Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9188AB8/63D3B36EAB7211F085C6DF5BC4F9AE02/taoJHUe5b__ilkNNAcZFS04cnhk.mft
File:                     taoJHUe5b__ilkNNAcZFS04cnhk.mft (raw, json)
Hash identifier:          dqU74prFh485EpYQ5OPdMTIHhcAZbjV2J2GqFB2Gamw=
Subject key identifier:   67:F8:07:95:D2:0E:B0:9C:78:E7:16:15:A0:C7:CC:35:21:BB:DB:1A
Authority key identifier: B5:AA:09:1D:47:B9:6F:FF:E2:96:43:4D:01:C6:45:4B:4E:1C:9E:19
Certificate issuer:       /CN=A9188AB8/serialNumber=B5AA091D47B96FFFE296434D01C6454B4E1C9E19
Certificate serial:       B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taoJHUe5b__ilkNNAcZFS04cnhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188AB8/63D3B36EAB7211F085C6DF5BC4F9AE02/taoJHUe5b__ilkNNAcZFS04cnhk.mft
Manifest number:          B1
Signing time:             Wed 23 Sep 2026 06:49:08 +0000
Manifest this update:     Wed 23 Sep 2026 06:49:08 +0000
Manifest next update:     Wed 30 Sep 2026 06:49:08 +0000
Files and hashes:         1: taoJHUe5b__ilkNNAcZFS04cnhk.crl (hash: L5VBvcEOKKDbT9Qyi3E6gwtn4AhVkPEIuo9BohSzDcU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188AB8/63D3B36EAB7211F085C6DF5BC4F9AE02/taoJHUe5b__ilkNNAcZFS04cnhk.crl
                          rsync://rpki.apnic.net/member_repository/A9188AB8/63D3B36EAB7211F085C6DF5BC4F9AE02/taoJHUe5b__ilkNNAcZFS04cnhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taoJHUe5b__ilkNNAcZFS04cnhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:25:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188AB8, serialNumber=B5AA091D47B96FFFE296434D01C6454B4E1C9E19
        Validity
            Not Before: Sep 23 06:49:08 2026 GMT
            Not After : Sep 30 06:49:08 2026 GMT
        Subject: CN=6ab37664-a0e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8f:87:90:68:2d:ce:a6:0a:86:1a:ec:2b:a1:
                    05:b6:16:b2:e0:f2:45:7f:de:3e:e1:c8:4a:f1:d2:
                    5e:6d:bb:b9:64:38:6c:68:85:2d:de:65:b2:32:de:
                    7c:d2:83:e9:9a:59:a5:a6:03:9b:2c:a4:71:9f:9a:
                    83:9a:89:af:bf:3e:a4:84:e6:39:22:ec:91:77:0a:
                    20:af:4b:49:41:df:65:1b:e4:12:87:57:04:f5:d7:
                    d3:db:1f:ad:3a:5e:50:65:81:5d:b9:34:a4:e6:75:
                    66:8a:d9:57:a4:b8:f8:f8:04:b7:08:1f:7f:e4:61:
                    b9:4b:4b:11:f5:ba:70:09:ea:43:16:29:5a:7a:e0:
                    ff:5c:b7:a5:66:e3:ad:0b:5b:71:9e:a0:31:3a:28:
                    3a:09:ae:a5:41:63:2b:23:0c:4d:f8:19:eb:69:7c:
                    fa:20:19:41:2e:54:20:ae:c9:a7:b0:e6:10:d2:00:
                    c8:7f:81:23:d3:a4:39:fe:1f:aa:99:60:22:c6:cf:
                    f6:92:18:80:4b:a5:bf:ca:df:b6:bf:92:b7:41:96:
                    37:dc:66:45:a8:67:40:ce:34:c5:83:dd:2a:8c:33:
                    cb:c5:c0:b1:9e:58:44:ca:61:d0:aa:4a:74:b1:a8:
                    3c:78:39:d3:d0:b3:cb:b5:82:e9:63:f0:42:02:3c:
                    2f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F8:07:95:D2:0E:B0:9C:78:E7:16:15:A0:C7:CC:35:21:BB:DB:1A
            X509v3 Authority Key Identifier:
                keyid:B5:AA:09:1D:47:B9:6F:FF:E2:96:43:4D:01:C6:45:4B:4E:1C:9E:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188AB8/63D3B36EAB7211F085C6DF5BC4F9AE02/taoJHUe5b__ilkNNAcZFS04cnhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taoJHUe5b__ilkNNAcZFS04cnhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188AB8/63D3B36EAB7211F085C6DF5BC4F9AE02/taoJHUe5b__ilkNNAcZFS04cnhk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:7b:37:79:08:f6:2b:6a:7f:fe:88:d9:06:e3:5d:82:4c:74:
         7d:34:b3:66:4a:81:d5:04:a8:75:5a:7f:84:25:77:75:d4:82:
         bc:53:51:3e:81:50:bf:3d:78:9c:da:42:3e:4b:28:7a:9e:52:
         0d:08:c1:8b:dd:42:f2:1b:9b:bb:a0:a4:31:a5:8e:2c:5d:fd:
         f5:1e:c9:ca:47:c0:e2:b8:0f:c7:b5:2f:89:d0:e2:48:cb:f7:
         26:33:06:70:24:4c:4f:49:f4:f7:ac:77:95:ff:4b:78:76:99:
         7f:86:ca:46:6a:bb:db:02:c8:d9:19:1b:d5:c3:f8:a4:95:81:
         d9:c5:9a:fd:cf:8b:b8:3e:6e:44:d5:0a:72:31:1f:74:9f:97:
         fe:21:56:e9:6f:d2:e1:a9:16:1e:48:32:e2:5d:38:b5:00:ac:
         0e:0b:dc:f1:37:43:bf:5f:aa:9a:ee:5d:ce:62:bc:70:8d:d5:
         dc:23:e7:47:77:3c:89:10:bc:4a:a1:4a:53:2d:2f:e3:94:db:
         83:25:b1:1f:3d:cc:64:aa:0a:90:cc:e7:d2:f5:05:1d:ee:bf:
         c9:75:54:44:0a:a7:0b:1f:fb:66:0e:58:e7:f8:be:7f:26:10:
         ad:9a:e5:ae:77:d7:08:13:a0:a0:5f:8a:e6:18:78:e0:bd:fc:
         04:8b:68:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:09:54 2026 by rpki-client