Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft
File:                     Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft (raw, json)
Hash identifier:          XJFOLoxcIFgacP9p/cgm6XlAPngI0b0ijC8M9DXkhmU=
Subject key identifier:   DA:6E:A2:1A:C7:74:18:61:40:56:E4:14:31:7B:9E:66:AF:CB:74:A1
Authority key identifier: 22:7A:BE:4D:F0:4F:85:F4:E0:13:35:7A:90:4E:3C:8C:3C:91:84:54
Certificate issuer:       /CN=A9171560/serialNumber=227ABE4DF04F85F4E013357A904E3C8C3C918454
Certificate serial:       0E54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Inq-TfBPhfTgEzV6kE48jDyRhFQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft
Manifest number:          0E1C
Signing time:             Tue 04 Aug 2026 17:59:48 +0000
Manifest this update:     Tue 04 Aug 2026 17:59:48 +0000
Manifest next update:     Tue 11 Aug 2026 17:59:48 +0000
Files and hashes:         1: Inq-TfBPhfTgEzV6kE48jDyRhFQ.crl (hash: +aeF5f8FjqQdwLTRtP2fV8E94BXh9mb9wKzPd6MLwBQ=)
                          2: 610944B422D911EA8E735D5CC4F9AE02.roa (hash: BoYJM8MLvep73HoN2CyufEcxDG82mbBGtd4nwd/s8kA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.crl
                          rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Inq-TfBPhfTgEzV6kE48jDyRhFQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Aug 2026 17:59:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3668 (0xe54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171560, serialNumber=227ABE4DF04F85F4E013357A904E3C8C3C918454
        Validity
            Not Before: Aug  4 17:59:48 2026 GMT
            Not After : Aug 11 17:59:48 2026 GMT
        Subject: CN=6a722894-4508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7a:27:04:33:f8:b7:c9:80:03:aa:af:2a:df:
                    cf:40:3f:ef:24:c0:cc:28:72:31:a2:d7:b2:80:1d:
                    42:71:92:e0:6d:fd:2e:41:b7:6f:44:8a:0b:5a:8b:
                    6d:f7:19:09:e6:f8:d4:8b:55:1f:99:f2:b6:53:77:
                    f9:99:09:f5:95:11:b3:a3:1b:94:64:33:35:39:09:
                    d1:78:fe:1b:79:14:9a:ea:53:01:3d:b0:c9:54:db:
                    02:3e:82:e3:07:d8:00:4f:e1:b1:04:f3:67:e9:d6:
                    1a:21:cb:e3:a2:26:f1:3d:ff:f4:40:4d:cc:e4:bd:
                    4e:a0:2a:fc:f7:cf:94:f5:39:5e:b1:4b:d4:20:95:
                    1e:bb:d4:0d:5c:8f:a8:4c:e0:8a:75:26:18:a7:95:
                    d7:f7:1e:8f:de:0f:c8:9e:15:db:4b:3b:4e:bd:81:
                    35:9d:78:de:34:fb:42:f9:92:57:b2:d6:69:00:a7:
                    5f:82:c4:b6:cb:72:3d:a4:40:22:5f:5b:cc:b5:eb:
                    40:b5:64:20:a6:fa:85:81:25:96:9f:a6:d3:bc:b3:
                    01:31:d6:5a:b3:a7:de:41:97:67:f7:07:70:d2:96:
                    57:4d:f0:9d:25:ad:8d:00:e5:ef:20:f7:98:e3:60:
                    1f:61:be:fb:73:7a:ea:87:cd:a7:56:2f:e1:a8:72:
                    66:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6E:A2:1A:C7:74:18:61:40:56:E4:14:31:7B:9E:66:AF:CB:74:A1
            X509v3 Authority Key Identifier:
                keyid:22:7A:BE:4D:F0:4F:85:F4:E0:13:35:7A:90:4E:3C:8C:3C:91:84:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Inq-TfBPhfTgEzV6kE48jDyRhFQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:a2:f9:96:d4:80:36:ca:c4:06:fe:35:4e:60:99:6e:4b:0a:
         e3:50:74:34:c6:1d:00:6a:67:0f:8c:09:55:0d:08:da:e5:9d:
         59:7f:d9:1b:2d:cf:51:e5:72:58:1e:d7:1b:ec:fb:38:bc:a3:
         9c:d7:dc:92:9a:50:3a:45:7b:ba:1a:a3:c2:27:b4:14:d6:7b:
         f5:3b:60:68:ad:49:80:c3:51:b7:7b:4c:81:b1:53:1b:ba:ce:
         20:c5:ac:ba:01:24:cf:d4:05:09:ff:8a:1b:bc:60:4f:ee:47:
         10:2c:59:94:df:dc:80:07:6b:60:5f:44:56:61:67:42:07:27:
         c9:54:00:e7:dc:3c:7d:1d:8a:47:c7:08:5e:1d:be:92:a0:75:
         3f:44:84:da:ff:a7:d2:1b:4a:3f:45:5b:9f:25:9c:d6:4f:f2:
         34:0a:08:48:7a:51:54:ad:ca:08:e0:50:2a:62:c4:01:d4:39:
         2a:1f:01:a5:55:5f:c4:51:90:81:28:c9:ba:44:29:5a:14:e6:
         2c:8b:9e:7e:c2:19:52:25:0b:1e:8e:3c:66:46:35:c6:82:77:
         2c:81:8a:b0:d7:b5:21:a6:b4:95:77:05:e9:6c:b8:fe:55:fa:
         1e:4c:e3:b6:f3:35:12:a7:fe:e5:3a:05:f2:95:04:9d:11:57:
         f1:21:55:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 23:50:39 2026 by rpki-client