Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
File:                     PzbQyAdues-oPQS3IwcXKogp1bM.mft (raw, json)
Hash identifier:          hoL/JwebGeDG55DTLiPHpoT7dZChfZSqIHESh6I68+0=
Subject key identifier:   9E:2A:2C:CF:23:EC:F5:88:97:A4:3B:E7:56:5E:91:C6:6C:8D:E3:E6
Authority key identifier: 3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3
Certificate issuer:       /CN=A9172B65/serialNumber=3F36D0C8076E7ACFA83D04B72307172A8829D5B3
Certificate serial:       01AE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
Manifest number:          01A9
Signing time:             Mon 19 Oct 2026 04:46:41 +0000
Manifest this update:     Mon 19 Oct 2026 04:46:40 +0000
Manifest next update:     Mon 26 Oct 2026 04:46:40 +0000
Files and hashes:         1: PzbQyAdues-oPQS3IwcXKogp1bM.crl (hash: QYm6bT8o/kqtixNktcngDOowvMhLtCoq2uVadA48Eac=)
                          2: 76C3F7C645B711EFA2F0C732C4F9AE02.roa (hash: OgCWnzqkwWEniebxSjCaqKQFGPlBmgsXfq8XVeayY5U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.crl
                          rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 04:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 430 (0x1ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B65, serialNumber=3F36D0C8076E7ACFA83D04B72307172A8829D5B3
        Validity
            Not Before: Oct 19 04:46:40 2026 GMT
            Not After : Oct 26 04:46:40 2026 GMT
        Subject: CN=6ad5a0b1-21f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f6:ab:f6:e8:46:96:55:c7:a5:a9:07:3e:a2:
                    33:d4:35:8c:55:f1:cf:83:c6:e4:1b:1d:95:16:98:
                    50:9b:ac:e9:4f:c9:5c:75:af:2c:7d:e1:34:a5:1d:
                    7d:9b:1c:bf:86:b2:5b:63:c6:f2:4b:5e:50:a4:61:
                    24:b0:9a:80:5d:b1:6a:06:16:84:87:95:c7:dd:ab:
                    b0:99:5a:dc:75:30:92:e2:33:96:bb:98:8d:8f:eb:
                    d4:84:6c:a0:8e:98:50:4b:13:e3:e9:bc:5f:ef:50:
                    56:a6:8d:9b:7a:7a:9a:db:69:48:19:22:fb:64:f7:
                    1e:f7:21:7b:1d:62:3e:06:1a:bc:b6:11:30:7c:e3:
                    af:a8:f8:c4:48:67:76:4b:b3:68:8b:2e:da:99:9e:
                    07:35:c9:55:2c:71:38:29:4f:f1:59:30:5c:0a:ba:
                    bf:ae:30:12:eb:ea:02:06:b6:ad:4f:51:2c:5e:28:
                    e3:ca:36:63:fa:9b:64:ff:dc:85:9a:a7:64:dc:ed:
                    ff:29:87:35:0c:7a:e2:d7:a4:62:31:09:0c:f5:9d:
                    9c:fe:83:92:e6:54:0f:95:20:b7:a5:14:e1:97:b7:
                    88:93:e5:18:41:10:e1:5f:2b:37:e0:bd:b0:75:fc:
                    c1:f2:fd:67:ae:77:65:ae:6f:94:61:eb:ef:e3:3c:
                    97:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:2A:2C:CF:23:EC:F5:88:97:A4:3B:E7:56:5E:91:C6:6C:8D:E3:E6
            X509v3 Authority Key Identifier:
                keyid:3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:13:8d:5d:80:4f:ea:e2:9a:16:43:0a:5b:85:49:42:54:05:
         db:bf:ee:4e:b9:ee:2a:83:bd:89:00:b5:f1:4c:7d:22:61:c2:
         70:ae:3c:d0:e8:5d:47:01:3b:cb:7a:7b:a0:a5:96:89:93:92:
         bd:67:74:c3:99:db:44:ba:6a:1e:c0:60:26:68:c3:23:e7:b0:
         f9:96:67:b1:41:64:e6:84:05:65:54:8c:ee:74:18:4b:26:b2:
         76:b5:de:62:dc:e2:e2:88:c0:1c:12:54:92:8b:25:ed:d7:20:
         13:c0:33:fa:e6:9e:d6:89:2f:ed:e2:30:96:46:e5:4d:7c:09:
         dd:1a:13:d8:58:94:c6:6f:67:28:2a:56:fe:7c:2f:97:8d:08:
         4c:eb:e6:4d:30:72:65:53:b5:c4:ed:b8:bf:7b:cb:e6:5e:63:
         91:73:ab:38:39:34:ce:38:2d:5c:82:f8:d0:78:4c:a2:81:b9:
         16:b2:21:3e:cf:1c:48:5a:22:de:8a:86:06:06:b1:24:2e:34:
         5e:52:84:89:bf:75:81:4e:11:53:c4:76:92:e3:f5:ba:fa:6c:
         a9:32:b6:b8:4b:14:05:40:72:cb:2b:03:a9:40:cf:3b:42:9c:
         18:9f:84:a5:bd:49:7e:8b:f7:27:7f:61:a1:de:cb:21:27:a5:
         53:83:2a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 19:57:21 2026 by rpki-client