Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188AB8/63D3B36EAB7211F085C6DF5BC4F9AE02/taoJHUe5b__ilkNNAcZFS04cnhk.mft
File:                     taoJHUe5b__ilkNNAcZFS04cnhk.mft (raw, json)
Hash identifier:          jnPDJtPnKbkUKHXYM5xP5S7Sk0mjfcAZ08B/DWpQp9g=
Subject key identifier:   98:AD:59:A5:1D:89:5C:58:19:7F:4D:51:58:85:17:F7:4C:CD:9B:1C
Authority key identifier: B5:AA:09:1D:47:B9:6F:FF:E2:96:43:4D:01:C6:45:4B:4E:1C:9E:19
Certificate issuer:       /CN=A9188AB8/serialNumber=B5AA091D47B96FFFE296434D01C6454B4E1C9E19
Certificate serial:       5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taoJHUe5b__ilkNNAcZFS04cnhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188AB8/63D3B36EAB7211F085C6DF5BC4F9AE02/taoJHUe5b__ilkNNAcZFS04cnhk.mft
Manifest number:          5A
Signing time:             Sun 05 Apr 2026 07:26:26 +0000
Manifest this update:     Sun 05 Apr 2026 07:26:26 +0000
Manifest next update:     Sun 12 Apr 2026 07:26:26 +0000
Files and hashes:         1: taoJHUe5b__ilkNNAcZFS04cnhk.crl (hash: MtIcwdtg3iG05zJbWXBZO/pkHX+ABJX8wFByuN8MWy4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188AB8/63D3B36EAB7211F085C6DF5BC4F9AE02/taoJHUe5b__ilkNNAcZFS04cnhk.crl
                          rsync://rpki.apnic.net/member_repository/A9188AB8/63D3B36EAB7211F085C6DF5BC4F9AE02/taoJHUe5b__ilkNNAcZFS04cnhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taoJHUe5b__ilkNNAcZFS04cnhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:26:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188AB8, serialNumber=B5AA091D47B96FFFE296434D01C6454B4E1C9E19
        Validity
            Not Before: Apr  5 07:26:26 2026 GMT
            Not After : Apr 12 07:26:26 2026 GMT
        Subject: CN=69d20ea2-cc35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:70:87:fb:3f:0a:23:51:1e:6d:c5:86:39:26:
                    45:43:90:12:78:a7:99:81:eb:c0:bc:e2:cd:0f:4a:
                    ce:54:47:cf:af:82:13:92:53:a1:c6:72:03:65:5b:
                    96:4d:9b:61:57:92:1c:0a:62:99:05:b1:3e:ed:fa:
                    22:0c:3c:ae:bf:90:d5:7e:cf:3d:ad:b3:84:15:b4:
                    aa:1f:7f:f5:82:9c:9d:fb:8e:64:83:f5:59:07:98:
                    16:ab:eb:1f:fb:c2:3e:df:5d:ae:db:79:8d:de:96:
                    42:dd:ea:e2:d8:92:3f:d1:8d:5e:80:51:c6:5b:4d:
                    4a:f9:fb:29:df:6d:e0:9d:68:ea:1b:b4:5f:4c:34:
                    2f:bd:b2:42:e6:ed:82:3c:14:0d:4a:21:4d:92:8f:
                    f3:e8:26:b4:20:2b:f7:56:34:2a:b3:5b:44:48:33:
                    96:8d:46:53:64:33:78:9a:10:9e:77:b5:0d:bf:ce:
                    23:fa:34:f9:34:b0:33:ea:9a:63:b1:b1:4a:57:d4:
                    54:68:68:ae:ac:d5:0a:c3:d2:ab:c4:d2:1b:47:8e:
                    2b:fa:47:e4:62:56:aa:63:ca:57:a4:e1:5a:fb:91:
                    12:6d:cf:b9:90:e3:cc:c9:15:8b:90:54:bf:5e:8e:
                    14:be:b2:06:8b:e3:b5:1a:9c:3a:dc:7e:4e:4b:a8:
                    a1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:AD:59:A5:1D:89:5C:58:19:7F:4D:51:58:85:17:F7:4C:CD:9B:1C
