Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft
File:                     BRxkf9n6kgFgZoaDhn19Oovl2cE.mft (raw, json)
Hash identifier:          4o/XiOVGoZYwo7brfLEZ2XP8I37BuDJ95+mAyc9lGa0=
Subject key identifier:   A0:84:28:BD:3F:05:2F:EE:1D:AE:A4:56:6B:09:EE:7F:3E:E1:44:85
Authority key identifier: 05:1C:64:7F:D9:FA:92:01:60:66:86:83:86:7D:7D:3A:8B:E5:D9:C1
Certificate issuer:       /CN=A9176682/serialNumber=051C647FD9FA920160668683867D7D3A8BE5D9C1
Certificate serial:       352B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BRxkf9n6kgFgZoaDhn19Oovl2cE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft
Manifest number:          352A
Signing time:             Thu 16 Apr 2026 15:12:23 +0000
Manifest this update:     Thu 16 Apr 2026 15:12:23 +0000
Manifest next update:     Thu 23 Apr 2026 15:12:23 +0000
Files and hashes:         1: BRxkf9n6kgFgZoaDhn19Oovl2cE.crl (hash: gHpW6ezgcSeJtuKfDoipMmx65OmFDtFJ7ovCYUfEXU0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.crl
                          rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BRxkf9n6kgFgZoaDhn19Oovl2cE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:12:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13611 (0x352b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176682, serialNumber=051C647FD9FA920160668683867D7D3A8BE5D9C1
        Validity
            Not Before: Apr 16 15:12:23 2026 GMT
            Not After : Apr 23 15:12:23 2026 GMT
        Subject: CN=69e0fc57-c17f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:18:51:d2:d7:e6:a2:d4:e1:e4:cd:95:c8:47:
                    72:18:fa:ef:72:2d:74:8d:1a:b0:09:e1:8f:c2:93:
                    1e:2f:82:ef:30:3c:01:74:5d:ab:bf:5f:79:51:e1:
                    c1:24:83:2c:d7:bf:2c:4f:ee:b8:6c:3c:1f:e0:66:
                    38:f7:63:96:c4:d5:1a:4c:c6:2e:7e:89:72:8c:28:
                    6c:89:13:a4:66:f9:78:b7:f8:87:ab:5a:ed:09:44:
                    35:d7:02:d8:97:ef:8d:10:29:1a:21:dd:ce:b9:ec:
                    45:66:d1:48:13:27:93:c5:e3:b4:22:ae:39:e9:40:
                    26:2f:4d:a9:c2:1b:98:7c:99:eb:80:d4:e1:07:c9:
                    b4:94:9a:5c:2a:b0:61:89:8c:77:b0:d5:9e:88:00:
                    a0:21:ce:dd:8e:40:ff:eb:1a:88:6e:62:9e:e1:a3:
                    b4:0c:04:c4:0f:18:54:8f:e9:2e:f3:a8:23:13:61:
                    2c:49:7f:bc:15:1f:c3:f7:d1:83:82:41:ea:c1:b2:
                    56:db:38:81:5c:5b:64:c3:6b:a6:35:fe:cf:06:63:
                    61:3d:61:27:6c:f4:da:33:0e:a3:92:83:a3:6c:e1:
                    67:6c:2e:f4:30:04:8d:42:b6:78:0b:9e:21:da:ee:
                    65:b4:82:18:2d:06:5e:3f:93:c7:da:ee:6c:50:ab:
                    ba:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:84:28:BD:3F:05:2F:EE:1D:AE:A4:56:6B:09:EE:7F:3E:E1:44:85
