Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
File:                     PzbQyAdues-oPQS3IwcXKogp1bM.mft (raw, json)
Hash identifier:          k2yf6S3UzIswGQvMYIzkOz3gn36KQfzqbEHJpia+/lo=
Subject key identifier:   BC:11:F6:FA:FE:30:22:3C:D5:29:8C:AC:6D:25:65:34:F1:96:5D:59
Authority key identifier: 3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3
Certificate issuer:       /CN=A9172B65/serialNumber=3F36D0C8076E7ACFA83D04B72307172A8829D5B3
Certificate serial:       014B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
Manifest number:          0146
Signing time:             Sun 05 Apr 2026 04:43:43 +0000
Manifest this update:     Sun 05 Apr 2026 04:43:43 +0000
Manifest next update:     Sun 12 Apr 2026 04:43:43 +0000
Files and hashes:         1: PzbQyAdues-oPQS3IwcXKogp1bM.crl (hash: bWY9vtycCoHpTgeZnBAm/fMNUhGrwfu14CNR21PfCzI=)
                          2: 76C3F7C645B711EFA2F0C732C4F9AE02.roa (hash: OgCWnzqkwWEniebxSjCaqKQFGPlBmgsXfq8XVeayY5U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.crl
                          rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331 (0x14b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B65, serialNumber=3F36D0C8076E7ACFA83D04B72307172A8829D5B3
        Validity
            Not Before: Apr  5 04:43:43 2026 GMT
            Not After : Apr 12 04:43:43 2026 GMT
        Subject: CN=69d1e87f-11a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:75:91:e3:56:9c:ce:13:36:a7:e2:b7:7f:d4:
                    98:4b:43:87:2e:fd:79:df:3b:4a:48:17:37:e4:87:
                    da:f1:3a:8c:59:7e:87:49:d0:fd:7a:7a:59:9a:4c:
                    5d:32:19:ea:ad:d7:a9:46:af:24:a0:62:dc:15:51:
                    c2:48:7b:32:7a:9a:62:2e:c1:42:78:e7:ac:8c:3e:
                    f6:7f:db:7e:19:9d:39:5f:f7:69:bc:a1:8f:10:e2:
                    72:32:09:5e:ea:62:ff:8d:f1:7f:73:4e:22:32:6c:
                    68:f6:04:50:44:bb:90:1c:70:f1:6b:43:dd:4b:b9:
                    f7:70:61:32:e0:10:0d:00:5c:de:27:3f:02:db:57:
                    81:f6:98:00:af:6b:fd:a0:6a:4c:ec:a7:a4:e0:23:
                    58:f7:c9:9e:b6:48:a3:c6:50:6c:82:dd:7a:bd:6d:
                    91:02:5b:75:b1:60:5b:8a:07:70:31:23:17:34:46:
                    23:15:de:fb:8b:48:41:b9:6f:70:c1:ba:c4:7e:ed:
                    30:2b:18:7b:e0:88:94:73:fb:ef:e5:5a:bd:77:fb:
                    b6:cd:4f:85:da:8e:05:cb:6e:4f:f0:d9:d4:d2:75:
                    1e:75:7a:7e:cd:a1:7d:f7:d7:8d:28:72:22:1a:d0:
                    8d:f5:9a:45:ad:f9:41:88:fa:68:17:9b:9d:e8:50:
                    37:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:11:F6:FA:FE:30:22:3C:D5:29:8C:AC:6D:25:65:34:F1:96:5D:59
            X509v3 Authority Key Identifier:
                keyid:3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:55:22:4a:ac:ea:f5:19:ee:b4:2c:8a:c3:ce:84:66:61:ec:
         1d:33:d3:e1:37:f8:9a:dc:c4:2f:5f:48:19:aa:8c:6f:4d:f0:
         68:59:1f:88:05:95:06:9e:96:16:55:0e:2e:42:cb:4b:83:0a:
         27:77:e3:72:a5:fc:e2:14:57:90:87:d1:10:fc:1c:c1:4f:08:
         9c:e6:ef:60:88:23:f2:15:ba:ea:58:22:86:0b:a6:dc:ef:fe:
         ed:b6:d9:41:15:e8:24:1d:51:5d:2e:c0:07:d4:af:f6:97:d7:
         7d:e4:07:c8:03:09:2e:3b:8a:ca:d0:5b:98:fd:95:45:4b:c0:
         85:d3:44:0f:10:c1:f5:4e:03:37:cc:33:3a:b5:7a:9a:1a:85:
         9e:c0:6b:f3:4c:93:a6:05:77:4c:52:bf:6b:f9:e2:a8:46:3f:
         e6:f2:20:11:29:cd:1b:97:b4:13:c1:58:2c:bb:bc:89:0e:56:
         09:8c:a5:03:1b:5f:de:7d:ee:be:c6:70:6f:34:8a:12:c1:b0:
         fc:8f:00:3b:63:be:4b:ca:2d:a2:a6:04:ba:34:b5:c4:b9:6a:
         da:f9:f1:5a:57:1a:05:fb:65:31:f6:cb:b2:55:49:4e:59:0a:
         3e:a7:a7:b5:90:a9:76:2c:f0:94:b6:19:d6:2e:da:c8:49:fb:
         d8:e7:7b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 18:08:56 2026 by rpki-client