Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
File:                     PzbQyAdues-oPQS3IwcXKogp1bM.mft (raw, json)
Hash identifier:          dXatakCe7kWl0F09yqN7kelMlwwmPSf4m0I753dsz1Y=
Subject key identifier:   AF:8B:4C:BF:A6:AC:1C:77:05:7D:08:D5:40:96:E7:01:1A:EA:7F:A7
Authority key identifier: 3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3
Certificate issuer:       /CN=A9172B65/serialNumber=3F36D0C8076E7ACFA83D04B72307172A8829D5B3
Certificate serial:       0181
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
Manifest number:          017C
Signing time:             Thu 23 Jul 2026 06:11:18 +0000
Manifest this update:     Thu 23 Jul 2026 06:11:18 +0000
Manifest next update:     Thu 30 Jul 2026 06:11:18 +0000
Files and hashes:         1: PzbQyAdues-oPQS3IwcXKogp1bM.crl (hash: W8dYIlD5nxfr1mn1benP/VioGX/NFpvhH5HUhEu5/5w=)
                          2: 76C3F7C645B711EFA2F0C732C4F9AE02.roa (hash: OgCWnzqkwWEniebxSjCaqKQFGPlBmgsXfq8XVeayY5U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.crl
                          rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:11:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 385 (0x181)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B65, serialNumber=3F36D0C8076E7ACFA83D04B72307172A8829D5B3
        Validity
            Not Before: Jul 23 06:11:18 2026 GMT
            Not After : Jul 30 06:11:18 2026 GMT
        Subject: CN=6a61b086-db4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:eb:16:1f:17:bb:23:70:f4:c2:c1:26:de:0b:
                    1f:ca:11:70:2e:1c:e6:09:30:b3:86:91:1e:f8:08:
                    f1:4a:d3:e9:d0:4c:c5:6f:bb:c6:66:67:57:5d:01:
                    fa:76:d7:56:e1:04:0b:3c:95:28:13:ba:13:66:d4:
                    39:81:66:fb:6a:34:6f:52:dc:2c:19:97:9e:4b:07:
                    75:6e:7c:0f:16:55:e1:6d:79:49:30:a5:6f:58:44:
                    57:8c:bf:6e:fc:b8:63:aa:18:1b:92:99:38:c9:26:
                    71:8a:d2:74:5e:21:fa:ee:a7:1c:1f:4c:2b:21:e4:
                    18:40:4e:9c:4d:4a:e3:46:36:f5:23:85:cc:fd:4c:
                    ef:37:2e:25:3d:ad:e8:2b:c3:e0:b5:3a:c6:38:56:
                    73:25:9a:ad:55:da:94:0f:2a:f2:d8:c4:47:b9:79:
                    bf:54:87:e0:12:13:e6:20:cd:9a:02:f1:b9:a7:27:
                    e2:23:33:8c:b4:7f:61:63:7a:f7:ab:df:51:50:a7:
                    84:5b:65:f8:f2:0b:66:99:91:7c:05:a0:b1:34:41:
                    fa:cb:99:de:78:34:f3:b5:4c:6d:64:8e:0d:2f:0c:
                    34:62:fc:7c:be:5e:57:65:6a:b9:07:af:e4:59:d9:
                    aa:1a:06:47:db:0c:23:36:c3:f3:06:4a:bc:09:80:
                    3e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8B:4C:BF:A6:AC:1C:77:05:7D:08:D5:40:96:E7:01:1A:EA:7F:A7
