Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft
File:                     TAYxLToLHGP1R9TWRXxM1a9xQ80.mft (raw, json)
Hash identifier:          OxVGkqmI+bxUhD2waqbgpIZMFADSRQD6tZjmII6Jmik=
Subject key identifier:   6C:08:01:98:56:BF:EB:39:4C:5B:90:49:41:23:F3:BF:62:54:59:CE
Authority key identifier: 4C:06:31:2D:3A:0B:1C:63:F5:47:D4:D6:45:7C:4C:D5:AF:71:43:CD
Certificate issuer:       /CN=A91E0EF2/serialNumber=4C06312D3A0B1C63F547D4D6457C4CD5AF7143CD
Certificate serial:       04CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAYxLToLHGP1R9TWRXxM1a9xQ80.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft
Manifest number:          04C5
Signing time:             Sun 01 Mar 2026 01:20:46 +0000
Manifest this update:     Sun 01 Mar 2026 01:20:46 +0000
Manifest next update:     Sun 08 Mar 2026 01:20:46 +0000
Files and hashes:         1: TAYxLToLHGP1R9TWRXxM1a9xQ80.crl (hash: Y+5i5r4/s4FjsQjPshJSWjsP14xSoAQ/jfxUgdun50E=)
                          2: 09C2A1645A3511ED8F0A3087C4F9AE02.roa (hash: IcMvoPjviV/wiUzXltFRKVX/YaADT3BwJ5ltkaQXQ7o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.crl
                          rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAYxLToLHGP1R9TWRXxM1a9xQ80.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 01:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1226 (0x4ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0EF2, serialNumber=4C06312D3A0B1C63F547D4D6457C4CD5AF7143CD
        Validity
            Not Before: Mar  1 01:20:46 2026 GMT
            Not After : Mar  8 01:20:46 2026 GMT
        Subject: CN=69a3946e-8a23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9c:3d:b5:e7:20:ac:37:88:60:f7:ad:cb:19:
                    b5:64:c1:e4:f7:52:e5:83:25:63:73:56:23:53:ec:
                    6c:b3:da:9a:a9:c1:5d:9a:2d:27:c1:b2:d2:39:5a:
                    f3:94:80:f1:6d:40:87:a2:ec:c5:bf:1f:a0:df:6a:
                    be:34:c3:e6:83:d0:74:77:36:48:22:ff:0d:dc:58:
                    e5:a4:da:98:08:37:8b:6d:40:e7:5f:0c:02:e0:22:
                    75:7e:fc:0d:61:6f:a3:dd:5a:a8:38:e5:7c:68:04:
                    a7:28:b8:0a:6d:a0:3a:e8:bb:a7:50:94:e2:b7:79:
                    2a:1c:d6:8a:73:bb:3f:01:34:a2:e4:83:e4:2d:7b:
                    d5:df:21:a6:26:e0:5c:d2:c0:e5:05:c6:6d:8d:b1:
                    33:aa:30:2a:5c:41:5a:fc:c2:a4:60:20:50:3d:b5:
                    50:fd:b1:d9:e9:bd:b3:33:79:3d:82:c9:a5:de:ff:
                    bc:95:8d:e5:58:ea:99:f6:a6:7c:33:f3:65:8c:0d:
                    6b:39:e0:35:e3:94:21:ae:7b:60:cd:2f:54:5f:f6:
                    d2:0c:ef:51:54:19:44:4a:32:d5:2f:29:43:ee:71:
                    e5:d7:23:a0:30:c1:d5:46:6a:73:9d:1b:f9:d8:cd:
                    0c:d9:cd:22:e1:2f:d9:c3:62:c5:5b:09:09:49:7f:
                    c1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:08:01:98:56:BF:EB:39:4C:5B:90:49:41:23:F3:BF:62:54:59:CE
            X509v3 Authority Key Identifier:
                keyid:4C:06:31:2D:3A:0B:1C:63:F5:47:D4:D6:45:7C:4C:D5:AF:71:43:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAYxLToLHGP1R9TWRXxM1a9xQ80.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:d8:09:a5:f5:44:94:88:c2:e1:29:cd:2f:de:b7:8e:80:f4:
         d2:f8:d1:30:bc:47:ba:9a:f0:af:93:d4:9b:d2:e7:c6:5d:13:
         fe:2e:b7:00:79:ac:ff:01:d1:97:74:19:d6:ed:bd:47:41:49:
         2d:5d:8f:ce:9a:d2:a2:ca:25:43:bc:33:3d:5d:0b:81:1c:d7:
         ea:fa:4e:e0:51:fc:67:07:89:74:22:00:9c:70:ed:49:d5:05:
         2b:3a:23:04:f3:0a:40:95:f4:67:e9:92:d4:55:e0:42:86:89:
         d7:c2:8f:51:1d:4a:70:35:72:c6:8c:cd:a1:25:ca:c2:b6:cc:
         96:de:57:bc:96:b7:ad:a6:0d:bf:5e:d9:09:15:97:5e:14:1f:
         3d:6a:9e:39:7f:f3:2d:0c:f7:e4:97:a6:83:87:94:c0:1a:6d:
         e7:9d:02:e2:b4:17:f5:e8:49:0b:29:af:4b:c5:5c:2c:93:86:
         53:c9:80:4e:64:91:1b:52:aa:04:f3:db:ff:69:ea:2e:87:f0:
         e8:9d:b6:47:b8:a4:4e:37:00:7e:6a:e9:1a:99:87:19:57:5a:
         9b:57:84:22:5e:e0:34:aa:ad:2c:1b:d8:27:3d:7e:58:05:85:
         e0:7c:19:7d:3e:82:3f:ac:c8:c8:81:f4:53:a2:41:6c:9f:70:
         76:3f:24:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:25:51 2026 by rpki-client