Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft
File:                     TAYxLToLHGP1R9TWRXxM1a9xQ80.mft (raw, json)
Hash identifier:          9ErzFWVdAjvTC61bfu+LabalwQ4SEBreQxa2emAiFXE=
Subject key identifier:   D8:43:6E:01:77:D2:D3:70:50:4A:0C:C6:E6:96:BF:89:B0:35:53:FC
Authority key identifier: 4C:06:31:2D:3A:0B:1C:63:F5:47:D4:D6:45:7C:4C:D5:AF:71:43:CD
Certificate issuer:       /CN=A91E0EF2/serialNumber=4C06312D3A0B1C63F547D4D6457C4CD5AF7143CD
Certificate serial:       04DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAYxLToLHGP1R9TWRXxM1a9xQ80.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft
Manifest number:          04D4
Signing time:             Thu 26 Mar 2026 23:37:50 +0000
Manifest this update:     Thu 26 Mar 2026 23:37:50 +0000
Manifest next update:     Thu 02 Apr 2026 23:37:50 +0000
Files and hashes:         1: TAYxLToLHGP1R9TWRXxM1a9xQ80.crl (hash: 36KzSe6pJybDM9y9+6qzpU9aLwclSKw/9wEMuRXI6sU=)
                          2: 09C2A1645A3511ED8F0A3087C4F9AE02.roa (hash: DkFecwB9znnuUrE2RmF4tqyznqLh8lhTWAuST9cTgro=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.crl
                          rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAYxLToLHGP1R9TWRXxM1a9xQ80.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 23:37:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1242 (0x4da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0EF2, serialNumber=4C06312D3A0B1C63F547D4D6457C4CD5AF7143CD
        Validity
            Not Before: Mar 26 23:37:50 2026 GMT
            Not After : Apr  2 23:37:50 2026 GMT
        Subject: CN=69c5c34e-0be1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1e:b9:9e:4d:65:88:5b:b9:f4:20:de:ac:0e:
                    b5:b0:a1:73:cb:e5:21:bf:48:ce:70:70:ae:c4:31:
                    3f:16:7a:d0:33:b7:2b:2e:b7:54:33:d3:6f:f7:9a:
                    e8:56:83:b1:72:8d:2d:6f:ac:f9:08:bb:f5:d8:20:
                    3e:84:ad:4f:64:23:dd:f5:e7:1a:7d:f6:ae:18:1a:
                    82:a2:81:99:11:f1:ec:0e:0e:53:f3:f5:a5:ee:ce:
                    a6:9e:a1:08:6b:5d:af:7a:d4:4a:42:73:cc:ee:e7:
                    23:01:8a:34:68:63:09:10:41:08:1a:b4:6f:82:38:
                    96:bd:2b:de:0f:dc:e0:e9:fd:3a:c5:6a:0c:07:6c:
                    d2:2f:fc:df:47:37:b1:c4:4f:ae:63:96:93:26:9b:
                    d3:8a:ac:b7:92:f8:9c:73:1b:3a:15:9c:c6:43:c9:
                    fc:f9:0a:b1:60:e0:05:63:57:08:3e:cf:9f:3a:4c:
                    3d:c1:ff:a5:80:99:9d:3f:ad:24:5b:37:9d:c8:8f:
                    a3:69:dd:0a:0a:e1:5a:9c:81:b4:ae:f0:ec:96:b5:
                    43:23:96:fd:82:1e:92:91:9c:fd:e3:80:6f:04:9f:
                    b4:c5:78:4d:79:7c:68:36:ad:4d:41:6c:b2:28:8a:
                    d0:5e:8f:38:aa:ff:40:6f:0d:bc:a1:bd:11:7c:be:
                    65:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:43:6E:01:77:D2:D3:70:50:4A:0C:C6:E6:96:BF:89:B0:35:53:FC
