Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft
File:                     TAYxLToLHGP1R9TWRXxM1a9xQ80.mft (raw, json)
Hash identifier:          SqFFZVJhOYY2UzO7WjTqDqKefwmGMac0RF4j+dkzjVM=
Subject key identifier:   0F:5A:B3:B0:36:B8:6B:74:2C:01:8B:A1:31:52:CE:93:EA:66:90:2B
Authority key identifier: 4C:06:31:2D:3A:0B:1C:63:F5:47:D4:D6:45:7C:4C:D5:AF:71:43:CD
Certificate issuer:       /CN=A91E0EF2/serialNumber=4C06312D3A0B1C63F547D4D6457C4CD5AF7143CD
Certificate serial:       0536
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAYxLToLHGP1R9TWRXxM1a9xQ80.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft
Manifest number:          0530
Signing time:             Tue 22 Sep 2026 23:12:46 +0000
Manifest this update:     Tue 22 Sep 2026 23:12:45 +0000
Manifest next update:     Tue 29 Sep 2026 23:12:45 +0000
Files and hashes:         1: TAYxLToLHGP1R9TWRXxM1a9xQ80.crl (hash: vPr1ubLm/WBPWSteQyZD3Yxd+lA/i+7rNXj/qMK42DM=)
                          2: 09C2A1645A3511ED8F0A3087C4F9AE02.roa (hash: DkFecwB9znnuUrE2RmF4tqyznqLh8lhTWAuST9cTgro=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.crl
                          rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAYxLToLHGP1R9TWRXxM1a9xQ80.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 23:12:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1334 (0x536)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0EF2, serialNumber=4C06312D3A0B1C63F547D4D6457C4CD5AF7143CD
        Validity
            Not Before: Sep 22 23:12:45 2026 GMT
            Not After : Sep 29 23:12:45 2026 GMT
        Subject: CN=6ab30b6e-a957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5e:3b:7a:d3:95:ac:b1:06:dd:6d:7b:fc:35:
                    db:6f:ec:fb:12:ce:d7:20:62:cc:04:1d:1c:e2:1f:
                    34:d8:eb:67:84:01:44:00:65:5b:e7:48:7c:64:ab:
                    97:8d:aa:da:91:14:68:ff:ca:bd:58:54:c9:a8:e1:
                    92:b2:bc:ff:b6:eb:62:3d:75:ab:23:3c:52:47:c3:
                    f7:8b:20:c8:75:55:6f:74:4e:1a:76:9e:ff:52:21:
                    f9:aa:8d:cf:69:07:57:e0:1e:a7:7e:95:eb:5a:95:
                    6d:8c:3d:3a:11:b8:25:c2:4f:fa:47:bb:b8:f9:65:
                    b0:aa:79:56:ad:e5:0a:69:c8:73:5c:65:9c:31:39:
                    72:21:7d:67:24:44:a7:2d:af:8d:51:f1:ef:cd:5a:
                    e1:80:7a:8d:54:57:c9:d9:e3:c8:b2:15:5c:e5:55:
                    c6:35:4e:76:89:de:02:ad:4e:2c:cd:80:2f:51:9d:
                    06:96:e4:f3:a6:0d:8b:89:94:4d:00:4b:a3:f5:f8:
                    3c:b3:e9:29:be:58:f2:f6:67:d5:55:e2:57:2e:42:
                    f3:ea:dc:4a:47:68:ea:11:74:5a:b0:cd:5b:86:64:
                    e5:44:49:89:88:4a:b1:f6:c4:8c:26:d9:a0:cb:c7:
                    82:e7:cc:4c:26:3d:4e:7c:5b:80:97:2e:78:cd:1d:
                    c4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5A:B3:B0:36:B8:6B:74:2C:01:8B:A1:31:52:CE:93:EA:66:90:2B
            X509v3 Authority Key Identifier:
                keyid:4C:06:31:2D:3A:0B:1C:63:F5:47:D4:D6:45:7C:4C:D5:AF:71:43:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAYxLToLHGP1R9TWRXxM1a9xQ80.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:09:0b:c6:1b:31:8e:f1:e1:2c:7b:1e:81:ca:45:cb:91:07:
         f2:18:0e:8d:8a:d5:19:ac:6d:98:19:b7:79:cc:cc:47:5b:84:
         40:bd:a1:9c:76:4a:00:94:22:a1:7f:8d:11:08:60:f0:1f:c6:
         0b:7b:22:f0:0b:b3:ec:17:b4:dd:1b:37:32:27:f0:7c:5f:d8:
         86:32:66:4d:4e:8f:5a:a6:a2:dd:76:4a:98:2f:08:02:ac:e9:
         30:02:6e:4b:1c:19:f7:f9:94:5a:e0:49:7b:3a:d1:35:79:24:
         51:35:7f:64:29:8e:3f:12:32:62:be:e5:09:1f:65:22:fd:03:
         ce:40:d8:24:2b:c4:ca:22:f7:4d:9e:7a:cd:c2:f1:f2:0a:ca:
         e3:2a:f1:29:23:ee:07:bf:29:36:c7:aa:29:6b:16:42:d2:53:
         1f:3d:55:1b:0d:56:4b:7e:6a:d5:2b:40:27:12:5f:03:f4:f0:
         38:12:e6:c2:24:dd:21:b9:63:f6:20:41:83:34:b1:5e:c2:81:
         2b:4f:f9:a2:b3:1f:35:87:3e:fa:8e:a5:4f:d9:1e:fa:c1:5e:
         07:cb:f7:90:cd:6a:b6:9c:25:4b:18:f5:df:95:ce:cf:92:c3:
         29:7d:d5:93:c5:67:ff:28:6a:06:42:b0:06:96:ba:8a:60:89:
         20:41:85:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:56:55 2026 by rpki-client