Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
File:                     PzbQyAdues-oPQS3IwcXKogp1bM.mft (raw, json)
Hash identifier:          OB2PwMw74H7oKpxVnZNXZYHgdY0hPQRCSi3xaRZd0gw=
Subject key identifier:   CE:2C:CF:D6:E1:87:F3:33:4E:94:AD:BD:A6:57:91:9A:D5:95:4A:BC
Authority key identifier: 3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3
Certificate issuer:       /CN=A9172B65/serialNumber=3F36D0C8076E7ACFA83D04B72307172A8829D5B3
Certificate serial:       016D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
Manifest number:          0168
Signing time:             Sat 13 Jun 2026 04:53:18 +0000
Manifest this update:     Sat 13 Jun 2026 04:53:18 +0000
Manifest next update:     Sat 20 Jun 2026 04:53:18 +0000
Files and hashes:         1: PzbQyAdues-oPQS3IwcXKogp1bM.crl (hash: rMJoiL0Ug4sOwjcsuQC+kk//TKRNVl7Qh24j9huycLw=)
                          2: 76C3F7C645B711EFA2F0C732C4F9AE02.roa (hash: OgCWnzqkwWEniebxSjCaqKQFGPlBmgsXfq8XVeayY5U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.crl
                          rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:53:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365 (0x16d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B65, serialNumber=3F36D0C8076E7ACFA83D04B72307172A8829D5B3
        Validity
            Not Before: Jun 13 04:53:18 2026 GMT
            Not After : Jun 20 04:53:18 2026 GMT
        Subject: CN=6a2ce23e-06ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3a:a1:36:3e:9b:94:0f:dd:ea:ec:7f:03:74:
                    33:d3:ba:68:9e:67:c1:ec:9b:44:43:8a:a1:fa:cd:
                    0b:0a:49:93:3d:0d:2c:ee:19:c5:66:62:e0:c5:2a:
                    2e:69:37:05:c8:17:f3:94:b8:16:97:4a:6c:9a:fb:
                    b0:bd:f4:ba:93:f7:ab:01:02:96:13:9d:9d:ba:c6:
                    45:74:05:69:f8:33:5d:b9:a0:a5:6d:b8:75:53:3c:
                    44:60:34:74:f2:b8:8e:99:08:03:a3:80:4c:2d:c5:
                    21:43:44:aa:22:21:59:dd:a5:1e:f6:70:dd:8b:26:
                    03:57:d9:4a:7b:5f:c1:2a:77:bd:27:d6:49:8f:c2:
                    e3:35:76:4d:cc:fd:15:20:5e:97:95:e0:e5:61:e1:
                    5e:0e:fe:c0:75:3c:96:c7:97:49:bc:27:85:65:1b:
                    d6:57:44:a2:40:30:4c:06:c5:d2:96:16:03:bc:05:
                    11:4a:04:78:34:50:80:15:8d:76:79:f0:5f:e2:0b:
                    01:dd:60:e0:53:b2:f5:19:82:2e:70:ca:5f:dc:bd:
                    77:9e:49:71:5f:bb:09:6f:87:b6:38:4e:76:43:64:
                    da:20:97:0a:c9:a5:dc:b8:0c:24:f7:44:33:d3:00:
                    f5:d3:35:97:46:10:ca:9d:ee:e0:29:46:de:63:9a:
                    25:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:2C:CF:D6:E1:87:F3:33:4E:94:AD:BD:A6:57:91:9A:D5:95:4A:BC
