Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft
File:                     tsJDxjmzEemHjsBr8kf3reVLCT4.mft (raw, json)
Hash identifier:          EgkKP8KnnN2lLcRLc4SdJxXyXTGt64DK27fcUW/zQgI=
Subject key identifier:   E0:E6:10:B2:B2:F7:E7:4B:50:E4:FF:7C:EE:F0:E7:AB:A6:08:06:30
Authority key identifier: B6:C2:43:C6:39:B3:11:E9:87:8E:C0:6B:F2:47:F7:AD:E5:4B:09:3E
Certificate issuer:       /CN=A91549E0/serialNumber=B6C243C639B311E9878EC06BF247F7ADE54B093E
Certificate serial:       15CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft
Manifest number:          1595
Signing time:             Tue 02 Jun 2026 16:46:41 +0000
Manifest this update:     Tue 02 Jun 2026 16:46:41 +0000
Manifest next update:     Tue 09 Jun 2026 16:46:41 +0000
Files and hashes:         1: tsJDxjmzEemHjsBr8kf3reVLCT4.crl (hash: +H/ocZga2q40XtNX3jAvK/jvXdzIJvHjmglXHYlcgFE=)
                          2: 81DC5974F86611F0A7041971496F56BC.roa (hash: ssQ9BW5dy2boBuORT5QxuakKe2D1nievijkZGHdu+Es=)
                          3: E944914AF0F111E999D61615C4F9AE02.roa (hash: c2ADsvP/ue89PrwzdfQ8AIFJq77Uj0DDTO3n+w1NTsw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.crl
                          rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 15:18:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5582 (0x15ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91549E0, serialNumber=B6C243C639B311E9878EC06BF247F7ADE54B093E
        Validity
            Not Before: Jun  2 16:46:41 2026 GMT
            Not After : Jun  9 16:46:41 2026 GMT
        Subject: CN=6a1f08f1-1b09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:76:b6:1a:1f:bf:f3:de:c8:67:6c:09:a0:5f:
                    26:85:a4:55:e6:9f:34:b6:57:8e:93:72:dc:e0:5c:
                    c7:74:b0:3f:87:c6:61:23:93:b9:9a:37:4e:fb:82:
                    68:be:51:bd:58:87:35:96:eb:b6:b6:02:fd:d2:64:
                    e5:0f:a9:5b:63:1f:de:d7:6a:a3:5e:45:2a:78:57:
                    0d:38:f2:de:4b:f5:12:81:98:2e:a2:86:55:d1:77:
                    47:3c:92:84:17:1b:a0:f4:1a:dc:e1:c7:14:2e:cd:
                    1c:f9:11:26:32:55:09:56:27:b3:03:de:63:4f:cf:
                    f9:69:ef:4d:6c:46:66:1f:22:d4:fd:ff:57:6f:18:
                    c2:1e:2f:7d:d4:73:03:3b:c1:90:d4:05:49:8f:30:
                    f2:07:78:0a:5b:37:35:75:c8:f4:81:5e:d4:de:6a:
                    75:4b:36:2c:ae:5b:ed:d8:ef:0f:07:ff:ea:4e:be:
                    29:bf:bd:83:4c:96:23:4e:10:95:0c:69:bd:ed:15:
                    23:83:84:bf:96:22:e0:e0:47:e6:ff:77:b9:b1:ce:
                    e8:69:d2:7c:92:ec:b7:c8:5c:24:5b:40:71:88:ed:
                    6d:73:95:99:85:81:6a:fb:45:39:b1:5d:4c:87:fa:
                    04:88:dd:ad:89:fe:6d:73:3d:f5:66:f7:3e:7e:d7:
                    2e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E6:10:B2:B2:F7:E7:4B:50:E4:FF:7C:EE:F0:E7:AB:A6:08:06:30
            X509v3 Authority Key Identifier:
                keyid:B6:C2:43:C6:39:B3:11:E9:87:8E:C0:6B:F2:47:F7:AD:E5:4B:09:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:83:2e:d4:b0:ee:e6:d1:15:70:d0:a0:e2:16:e5:28:24:f2:
         6e:1b:4a:9b:7a:69:c7:b1:98:30:b6:10:a1:4a:4a:76:69:8a:
         11:c1:96:69:81:df:19:fb:b2:68:fa:45:f5:d5:59:7a:47:bb:
         ff:83:1e:a4:f2:0c:0f:77:f4:45:04:55:9c:27:6f:49:63:01:
         29:95:9b:73:66:2b:76:11:81:24:b1:15:7b:df:06:be:59:78:
         a0:a4:39:a1:64:9b:f5:11:b5:f2:88:f8:22:75:af:f3:22:21:
         a0:55:84:de:af:57:93:c0:f9:af:76:a4:d5:47:f3:21:8b:c0:
         dc:2f:03:55:19:38:f7:65:e2:ff:33:d1:d3:7c:ee:82:45:8f:
         18:27:e1:8f:d3:48:7d:8a:75:4b:15:33:4b:eb:34:87:81:eb:
         8f:96:e9:63:a2:00:b9:a1:11:f1:d3:c9:3d:46:c6:7a:fb:13:
         97:c4:b5:29:67:ac:c7:dd:3d:a8:f5:07:bf:9e:33:41:84:2b:
         fe:d5:dc:32:ed:28:da:e1:17:70:55:bd:ff:c6:08:a9:42:ee:
         c4:cf:cb:19:40:59:41:23:1b:60:71:79:c3:db:43:f9:39:f6:
         09:2b:29:06:95:37:55:41:cd:da:11:77:8c:cc:11:f8:ff:bd:
         75:0d:91:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:24:20 2026 by rpki-client