Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft
File:                     TjxBSRoYtEm7EK5gcQF04-4-sWE.mft (raw, json)
Hash identifier:          tywHWtTsDTEn7lDATjlmpxUWzUMZL0vOJfr8f16QbRE=
Subject key identifier:   EC:F6:4A:B1:0A:94:EF:BA:24:6F:1B:68:22:25:3E:EA:51:B5:09:88
Authority key identifier: 4E:3C:41:49:1A:18:B4:49:BB:10:AE:60:71:01:74:E3:EE:3E:B1:61
Certificate issuer:       /CN=A91E6D5D/serialNumber=4E3C41491A18B449BB10AE60710174E3EE3EB161
Certificate serial:       3558
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft
Manifest number:          A2A2
Signing time:             Wed 22 Jul 2026 14:31:26 +0000
Manifest this update:     Wed 22 Jul 2026 14:31:25 +0000
Manifest next update:     Wed 29 Jul 2026 14:31:25 +0000
Files and hashes:         1: TjxBSRoYtEm7EK5gcQF04-4-sWE.crl (hash: f1jJYAvpZaZvPOAv7onAbCjOgAQwztzVpT+UgSjPgXw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.crl
                          rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13656 (0x3558)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6D5D, serialNumber=4E3C41491A18B449BB10AE60710174E3EE3EB161
        Validity
            Not Before: Jul 22 14:31:25 2026 GMT
            Not After : Jul 29 14:31:25 2026 GMT
        Subject: CN=6a60d43e-7e0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:be:65:c3:b2:86:47:b2:60:73:b9:f0:eb:01:
                    4e:f9:bd:0b:27:db:7a:06:8b:38:82:8e:d2:ca:92:
                    a9:f7:47:6a:8e:87:f7:2d:3e:8c:e6:40:d2:53:cd:
                    85:f5:3b:4d:66:45:6a:a3:dd:2a:28:30:51:7b:6c:
                    ee:88:d8:ba:d0:f7:d8:66:2b:37:22:5a:b4:42:01:
                    b0:1b:ed:6c:52:e2:a4:2d:a3:87:97:89:1f:4a:c5:
                    1e:1a:fa:ba:6f:78:50:74:00:63:83:e0:26:55:b5:
                    ca:5c:04:0f:a8:ac:b2:06:71:90:61:b2:ff:7b:38:
                    a5:f6:ab:22:de:9d:24:f1:c8:40:5b:d9:27:ae:3a:
                    d0:17:e6:dc:3d:bd:2e:89:bd:18:9c:75:82:4b:a2:
                    07:ac:0a:f9:7d:1c:1a:31:4e:33:fc:53:95:85:f8:
                    84:d6:89:19:23:c6:48:87:7c:75:e1:59:20:5e:59:
                    77:56:b3:32:62:ee:90:ad:46:41:3a:fb:99:37:d9:
                    69:da:5f:16:30:b4:a4:1c:0e:44:d0:a2:a4:ae:2f:
                    99:00:b5:7c:68:7e:b9:e8:3f:43:71:04:7b:68:31:
                    69:95:65:f0:29:77:f7:86:58:80:9a:7f:5f:6d:49:
                    3e:0d:11:c8:21:d2:1b:ce:34:24:0a:1d:ac:c1:f5:
                    ae:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F6:4A:B1:0A:94:EF:BA:24:6F:1B:68:22:25:3E:EA:51:B5:09:88
            X509v3 Authority Key Identifier:
