Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft
File:                     Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft (raw, json)
Hash identifier:          BTXsaEzyN9bHuButqcyoNnU+JB+TPKA7BtPYtmVABeg=
Subject key identifier:   04:CD:90:F6:79:09:5D:C2:D1:CF:42:AB:D7:1E:72:7B:58:2E:2D:FE
Authority key identifier: 22:7A:BE:4D:F0:4F:85:F4:E0:13:35:7A:90:4E:3C:8C:3C:91:84:54
Certificate issuer:       /CN=A9171560/serialNumber=227ABE4DF04F85F4E013357A904E3C8C3C918454
Certificate serial:       0DFA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Inq-TfBPhfTgEzV6kE48jDyRhFQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft
Manifest number:          0DC5
Signing time:             Sat 28 Feb 2026 18:06:27 +0000
Manifest this update:     Sat 28 Feb 2026 18:06:26 +0000
Manifest next update:     Sat 07 Mar 2026 18:06:26 +0000
Files and hashes:         1: Inq-TfBPhfTgEzV6kE48jDyRhFQ.crl (hash: R8qUBB8YQD6zTOj1qvkT8EMdSOAkowZLfLS958PStxU=)
                          2: 610944B422D911EA8E735D5CC4F9AE02.roa (hash: EfyBsaHY8sXfh+FtDY0lWUNRe0HDOeGbUlITqUD7/qY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.crl
                          rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Inq-TfBPhfTgEzV6kE48jDyRhFQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 18:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3578 (0xdfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171560, serialNumber=227ABE4DF04F85F4E013357A904E3C8C3C918454
        Validity
            Not Before: Feb 28 18:06:26 2026 GMT
            Not After : Mar  7 18:06:26 2026 GMT
        Subject: CN=69a32ea2-a839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4d:1a:7d:f8:a0:5b:c7:b0:66:68:3d:95:9e:
                    77:fb:da:d7:b9:8f:4a:58:cc:74:bd:a9:61:92:a4:
                    d9:45:9a:87:a3:40:1e:25:1b:9a:96:10:fa:54:cd:
                    18:fd:99:d8:08:68:a3:1e:9f:20:48:b6:a9:cf:d7:
                    d0:74:c8:ef:fa:3c:d5:aa:05:27:15:b7:ea:fa:21:
                    64:79:65:75:28:18:46:bb:2e:74:1b:f9:2e:d6:2c:
                    c5:6c:d7:59:51:88:27:e5:67:36:21:88:40:6f:63:
                    b4:bd:32:8f:88:c3:08:54:f6:b4:1f:86:ea:55:62:
                    e4:f6:dc:47:fd:e7:00:e4:11:e3:81:0e:36:8a:9a:
                    19:8e:44:94:d0:10:22:26:14:73:06:39:1a:32:d8:
                    8f:ce:df:26:54:5d:c3:90:fe:78:43:c5:0b:08:ec:
                    3f:5f:61:20:c3:52:f6:00:b6:e0:c4:9d:9b:5c:b3:
                    3e:64:07:8f:81:32:e0:2e:89:3c:33:10:af:c7:a4:
                    3f:aa:86:65:04:24:97:3e:b4:42:bc:7a:77:54:69:
                    ba:34:c0:34:5d:cc:ea:8d:2f:d4:5f:12:dd:ee:38:
                    f4:af:3a:fb:c5:96:1c:f5:34:01:05:23:59:d6:31:
                    59:8f:f3:2e:99:a0:b6:31:8b:0b:df:15:2c:de:c7:
                    49:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:CD:90:F6:79:09:5D:C2:D1:CF:42:AB:D7:1E:72:7B:58:2E:2D:FE
            X509v3 Authority Key Identifier:
                keyid:22:7A:BE:4D:F0:4F:85:F4:E0:13:35:7A:90:4E:3C:8C:3C:91:84:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Inq-TfBPhfTgEzV6kE48jDyRhFQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:da:e1:68:c5:c0:16:74:f0:60:cb:cb:b6:bb:b8:19:a5:af:
         87:eb:35:49:f7:8a:74:3a:3c:94:0d:81:81:b9:76:26:46:e7:
         e2:5c:0b:b5:5e:77:38:3f:bf:4a:07:48:2f:41:94:25:1c:57:
         51:c4:27:4a:20:ae:3a:75:03:f1:d3:ee:5b:c6:9d:1f:c8:e2:
         cb:63:a9:43:ee:91:9d:b5:35:c0:b5:33:ed:40:20:38:ff:b6:
         ea:52:dc:58:18:f8:be:2c:b5:dd:36:de:da:0b:d0:71:38:bc:
         ae:75:f4:b6:f0:75:93:71:73:ee:22:8c:18:fd:c5:7a:b0:c0:
         98:e6:05:a6:73:89:04:1e:93:f7:01:aa:ae:c3:81:3e:b0:be:
         94:8a:f3:df:ae:3d:c5:ef:28:1e:81:11:01:cb:4d:57:b4:96:
         69:ad:26:55:65:22:b1:36:60:40:9c:48:b5:00:f0:35:df:cb:
         b1:70:87:34:1f:15:d6:42:b4:be:19:c3:ba:00:15:50:6f:f6:
         89:d8:c2:70:a5:1c:e4:48:f0:e4:e9:21:38:f3:ba:79:9d:ba:
         3c:d8:81:a3:8c:00:dd:de:64:10:0f:c4:de:32:b6:16:0d:0f:
         f7:12:a4:a0:4a:f6:74:d6:50:8c:93:20:67:ac:ac:ff:2a:77:
         33:a8:6f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:03:40 2026 by rpki-client