Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
File:                     PzbQyAdues-oPQS3IwcXKogp1bM.mft (raw, json)
Hash identifier:          z7BB7afH0o+ucRgRzAdGqFY9c6daJMX/S+wAVSZQenQ=
Subject key identifier:   13:3A:AB:42:6F:D0:6C:AE:25:27:1A:B7:89:DE:45:57:A1:73:6B:DC
Authority key identifier: 3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3
Certificate issuer:       /CN=A9172B65/serialNumber=3F36D0C8076E7ACFA83D04B72307172A8829D5B3
Certificate serial:       0183
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
Manifest number:          017E
Signing time:             Mon 27 Jul 2026 06:28:48 +0000
Manifest this update:     Mon 27 Jul 2026 06:28:48 +0000
Manifest next update:     Mon 03 Aug 2026 06:28:48 +0000
Files and hashes:         1: PzbQyAdues-oPQS3IwcXKogp1bM.crl (hash: LWfod+Fh0JAegnsjcCKP0bLJegBgP7KgJlCHbVURvB8=)
                          2: 76C3F7C645B711EFA2F0C732C4F9AE02.roa (hash: OgCWnzqkwWEniebxSjCaqKQFGPlBmgsXfq8XVeayY5U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.crl
                          rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:28:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B65, serialNumber=3F36D0C8076E7ACFA83D04B72307172A8829D5B3
        Validity
            Not Before: Jul 27 06:28:48 2026 GMT
            Not After : Aug  3 06:28:48 2026 GMT
        Subject: CN=6a66faa0-fef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d9:61:6f:2d:d7:82:5e:fd:13:32:6c:9c:d3:
                    9b:61:18:3c:45:e5:00:20:94:21:71:5b:c9:e2:9a:
                    0f:db:82:26:49:59:aa:21:25:06:91:21:d8:b8:27:
                    bc:9e:ef:d9:0b:33:c4:88:93:97:7e:60:29:52:b2:
                    87:6e:fb:12:80:1f:cb:f1:dd:48:11:e2:bb:24:84:
                    2a:02:82:0a:c0:31:a8:54:29:5f:9a:6a:3a:4a:5b:
                    04:9e:a4:1d:f6:a3:9a:be:f7:7c:21:a2:8d:ba:44:
                    2f:11:29:d3:7f:03:27:fd:c8:ae:8c:59:a4:61:8a:
                    bd:00:27:56:ae:20:5d:29:d6:5e:bd:bc:84:6c:9a:
                    90:17:ec:c7:4e:0f:af:66:82:c5:b8:af:18:97:71:
                    a8:e5:d3:09:ea:ee:69:87:9e:ba:21:23:91:d0:2f:
                    50:4a:d3:f1:e2:48:1a:c3:42:7c:83:71:f6:05:70:
                    07:07:ec:92:7f:3d:ad:18:37:51:48:78:33:02:50:
                    89:27:07:06:ce:91:c0:a9:15:0d:57:1a:ff:e9:f2:
                    6f:bf:11:78:9f:c2:23:35:a8:20:58:b0:5b:c3:7b:
                    6c:1d:45:9d:d3:9c:73:54:d0:cb:d9:c4:f0:b1:20:
                    9e:0c:bb:85:e7:03:fc:21:2f:21:cf:8b:dc:95:df:
                    87:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:3A:AB:42:6F:D0:6C:AE:25:27:1A:B7:89:DE:45:57:A1:73:6B:DC
