Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft
File:                     tsJDxjmzEemHjsBr8kf3reVLCT4.mft (raw, json)
Hash identifier:          Ptcdj4qVvfXHT1lmVV2HPUiIT3zZqQ68aO6hvYt0ToU=
Subject key identifier:   BE:60:27:6C:21:E2:4B:DC:9B:98:A5:A0:E1:8A:CE:BF:EA:FC:9B:BA
Authority key identifier: B6:C2:43:C6:39:B3:11:E9:87:8E:C0:6B:F2:47:F7:AD:E5:4B:09:3E
Certificate issuer:       /CN=A91549E0/serialNumber=B6C243C639B311E9878EC06BF247F7ADE54B093E
Certificate serial:       154D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft
Manifest number:          1519
Signing time:             Sat 18 Oct 2025 17:17:35 +0000
Manifest this update:     Sat 18 Oct 2025 17:17:34 +0000
Manifest next update:     Sat 25 Oct 2025 17:17:34 +0000
Files and hashes:         1: tsJDxjmzEemHjsBr8kf3reVLCT4.crl (hash: Co34f8mTxubZqb76XuN+5vVNfl6uMr5tOpA9jUEdkk8=)
                          2: E944914AF0F111E999D61615C4F9AE02.roa (hash: XKJY2ruAbdxVwtFmFD8vDTB2DhG2dJOeU2QViXOeUk8=)
                          3: 0E171AA850D511F0B4943476C4F9AE02.roa (hash: 9AflqGyFKx05qIN4kyuCqzbSR97xKUg46U/Rr1tuz0g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.crl
                          rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 17:17:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5453 (0x154d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91549E0, serialNumber=B6C243C639B311E9878EC06BF247F7ADE54B093E
        Validity
            Not Before: Oct 18 17:17:34 2025 GMT
            Not After : Oct 25 17:17:34 2025 GMT
        Subject: CN=68f3cbae-181f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:37:d0:6f:f3:98:e6:45:be:16:fc:91:90:9a:
                    55:80:c8:ae:36:05:42:a1:55:69:ce:a9:b3:b2:a4:
                    7e:be:0e:0b:ee:d5:1b:15:34:d7:26:16:f0:e3:34:
                    12:67:ed:43:7f:c0:55:5f:0c:3c:57:26:03:cf:f1:
                    f7:f9:88:cc:8f:72:a0:b2:12:33:1d:5d:d1:d2:9b:
                    86:c8:06:06:85:b7:3e:2b:e7:16:30:8d:25:3b:ad:
                    1f:f6:c3:0a:a8:14:cf:56:82:e5:ce:27:65:cd:62:
                    87:3a:46:73:c5:56:20:e5:a0:03:a4:01:68:c7:ec:
                    c9:06:79:6d:5c:21:7f:a0:71:b8:17:69:b0:a2:74:
                    e2:55:a1:73:c8:fa:76:87:53:b4:50:0c:4a:33:e0:
                    c8:38:a9:46:02:10:66:3e:fb:df:f2:4c:68:1a:cc:
                    78:40:cb:29:03:79:bd:c6:ec:e6:c1:a9:09:d5:98:
                    84:8d:b7:7b:00:26:d4:bc:2b:ad:57:fa:e0:2e:41:
                    16:c0:94:6e:81:ad:9d:15:6f:ae:f6:1e:90:a9:9d:
                    ef:1f:2c:7f:b2:06:66:06:8a:45:51:81:46:46:7b:
                    62:60:93:27:21:95:05:bd:d4:31:58:4c:19:d5:06:
                    a8:cc:ac:2b:c5:0e:21:9c:fb:73:f1:6d:6d:32:e9:
                    f2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:60:27:6C:21:E2:4B:DC:9B:98:A5:A0:E1:8A:CE:BF:EA:FC:9B:BA
            X509v3 Authority Key Identifier:
                keyid:B6:C2:43:C6:39:B3:11:E9:87:8E:C0:6B:F2:47:F7:AD:E5:4B:09:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d6:f4:66:30:ad:75:ef:b9:5c:81:45:a5:d6:79:77:97:3a:
         76:6a:98:7c:a3:27:2c:85:7f:ac:18:e1:f2:7d:74:dc:58:38:
         b6:a2:e7:e5:7f:6f:08:66:45:d6:c8:7d:e7:99:81:e4:44:3d:
         c6:c3:a5:21:d4:72:e2:21:03:a0:7e:ef:8e:7b:0a:31:ee:7a:
         1a:19:ee:1f:e5:e9:f2:80:a8:79:c8:6e:4f:1a:fc:7b:f9:82:
         5d:72:71:da:ec:cc:a2:1b:14:22:6d:34:c7:63:1b:16:e7:2d:
         e3:c4:a9:66:b2:f3:d3:03:12:63:ee:0a:e6:90:8a:5e:db:0d:
         87:9d:f6:c1:6d:05:70:32:8f:2b:51:a5:79:e1:bb:ec:11:07:
         40:61:92:24:06:94:38:a9:da:4b:24:36:79:22:95:62:41:80:
         c1:d2:7b:f7:fb:25:31:06:f3:04:fa:7a:99:1c:46:1e:e1:09:
         4b:07:ec:55:a3:5f:5a:10:ac:48:1c:c0:fc:90:d1:ed:0b:da:
         0b:be:51:65:c8:8a:6e:12:db:26:40:81:c5:46:87:cc:55:65:
         1d:7b:cd:a2:68:b3:30:b2:b0:7d:cf:1e:e7:6d:9e:f0:a1:a6:
         c7:07:50:7b:ad:09:38:83:27:4c:d0:0f:6d:28:32:a4:3a:e8:
         0d:d4:ef:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:45:23 2025 by rpki-client