69a3066e-9bd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7f:a4:f2:8a:31:33:51:6f:2f:bb:89:63:0a:
                    e3:da:79:05:28:fa:0e:b7:07:a6:5c:0c:ab:31:4e:
                    13:b3:c3:64:19:f8:62:cb:ab:ba:53:df:8c:e0:b3:
                    49:28:69:c3:e2:d6:c1:99:29:0e:23:d4:29:c7:21:
                    64:52:34:f4:f0:67:f8:0f:bf:46:40:91:cf:9a:78:
                    be:80:80:7e:1a:03:6a:fb:c6:c7:c1:cf:9a:be:d2:
                    96:9c:a0:2f:8b:6f:a1:68:06:f2:1d:0a:19:7f:38:
                    f7:18:af:a7:f6:b9:86:3f:8f:89:1f:45:0f:5c:b8:
                    5c:b2:ba:c1:73:93:bc:86:8a:8e:17:68:e8:96:d8:
                    45:ec:e4:d0:6d:3b:e9:55:b2:ce:63:e4:3c:7a:bb:
                    37:92:19:4e:59:e2:ac:4a:db:34:a1:b6:6c:cc:e6:
                    8a:24:62:32:bc:f3:0f:7b:70:71:e5:7d:c6:a6:be:
                    17:7a:34:aa:75:96:c9:e3:44:3a:81:9c:61:d6:6c:
                    80:b2:19:e7:7f:5b:69:d3:9b:ea:5d:0c:2e:b9:86:
                    c9:2d:24:17:41:c0:f2:3d:69:05:8f:ce:b9:35:99:
                    21:06:20:0d:1d:d0:26:fc:84:0d:db:b0:ce:a6:07:
                    ea:83:f1:37:5b:7d:00:5f:79:42:5e:2f:cb:d3:d7:
                    a0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:6B:C4:29:DB:DD:F0:EB:E3:8F:A5:F7:48:EA:37:C9:83:14:35:C9
            X509v3 Authority Key Identifier:
                keyid:05:1C:64:7F:D9:FA:92:01:60:66:86:83:86:7D:7D:3A:8B:E5:D9:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BRxkf9n6kgFgZoaDhn19Oovl2cE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:d9:87:70:eb:72:a3:0c:01:6a:b5:2e:01:0b:8d:63:18:68:
         64:60:7f:bc:98:97:be:29:27:af:45:f5:15:69:1b:b6:d4:b5:
         e4:ec:d3:3f:e7:34:5b:eb:ff:77:7f:3e:82:0c:7b:7e:d4:2a:
         79:08:a1:c3:5e:5b:58:de:9e:82:e7:f7:b9:2f:bd:f7:cf:c1:
         fb:d5:ac:df:e3:8f:59:73:45:2e:81:8c:ce:28:71:0f:09:1d:
         b5:e1:f9:49:79:ab:16:4b:c8:ad:4c:67:11:52:b4:ff:1c:97:
         9a:ac:fb:9f:08:3a:d9:f0:77:35:4c:65:2c:a3:d1:fd:e4:10:
         2c:24:30:98:cd:c1:50:ce:91:0f:09:a0:2c:ec:24:aa:b6:34:
         f9:ba:0d:1c:fa:cc:9a:91:68:2c:35:d7:d1:5d:10:bd:13:b2:
         a0:48:52:7b:93:a6:81:a4:87:95:46:85:cc:8a:57:2d:4c:fd:
         eb:98:a7:6e:f0:5b:e3:59:14:cf:b6:be:4e:0b:d1:7a:f0:86:
         ef:7d:83:3b:cd:78:44:9d:6c:c4:4a:e7:a1:d8:66:d4:2e:0f:
         10:3a:c8:20:e7:09:49:eb:6a:66:3b:06:e5:46:d0:5b:96:6b:
         d2:f2:86:97:ca:a8:38:05:61:81:02:d0:80:ef:56:fc:7a:1a:
         65:07:e5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:09:00 2026 by rpki-client