            X509v3 Authority Key Identifier:
                keyid:3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:28:26:f4:9d:15:eb:e0:a9:b8:27:31:6b:64:fa:d0:1d:c8:
         f7:f2:b3:29:e9:34:77:c9:24:c0:cc:2d:c7:9a:2b:f6:b9:52:
         14:1e:4a:b2:bd:3b:b4:c7:e6:d0:63:f2:9d:2f:68:bf:b2:5b:
         4b:00:6b:e1:72:31:4c:08:d8:80:5b:a1:ad:2b:b4:ed:38:0f:
         d9:8b:3b:c8:c0:92:66:6f:ef:c5:a2:17:42:56:4d:04:f3:0a:
         f1:b0:f4:36:f1:43:fa:eb:28:20:41:7d:43:8e:15:8a:b6:29:
         9e:fc:33:bb:c2:e4:e1:8b:7d:48:61:ff:c7:d5:10:eb:ca:75:
         f8:3c:40:c3:45:fb:87:5e:0e:ba:2a:bc:92:83:3d:f5:02:8c:
         de:79:74:fd:61:b0:83:7e:3c:15:e1:62:fe:eb:70:5f:00:73:
         7e:e0:b5:b9:1d:af:fa:e8:17:d1:e2:2d:22:92:4f:db:e8:ac:
         d7:b8:9c:e5:75:20:8b:d2:68:fd:d9:60:90:6f:41:47:5b:67:
         a0:1f:da:70:d8:1f:8b:dd:50:58:c0:27:8f:d8:81:28:db:69:
         f3:c2:21:67:4b:6e:32:0f:75:fe:f4:c0:d5:3a:36:78:52:61:
         66:dd:99:84:15:02:25:90:21:96:5b:d5:f5:87:9a:32:61:09:
         a7:e9:79:0b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzJCNjUxMTAvBgNVBAUTKDNGMzZEMEM4MDc2RTdBQ0ZBODNEMDRCNzIzMDcxNzJB
ODgyOUQ1QjMwHhcNMjYwNjEzMDQ1MzE4WhcNMjYwNjIwMDQ1MzE4WjAYMRYwFAYD
VQQDEw02YTJjZTIzZS0wNmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnDqhNj6blA/d6ux/A3Qz07ponmfB7JtEQ4qh+s0LCkmTPQ0s7hnFZmLgxSou
aTcFyBfzlLgWl0psmvuwvfS6k/erAQKWE52dusZFdAVp+DNduaClbbh1UzxEYDR0
8riOmQgDo4BMLcUhQ0SqIiFZ3aUe9nDdiyYDV9lKe1/BKne9J9ZJj8LjNXZNzP0V
IF6XleDlYeFeDv7AdTyWx5dJvCeFZRvWV0SiQDBMBsXSlhYDvAURSgR4NFCAFY12
efBf4gsB3WDgU7L1GYIucMpf3L13nklxX7sJb4e2OE52Q2TaIJcKyaXcuAwk90Qz
0wD10zWXRhDKne7gKUbeY5olywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM4sz9bh
h/MzTpStvaZXkZrVlUq8MB8GA1UdIwQYMBaAFD820MgHbnrPqD0EtyMHFyqIKdWz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI2NS8wMTVGNkRFRTQ1
QjcxMUVGQTU5RTEzMzJDNEY5QUUwMi9QemJReUFkdWVzLW9QUVMzSXdjWEtvZ3Ax
Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1B6YlF5QWR1ZXMtb1BRUzNJd2NYS29ncDFiTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MkI2NS8wMTVGNkRFRTQ1QjcxMUVGQTU5RTEzMzJDNEY5QUUwMi9QemJReUFkdWVz
LW9QUVMzSXdjWEtvZ3AxYk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACCgm9J0V6+CpuCcxa2T60B3I9/KzKek0d8kkwMwtx5or9rlSFB5Ksr07tMfm
0GPynS9ov7JbSwBr4XIxTAjYgFuhrSu07TgP2Ys7yMCSZm/vxaIXQlZNBPMK8bD0
NvFD+usoIEF9Q44VirYpnvwzu8Lk4Yt9SGH/x9UQ68p1+DxAw0X7h14Ouiq8koM9
9QKM3nl0/WGwg348FeFi/utwXwBzfuC1uR2v+ugX0eItIpJP2+is17ic5XUgi9Jo
/dlgkG9BR1tnoB/acNgfi91QWMAnj9iBKNtp88IhZ0tuMg91/vTA1To2eFJhZt2Z
hBUCJZAhllvV9YeaMmEJp+l5Cw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:25:20 2026 by rpki-client