Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
File:                     TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft (raw, json)
Hash identifier:          BR/QCFldqwKqqxdCJDmlNWJSxEyiBL5kymj9fzCdNU4=
Subject key identifier:   6D:D2:E1:2E:9B:F7:2C:47:73:5D:A5:48:5B:FF:AD:2B:C7:8D:74:38
Authority key identifier: 4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D
Certificate issuer:       /CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
Certificate serial:       366E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
Manifest number:          35CA
Signing time:             Mon 20 Jul 2026 14:59:35 +0000
Manifest this update:     Mon 20 Jul 2026 14:59:34 +0000
Manifest next update:     Mon 27 Jul 2026 14:59:34 +0000
Files and hashes:         1: TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl (hash: aIm4VbQo9+fFPF4VtD6kivzr+oX2gkGfTiGcdEYppa4=)
                          2: B55C1B0CC6A411F0A408EE7AC4F9AE02.roa (hash: X1b91kjhN2zv6W6/j8hQrToM9JGJxLjczB6EqHMIOWY=)
                          3: B64F4796C6A411F08CECEE7AC4F9AE02.roa (hash: 9Jynqmi/gB99jci6ggMyKRV6Dkc/gMa93AFgdesb6v0=)
                          4: E205744CABA111EAB7C51982C4F9AE02.roa (hash: maoC/CPKGCGNHLen8pJwPD1KgmFNilHCq14nhz/BxFg=)
                          5: 9A05BA12D86B11E9B8BFCE0AC4F9AE02.roa (hash: gGhukCL6lx8yYMc3XoZXuAuKGy5qCMkAQFaNYx2UVBo=)
                          6: 4754ED7C16BF11EBB31D5A6AC4F9AE02.roa (hash: ZJcFcxd06hMO8B2ugrVOha+QcsYL5Uhm5p6cGyGTG/c=)
                          7: CD072488981C11F081BD5721C4F9AE02.roa (hash: cxBmEBTcBfMyyvAlB+eLC5fqMYrlz3kg2+JupwPAjOA=)
                          8: B5DAF292C6A411F092F1EE7AC4F9AE02.roa (hash: ZOE+ul17pVmegkb++bJCcAeEY8oGwonKzzJtuNTmLFQ=)
                          9: D85FB84853BE11EF819E6347C4F9AE02.roa (hash: fWuhRWvQ3Edrdp8Xh2OPG31qXzaHDm9E0X4C1jpzpIA=)
                          10: E2A6885AABA111EAB7C51982C4F9AE02.roa (hash: 8YElfuPm+hdksAg1+pFS3ilrSanU7z1LehRzNHr86x4=)
                          11: 49FEE4EA83CC11F09BE0565EC4F9AE02.roa (hash: eQqXfw7KpOOBP+Td93jgjIhVJNu+VT2VfIFdrctBg/A=)
                          12: D7F4292A53BE11EF819E6347C4F9AE02.roa (hash: Ue/t1PP419JlxBz1cKkLY7GRQHiNwZY7sf9eJ0m5LyI=)
                          13: AA7E3F9017A211F1926DA6A3313D8C67.roa (hash: GnuKyfqEmvHQRhG8cmrkPOk+QiYsUuZaYBiHBZl6g9E=)
                          14: 502A4A36AAA611EE998EEF3AC4F9AE02.roa (hash: rJcH7U56XuZEecskwbJvsdvGpT+jiKhjpWcLXzO0cjk=)
                          15: C32EFEC617A211F19C2A0006323D8C67.roa (hash: A2O1ksquVn5Ms9ttsYq8s1cge74wxeUlGkxPG701xZk=)
                          16: 6D620D7C4F4611F1B256E3C2B9833773.roa (hash: Qg4ATAGC2yyadjW08JLljbFQYZSwalsm2LHZuiJZR90=)
                          17: 9427EF0A7CA411F09AE49B57C4F9AE02.roa (hash: TpT4U8yHKg64HLNgX85ae6aJUp587b7Y5hN18WZtP4E=)
                          18: 586B5D9ED9F811E9A6874F46C4F9AE02.roa (hash: 7zglLDP11gzpQTB1+7hilO7iWT3HFWV4SBuiijDuHdQ=)
