Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.mft
File:                     tveX2E8uSbi7MiIGt5RtJ5GMoWQ.mft (raw, json)
Hash identifier:          JPCDbAqh2WMZa70brPEnBwPuLEsf35vA6aT3Px0GVDY=
Subject key identifier:   78:0F:59:FF:7A:33:9F:2A:15:26:B6:57:35:5D:C7:3F:DB:6E:4D:77
Authority key identifier: B6:F7:97:D8:4F:2E:49:B8:BB:32:22:06:B7:94:6D:27:91:8C:A1:64
Certificate issuer:       /CN=A912147F/serialNumber=B6F797D84F2E49B8BB322206B7946D27918CA164
Certificate serial:       0C35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.mft
Manifest number:          0C25
Signing time:             Tue 04 Nov 2025 18:51:29 +0000
Manifest this update:     Tue 04 Nov 2025 18:51:28 +0000
Manifest next update:     Tue 11 Nov 2025 18:51:28 +0000
Files and hashes:         1: tveX2E8uSbi7MiIGt5RtJ5GMoWQ.crl (hash: fld+7DCk3zhDhbtSMGcQqIspABzhUtDwZ6WEkkFiSFo=)
                          2: F648238E766911EC9EADC512C4F9AE02.roa (hash: cXtJZrxFT7iK9u3HHySRT4oRhzJJpyziBzdACacCcms=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.crl
                          rsync://rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 18:51:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3125 (0xc35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912147F, serialNumber=B6F797D84F2E49B8BB322206B7946D27918CA164
        Validity
            Not Before: Nov  4 18:51:28 2025 GMT
            Not After : Nov 11 18:51:28 2025 GMT
        Subject: CN=690a4b31-575a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:40:74:0e:9e:98:a5:f3:4f:82:2f:ea:be:38:
                    40:a7:f9:11:bd:77:c0:ac:25:b4:87:5a:45:79:10:
                    82:5e:38:ec:b0:0f:fa:da:66:76:97:11:4e:ac:d9:
                    9f:64:8d:54:1c:8b:12:b9:d5:22:82:31:9c:dc:2e:
                    f5:ad:f6:a2:76:3a:66:b1:f4:c7:b8:93:2a:d9:55:
                    3b:a6:0f:c7:00:59:75:ae:d9:59:f2:53:ad:b2:82:
                    06:6c:f2:48:fe:9f:55:d2:59:8a:36:41:89:19:53:
                    33:38:2f:a0:b6:43:f5:39:1b:79:38:24:1b:55:53:
                    43:f1:17:17:81:c5:17:43:31:cc:ee:e1:b4:e0:19:
                    54:50:24:cf:2d:90:7a:9b:56:76:73:4f:cc:4b:7f:
                    1c:29:79:0d:4a:9b:f6:d9:88:0a:9c:8d:22:d0:b3:
                    70:ed:38:f1:a1:39:aa:1e:cc:bb:b3:ab:f0:c6:91:
                    b8:70:a9:1c:06:35:f7:75:67:75:df:73:1d:30:06:
                    c3:66:42:e9:5e:48:f6:67:5c:5f:32:bf:a8:48:48:
                    7c:11:e0:37:96:1c:88:b1:5d:9b:8e:cd:fd:7b:4f:
                    a3:28:c9:70:b4:7e:d7:d9:ca:16:d9:4c:b7:d1:cf:
                    cb:1f:04:9b:60:4a:d6:e6:d9:00:4e:c2:33:2a:3e:
                    d6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:0F:59:FF:7A:33:9F:2A:15:26:B6:57:35:5D:C7:3F:DB:6E:4D:77
            X509v3 Authority Key Identifier:
                keyid:B6:F7:97:D8:4F:2E:49:B8:BB:32:22:06:B7:94:6D:27:91:8C:A1:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:01:93:a2:17:9d:58:56:0b:ed:a5:72:19:78:66:87:f5:2f:
         30:9b:b3:bf:aa:b2:1a:af:5e:25:60:af:3c:41:5a:80:a9:b4:
         04:11:07:d0:f1:1e:e0:52:83:6b:1e:ad:3f:f4:95:cb:4c:b6:
         da:83:18:2b:9f:9c:c9:3d:ae:32:28:c7:1b:7b:c8:99:2c:a1:
         7f:e7:03:7c:77:1f:46:88:ac:b2:25:9f:3e:5c:60:86:76:d4:
         c1:ce:b2:46:c1:b6:79:e6:a2:80:27:35:5e:bb:92:ab:7a:fc:
         a4:ce:d0:c4:2e:a1:32:55:eb:71:04:a4:91:5c:b4:24:55:a3:
         bc:46:d6:73:36:95:f0:a4:6b:ee:c8:6f:74:00:78:0b:43:1e:
         07:e8:0f:58:24:59:ed:47:d0:06:36:ae:40:61:ca:57:94:f6:
         08:ec:99:20:1b:f4:1c:c1:f3:c3:3c:2d:06:83:7e:77:43:b1:
         94:1e:48:c9:2a:7c:ad:3f:f7:0c:18:9a:49:a1:e4:90:52:b7:
         21:47:56:c6:27:12:6c:dc:8e:2a:7d:80:0a:9f:2a:11:8c:1d:
         c2:a2:68:a8:66:bc:1d:6f:d0:3b:ec:84:bf:6c:98:0a:a2:52:
         42:6b:93:cb:c4:06:03:fa:c2:71:b9:e7:7a:63:a6:e4:c3:98:
         c9:0b:c2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:17:04 2025 by rpki-client