            X509v3 Authority Key Identifier:
                keyid:B5:AA:09:1D:47:B9:6F:FF:E2:96:43:4D:01:C6:45:4B:4E:1C:9E:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188AB8/63D3B36EAB7211F085C6DF5BC4F9AE02/taoJHUe5b__ilkNNAcZFS04cnhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taoJHUe5b__ilkNNAcZFS04cnhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188AB8/63D3B36EAB7211F085C6DF5BC4F9AE02/taoJHUe5b__ilkNNAcZFS04cnhk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:e1:27:7a:5a:b7:42:6c:a6:55:27:88:e8:91:32:58:8f:15:
         43:fc:39:64:e5:e3:64:33:93:19:48:52:29:6d:24:3a:4c:42:
         da:9e:75:c6:53:a9:33:11:90:82:09:80:0d:e5:4f:5a:87:f0:
         01:0c:62:d8:b3:67:fd:f1:c5:ec:aa:95:6b:95:68:32:72:04:
         fe:82:6d:bb:5e:b1:50:2f:43:9a:93:aa:f4:b4:47:c2:68:76:
         07:2a:2a:ca:aa:da:2e:5a:9e:ea:41:bd:3b:c5:09:89:9e:7a:
         2e:e0:9f:8b:5a:46:8d:58:3b:1a:a1:e1:1c:42:8d:25:6a:d0:
         03:ae:ff:85:7e:bd:85:f7:c2:c7:17:15:d0:40:82:97:8f:80:
         e8:3d:2a:28:49:92:68:09:3b:5f:78:34:9e:a6:73:63:34:a2:
         ad:7f:44:f6:d3:da:bd:22:43:fa:ac:92:69:51:fe:38:3b:3e:
         0b:66:94:68:83:7f:ec:c9:7d:8c:21:6e:a3:a0:07:7e:7b:2f:
         20:38:f0:79:9d:5f:51:b5:74:53:74:b3:0f:62:fa:ab:0b:d8:
         54:f4:28:a7:48:0b:56:21:ad:d7:15:57:a2:0e:b2:2a:95:68:
         05:e5:5d:f7:f9:f1:d9:e6:84:b4:8c:c8:49:ef:17:50:b8:94:
         58:1a:10:00
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
OEFCODExMC8GA1UEBRMoQjVBQTA5MUQ0N0I5NkZGRkUyOTY0MzREMDFDNjQ1NEI0
RTFDOUUxOTAeFw0yNjA0MDUwNzI2MjZaFw0yNjA0MTIwNzI2MjZaMBgxFjAUBgNV
BAMTDTY5ZDIwZWEyLWNjMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCqcIf7PwojUR5txYY5JkVDkBJ4p5mB68C84s0PSs5UR8+vghOSU6HGcgNlW5ZN
m2FXkhwKYpkFsT7t+iIMPK6/kNV+zz2ts4QVtKoff/WCnJ37jmSD9VkHmBar6x/7
wj7fXa7beY3elkLd6uLYkj/RjV6AUcZbTUr5+ynfbeCdaOobtF9MNC+9skLm7YI8
FA1KIU2Sj/PoJrQgK/dWNCqzW0RIM5aNRlNkM3iaEJ53tQ2/ziP6NPk0sDPqmmOx
sUpX1FRoaK6s1QrD0qvE0htHjiv6R+RiVqpjylek4Vr7kRJtz7mQ48zJFYuQVL9e
jhS+sgaL47UanDrcfk5LqKFBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUmK1ZpR2J
XFgZf01RWIUX90zNmxwwHwYDVR0jBBgwFoAUtaoJHUe5b//ilkNNAcZFS04cnhkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4QUI4LzYzRDNCMzZFQUI3
MjExRjA4NUM2REY1QkM0RjlBRTAyL3Rhb0pIVWU1Yl9faWxrTk5BY1pGUzA0Y25o
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdGFvSkhVZTViX19pbGtOTkFjWkZTMDRjbmhrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4
QUI4LzYzRDNCMzZFQUI3MjExRjA4NUM2REY1QkM0RjlBRTAyL3Rhb0pIVWU1Yl9f
aWxrTk5BY1pGUzA0Y25oay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAM4Sd6WrdCbKZVJ4jokTJYjxVD/Dlk5eNkM5MZSFIpbSQ6TELannXGU6kzEZCC
CYAN5U9ah/ABDGLYs2f98cXsqpVrlWgycgT+gm27XrFQL0Oak6r0tEfCaHYHKirK
qtouWp7qQb07xQmJnnou4J+LWkaNWDsaoeEcQo0latADrv+Ffr2F98LHFxXQQIKX
j4DoPSooSZJoCTtfeDSepnNjNKKtf0T209q9IkP6rJJpUf44Oz4LZpRog3/syX2M
IW6joAd+ey8gOPB5nV9RtXRTdLMPYvqrC9hU9CinSAtWIa3XFVeiDrIqlWgF5V33
+fHZ5oS0jMhJ7xdQuJRYGhAA
-----END CERTIFICATE-----
Generated at Sun Apr 5 23:50:54 2026 by rpki-client