                          19: 78488CF4AD7411EAB93BA123C4F9AE02.roa (hash: XlwaXG0CLLlJ3jhue1QTDVM5EZboLImWAg1GFuaWpAc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl
                          rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 14:59:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13934 (0x366e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914781A, serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
        Validity
            Not Before: Jul 20 14:59:34 2026 GMT
            Not After : Jul 27 14:59:34 2026 GMT
        Subject: CN=6a5e37d7-f0a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9f:ab:d8:56:3f:e5:e8:10:47:f3:82:ae:ee:
                    db:77:55:d7:2d:eb:55:a3:45:49:48:64:21:53:98:
                    df:9d:18:87:22:59:e8:ff:2d:73:05:5a:79:fd:95:
                    34:95:82:45:2c:b6:e1:ff:47:d4:3f:78:07:5a:5a:
                    cb:09:ef:13:fc:84:71:60:93:4b:04:8d:d3:fd:f7:
                    1b:20:ae:4b:79:1d:ce:cb:c0:dc:04:f7:b9:27:4a:
                    9b:47:51:9e:0a:56:68:20:67:ec:46:0a:e2:52:60:
                    d8:58:0b:f9:fe:7b:fe:de:9e:ed:5f:7b:28:9e:c4:
                    36:b0:66:7b:7e:c7:68:63:44:a1:6d:f6:76:f7:92:
                    79:35:80:e0:c2:07:f3:b8:5d:2b:d7:ff:1a:c1:7b:
                    c2:3c:90:da:5b:20:94:4d:84:50:25:ed:eb:d1:7b:
                    5e:78:a6:12:7c:e9:8c:05:a7:5b:50:09:0e:0d:b4:
                    42:af:f8:e7:fe:5e:32:24:1f:6c:64:5d:f9:24:51:
                    4d:d5:0f:d4:77:2a:49:c2:d9:9f:55:11:c5:00:1e:
                    50:b2:99:36:64:5e:f4:13:2f:87:7f:98:5c:7a:67:
                    d5:7b:94:b6:fe:76:69:e2:ac:66:3e:2b:f2:7a:48:
                    03:6a:95:38:98:1e:1d:c0:c2:5d:60:c6:77:94:85:
                    d3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D2:E1:2E:9B:F7:2C:47:73:5D:A5:48:5B:FF:AD:2B:C7:8D:74:38
            X509v3 Authority Key Identifier:
                keyid:4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:a7:a6:a0:1d:dd:a5:81:19:5a:c6:b0:b1:2c:af:e6:52:40:
         14:93:a8:16:24:8e:bb:45:fa:d5:f9:5b:9a:38:ec:80:88:7a:
         f0:01:14:ff:e6:3e:6c:1e:05:f5:56:4a:9d:35:61:20:d7:74:
         fa:60:9a:46:4d:42:c7:b4:36:36:c1:8a:ce:92:c2:95:8c:1b:
         09:ea:4e:01:c5:14:42:4b:0a:db:f8:0c:17:e8:85:95:08:2e:
         aa:ef:69:eb:64:22:2e:49:c8:37:f7:cc:e5:dc:92:da:91:b5:
         46:6a:94:6a:54:c5:51:41:e0:c2:63:32:0b:97:5c:bf:eb:9b:
         17:db:fa:b1:02:17:96:b7:c0:c5:3a:2e:ba:6a:ef:fb:4b:16:
         75:55:e7:cc:e7:f1:3e:f6:84:2e:cb:e4:52:fe:b4:ae:62:fc:
         5a:c7:b1:d9:56:0e:41:e8:76:4a:0f:ba:9b:b5:9a:e4:13:30:
         6d:24:e0:47:b4:97:7b:04:cb:58:c1:8b:2d:ca:c3:c9:0a:61:
         37:c6:5f:3a:1e:68:09:a7:70:29:b7:8f:e4:06:2a:be:8f:77:
         c2:83:be:5a:02:af:91:ae:18:d9:d5:7b:e4:c0:ef:c8:d3:d6:
         fc:e3:0d:10:cb:ab:5b:d6:af:d5:b2:36:4f:74:14:4c:c4:c1:
         19:d1:ac:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:55:11 2026 by rpki-client