Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft
File:                     TAYxLToLHGP1R9TWRXxM1a9xQ80.mft (raw, json)
Hash identifier:          YVVwhrZ+f4UzaZb6Z4IOQUPYEnPPvH+oUR7335/Clh8=
Subject key identifier:   CC:F9:F5:52:7D:36:AA:07:42:E0:20:14:9D:3B:F1:C6:E7:AE:10:E8
Authority key identifier: 4C:06:31:2D:3A:0B:1C:63:F5:47:D4:D6:45:7C:4C:D5:AF:71:43:CD
Certificate issuer:       /CN=A91E0EF2/serialNumber=4C06312D3A0B1C63F547D4D6457C4CD5AF7143CD
Certificate serial:       04E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAYxLToLHGP1R9TWRXxM1a9xQ80.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft
Manifest number:          04DF
Signing time:             Thu 16 Apr 2026 23:43:15 +0000
Manifest this update:     Thu 16 Apr 2026 23:43:14 +0000
Manifest next update:     Thu 23 Apr 2026 23:43:14 +0000
Files and hashes:         1: TAYxLToLHGP1R9TWRXxM1a9xQ80.crl (hash: hD+ab63Yp8+7IcYZF5MJUal/0TZZWOaSCxIQBeXfMsg=)
                          2: 09C2A1645A3511ED8F0A3087C4F9AE02.roa (hash: DkFecwB9znnuUrE2RmF4tqyznqLh8lhTWAuST9cTgro=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.crl
                          rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAYxLToLHGP1R9TWRXxM1a9xQ80.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:43:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1253 (0x4e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0EF2, serialNumber=4C06312D3A0B1C63F547D4D6457C4CD5AF7143CD
        Validity
            Not Before: Apr 16 23:43:14 2026 GMT
            Not After : Apr 23 23:43:14 2026 GMT
        Subject: CN=69e17412-fc14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:52:6f:ea:68:fa:81:7e:d7:bf:5a:2d:e6:04:
                    3c:be:28:85:cc:f4:f9:6e:f4:ba:05:1d:41:cf:ab:
                    81:eb:e0:b3:8e:af:8a:d8:f2:9c:a3:f1:75:97:54:
                    62:08:73:1a:30:cd:df:f0:c5:74:09:b4:d0:f7:bf:
                    6e:24:97:62:7a:aa:2c:6b:16:b5:20:e7:ca:f9:86:
                    30:11:b8:38:bb:6a:62:50:3c:f5:a9:42:28:f2:4d:
                    bf:b6:63:c2:89:5a:9b:27:4c:65:60:5c:58:3a:71:
                    50:e2:bb:1e:75:28:16:0d:09:7f:b8:2d:02:c4:37:
                    7f:87:2b:fe:1c:d4:16:a6:e1:30:bf:bd:ed:7f:8c:
                    d7:b6:6f:00:62:b9:22:51:c3:26:83:c0:d2:1d:41:
                    23:34:9c:78:b0:3e:14:e6:3d:14:0c:04:98:b3:72:
                    9f:b6:1a:65:c1:bf:09:68:ad:92:83:8e:00:56:c8:
                    b8:1c:2e:da:17:1f:de:bb:cd:c3:45:bd:3a:f2:a4:
                    63:ba:dc:56:18:d9:a6:d6:34:63:db:55:72:14:9d:
                    46:fd:dc:46:c8:26:75:81:7f:8d:3c:65:32:7f:3f:
                    d2:14:b2:52:8b:49:00:bd:ff:af:20:43:f8:3a:e6:
                    c3:b9:50:3b:ce:75:0c:cf:48:96:80:13:ba:60:33:
                    08:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F9:F5:52:7D:36:AA:07:42:E0:20:14:9D:3B:F1:C6:E7:AE:10:E8
            X509v3 Authority Key Identifier:
                keyid:4C:06:31:2D:3A:0B:1C:63:F5:47:D4:D6:45:7C:4C:D5:AF:71:43:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAYxLToLHGP1R9TWRXxM1a9xQ80.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:d3:7c:cf:e3:ed:cc:49:93:dd:c2:61:b3:91:42:61:b1:cf:
         32:13:78:4d:95:ef:72:4c:95:cb:12:db:1c:b8:71:5a:dd:43:
         aa:b7:68:0c:bd:2e:c7:4d:49:c6:09:c8:6b:20:cd:c9:19:6e:
         f2:2e:d0:ed:6d:c0:bb:7b:f4:2b:cf:6a:1b:c2:1c:06:f1:88:
         00:97:96:0e:b5:4e:3a:70:35:26:ef:3b:68:d6:43:fc:6a:5c:
         f1:b8:c8:4d:fc:ad:7f:8a:bc:a1:27:0b:7a:aa:69:c7:83:0c:
         f0:8a:83:34:95:f0:2a:03:f5:4f:0a:66:09:3b:ce:8d:ca:e8:
         76:66:cd:ab:39:c0:b6:7b:bf:c8:da:8a:c4:df:0b:c7:5a:ff:
         d1:cc:a1:30:8d:28:a8:a9:e8:74:2c:3b:45:ce:a9:5f:ba:b2:
         7c:1e:5a:04:c6:b9:b2:ee:9d:aa:7e:0f:30:04:81:2a:1d:fb:
         fb:0e:9b:0c:7c:90:5f:f6:ad:fe:1e:20:42:6a:e2:1b:b6:b5:
         35:d7:d1:54:93:2b:d4:f3:a7:8f:24:a7:21:39:e9:eb:e1:41:
         71:1d:2f:9e:82:41:bd:14:8b:a5:8f:4c:34:c6:b6:44:6f:47:
         b8:53:95:96:e6:e7:06:09:ef:d9:c9:c5:dc:24:b8:1c:aa:53:
         ba:f6:25:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:36:38 2026 by rpki-client