Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft
File:                     TAYxLToLHGP1R9TWRXxM1a9xQ80.mft (raw, json)
Hash identifier:          eC52Z+fJlDoiJPWryr3LcfGEmXmp0k6oJn+UK5OyWmc=
Subject key identifier:   16:0D:74:D5:F7:2E:93:87:69:F4:C7:96:D3:44:F1:62:0E:CE:54:43
Authority key identifier: 4C:06:31:2D:3A:0B:1C:63:F5:47:D4:D6:45:7C:4C:D5:AF:71:43:CD
Certificate issuer:       /CN=A91E0EF2/serialNumber=4C06312D3A0B1C63F547D4D6457C4CD5AF7143CD
Certificate serial:       04F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAYxLToLHGP1R9TWRXxM1a9xQ80.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft
Manifest number:          04F0
Signing time:             Wed 20 May 2026 23:50:20 +0000
Manifest this update:     Wed 20 May 2026 23:50:20 +0000
Manifest next update:     Wed 27 May 2026 23:50:20 +0000
Files and hashes:         1: TAYxLToLHGP1R9TWRXxM1a9xQ80.crl (hash: yOhfSJRthp0de/oIV75j940l0sXNUdRPwzCNE3A9yAA=)
                          2: 09C2A1645A3511ED8F0A3087C4F9AE02.roa (hash: DkFecwB9znnuUrE2RmF4tqyznqLh8lhTWAuST9cTgro=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.crl
                          rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAYxLToLHGP1R9TWRXxM1a9xQ80.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 23:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1270 (0x4f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0EF2, serialNumber=4C06312D3A0B1C63F547D4D6457C4CD5AF7143CD
        Validity
            Not Before: May 20 23:50:20 2026 GMT
            Not After : May 27 23:50:20 2026 GMT
        Subject: CN=6a0e48bc-5696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:61:d5:90:2f:7b:bf:50:4d:89:af:67:f2:b4:
                    e3:d3:ef:22:9e:8e:3c:f5:d6:f3:52:4d:dc:dd:91:
                    50:ad:4a:bd:60:33:fb:02:90:97:cb:73:2a:d0:3c:
                    c8:36:1b:90:f0:2f:4c:d9:5f:8d:34:2b:80:c4:b3:
                    a5:9a:4f:e9:52:34:2d:34:d3:3c:ea:82:9c:db:e9:
                    0d:28:b3:ac:84:2d:50:1c:71:b6:68:33:ef:f4:80:
                    a2:3e:71:98:22:fe:09:0f:22:d0:90:f9:70:38:9d:
                    c6:29:c5:87:60:29:75:ff:87:df:58:fd:6c:0a:50:
                    ce:0f:31:13:91:73:6e:47:1e:b1:70:25:f5:38:11:
                    26:28:ae:60:b1:96:9e:67:fb:a7:98:95:1a:88:12:
                    16:ac:b7:90:fd:1d:a4:1b:06:61:f6:8b:69:66:07:
                    5b:67:65:ab:be:7b:d3:81:64:68:70:32:ea:32:5a:
                    51:08:a2:13:39:67:ae:e9:88:ec:bc:b2:68:01:88:
                    7d:ce:69:d2:e5:3e:83:ef:0f:03:45:9c:c6:86:d1:
                    f9:8d:21:a4:90:5d:35:d4:31:af:35:37:89:a8:86:
                    a9:69:7e:a8:d4:ee:e8:75:e0:56:23:2c:3e:cb:cb:
                    67:16:7f:6e:0a:0c:cc:67:4f:74:17:0f:b6:f3:e9:
                    3d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:0D:74:D5:F7:2E:93:87:69:F4:C7:96:D3:44:F1:62:0E:CE:54:43
            X509v3 Authority Key Identifier:
                keyid:4C:06:31:2D:3A:0B:1C:63:F5:47:D4:D6:45:7C:4C:D5:AF:71:43:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAYxLToLHGP1R9TWRXxM1a9xQ80.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:7d:dc:9b:4f:65:07:dc:46:32:be:5b:68:11:32:3f:f2:33:
         3b:d9:a3:e9:1e:57:5e:f3:c3:49:6c:f0:f2:2c:93:3f:60:2c:
         3b:7a:1e:b4:a1:46:04:31:7f:4f:b5:39:69:91:36:77:14:8c:
         01:13:62:1a:9b:6b:60:5a:7f:6e:80:b1:e2:76:3e:08:be:90:
         d8:ec:63:60:b5:1f:2b:55:e0:2e:8d:45:80:73:e1:1e:c1:d8:
         7b:ad:4c:4e:7d:cf:fe:04:bf:3d:3a:5f:e3:a9:36:3d:0c:46:
         c8:1b:0b:2e:85:b7:4b:d9:3b:ee:8b:4b:0b:cf:a6:9d:8f:cd:
         a0:4e:36:ef:f7:e6:25:9f:a0:5b:43:48:40:46:4d:4e:f7:58:
         f0:a4:a0:ef:be:7e:35:4e:e1:c3:f9:c1:78:ab:0d:ef:70:d9:
         58:1a:05:62:ef:88:79:b0:68:b7:e6:d2:96:49:c3:e2:63:44:
         3b:f5:ac:09:c2:d5:1d:06:91:25:b8:03:82:32:2d:7b:d3:c1:
         8a:51:48:1e:9f:05:99:69:b8:70:b3:6b:5e:ba:22:b1:e4:9c:
         ba:8f:5d:a3:32:ef:9e:98:7e:06:71:ef:8e:1e:96:82:45:42:
         f3:8e:80:45:5b:40:0f:5a:be:bf:ab:12:0d:20:0d:b7:6c:28:
         20:3a:5c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:15:41 2026 by rpki-client