Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft
File:                     tsJDxjmzEemHjsBr8kf3reVLCT4.mft (raw, json)
Hash identifier:          2e2vs/jpRFMRcdABOxqHv0PAcAcpXG9WyCIqF2KYvDs=
Subject key identifier:   BA:F3:EA:F9:B0:94:BF:FC:46:88:26:08:9D:48:45:5A:73:05:39:A4
Authority key identifier: B6:C2:43:C6:39:B3:11:E9:87:8E:C0:6B:F2:47:F7:AD:E5:4B:09:3E
Certificate issuer:       /CN=A91549E0/serialNumber=B6C243C639B311E9878EC06BF247F7ADE54B093E
Certificate serial:       1611
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft
Manifest number:          15D4
Signing time:             Sat 26 Sep 2026 16:48:30 +0000
Manifest this update:     Sat 26 Sep 2026 16:48:29 +0000
Manifest next update:     Sat 03 Oct 2026 16:48:29 +0000
Files and hashes:         1: tsJDxjmzEemHjsBr8kf3reVLCT4.crl (hash: 8D41w5qmJC4/Jiza5J/mBz1ahDzDmp4mz75sLJ3DTmc=)
                          2: 81DC5974F86611F0A7041971496F56BC.roa (hash: Hh2fncGh3JYQ0R/kJzvIi3FKutB37GoergABM4lOfnw=)
                          3: E944914AF0F111E999D61615C4F9AE02.roa (hash: 4BKBA20+uApy1AOlpBvDlLXxvUi+hdS9gzH7E00dkO8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.crl
                          rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 16:48:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5649 (0x1611)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91549E0, serialNumber=B6C243C639B311E9878EC06BF247F7ADE54B093E
        Validity
            Not Before: Sep 26 16:48:29 2026 GMT
            Not After : Oct  3 16:48:29 2026 GMT
        Subject: CN=6ab7f75e-d4dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:45:d4:13:0f:c7:eb:84:4e:59:c7:a4:f8:19:
                    38:34:07:75:d1:6b:eb:ba:7f:5d:d1:11:c9:b0:e7:
                    3e:e2:fa:7a:75:70:b0:84:cc:56:f7:9d:60:82:4b:
                    8f:20:dc:98:5e:1f:42:79:44:01:03:b6:85:59:23:
                    10:1e:ef:55:4d:33:6e:d7:9f:74:e3:27:c8:73:1f:
                    59:f7:c0:b5:eb:9c:90:10:b0:f8:9a:02:7c:af:b0:
                    d2:f9:a4:63:12:fa:d9:29:d1:04:e1:67:dd:be:2d:
                    cd:8a:dc:4f:4b:96:1f:11:99:93:31:c8:1a:25:0e:
                    a9:69:5f:42:a1:4b:c4:21:fe:28:02:b8:fa:be:68:
                    e7:76:82:5d:fb:70:3b:e1:28:dd:e4:a7:7d:30:41:
                    68:a8:ed:a1:73:2c:a6:67:8d:eb:0c:15:ce:1d:6c:
                    33:58:19:67:32:b4:2a:81:14:53:3f:a9:dd:8d:c1:
                    5d:10:cb:02:53:a5:42:00:ec:d5:a6:7d:65:69:28:
                    f7:bf:bb:0e:a2:89:8b:6b:2a:b6:28:4b:c7:a9:9f:
                    84:30:cc:d7:79:5c:97:85:43:67:b4:72:60:22:71:
                    d8:20:dc:8f:4b:3b:80:5a:bf:bb:5f:c1:6a:a4:03:
                    39:ee:66:1a:46:4f:fe:10:92:e1:b5:07:6c:7f:d1:
                    6e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F3:EA:F9:B0:94:BF:FC:46:88:26:08:9D:48:45:5A:73:05:39:A4
            X509v3 Authority Key Identifier:
                keyid:B6:C2:43:C6:39:B3:11:E9:87:8E:C0:6B:F2:47:F7:AD:E5:4B:09:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:2b:6e:5a:8d:68:13:a2:63:69:2e:61:0d:dd:2e:83:1a:de:
         38:79:54:14:14:40:90:ed:dd:7f:83:36:81:5e:c9:97:2b:c1:
         ac:38:20:31:de:18:bb:51:41:0f:03:29:21:d0:7b:79:a2:6a:
         fd:3b:56:76:3e:5a:3e:6e:9f:40:fd:98:b7:3f:dd:97:49:61:
         d2:2a:ac:fd:ac:44:75:9b:ff:c8:9c:ee:ff:d0:cc:dd:0c:44:
         c4:04:ef:d3:b2:f0:4b:a7:02:21:cd:a6:a1:26:ed:4c:e5:9f:
         59:eb:6e:2f:f6:8b:17:d5:f1:3a:f9:9a:07:59:f5:5c:06:46:
         ee:c4:bb:95:3c:94:29:d3:c9:8e:72:0d:67:a1:28:2a:d8:bd:
         7d:3b:5d:d0:bb:16:fd:b1:93:86:6a:d4:32:cc:ad:d7:85:69:
         ce:e6:c3:ea:19:f5:6a:f8:aa:8f:3e:04:a5:a4:13:87:bc:9e:
         ab:eb:82:fb:b6:ed:5f:9a:d1:9e:80:06:17:3e:3e:c7:b0:74:
         b5:93:07:e4:58:89:e4:0a:19:0b:f7:e1:38:33:7c:53:0a:38:
         85:1a:a5:69:d4:03:fe:f4:23:b1:5e:dc:52:3c:f0:a5:48:84:
         b8:26:f0:84:5c:bc:5c:54:52:b7:9b:b2:c0:ab:da:cf:75:da:
         bd:c1:b8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:22:18 2026 by rpki-client