            X509v3 Authority Key Identifier:
                keyid:4C:06:31:2D:3A:0B:1C:63:F5:47:D4:D6:45:7C:4C:D5:AF:71:43:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAYxLToLHGP1R9TWRXxM1a9xQ80.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:1d:30:1a:12:07:d1:47:32:7f:57:7a:6e:4c:e8:b6:a9:52:
         3b:91:cb:8f:6b:a2:bb:d2:a6:59:b0:d1:e5:01:6f:50:7a:23:
         93:2a:ec:7d:b7:05:d2:1e:71:57:e5:5e:b2:3b:31:b6:d8:c6:
         6e:4f:a9:b5:a7:e2:bc:8b:88:15:4a:d3:59:74:42:c2:cc:50:
         4a:59:fe:74:d4:65:6a:01:fe:58:87:a7:bf:b9:29:7f:3a:31:
         bc:64:0e:8a:bf:78:5c:e2:01:0d:70:77:5e:70:dd:d1:fc:df:
         d5:3b:dd:64:41:48:7a:46:32:85:f5:ac:a5:cd:00:7f:7b:ef:
         00:48:1d:5c:2e:99:71:73:07:78:ef:82:51:e8:34:83:bc:cf:
         3d:ed:01:b1:bf:9d:1e:98:b1:9c:60:8a:c9:fc:e6:f3:d3:3f:
         ee:af:10:42:23:04:f0:99:85:68:1c:26:d0:31:42:0d:58:2d:
         93:53:f6:8a:22:03:64:02:1d:f4:87:3a:35:b2:9c:dc:bc:7f:
         c4:a7:96:18:f4:a7:f3:2e:cc:d4:3e:d6:fb:a4:59:cd:29:66:
         ab:78:3a:0b:6b:08:32:48:8b:27:13:af:13:3d:f5:92:ea:32:
         b5:86:94:7c:99:53:15:5f:e9:f5:31:f2:f9:75:8c:aa:01:a8:
         e2:2c:cf:dd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBNowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTBFRjIxMTAvBgNVBAUTKDRDMDYzMTJEM0EwQjFDNjNGNTQ3RDRENjQ1N0M0Q0Q1
QUY3MTQzQ0QwHhcNMjYwMzI2MjMzNzUwWhcNMjYwNDAyMjMzNzUwWjAYMRYwFAYD
VQQDEw02OWM1YzM0ZS0wYmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArx65nk1liFu59CDerA61sKFzy+Uhv0jOcHCuxDE/FnrQM7crLrdUM9Nv95ro
VoOxco0tb6z5CLv12CA+hK1PZCPd9ecaffauGBqCooGZEfHsDg5T8/Wl7s6mnqEI
a12vetRKQnPM7ucjAYo0aGMJEEEIGrRvgjiWvSveD9zg6f06xWoMB2zSL/zfRzex
xE+uY5aTJpvTiqy3kviccxs6FZzGQ8n8+QqxYOAFY1cIPs+fOkw9wf+lgJmdP60k
WzedyI+jad0KCuFanIG0rvDslrVDI5b9gh6SkZz944BvBJ+0xXhNeXxoNq1NQWyy
KIrQXo84qv9Abw28ob0RfL5lHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNhDbgF3
0tNwUEoMxuaWv4mwNVP8MB8GA1UdIwQYMBaAFEwGMS06Cxxj9UfU1kV8TNWvcUPN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEVGMi9CNTA1NDY1MjVF
RTIxMUVDQUZBNjRCNDRDNEY5QUUwMi9UQVl4TFRvTEhHUDFSOVRXUlh4TTFhOXhR
ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RBWXhMVG9MSEdQMVI5VFdSWHhNMWE5eFE4MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MEVGMi9CNTA1NDY1MjVFRTIxMUVDQUZBNjRCNDRDNEY5QUUwMi9UQVl4TFRvTEhH
UDFSOVRXUlh4TTFhOXhRODAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOh0wGhIH0Ucyf1d6bkzotqlSO5HLj2uiu9KmWbDR5QFvUHojkyrsfbcF0h5x
V+VesjsxttjGbk+ptafivIuIFUrTWXRCwsxQSln+dNRlagH+WIenv7kpfzoxvGQO
ir94XOIBDXB3XnDd0fzf1TvdZEFIekYyhfWspc0Af3vvAEgdXC6ZcXMHeO+CUeg0
g7zPPe0Bsb+dHpixnGCKyfzm89M/7q8QQiME8JmFaBwm0DFCDVgtk1P2iiIDZAId
9Ic6NbKc3Lx/xKeWGPSn8y7M1D7W+6RZzSlmq3g6C2sIMkiLJxOvEz31kuoytYaU
fJlTFV/p9THy+XWMqgGo4izP3Q==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:41:54 2026 by rpki-client