            X509v3 Authority Key Identifier:
                keyid:3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:4f:d7:1d:36:71:ed:60:cb:43:fe:4d:18:5e:c3:16:d7:9a:
         dd:c7:3f:71:b2:f9:4c:fc:47:6f:7d:a1:63:8d:3d:3c:5e:53:
         a8:6c:12:2d:2a:f4:c3:f9:4f:27:a7:01:03:8b:78:a1:69:30:
         13:67:63:05:54:ba:40:1b:ae:75:00:d8:ea:77:23:b9:67:d8:
         a5:1e:1e:b5:bf:4c:cd:db:96:75:b1:41:d5:96:21:82:c4:95:
         fb:b9:84:73:3a:99:a0:29:b8:26:89:b8:8b:7b:1f:11:ad:de:
         96:ce:ed:f4:05:f6:5e:b4:7f:cd:b7:5a:6e:e4:ed:33:83:f0:
         15:a8:9a:0d:b7:a5:24:75:7e:91:e7:b5:6a:97:1f:32:fc:90:
         dd:06:e0:64:c4:c7:76:39:f1:d5:b9:90:22:93:cc:e0:82:04:
         6a:ec:0d:0a:38:49:8a:4c:b3:58:d8:47:eb:fd:70:bd:84:c2:
         81:93:37:fd:4a:11:83:51:c7:4a:62:0e:67:ab:4b:bf:9f:81:
         66:b8:96:bb:24:11:ea:b6:20:73:28:ed:4c:85:c6:81:bc:a0:
         51:f9:e9:0c:45:71:52:b2:f3:ad:36:30:26:ff:53:75:9a:c6:
         9a:22:c0:d3:bb:e3:79:82:07:f7:b9:a3:49:64:90:63:d7:6a:
         4e:10:61:2c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzJCNjUxMTAvBgNVBAUTKDNGMzZEMEM4MDc2RTdBQ0ZBODNEMDRCNzIzMDcxNzJB
ODgyOUQ1QjMwHhcNMjYwNzIzMDYxMTE4WhcNMjYwNzMwMDYxMTE4WjAYMRYwFAYD
VQQDEw02YTYxYjA4Ni1kYjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlOsWHxe7I3D0wsEm3gsfyhFwLhzmCTCzhpEe+AjxStPp0EzFb7vGZmdXXQH6
dtdW4QQLPJUoE7oTZtQ5gWb7ajRvUtwsGZeeSwd1bnwPFlXhbXlJMKVvWERXjL9u
/Lhjqhgbkpk4ySZxitJ0XiH67qccH0wrIeQYQE6cTUrjRjb1I4XM/UzvNy4lPa3o
K8PgtTrGOFZzJZqtVdqUDyry2MRHuXm/VIfgEhPmIM2aAvG5pyfiIzOMtH9hY3r3
q99RUKeEW2X48gtmmZF8BaCxNEH6y5neeDTztUxtZI4NLww0Yvx8vl5XZWq5B6/k
WdmqGgZH2wwjNsPzBkq8CYA+SQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK+LTL+m
rBx3BX0I1UCW5wEa6n+nMB8GA1UdIwQYMBaAFD820MgHbnrPqD0EtyMHFyqIKdWz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI2NS8wMTVGNkRFRTQ1
QjcxMUVGQTU5RTEzMzJDNEY5QUUwMi9QemJReUFkdWVzLW9QUVMzSXdjWEtvZ3Ax
Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1B6YlF5QWR1ZXMtb1BRUzNJd2NYS29ncDFiTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MkI2NS8wMTVGNkRFRTQ1QjcxMUVGQTU5RTEzMzJDNEY5QUUwMi9QemJReUFkdWVz
LW9QUVMzSXdjWEtvZ3AxYk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACk/XHTZx7WDLQ/5NGF7DFtea3cc/cbL5TPxHb32hY409PF5TqGwSLSr0w/lP
J6cBA4t4oWkwE2djBVS6QBuudQDY6ncjuWfYpR4etb9MzduWdbFB1ZYhgsSV+7mE
czqZoCm4Jom4i3sfEa3els7t9AX2XrR/zbdabuTtM4PwFaiaDbelJHV+kee1apcf
MvyQ3QbgZMTHdjnx1bmQIpPM4IIEauwNCjhJikyzWNhH6/1wvYTCgZM3/UoRg1HH
SmIOZ6tLv5+BZriWuyQR6rYgcyjtTIXGgbygUfnpDEVxUrLzrTYwJv9TdZrGmiLA
07vjeYIH97mjSWSQY9dqThBhLA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:09:10 2026 by rpki-client