Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
File:                     PzbQyAdues-oPQS3IwcXKogp1bM.mft (raw, json)
Hash identifier:          Uzub3jyZq/pzNJPExoOzaoesfLLaRH2qsRkZSsCJ7tc=
Subject key identifier:   F5:83:B5:13:CF:1D:B4:BE:A1:7B:D0:32:8A:CB:47:F4:88:0F:22:7E
Authority key identifier: 3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3
Certificate issuer:       /CN=A9172B65/serialNumber=3F36D0C8076E7ACFA83D04B72307172A8829D5B3
Certificate serial:       B6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
Manifest number:          B4
Signing time:             Thu 03 Jul 2025 06:12:08 +0000
Manifest this update:     Thu 03 Jul 2025 06:12:07 +0000
Manifest next update:     Thu 10 Jul 2025 06:12:07 +0000
Files and hashes:         1: PzbQyAdues-oPQS3IwcXKogp1bM.crl (hash: eRllB1dykv3OPc1PQ1OO3LE5UxY4inMEQExKjRyt+XY=)
                          2: 76C3F7C645B711EFA2F0C732C4F9AE02.roa (hash: 6KE/6WiXMHutimLQnkuyk/FwzPL7cpRiOFuQR2vWv2I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.crl
                          rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B65, serialNumber=3F36D0C8076E7ACFA83D04B72307172A8829D5B3
        Validity
            Not Before: Jul  3 06:12:07 2025 GMT
            Not After : Jul 10 06:12:07 2025 GMT
        Subject: CN=68661f38-94f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:b5:de:5c:d4:1d:7f:dd:84:95:53:bd:62:fa:
                    53:68:26:3d:ba:e5:8a:28:6f:33:9e:f1:07:a5:fe:
                    7a:50:60:3b:37:70:69:86:bd:51:9e:19:d8:c6:fe:
                    6f:5e:17:ef:f7:ea:55:34:75:b0:b9:a2:e1:53:45:
                    a5:d9:88:88:de:b3:e2:15:9d:61:1c:cc:c6:18:77:
                    96:d0:88:b3:78:f8:d2:f2:bd:38:33:13:6e:c1:ff:
                    5f:0a:11:ee:5f:4f:c0:86:d1:9f:52:59:26:b9:65:
                    fb:8a:c6:4a:f3:11:23:d8:a4:1c:f6:28:08:91:8c:
                    2f:78:f1:19:f9:0d:23:e1:9c:22:34:f6:b4:9c:87:
                    c8:92:bb:4d:b8:28:68:7e:af:b5:42:5d:27:aa:21:
                    85:e9:b0:07:fb:26:11:00:ab:93:30:f6:d3:dd:e8:
                    60:dc:9d:04:e4:d7:1a:9b:44:03:48:41:2b:7b:8a:
                    81:fe:5d:c9:ba:30:35:a5:62:0b:17:5c:fe:39:c8:
                    85:23:a2:f6:4d:5c:ee:de:be:b1:1a:7f:88:ad:fe:
                    2e:d5:d0:f5:4d:6e:6a:b5:f8:ad:1c:9a:79:7b:b4:
                    d3:8d:7a:26:cc:21:f9:ce:39:e5:71:74:7b:c3:30:
                    9f:53:7d:af:60:f4:c5:11:38:70:83:44:8c:ae:dd:
                    f5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:83:B5:13:CF:1D:B4:BE:A1:7B:D0:32:8A:CB:47:F4:88:0F:22:7E
