Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188AB8/63D3B36EAB7211F085C6DF5BC4F9AE02/taoJHUe5b__ilkNNAcZFS04cnhk.mft
File:                     taoJHUe5b__ilkNNAcZFS04cnhk.mft (raw, json)
Hash identifier:          A/K0lWIy+/O+Uql8/rWMUZ6uxlknj77LuoLhTMNHlfY=
Subject key identifier:   81:A9:CC:1C:82:2F:95:21:16:75:F8:5D:8F:8B:8E:36:51:AA:54:2A
Authority key identifier: B5:AA:09:1D:47:B9:6F:FF:E2:96:43:4D:01:C6:45:4B:4E:1C:9E:19
Certificate issuer:       /CN=A9188AB8/serialNumber=B5AA091D47B96FFFE296434D01C6454B4E1C9E19
Certificate serial:       92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taoJHUe5b__ilkNNAcZFS04cnhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188AB8/63D3B36EAB7211F085C6DF5BC4F9AE02/taoJHUe5b__ilkNNAcZFS04cnhk.mft
Manifest number:          92
Signing time:             Mon 27 Jul 2026 09:36:18 +0000
Manifest this update:     Mon 27 Jul 2026 09:36:18 +0000
Manifest next update:     Mon 03 Aug 2026 09:36:18 +0000
Files and hashes:         1: taoJHUe5b__ilkNNAcZFS04cnhk.crl (hash: 44wNXIgOCB4+zfEqy9xn8XSiPVGFWat7WWk8c6yid+8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188AB8/63D3B36EAB7211F085C6DF5BC4F9AE02/taoJHUe5b__ilkNNAcZFS04cnhk.crl
                          rsync://rpki.apnic.net/member_repository/A9188AB8/63D3B36EAB7211F085C6DF5BC4F9AE02/taoJHUe5b__ilkNNAcZFS04cnhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taoJHUe5b__ilkNNAcZFS04cnhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:36:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188AB8, serialNumber=B5AA091D47B96FFFE296434D01C6454B4E1C9E19
        Validity
            Not Before: Jul 27 09:36:18 2026 GMT
            Not After : Aug  3 09:36:18 2026 GMT
        Subject: CN=6a672692-1b14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:83:78:71:76:8a:d7:15:cb:4e:cc:0b:14:5f:
                    ff:6a:3c:78:be:e4:d4:ee:93:39:ca:c0:cd:a8:08:
                    28:c5:bb:51:f8:60:3d:c0:a8:4b:45:3c:6e:c9:4a:
                    0d:ba:de:1c:b1:5a:ae:db:cd:8f:58:e4:8b:de:a5:
                    3a:3c:25:0b:c4:a1:8c:bb:3e:9c:c2:3b:ea:78:de:
                    0a:d8:a5:0b:53:14:2d:d9:c8:f9:fd:8c:8f:ac:21:
                    52:16:ee:06:f0:36:5e:ef:78:f3:95:a7:f9:8d:c7:
                    a2:ec:4e:e6:80:ea:f6:26:80:8a:6b:49:be:2f:02:
                    3d:6a:f3:b3:f8:ba:dd:23:79:10:61:74:1d:d2:be:
                    ba:94:c5:bb:1f:4c:38:ff:97:61:3e:94:7f:17:f8:
                    71:b6:17:4e:3c:9b:a7:9e:67:8f:92:fa:df:3e:80:
                    c3:e9:0d:66:72:d2:85:ce:df:62:c6:1a:bb:9a:48:
                    0d:a5:88:ad:83:04:a2:90:06:28:78:1d:b9:73:45:
                    41:fa:c2:72:23:32:a9:81:4c:40:ff:ad:70:f1:9f:
                    17:ef:31:d0:f3:2a:46:38:a1:8a:cc:5d:34:ce:b0:
                    7b:26:ea:f5:73:fa:78:f8:4f:7e:b5:e0:e5:d2:fa:
                    35:6c:e4:e4:78:a6:1f:70:f4:e5:fc:0d:ec:64:39:
                    2e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A9:CC:1C:82:2F:95:21:16:75:F8:5D:8F:8B:8E:36:51:AA:54:2A
