Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.mft
File:                     QrsPPBhH5li75BQYSUzonOjjRIg.mft (raw, json)
Hash identifier:          yDpc8LaDS+extGmGxXSS/zZtvOQINIZlKXJuv73Iluc=
Subject key identifier:   F4:03:A8:05:17:69:84:C9:45:65:F2:E4:DE:D0:1D:50:44:1B:3C:B0
Authority key identifier: 42:BB:0F:3C:18:47:E6:58:BB:E4:14:18:49:4C:E8:9C:E8:E3:44:88
Certificate issuer:       /CN=A9172506/serialNumber=42BB0F3C1847E658BBE41418494CE89CE8E34488
Certificate serial:       0179
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrsPPBhH5li75BQYSUzonOjjRIg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.mft
Manifest number:          0170
Signing time:             Thu 23 Jul 2026 06:33:51 +0000
Manifest this update:     Thu 23 Jul 2026 06:33:51 +0000
Manifest next update:     Thu 30 Jul 2026 06:33:51 +0000
Files and hashes:         1: QrsPPBhH5li75BQYSUzonOjjRIg.crl (hash: G+v0xGNWemPhEH6myvM8kKD5W2yo6RDdhQYgNgbEU3M=)
                          2: B7AA552680DB11F1BD8F0E495DA30FBC.roa (hash: NOVDQib+lECSnHFC4JVtukqfdz+DMQULILHyPpuxnlA=)
                          3: DD75C9BC6EDF11EF90C49A5FC4F9AE02.roa (hash: s+l4HjUDhiiqmD/rzxp+8CMlr1Kg8Ftjq0O4yuSOPE8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.crl
                          rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrsPPBhH5li75BQYSUzonOjjRIg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:33:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 377 (0x179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172506, serialNumber=42BB0F3C1847E658BBE41418494CE89CE8E34488
        Validity
            Not Before: Jul 23 06:33:51 2026 GMT
            Not After : Jul 30 06:33:51 2026 GMT
        Subject: CN=6a61b5cf-1cde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9c:e1:25:7a:af:1a:b7:51:be:95:05:df:4c:
                    07:1e:63:e6:1d:da:a0:dc:e6:70:e7:52:7d:35:c2:
                    1d:3b:ae:bc:b1:95:10:a7:02:1d:12:9b:f0:8b:60:
                    55:66:e4:3c:7e:d1:e1:ec:f4:d5:bf:53:5b:f4:e8:
                    7c:37:93:ec:b2:3c:77:b6:af:85:6b:97:12:0a:22:
                    13:3a:bc:65:2a:be:71:dc:42:3c:2a:2d:27:34:15:
                    34:e2:f0:9c:51:1d:e7:9b:90:3d:0b:1e:34:57:9c:
                    79:4e:0b:c2:85:66:7b:b3:8c:f6:32:af:6c:9e:58:
                    9a:50:c9:39:5d:00:6e:5d:ba:12:21:3f:6b:e9:7e:
                    bb:b5:0e:16:39:ac:1d:5f:08:ab:e1:06:a6:ef:87:
                    d7:56:4c:a1:83:8d:27:9a:08:0d:64:3c:a1:52:ae:
                    21:05:37:88:51:21:20:94:e7:61:87:8e:45:e1:b9:
                    bc:92:e4:aa:79:7d:78:cf:85:36:3c:fb:7e:4f:ec:
                    3a:93:49:0a:07:39:f0:70:bd:20:3b:fa:db:56:c4:
                    7b:0d:17:3f:6b:7b:11:34:92:88:07:b7:7b:eb:4d:
                    26:61:c8:da:51:6e:f4:4e:ae:46:c1:4e:fd:69:07:
                    a7:0f:83:05:99:45:a0:88:be:19:9a:d2:d3:b7:fa:
                    29:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:03:A8:05:17:69:84:C9:45:65:F2:E4:DE:D0:1D:50:44:1B:3C:B0
            X509v3 Authority Key Identifier:
                keyid:42:BB:0F:3C:18:47:E6:58:BB:E4:14:18:49:4C:E8:9C:E8:E3:44:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrsPPBhH5li75BQYSUzonOjjRIg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:f4:5a:f6:29:9b:10:2f:90:36:4f:b8:87:88:da:81:3f:99:
         9b:39:18:79:bb:af:af:15:32:35:58:40:40:87:ad:04:f4:b3:
         f4:7d:1b:58:75:c4:e2:ec:ee:bb:28:92:39:11:dc:f4:12:21:
         96:29:8e:a1:03:be:52:ff:8c:7d:48:43:a7:d1:49:86:8d:45:
         ac:4c:32:9f:84:33:74:b0:00:9f:9e:07:81:d0:64:1b:d3:8f:
         34:fb:6c:93:ba:c1:8d:73:de:cd:f7:dd:ee:84:b3:04:72:17:
         8a:8e:7a:e3:b0:e9:9c:bb:f7:45:53:8b:c0:cf:9b:ee:89:b7:
         a2:54:63:2b:4b:97:2e:ea:b2:a4:c9:d9:55:e2:a2:9a:ec:13:
         80:06:dc:9d:61:da:6a:0d:7e:e8:73:e4:4d:f9:ea:97:ed:7f:
         b1:42:40:b5:77:a7:9c:2f:1e:db:bd:b6:68:d1:3f:63:f9:eb:
         32:1a:13:fe:26:2e:70:d3:44:5e:ac:00:09:a2:e6:56:68:fc:
         3b:08:55:4f:02:5f:b1:ef:0b:29:f7:f5:ed:ae:e8:c5:89:f1:
         2d:3e:f2:6e:db:8b:2d:90:19:58:63:b8:df:78:c7:66:18:d1:
         34:43:8d:51:fe:bb:82:91:0d:96:7b:30:9f:5b:cf:1a:06:c3:
         59:11:f5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:08:41 2026 by rpki-client