Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft
File:                     Tusdx9KCFNMWqjN4seKV6RAbTKo.mft (raw, json)
Hash identifier:          Tj2w9PwuQnPOURmDQKwh5gqNOWzoREX0z8KnZACNBvw=
Subject key identifier:   0B:B5:F4:DE:7C:D9:DB:68:BE:A4:31:51:EB:55:CB:73:D5:14:76:12
Authority key identifier: 4E:EB:1D:C7:D2:82:14:D3:16:AA:33:78:B1:E2:95:E9:10:1B:4C:AA
Certificate issuer:       /CN=A91B6B4B/serialNumber=4EEB1DC7D28214D316AA3378B1E295E9101B4CAA
Certificate serial:       EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft
Manifest number:          E8
Signing time:             Thu 23 Jul 2026 08:13:21 +0000
Manifest this update:     Thu 23 Jul 2026 08:13:21 +0000
Manifest next update:     Thu 30 Jul 2026 08:13:21 +0000
Files and hashes:         1: Tusdx9KCFNMWqjN4seKV6RAbTKo.crl (hash: u0hYS86+WTPiAA4jkaqDB09CSK2A5iGqA9IulsZhhKU=)
                          2: B47FEDD024C411F0A4C45287C4F9AE02.roa (hash: MojY0BL42g+25RMVkptUnRgFYNWH3XV06u/QKeiFORg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.crl
                          rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:13:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6B4B, serialNumber=4EEB1DC7D28214D316AA3378B1E295E9101B4CAA
        Validity
            Not Before: Jul 23 08:13:21 2026 GMT
            Not After : Jul 30 08:13:21 2026 GMT
        Subject: CN=6a61cd21-913e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9e:40:d0:75:56:47:d3:87:37:11:6c:56:a3:
                    50:b9:fb:0b:2d:a8:33:d4:47:de:b6:18:a8:dc:58:
                    19:5a:c5:7f:45:fc:48:7e:c6:22:74:05:da:75:81:
                    34:98:0a:88:72:72:61:e6:9e:a2:3f:b3:29:9b:e8:
                    2a:81:cf:71:35:f7:8e:72:3f:41:c2:32:3f:42:6b:
                    96:51:d8:97:23:29:af:46:4a:23:ee:f7:6f:30:cc:
                    81:23:8c:41:03:42:e3:02:e1:33:e9:00:ec:4c:1f:
                    54:50:77:b3:0f:db:67:be:ef:97:29:6b:58:cc:17:
                    61:ef:b1:5a:5f:14:0d:1c:2b:f1:42:27:b7:57:c7:
                    7e:bf:59:91:f9:d6:69:00:4e:65:8f:57:61:81:f2:
                    a9:fd:4c:f5:b0:b2:a6:f2:e6:df:79:48:8c:da:1b:
                    1e:54:f7:46:5f:eb:70:96:85:10:d4:85:68:37:ba:
                    12:87:64:67:cc:3f:6d:aa:01:2b:67:90:41:0f:96:
                    61:05:fc:26:01:45:a9:cd:e0:67:d3:3b:63:20:3d:
                    3f:59:d8:3f:70:c3:b9:f3:94:c4:67:8d:6d:0e:c9:
                    5d:5f:d2:fe:cb:41:b9:26:70:97:57:e3:08:b5:94:
                    a3:2a:cd:e6:76:71:1c:59:28:9f:10:66:7f:4f:d2:
                    db:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B5:F4:DE:7C:D9:DB:68:BE:A4:31:51:EB:55:CB:73:D5:14:76:12