            X509v3 Authority Key Identifier:
                keyid:3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:52:e4:0b:d1:1d:29:c1:05:94:2c:24:32:f2:13:86:0e:50:
         8f:73:ae:a4:27:26:3c:83:90:36:a7:77:e8:d9:2f:4d:0f:34:
         77:2f:13:71:91:44:91:34:8d:4b:8c:60:a8:cc:8c:0b:6c:ce:
         3b:67:5c:dd:35:74:63:fa:18:ec:33:6d:8b:90:fc:19:bc:be:
         9c:6b:2c:30:0e:af:ef:a3:7d:47:a6:0a:81:69:32:c1:6d:6c:
         0b:f0:e9:a1:1c:45:e1:bb:d8:c4:2c:72:75:34:04:7f:45:19:
         9a:73:fe:62:ec:c9:93:05:fc:1f:95:08:ce:17:3c:8d:58:55:
         a7:40:9b:26:44:dc:8b:ed:bf:6f:50:11:ea:0e:f9:ff:f6:c8:
         fb:86:db:2c:63:d3:43:80:01:8a:c5:b3:ef:1c:4e:08:1f:8e:
         03:f5:6c:0f:e5:93:71:7f:9d:61:97:ab:85:26:19:34:69:49:
         dc:10:6c:19:11:0b:fa:fd:de:28:6e:2f:9c:65:bc:89:ef:90:
         a2:97:32:84:31:49:92:72:d5:87:11:2f:05:5d:dc:33:e6:78:
         e3:4e:b9:75:f9:30:e3:1e:bf:52:7b:01:d8:19:e5:63:53:cb:
         4b:b4:68:65:6a:66:6c:ab:bb:5a:cf:41:93:df:e2:09:fd:08:
         8f:f9:75:4e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzJCNjUxMTAvBgNVBAUTKDNGMzZEMEM4MDc2RTdBQ0ZBODNEMDRCNzIzMDcxNzJB
ODgyOUQ1QjMwHhcNMjUwNzAzMDYxMjA3WhcNMjUwNzEwMDYxMjA3WjAYMRYwFAYD
VQQDEw02ODY2MWYzOC05NGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7rXeXNQdf92ElVO9YvpTaCY9uuWKKG8znvEHpf56UGA7N3Bphr1RnhnYxv5v
Xhfv9+pVNHWwuaLhU0Wl2YiI3rPiFZ1hHMzGGHeW0IizePjS8r04MxNuwf9fChHu
X0/AhtGfUlkmuWX7isZK8xEj2KQc9igIkYwvePEZ+Q0j4ZwiNPa0nIfIkrtNuCho
fq+1Ql0nqiGF6bAH+yYRAKuTMPbT3ehg3J0E5Ncam0QDSEEre4qB/l3JujA1pWIL
F1z+OciFI6L2TVzu3r6xGn+Irf4u1dD1TW5qtfitHJp5e7TTjXomzCH5zjnlcXR7
wzCfU32vYPTFEThwg0SMrt31ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPWDtRPP
HbS+oXvQMorLR/SIDyJ+MB8GA1UdIwQYMBaAFD820MgHbnrPqD0EtyMHFyqIKdWz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI2NS8wMTVGNkRFRTQ1
QjcxMUVGQTU5RTEzMzJDNEY5QUUwMi9QemJReUFkdWVzLW9QUVMzSXdjWEtvZ3Ax
Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1B6YlF5QWR1ZXMtb1BRUzNJd2NYS29ncDFiTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MkI2NS8wMTVGNkRFRTQ1QjcxMUVGQTU5RTEzMzJDNEY5QUUwMi9QemJReUFkdWVz
LW9QUVMzSXdjWEtvZ3AxYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB7UuQL0R0pwQWULCQy8hOGDlCPc66kJyY8g5A2p3fo2S9NDzR3LxNx
kUSRNI1LjGCozIwLbM47Z1zdNXRj+hjsM22LkPwZvL6caywwDq/vo31HpgqBaTLB
bWwL8OmhHEXhu9jELHJ1NAR/RRmac/5i7MmTBfwflQjOFzyNWFWnQJsmRNyL7b9v
UBHqDvn/9sj7htssY9NDgAGKxbPvHE4IH44D9WwP5ZNxf51hl6uFJhk0aUncEGwZ
EQv6/d4obi+cZbyJ75CilzKEMUmSctWHES8FXdwz5njjTrl1+TDjHr9SewHYGeVj
U8tLtGhlamZsq7taz0GT3+IJ/QiP+XVO
-----END CERTIFICATE-----
Generated at Fri Jul 4 10:24:28 2025 by rpki-client