Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.mft
File:                     QrsPPBhH5li75BQYSUzonOjjRIg.mft (raw, json)
Hash identifier:          UxS8O7mGNnSJZZQAMmbqkzGaHYju+W79KDgjl7hKg9c=
Subject key identifier:   B2:9C:53:58:16:C1:03:39:49:83:DF:94:81:7B:21:12:02:50:AC:C4
Authority key identifier: 42:BB:0F:3C:18:47:E6:58:BB:E4:14:18:49:4C:E8:9C:E8:E3:44:88
Certificate issuer:       /CN=A9172506/serialNumber=42BB0F3C1847E658BBE41418494CE89CE8E34488
Certificate serial:       017B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrsPPBhH5li75BQYSUzonOjjRIg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.mft
Manifest number:          0172
Signing time:             Mon 27 Jul 2026 06:51:15 +0000
Manifest this update:     Mon 27 Jul 2026 06:51:15 +0000
Manifest next update:     Mon 03 Aug 2026 06:51:15 +0000
Files and hashes:         1: QrsPPBhH5li75BQYSUzonOjjRIg.crl (hash: WPY8GKiWZAY753YudQpUkU9x36a3L4NeYuSCGlMdfSU=)
                          2: B7AA552680DB11F1BD8F0E495DA30FBC.roa (hash: NOVDQib+lECSnHFC4JVtukqfdz+DMQULILHyPpuxnlA=)
                          3: DD75C9BC6EDF11EF90C49A5FC4F9AE02.roa (hash: s+l4HjUDhiiqmD/rzxp+8CMlr1Kg8Ftjq0O4yuSOPE8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.crl
                          rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrsPPBhH5li75BQYSUzonOjjRIg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:51:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 379 (0x17b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172506, serialNumber=42BB0F3C1847E658BBE41418494CE89CE8E34488
        Validity
            Not Before: Jul 27 06:51:15 2026 GMT
            Not After : Aug  3 06:51:15 2026 GMT
        Subject: CN=6a66ffe3-9f71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:33:91:8c:d6:78:ad:f3:66:37:9f:ab:19:3f:
                    59:dc:34:53:1b:4e:2b:9d:ae:7f:16:b0:f4:dc:fc:
                    ae:42:1d:d2:ab:99:90:ef:3c:a9:b9:ac:62:36:0c:
                    98:b0:c2:82:81:29:43:77:ba:46:63:75:34:28:20:
                    a2:11:d2:85:61:0e:99:9e:af:4b:71:f3:b4:6b:e6:
                    16:50:5c:7f:d5:a0:f1:05:59:34:2d:d8:7d:fd:4d:
                    d9:64:c5:56:ae:9c:f3:1e:b2:f8:1f:fd:f4:34:9b:
                    c8:0a:5a:90:cc:21:59:a3:30:d6:a4:65:63:1a:00:
                    0c:c9:1c:b9:e2:f9:bf:d2:1d:94:d0:03:7c:4e:e2:
                    5d:49:03:a7:2a:ea:91:d5:f5:2f:1c:36:ae:27:18:
                    ff:f0:52:62:0f:d4:6d:a8:12:ca:ef:a0:88:0b:b9:
                    d9:a9:27:74:ae:86:57:b3:43:a9:42:9e:5e:54:6d:
                    a0:9a:12:29:8d:6d:69:a5:c3:e4:51:40:ad:2e:e9:
                    af:6e:99:c6:29:b3:91:26:86:2c:a8:02:55:93:97:
                    a6:c7:89:74:67:96:92:70:8d:b4:9a:8b:48:d4:43:
                    61:cc:ac:3b:51:bb:db:80:8d:ff:39:d3:dc:2f:7c:
                    63:74:ef:da:ff:af:73:af:80:06:b1:8d:80:a9:8c:
                    6b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:9C:53:58:16:C1:03:39:49:83:DF:94:81:7B:21:12:02:50:AC:C4
            X509v3 Authority Key Identifier:
                keyid:42:BB:0F:3C:18:47:E6:58:BB:E4:14:18:49:4C:E8:9C:E8:E3:44:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrsPPBhH5li75BQYSUzonOjjRIg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:04:e8:08:a1:40:7a:67:fb:17:3d:18:1b:67:90:fb:28:ae:
         f1:4a:73:33:c7:34:0e:b9:a4:e8:c2:91:71:33:0f:52:f7:41:
         0a:7c:d0:58:c0:c9:7b:00:c6:8b:f7:2f:4a:e9:5f:91:5c:1d:
         05:62:6d:56:57:de:27:62:72:bb:82:f5:0b:fa:df:1a:ec:0e:
         23:e0:83:4b:bb:4a:5e:7a:95:9d:60:53:87:84:ca:6d:d4:d7:
         c0:53:e1:18:4a:7b:de:36:96:0d:a6:d8:da:22:b9:79:3b:b6:
         2e:7c:54:17:96:52:88:88:1e:53:e8:c6:9e:6e:fe:21:95:fa:
         31:b4:7c:d0:47:f8:be:93:1e:a7:62:3e:e9:da:b4:95:31:da:
         5a:ab:80:6e:13:ca:7f:96:74:66:f5:76:ae:66:39:f4:cf:08:
         dd:02:18:17:41:3d:a5:1f:c2:3b:06:4e:fc:ea:65:30:fc:60:
         6b:6d:bc:cc:76:e6:b6:6b:1c:24:59:c1:d1:c8:51:23:ad:64:
         7e:92:f6:c4:24:8c:0f:77:6e:9a:47:8f:36:03:ce:fe:2b:1b:
         86:0e:57:e7:c3:32:42:34:41:9a:27:46:a4:15:9f:83:30:7b:
         5c:41:4c:2f:c5:9c:01:7f:ad:87:ea:e0:5c:ca:b2:40:14:e8:
         3e:01:33:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:03:05 2026 by rpki-client