            X509v3 Authority Key Identifier:
                keyid:05:1C:64:7F:D9:FA:92:01:60:66:86:83:86:7D:7D:3A:8B:E5:D9:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BRxkf9n6kgFgZoaDhn19Oovl2cE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:be:df:d0:2a:a7:3c:2e:00:2d:ce:17:39:b3:dc:34:ba:8c:
         22:0c:16:57:8e:cc:c9:f5:c2:2c:10:14:29:7d:04:61:a9:9b:
         f3:de:07:ca:cb:6b:dd:c0:24:19:a2:21:e3:1a:42:a3:35:ee:
         04:a2:2f:ec:c8:5a:a7:80:f5:20:fa:19:5a:90:ad:b1:4b:ed:
         6a:34:31:cd:5c:85:e8:45:f0:3e:aa:44:28:4d:4d:a7:fb:89:
         71:84:c5:35:92:73:4d:bf:61:d0:27:b7:65:a3:74:4e:88:15:
         88:09:2d:b8:5a:a7:67:61:f7:13:f0:11:cc:97:e1:55:b7:fd:
         01:1c:64:a2:2d:e0:48:10:a2:cb:31:b0:9a:ee:9f:e8:54:2d:
         95:85:03:f5:c1:41:54:0f:d2:06:ed:85:ea:91:15:78:7b:86:
         f9:49:34:80:7f:3d:88:d9:d9:ea:a2:74:2a:ec:d5:99:7e:20:
         67:cf:76:6e:26:07:52:3c:98:31:db:e5:b8:63:e4:c2:65:44:
         c2:d5:62:9f:da:3d:6b:12:5c:17:32:ee:42:ec:91:6d:1e:40:
         54:0f:65:14:bb:fb:60:07:69:da:5c:b0:2d:2f:6f:ae:87:51:
         29:a6:35:e0:e2:bd:c2:15:d2:1c:5e:b8:cc:9f:a6:aa:f8:25:
         31:e2:50:8e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNSswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzY2ODIxMTAvBgNVBAUTKDA1MUM2NDdGRDlGQTkyMDE2MDY2ODY4Mzg2N0Q3RDNB
OEJFNUQ5QzEwHhcNMjYwNDE2MTUxMjIzWhcNMjYwNDIzMTUxMjIzWjAYMRYwFAYD
VQQDEw02OWUwZmM1Ny1jMTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4RhR0tfmotTh5M2VyEdyGPrvci10jRqwCeGPwpMeL4LvMDwBdF2rv195UeHB
JIMs178sT+64bDwf4GY492OWxNUaTMYufolyjChsiROkZvl4t/iHq1rtCUQ11wLY
l++NECkaId3OuexFZtFIEyeTxeO0Iq456UAmL02pwhuYfJnrgNThB8m0lJpcKrBh
iYx3sNWeiACgIc7djkD/6xqIbmKe4aO0DATEDxhUj+ku86gjE2EsSX+8FR/D99GD
gkHqwbJW2ziBXFtkw2umNf7PBmNhPWEnbPTaMw6jkoOjbOFnbC70MASNQrZ4C54h
2u5ltIIYLQZeP5PH2u5sUKu62wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKCEKL0/
BS/uHa6kVmsJ7n8+4USFMB8GA1UdIwQYMBaAFAUcZH/Z+pIBYGaGg4Z9fTqL5dnB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjY4Mi83NTg1RTAwQzFE
QTgxMUUyOEQ4N0UzQTIwOEIwMkNEMi9CUnhrZjluNmtnRmdab2FEaG4xOU9vdmwy
Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JSeGtmOW42a2dGZ1pvYURobjE5T292bDJjRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NjY4Mi83NTg1RTAwQzFEQTgxMUUyOEQ4N0UzQTIwOEIwMkNEMi9CUnhrZjluNmtn
Rmdab2FEaG4xOU9vdmwyY0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAY77f0CqnPC4ALc4XObPcNLqMIgwWV47MyfXCLBAUKX0EYamb894Hystr3cAk
GaIh4xpCozXuBKIv7Mhap4D1IPoZWpCtsUvtajQxzVyF6EXwPqpEKE1Np/uJcYTF
NZJzTb9h0Ce3ZaN0TogViAktuFqnZ2H3E/ARzJfhVbf9ARxkoi3gSBCiyzGwmu6f
6FQtlYUD9cFBVA/SBu2F6pEVeHuG+Uk0gH89iNnZ6qJ0KuzVmX4gZ892biYHUjyY
MdvluGPkwmVEwtVin9o9axJcFzLuQuyRbR5AVA9lFLv7YAdp2lywLS9vrodRKaY1
4OK9whXSHF64zJ+mqvglMeJQjg==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:44:28 2026 by rpki-client