Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
File:                     PzbQyAdues-oPQS3IwcXKogp1bM.mft (raw, json)
Hash identifier:          ZkBPS/iJSRSnUQY3byqF30AB+xskt2moHsf2gaqoBsc=
Subject key identifier:   24:4D:DE:CF:57:36:89:2A:29:C4:90:2B:DE:DB:9A:C8:CB:4A:5E:E4
Authority key identifier: 3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3
Certificate issuer:       /CN=A9172B65/serialNumber=3F36D0C8076E7ACFA83D04B72307172A8829D5B3
Certificate serial:       0139
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
Manifest number:          0134
Signing time:             Mon 02 Mar 2026 00:26:35 +0000
Manifest this update:     Mon 02 Mar 2026 00:26:34 +0000
Manifest next update:     Mon 09 Mar 2026 00:26:34 +0000
Files and hashes:         1: PzbQyAdues-oPQS3IwcXKogp1bM.crl (hash: 6w77PC7lW2iFd9qTAc4kDpsaidfQ8spd+wxUQ12iccg=)
                          2: 76C3F7C645B711EFA2F0C732C4F9AE02.roa (hash: OgCWnzqkwWEniebxSjCaqKQFGPlBmgsXfq8XVeayY5U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.crl
                          rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:26:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 313 (0x139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B65, serialNumber=3F36D0C8076E7ACFA83D04B72307172A8829D5B3
        Validity
            Not Before: Mar  2 00:26:34 2026 GMT
            Not After : Mar  9 00:26:34 2026 GMT
        Subject: CN=69a4d93b-456b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:d3:1a:10:dc:55:a3:74:e1:87:1f:de:20:43:
                    54:38:a9:40:c6:39:26:71:96:84:fa:a8:67:84:ab:
                    ec:10:db:5c:84:b7:6f:c6:97:6e:55:64:32:b4:17:
                    09:54:93:6e:ed:0d:c8:87:b3:e3:fa:15:2d:6a:fb:
                    ed:60:0f:fb:3a:31:4b:33:88:eb:af:64:10:98:a6:
                    36:c8:90:ef:1c:24:ae:df:3b:09:89:89:f6:ab:d3:
                    b6:9e:c0:3a:a5:b4:8b:6b:d3:83:fc:9a:fa:d3:7c:
                    2e:7c:08:28:49:d9:13:11:4c:ad:ec:d8:ab:54:28:
                    d4:df:12:95:b7:f8:51:fe:0e:8e:c7:5f:38:47:08:
                    d6:f8:3d:01:0b:80:cd:eb:e1:c5:2b:e8:15:83:1c:
                    8a:db:41:df:13:06:59:6e:8f:ce:fe:1b:c2:e8:8b:
                    92:54:6a:e9:bc:99:e8:61:de:ac:93:cc:ae:d8:8a:
                    bc:9a:cd:c6:0d:1b:79:1d:6b:5f:19:21:04:ce:c7:
                    6e:6c:52:0e:6d:01:f2:6e:ae:bb:c6:b7:d6:8b:9b:
                    77:d9:e2:ba:c6:e5:fe:0c:bd:f4:6f:19:16:50:b0:
                    e2:f2:ea:39:d9:4f:82:2a:36:54:91:ae:32:aa:91:
                    62:c7:6e:50:77:bf:9e:09:ec:e0:9a:b9:7b:47:4d:
                    14:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:4D:DE:CF:57:36:89:2A:29:C4:90:2B:DE:DB:9A:C8:CB:4A:5E:E4
            X509v3 Authority Key Identifier:
                keyid:3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:4c:40:2e:2b:c0:24:05:3c:86:29:d3:9c:90:d8:e6:40:91:
         b7:b2:4b:49:cd:f2:0d:f7:50:ee:5e:b5:9d:79:f5:9f:5c:58:
         ec:8b:b9:31:10:05:83:60:46:7e:3a:59:f3:90:fd:0f:b4:2f:
         15:8c:8b:51:de:42:f0:78:0f:e8:28:02:51:7e:06:97:c1:71:
         42:95:b5:9c:26:37:d2:9b:c9:79:bb:d3:c4:e3:38:bc:a0:42:
         6c:52:3c:2e:42:fc:8c:9e:82:20:64:41:89:c3:fe:4f:e1:28:
         2a:54:28:27:cb:41:4a:16:b3:3f:38:e1:18:1f:94:77:c0:4a:
         0f:7c:ad:08:74:10:01:9f:dd:fe:3e:4d:33:29:6d:e7:3c:a5:
         5c:64:aa:f1:12:fd:55:3e:51:08:04:70:ce:f7:b5:83:05:20:
         7a:fb:77:b5:fb:d9:89:42:2e:12:1e:10:fa:1f:ae:0e:88:f9:
         08:55:44:5f:b7:87:46:28:1f:32:e8:41:de:e3:c1:51:5e:ef:
         6c:c0:64:07:c0:8e:48:83:08:0c:e9:68:4e:64:6a:a9:b7:58:
         38:de:70:48:30:54:e1:e7:0a:34:d7:11:57:60:4f:e7:c2:d3:
         9a:26:8c:da:cc:83:bb:1e:ae:16:9a:61:ce:98:3f:4b:af:24:
         b1:5d:a1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:34:58 2026 by rpki-client