Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft
File:                     TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft (raw, json)
Hash identifier:          Uqip2hz3TkQJMCjooLnFtR4SKkPhMAXGNLkp8HdCTLc=
Subject key identifier:   F6:3D:6F:D3:39:8D:F3:04:D0:E3:88:1C:57:E5:CD:88:BF:2D:DA:A5
Authority key identifier: 4D:52:54:74:6F:EF:72:EF:B7:AC:C0:C5:34:AD:60:8F:50:BC:38:04
Certificate issuer:       /CN=A91149EA/serialNumber=4D5254746FEF72EFB7ACC0C534AD608F50BC3804
Certificate serial:       0A70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft
Manifest number:          0A5D
Signing time:             Fri 24 Oct 2025 20:22:49 +0000
Manifest this update:     Fri 24 Oct 2025 20:22:48 +0000
Manifest next update:     Fri 31 Oct 2025 20:22:48 +0000
Files and hashes:         1: TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl (hash: LyT3WOWTQ13xHm6zbjb881jYe7mgOYSp8eUkeGjQUdE=)
                          2: F94FA23C92F211EC8D04F649C4F9AE02.roa (hash: DROILj1BwyjxRZ/+rF2KA3dKpZPUrELvcEb3dM0Qp7U=)
                          3: F61F817C9B3B11EBA5C76B80C4F9AE02.roa (hash: zc4cHjOXUtulolit5W5JS6fmyA0a1J1yq4iXu5YdjfI=)
                          4: 6897409A73E811EA93705B7CC4F9AE02.roa (hash: gUFANucoHRujP4j5Puno+323S2mO6+VcvY0hxTT5wug=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl
                          rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Oct 2025 20:22:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2672 (0xa70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91149EA, serialNumber=4D5254746FEF72EFB7ACC0C534AD608F50BC3804
        Validity
            Not Before: Oct 24 20:22:48 2025 GMT
            Not After : Oct 31 20:22:48 2025 GMT
        Subject: CN=68fbe019-7a83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9b:71:7f:e8:10:71:d5:83:ec:bf:17:07:1a:
                    ae:ba:dd:e1:eb:c0:04:da:e4:a8:72:14:59:35:80:
                    ef:ed:d6:62:e2:77:ab:72:e2:4c:f5:a6:26:b9:59:
                    cd:30:a0:51:6e:6d:09:1f:dc:d4:66:ba:c6:f5:8d:
                    5b:a5:87:25:f0:d6:dc:91:7c:3e:c9:74:a1:55:cb:
                    4c:a1:27:0e:9f:7f:a1:7d:2c:d0:ca:76:97:72:29:
                    79:2e:b2:04:b7:54:96:8b:5e:41:7c:e2:73:cd:d9:
                    99:1a:c1:78:4e:f6:53:f2:05:81:ff:25:c6:19:af:
                    98:db:ca:06:d3:28:5b:08:b6:bc:54:db:c5:e2:cf:
                    f6:6e:2f:36:3d:d5:0c:85:69:36:80:f6:48:3c:07:
                    b3:76:3e:9d:c6:ca:5d:9b:a9:84:73:f7:b2:9d:a3:
                    98:ee:3f:2e:a8:f7:7a:6a:a7:3b:f1:d5:ad:e7:13:
                    6a:e9:bd:52:4e:44:96:bb:26:2e:68:5a:bd:65:40:
                    b0:ec:10:f8:03:42:9a:b6:8b:0e:ea:1f:29:e4:6b:
                    7c:38:0f:15:fa:d3:49:9b:7f:2f:a0:db:64:74:21:
                    c0:11:72:36:41:45:34:44:26:f4:e6:aa:ff:54:be:
                    48:5e:ec:30:1e:00:d1:c6:c7:85:48:fc:78:e4:85:
                    60:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:3D:6F:D3:39:8D:F3:04:D0:E3:88:1C:57:E5:CD:88:BF:2D:DA:A5
            X509v3 Authority Key Identifier:
                keyid:4D:52:54:74:6F:EF:72:EF:B7:AC:C0:C5:34:AD:60:8F:50:BC:38:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:91:90:a5:c0:2f:8c:12:fd:6e:6e:fd:7a:a8:2b:c2:eb:ed:
         7a:4c:c5:7a:36:04:91:a1:e4:e6:fc:0d:58:df:8a:36:1b:b6:
         fc:fc:83:eb:00:38:ef:b5:47:2f:84:db:32:7e:9e:07:eb:b3:
         03:2a:a5:72:04:d0:46:cc:79:78:aa:f5:ca:2b:f2:b9:e5:b2:
         79:f4:25:19:8a:ce:08:d5:df:4a:3f:77:3d:32:07:36:31:1b:
         6c:cf:e5:24:5c:40:46:0e:ab:7e:17:78:19:e9:e2:35:16:99:
         57:d6:c9:09:5a:6d:ff:9b:7f:72:0f:d8:f9:dc:3b:fe:fb:ca:
         1a:10:4f:20:15:72:6f:d9:0e:c7:03:5b:62:c6:e2:e5:85:9b:
         1b:e7:a4:3c:ae:09:90:ca:2a:4a:31:bf:f4:93:98:df:4f:be:
         58:8a:68:00:23:b0:59:e4:2c:80:72:e5:0e:5f:d1:7e:46:41:
         73:de:fc:5f:30:bd:54:52:c3:37:4d:4c:13:7d:15:5f:67:84:
         1c:34:1d:6c:c3:6e:c2:de:5e:dc:1c:5c:fa:43:65:67:06:d9:
         c1:92:69:b7:63:dc:8d:31:84:e0:d1:78:42:64:c5:36:d9:71:
         18:95:5f:08:ac:f7:f5:dc:69:e7:d4:59:0c:c7:2f:d3:6d:2b:
         46:2c:80:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 09:03:22 2025 by rpki-client