Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft
File:                     Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft (raw, json)
Hash identifier:          O1cS9qSzlLYLtJXR2bByToZwUrGRG8xaFZ8IKmjhwIs=
Subject key identifier:   74:5F:9C:4C:37:03:C5:B4:31:76:C3:40:B7:D0:B0:9D:AF:F7:21:C7
Authority key identifier: 22:7A:BE:4D:F0:4F:85:F4:E0:13:35:7A:90:4E:3C:8C:3C:91:84:54
Certificate issuer:       /CN=A9171560/serialNumber=227ABE4DF04F85F4E013357A904E3C8C3C918454
Certificate serial:       0E09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Inq-TfBPhfTgEzV6kE48jDyRhFQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft
Manifest number:          0DD3
Signing time:             Tue 24 Mar 2026 17:49:07 +0000
Manifest this update:     Tue 24 Mar 2026 17:49:07 +0000
Manifest next update:     Tue 31 Mar 2026 17:49:07 +0000
Files and hashes:         1: Inq-TfBPhfTgEzV6kE48jDyRhFQ.crl (hash: srRbfcmIzLzD+oA6PloFnHyO9zrtW48KnVxPK9Blyh0=)
                          2: 610944B422D911EA8E735D5CC4F9AE02.roa (hash: alqO0D2Y0lS0CUDmFhfJ9SyAPzGeXkUlPY6gW1arF2I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.crl
                          rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Inq-TfBPhfTgEzV6kE48jDyRhFQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:49:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3593 (0xe09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171560, serialNumber=227ABE4DF04F85F4E013357A904E3C8C3C918454
        Validity
            Not Before: Mar 24 17:49:07 2026 GMT
            Not After : Mar 31 17:49:07 2026 GMT
        Subject: CN=69c2ce93-7121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:62:f2:ca:03:f6:fe:3c:f6:07:08:31:75:68:
                    b6:ed:a0:fa:87:b7:c4:7e:a4:dc:f2:9c:62:05:7a:
                    16:55:2a:9d:e0:78:53:cc:de:d7:e4:b8:ad:59:43:
                    b0:4a:ed:ed:49:f3:fa:eb:31:db:16:2d:b5:6e:e7:
                    af:28:ea:11:50:ae:c0:f5:d9:00:0d:bf:72:65:ab:
                    ae:8c:b1:08:a9:c6:6e:8b:19:8d:ea:bf:68:ab:ff:
                    ad:85:fc:61:a0:e9:89:fa:18:e9:af:71:13:69:a9:
                    d7:a7:06:2e:72:58:8e:32:17:df:6e:bf:d7:38:9f:
                    ea:65:99:53:cc:73:bd:72:c9:5e:ac:9d:86:45:e8:
                    d8:3d:a6:ca:65:37:96:8b:5b:85:ec:30:57:c6:59:
                    57:4d:a5:db:d0:d8:86:45:37:ad:3f:ba:10:d1:ee:
                    64:bc:38:a7:0c:04:10:ef:74:b8:da:8e:b5:cc:9c:
                    af:aa:ed:6d:c1:2e:f2:c2:ff:9d:39:08:20:5b:c9:
                    08:ce:33:71:21:f2:9b:fc:56:f3:b0:fc:99:ff:ea:
                    e2:58:aa:de:a5:e0:b4:0b:75:e2:7f:2d:61:fc:b8:
                    a0:a0:a3:b8:b0:ff:48:d6:1f:15:5b:c2:ea:4c:17:
                    14:3a:df:1b:47:b8:3a:97:d7:66:2a:94:77:ba:27:
                    ac:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:5F:9C:4C:37:03:C5:B4:31:76:C3:40:B7:D0:B0:9D:AF:F7:21:C7