            X509v3 Authority Key Identifier:
                keyid:3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:07:d2:e3:40:db:fd:32:74:42:60:78:fc:f1:78:ea:92:53:
         9c:40:39:f5:ed:6b:c3:c5:68:61:b5:73:d2:68:3b:43:11:27:
         ae:8b:d7:aa:b4:36:24:e7:37:bc:a6:84:0a:49:92:48:68:a6:
         0f:6a:76:b9:80:17:3e:6c:b5:89:54:b4:a0:1e:55:fc:b0:6b:
         4a:fd:2c:c7:7f:63:fd:61:55:34:c1:42:09:e7:5f:97:f9:8a:
         bc:e9:e9:cb:f4:f1:d8:c1:f7:3e:a2:03:88:ca:59:73:da:6e:
         ff:13:45:e3:38:12:25:25:cd:dd:a0:f6:eb:c8:8b:fb:f3:c5:
         1f:dc:20:20:5b:b0:41:de:26:36:65:a5:47:98:fa:e7:3c:4c:
         a7:60:f2:e7:85:98:26:ee:fa:0e:53:b0:0d:48:bc:93:6a:b1:
         fc:65:54:b5:92:50:7e:17:38:d7:2d:4e:69:5c:6e:d3:d9:69:
         0f:7e:58:df:90:0c:fb:30:10:49:dc:50:9f:f7:e5:77:fe:93:
         24:de:82:c6:45:4d:a0:7a:dc:15:13:05:9d:61:48:f9:5b:a2:
         d3:6b:50:c4:aa:b7:d2:32:5d:58:db:2e:b2:f7:2b:1f:e3:1e:
         b4:63:bc:bf:6b:27:74:8d:64:55:2c:2e:ea:48:69:d1:2e:3c:
         1c:82:b9:60
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzJCNjUxMTAvBgNVBAUTKDNGMzZEMEM4MDc2RTdBQ0ZBODNEMDRCNzIzMDcxNzJB
ODgyOUQ1QjMwHhcNMjYwNzI3MDYyODQ4WhcNMjYwODAzMDYyODQ4WjAYMRYwFAYD
VQQDEw02YTY2ZmFhMC1mZWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvtlhby3Xgl79EzJsnNObYRg8ReUAIJQhcVvJ4poP24ImSVmqISUGkSHYuCe8
nu/ZCzPEiJOXfmApUrKHbvsSgB/L8d1IEeK7JIQqAoIKwDGoVClfmmo6SlsEnqQd
9qOavvd8IaKNukQvESnTfwMn/ciujFmkYYq9ACdWriBdKdZevbyEbJqQF+zHTg+v
ZoLFuK8Yl3Go5dMJ6u5ph566ISOR0C9QStPx4kgaw0J8g3H2BXAHB+ySfz2tGDdR
SHgzAlCJJwcGzpHAqRUNVxr/6fJvvxF4n8IjNaggWLBbw3tsHUWd05xzVNDL2cTw
sSCeDLuF5wP8IS8hz4vcld+HcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBM6q0Jv
0GyuJScat4neRVehc2vcMB8GA1UdIwQYMBaAFD820MgHbnrPqD0EtyMHFyqIKdWz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI2NS8wMTVGNkRFRTQ1
QjcxMUVGQTU5RTEzMzJDNEY5QUUwMi9QemJReUFkdWVzLW9QUVMzSXdjWEtvZ3Ax
Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1B6YlF5QWR1ZXMtb1BRUzNJd2NYS29ncDFiTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MkI2NS8wMTVGNkRFRTQ1QjcxMUVGQTU5RTEzMzJDNEY5QUUwMi9QemJReUFkdWVz
LW9QUVMzSXdjWEtvZ3AxYk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGgfS40Db/TJ0QmB4/PF46pJTnEA59e1rw8VoYbVz0mg7QxEnrovXqrQ2JOc3
vKaECkmSSGimD2p2uYAXPmy1iVS0oB5V/LBrSv0sx39j/WFVNMFCCedfl/mKvOnp
y/Tx2MH3PqIDiMpZc9pu/xNF4zgSJSXN3aD268iL+/PFH9wgIFuwQd4mNmWlR5j6
5zxMp2Dy54WYJu76DlOwDUi8k2qx/GVUtZJQfhc41y1OaVxu09lpD35Y35AM+zAQ
SdxQn/fld/6TJN6CxkVNoHrcFRMFnWFI+Vui02tQxKq30jJdWNsusvcrH+MetGO8
v2sndI1kVSwu6khp0S48HIK5YA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:12:09 2026 by rpki-client