            X509v3 Authority Key Identifier:
                keyid:4E:EB:1D:C7:D2:82:14:D3:16:AA:33:78:B1:E2:95:E9:10:1B:4C:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:d0:a3:c0:ba:21:77:28:b8:96:d0:08:86:98:2c:18:3c:6c:
         69:23:9b:b3:ff:39:a4:56:ce:c4:08:e1:27:92:3a:fa:0f:71:
         16:c1:d4:24:43:7b:06:27:44:b9:46:de:bf:b6:94:73:07:5b:
         49:5b:9f:6d:53:ec:ba:b1:44:2e:d9:3e:47:71:9a:97:50:b9:
         46:43:02:30:8a:db:30:32:9c:9f:a6:ba:1d:24:31:27:9e:f7:
         c8:49:1a:52:39:69:60:ae:dd:06:16:5a:e3:07:14:10:9e:fb:
         77:d2:fa:ec:d5:44:77:8b:5f:58:82:5f:2c:09:5c:1e:14:46:
         23:41:30:5c:f6:c3:49:7b:ab:8e:6f:54:e9:3b:d8:05:ea:10:
         9f:c0:d1:e4:67:d6:bb:b9:67:12:e6:eb:9f:15:dc:7e:db:c6:
         9e:fd:4a:1c:51:78:76:3c:e9:71:d3:a9:6e:f4:46:b3:6a:5d:
         ca:73:a3:15:4e:3e:69:d7:6a:a6:3f:5e:e5:2f:fe:ed:49:63:
         11:ff:08:98:1e:39:2c:c3:32:27:07:88:31:56:e7:c8:87:7e:
         88:1f:5a:83:32:86:8f:91:1f:b6:14:d9:a1:56:af:79:23:87:
         81:c8:4b:63:e0:fb:c3:9f:60:0d:22:7f:35:af:5f:ce:b3:e4:
         80:f3:c1:bc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjZCNEIxMTAvBgNVBAUTKDRFRUIxREM3RDI4MjE0RDMxNkFBMzM3OEIxRTI5NUU5
MTAxQjRDQUEwHhcNMjYwNzIzMDgxMzIxWhcNMjYwNzMwMDgxMzIxWjAYMRYwFAYD
VQQDEw02YTYxY2QyMS05MTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlZ5A0HVWR9OHNxFsVqNQufsLLagz1Efethio3FgZWsV/RfxIfsYidAXadYE0
mAqIcnJh5p6iP7Mpm+gqgc9xNfeOcj9BwjI/QmuWUdiXIymvRkoj7vdvMMyBI4xB
A0LjAuEz6QDsTB9UUHezD9tnvu+XKWtYzBdh77FaXxQNHCvxQie3V8d+v1mR+dZp
AE5lj1dhgfKp/Uz1sLKm8ubfeUiM2hseVPdGX+twloUQ1IVoN7oSh2RnzD9tqgEr
Z5BBD5ZhBfwmAUWpzeBn0ztjID0/Wdg/cMO585TEZ41tDsldX9L+y0G5JnCXV+MI
tZSjKs3mdnEcWSifEGZ/T9LbmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAu19N58
2dtovqQxUetVy3PVFHYSMB8GA1UdIwQYMBaAFE7rHcfSghTTFqozeLHilekQG0yq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkI0Qi9DMzk5RkJDMjI0
QzMxMUYwOTZDNjg0ODFDNEY5QUUwMi9UdXNkeDlLQ0ZOTVdxak40c2VLVjZSQWJU
S28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1R1c2R4OUtDRk5NV3FqTjRzZUtWNlJBYlRLby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NkI0Qi9DMzk5RkJDMjI0QzMxMUYwOTZDNjg0ODFDNEY5QUUwMi9UdXNkeDlLQ0ZO
TVdxak40c2VLVjZSQWJUS28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVtCjwLohdyi4ltAIhpgsGDxsaSObs/85pFbOxAjhJ5I6+g9xFsHUJEN7BidE
uUbev7aUcwdbSVufbVPsurFELtk+R3Gal1C5RkMCMIrbMDKcn6a6HSQxJ573yEka
UjlpYK7dBhZa4wcUEJ77d9L67NVEd4tfWIJfLAlcHhRGI0EwXPbDSXurjm9U6TvY
BeoQn8DR5GfWu7lnEubrnxXcftvGnv1KHFF4djzpcdOpbvRGs2pdynOjFU4+addq
pj9e5S/+7UljEf8ImB45LMMyJweIMVbnyId+iB9agzKGj5EfthTZoVaveSOHgchL
Y+D7w59gDSJ/Na9fzrPkgPPBvA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:07:06 2026 by rpki-client