            X509v3 Authority Key Identifier:
                keyid:22:7A:BE:4D:F0:4F:85:F4:E0:13:35:7A:90:4E:3C:8C:3C:91:84:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Inq-TfBPhfTgEzV6kE48jDyRhFQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:aa:ab:21:a5:5c:6c:54:61:5a:53:b0:6b:5b:4e:a7:ca:cf:
         5b:1b:09:dd:65:d7:0f:a9:18:47:58:8c:be:50:52:49:53:45:
         6b:c0:e9:20:5b:56:09:c0:a7:27:e4:b4:b4:4e:96:bc:dd:ac:
         da:4d:b7:5b:95:ab:b1:3e:81:99:c7:a5:f1:44:58:c1:8b:33:
         2e:72:53:11:2b:a3:d2:b6:90:da:a1:59:50:bf:d1:c1:2a:80:
         1d:fa:96:28:c5:7c:94:04:a6:e1:cc:da:ae:af:cb:31:0f:70:
         be:ff:cc:7f:19:ab:5a:ce:68:ce:c0:35:5e:95:cf:66:04:65:
         aa:41:22:0a:6a:1a:a3:a5:fb:32:3e:ce:be:69:27:8f:2c:c9:
         82:cf:f3:83:77:c9:35:b6:95:fb:b9:6b:ff:90:45:d7:dc:57:
         7c:31:14:a1:6f:ca:11:18:c4:7b:7d:62:67:6e:9c:80:a3:64:
         10:61:c1:13:42:09:39:81:2c:fc:e2:c3:df:ea:36:cb:dd:e0:
         99:2e:c2:b6:4d:1e:37:11:31:03:7f:df:d9:e6:e7:33:30:75:
         6b:bd:1e:e4:80:7e:32:a0:99:64:63:33:df:03:01:6c:30:d1:
         cd:5a:45:a2:72:14:76:b1:4a:21:07:79:09:30:6e:7c:49:90:
         81:ab:95:a6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzE1NjAxMTAvBgNVBAUTKDIyN0FCRTRERjA0Rjg1RjRFMDEzMzU3QTkwNEUzQzhD
M0M5MTg0NTQwHhcNMjYwMzI0MTc0OTA3WhcNMjYwMzMxMTc0OTA3WjAYMRYwFAYD
VQQDEw02OWMyY2U5My03MTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiGLyygP2/jz2BwgxdWi27aD6h7fEfqTc8pxiBXoWVSqd4HhTzN7X5LitWUOw
Su3tSfP66zHbFi21buevKOoRUK7A9dkADb9yZauujLEIqcZuixmN6r9oq/+thfxh
oOmJ+hjpr3ETaanXpwYucliOMhffbr/XOJ/qZZlTzHO9cslerJ2GRejYPabKZTeW
i1uF7DBXxllXTaXb0NiGRTetP7oQ0e5kvDinDAQQ73S42o61zJyvqu1twS7ywv+d
OQggW8kIzjNxIfKb/FbzsPyZ/+riWKrepeC0C3Xify1h/LigoKO4sP9I1h8VW8Lq
TBcUOt8bR7g6l9dmKpR3uiesBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHRfnEw3
A8W0MXbDQLfQsJ2v9yHHMB8GA1UdIwQYMBaAFCJ6vk3wT4X04BM1epBOPIw8kYRU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTU2MC9BRENEQjgyQUU0
MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi9JbnEtVGZCUGhmVGdFelY2a0U0OGpEeVJo
RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lucS1UZkJQaGZUZ0V6VjZrRTQ4akR5UmhGUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MTU2MC9BRENEQjgyQUU0MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi9JbnEtVGZCUGhm
VGdFelY2a0U0OGpEeVJoRlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgKqrIaVcbFRhWlOwa1tOp8rPWxsJ3WXXD6kYR1iMvlBSSVNFa8DpIFtWCcCn
J+S0tE6WvN2s2k23W5WrsT6Bmcel8URYwYszLnJTESuj0raQ2qFZUL/RwSqAHfqW
KMV8lASm4czarq/LMQ9wvv/MfxmrWs5ozsA1XpXPZgRlqkEiCmoao6X7Mj7Ovmkn
jyzJgs/zg3fJNbaV+7lr/5BF19xXfDEUoW/KERjEe31iZ26cgKNkEGHBE0IJOYEs
/OLD3+o2y93gmS7Ctk0eNxExA3/f2ebnMzB1a70e5IB+MqCZZGMz3wMBbDDRzVpF
onIUdrFKIQd5CTBufEmQgauVpg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:32:35 2026 by rpki-client