                keyid:4E:3C:41:49:1A:18:B4:49:BB:10:AE:60:71:01:74:E3:EE:3E:B1:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:e0:00:82:dd:c8:43:76:1a:1b:f0:1c:0d:9a:32:11:32:97:
         db:84:a3:09:43:2b:73:8f:6c:e5:86:9a:ec:c0:e8:8b:da:a5:
         57:86:8e:3f:48:69:54:15:f8:ea:0b:0b:b4:f8:83:ca:a2:66:
         6b:40:46:45:76:fb:a8:91:2a:da:d2:19:ae:a8:8c:82:af:d4:
         5d:51:48:0d:ce:d9:fb:b0:c8:63:d5:a3:8c:3e:86:0a:0f:b2:
         33:82:e8:13:6b:d6:37:25:a1:84:41:6a:66:0a:a6:ad:49:aa:
         89:f7:99:11:e6:09:7e:d7:a9:8f:6b:32:2f:34:c7:1b:df:9f:
         e7:55:3c:ea:6d:9c:ec:5e:f9:8c:2f:d9:8e:55:26:a2:4d:5a:
         89:b9:72:0b:78:1a:3c:ba:dd:73:74:d0:d9:a3:f8:27:53:39:
         1f:44:cd:4d:9c:a3:53:cc:e1:f7:24:e6:23:c2:c9:c6:fc:3b:
         7c:53:01:2b:aa:e8:f3:cd:b6:98:4e:a3:ad:61:2c:af:ef:9a:
         52:62:d8:8d:09:53:fa:8e:dc:19:f0:a7:68:d1:dc:92:af:4a:
         d0:73:89:c7:40:27:ad:7a:74:95:74:63:5a:25:dc:72:b6:91:
         84:62:0b:06:4b:f8:3f:f5:76:46:db:1c:77:43:81:54:8f:14:
         75:ef:3c:b5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTZENUQxMTAvBgNVBAUTKDRFM0M0MTQ5MUExOEI0NDlCQjEwQUU2MDcxMDE3NEUz
RUUzRUIxNjEwHhcNMjYwNzIyMTQzMTI1WhcNMjYwNzI5MTQzMTI1WjAYMRYwFAYD
VQQDEw02YTYwZDQzZS03ZTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzL5lw7KGR7Jgc7nw6wFO+b0LJ9t6Bos4go7SypKp90dqjof3LT6M5kDSU82F
9TtNZkVqo90qKDBRe2zuiNi60PfYZis3Ilq0QgGwG+1sUuKkLaOHl4kfSsUeGvq6
b3hQdABjg+AmVbXKXAQPqKyyBnGQYbL/ezil9qsi3p0k8chAW9knrjrQF+bcPb0u
ib0YnHWCS6IHrAr5fRwaMU4z/FOVhfiE1okZI8ZIh3x14VkgXll3VrMyYu6QrUZB
OvuZN9lp2l8WMLSkHA5E0KKkri+ZALV8aH656D9DcQR7aDFplWXwKXf3hliAmn9f
bUk+DRHIIdIbzjQkCh2swfWuGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOz2SrEK
lO+6JG8baCIlPupRtQmIMB8GA1UdIwQYMBaAFE48QUkaGLRJuxCuYHEBdOPuPrFh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE
ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9UanhCU1JvWXRFbTdFSzVnY1FGMDQtNC1z
V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RqeEJTUm9ZdEVtN0VLNWdjUUYwNC00LXNXRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9UanhCU1JvWXRF
bTdFSzVnY1FGMDQtNC1zV0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbuAAgt3IQ3YaG/AcDZoyETKX24SjCUMrc49s5Yaa7MDoi9qlV4aOP0hpVBX4
6gsLtPiDyqJma0BGRXb7qJEq2tIZrqiMgq/UXVFIDc7Z+7DIY9WjjD6GCg+yM4Lo
E2vWNyWhhEFqZgqmrUmqifeZEeYJftepj2syLzTHG9+f51U86m2c7F75jC/ZjlUm
ok1aiblyC3gaPLrdc3TQ2aP4J1M5H0TNTZyjU8zh9yTmI8LJxvw7fFMBK6ro8822
mE6jrWEsr++aUmLYjQlT+o7cGfCnaNHckq9K0HOJx0AnrXp0lXRjWiXccraRhGIL
Bkv4P/V2Rtscd0OBVI8Ude88tQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:44:32 2026 by rpki-client