            X509v3 Authority Key Identifier:
                keyid:B5:AA:09:1D:47:B9:6F:FF:E2:96:43:4D:01:C6:45:4B:4E:1C:9E:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188AB8/63D3B36EAB7211F085C6DF5BC4F9AE02/taoJHUe5b__ilkNNAcZFS04cnhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taoJHUe5b__ilkNNAcZFS04cnhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188AB8/63D3B36EAB7211F085C6DF5BC4F9AE02/taoJHUe5b__ilkNNAcZFS04cnhk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:c1:0b:bc:1b:4d:bc:6e:80:24:01:76:2e:4f:71:57:59:34:
         6e:b7:e1:b9:e0:d6:a3:61:86:fd:36:86:45:45:05:2e:08:f5:
         8b:3b:ee:ff:f5:db:d9:44:a0:06:91:94:33:cf:87:21:67:18:
         77:1a:6a:6c:36:38:b9:66:0e:01:07:8c:cc:22:c3:48:d7:dd:
         6c:46:1d:d5:e8:17:d9:b5:ba:40:b2:d5:df:95:b8:c5:67:23:
         32:33:c4:75:96:28:42:0c:58:8f:7b:30:db:a4:bc:5e:49:9e:
         7e:4f:4f:ad:a2:b4:20:53:fa:d4:71:ac:fe:66:6d:57:b6:db:
         37:d0:ba:6a:d7:26:65:b4:0f:30:7b:f3:ea:92:de:35:59:52:
         21:d8:b7:8b:49:fb:ee:ad:b8:65:86:9a:08:5a:e7:79:49:f2:
         26:10:91:56:e8:ab:11:a3:76:f5:7c:b6:e8:ed:22:db:64:0f:
         92:df:b7:93:3d:38:9f:80:31:65:b3:c8:3e:bf:1f:a3:75:d1:
         9a:1c:cf:f3:31:66:78:4d:43:4a:9b:c9:59:9b:2f:68:bf:4b:
         59:b2:e7:48:2c:46:2c:ee:d1:3e:0a:8c:08:f7:d3:a3:a0:7e:
         3e:e6:0f:3d:09:f0:77:70:8d:0c:05:40:b9:9e:08:37:fa:c5:
         c9:ed:7a:3a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODhBQjgxMTAvBgNVBAUTKEI1QUEwOTFENDdCOTZGRkZFMjk2NDM0RDAxQzY0NTRC
NEUxQzlFMTkwHhcNMjYwNzI3MDkzNjE4WhcNMjYwODAzMDkzNjE4WjAYMRYwFAYD
VQQDEw02YTY3MjY5Mi0xYjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApYN4cXaK1xXLTswLFF//ajx4vuTU7pM5ysDNqAgoxbtR+GA9wKhLRTxuyUoN
ut4csVqu282PWOSL3qU6PCULxKGMuz6cwjvqeN4K2KULUxQt2cj5/YyPrCFSFu4G
8DZe73jzlaf5jcei7E7mgOr2JoCKa0m+LwI9avOz+LrdI3kQYXQd0r66lMW7H0w4
/5dhPpR/F/hxthdOPJunnmePkvrfPoDD6Q1mctKFzt9ixhq7mkgNpYitgwSikAYo
eB25c0VB+sJyIzKpgUxA/61w8Z8X7zHQ8ypGOKGKzF00zrB7Jur1c/p4+E9+teDl
0vo1bOTkeKYfcPTl/A3sZDkuRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIGpzByC
L5UhFnX4XY+LjjZRqlQqMB8GA1UdIwQYMBaAFLWqCR1HuW//4pZDTQHGRUtOHJ4Z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEFCOC82M0QzQjM2RUFC
NzIxMUYwODVDNkRGNUJDNEY5QUUwMi90YW9KSFVlNWJfX2lsa05OQWNaRlMwNGNu
aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Rhb0pIVWU1Yl9faWxrTk5BY1pGUzA0Y25oay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OEFCOC82M0QzQjM2RUFCNzIxMUYwODVDNkRGNUJDNEY5QUUwMi90YW9KSFVlNWJf
X2lsa05OQWNaRlMwNGNuaGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASsELvBtNvG6AJAF2Lk9xV1k0brfhueDWo2GG/TaGRUUFLgj1izvu//Xb2USg
BpGUM8+HIWcYdxpqbDY4uWYOAQeMzCLDSNfdbEYd1egX2bW6QLLV35W4xWcjMjPE
dZYoQgxYj3sw26S8Xkmefk9PraK0IFP61HGs/mZtV7bbN9C6atcmZbQPMHvz6pLe
NVlSIdi3i0n77q24ZYaaCFrneUnyJhCRVuirEaN29Xy26O0i22QPkt+3kz04n4Ax
ZbPIPr8fo3XRmhzP8zFmeE1DSpvJWZsvaL9LWbLnSCxGLO7RPgqMCPfTo6B+PuYP
PQnwd3CNDAVAuZ4IN/rFye16Og==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:30:06 2026 by rpki-client