Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.mft
File:                     tveX2E8uSbi7MiIGt5RtJ5GMoWQ.mft (raw, json)
Hash identifier:          +6Cnoca8VCZ06P6H5GETw9zFc9rmIiDZ2DLsu660eTo=
Subject key identifier:   2E:4D:2A:93:5F:63:0C:72:D8:45:23:F3:C4:E0:A1:3A:7E:73:85:A1
Authority key identifier: B6:F7:97:D8:4F:2E:49:B8:BB:32:22:06:B7:94:6D:27:91:8C:A1:64
Certificate issuer:       /CN=A912147F/serialNumber=B6F797D84F2E49B8BB322206B7946D27918CA164
Certificate serial:       0CB9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.mft
Manifest number:          0CA6
Signing time:             Sat 04 Jul 2026 18:40:51 +0000
Manifest this update:     Sat 04 Jul 2026 18:40:50 +0000
Manifest next update:     Sat 11 Jul 2026 18:40:50 +0000
Files and hashes:         1: tveX2E8uSbi7MiIGt5RtJ5GMoWQ.crl (hash: nQNpaUap0RB1fPZvxNth7lC2STvenegAydST8Tb9v/c=)
                          2: F648238E766911EC9EADC512C4F9AE02.roa (hash: bDHpZrwcQl7ztwJNbDO8+8sOlvpdJJRh7RkBiAyPyW0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.crl
                          rsync://rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Jul 2026 18:40:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3257 (0xcb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912147F, serialNumber=B6F797D84F2E49B8BB322206B7946D27918CA164
        Validity
            Not Before: Jul  4 18:40:50 2026 GMT
            Not After : Jul 11 18:40:50 2026 GMT
        Subject: CN=6a4953b3-542f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9a:0c:b4:40:3e:9d:cb:88:82:20:f9:55:36:
                    3b:26:c8:8b:52:19:f0:dc:46:4e:21:9f:89:b8:e6:
                    89:da:06:dd:06:41:6d:97:41:00:ae:a9:28:d5:49:
                    d8:ad:34:7f:01:de:78:a5:5d:d1:bc:06:45:ea:17:
                    34:28:f4:84:6c:94:0a:5b:52:38:0b:03:00:ee:44:
                    f1:b4:8b:99:58:4d:bf:68:42:0a:39:78:8e:d4:75:
                    46:95:c6:9b:b1:2f:51:37:a9:27:64:24:2f:fb:8b:
                    e4:f2:19:b0:dc:89:63:56:8f:b9:68:07:da:1c:5c:
                    18:3b:5c:fa:9f:5e:eb:86:6e:ba:82:6f:5c:5d:d7:
                    29:da:8b:d8:ec:0d:7f:6e:61:f7:0f:2f:92:03:90:
                    9e:59:8b:60:68:a2:25:fc:32:9f:31:6d:77:7b:4d:
                    cf:34:a0:43:6a:de:b8:c1:e1:e9:1b:64:91:db:78:
                    6f:c4:c7:9d:0e:17:d1:51:0a:3f:b5:c1:4d:71:9e:
                    ff:83:e0:7e:4f:3a:2e:06:b8:df:17:5d:18:3e:7f:
                    15:a1:b9:8c:61:ae:69:db:3b:d4:31:0b:44:6b:99:
                    e8:5b:c5:f8:7f:5a:eb:00:1b:97:75:59:ca:14:94:
                    c4:9c:2f:52:47:cc:72:0d:93:a7:ad:f6:ae:eb:04:
                    f5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:4D:2A:93:5F:63:0C:72:D8:45:23:F3:C4:E0:A1:3A:7E:73:85:A1
            X509v3 Authority Key Identifier:
                keyid:B6:F7:97:D8:4F:2E:49:B8:BB:32:22:06:B7:94:6D:27:91:8C:A1:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:0b:89:3f:06:71:03:54:eb:16:80:fa:5a:52:f4:1b:1e:5b:
         db:70:e9:0d:41:51:fb:f9:cb:67:2a:6a:7a:4d:a1:11:d9:25:
         78:bc:85:50:c2:4f:d5:54:26:79:2e:5b:3d:5d:83:7e:61:b7:
         b0:85:7b:50:6f:84:e8:f3:0b:c6:9a:95:2b:55:bd:54:fb:e0:
         99:c9:b2:d0:bf:e3:34:12:35:dc:af:50:29:59:c8:41:45:c7:
         bb:d4:f9:b7:d7:08:d7:0c:df:1d:ff:b1:e8:be:04:c4:27:10:
         66:64:57:50:72:7c:74:00:4f:88:47:a0:40:2a:1c:54:be:4b:
         ac:84:ed:73:ed:36:3a:52:f1:85:c2:52:95:54:b8:ee:b9:70:
         8e:28:66:ff:67:4e:0b:f2:9a:29:05:1a:93:7d:ba:1b:f7:6e:
         d1:d8:27:b0:99:38:58:2c:85:0c:ba:2e:bf:61:a8:ae:28:1a:
         23:70:a9:4e:3e:8d:af:81:79:ad:79:bf:d3:ec:3f:1a:90:37:
         7a:6d:91:c6:1a:8e:03:7d:0a:57:cc:d7:55:e4:7c:0d:44:d2:
         a7:9f:cf:58:68:b7:c2:1b:38:f7:b3:5b:5a:9b:25:d0:f4:c3:
         fb:f3:f5:4b:10:69:90:3b:26:6d:d6:91:cb:ad:2d:0b:72:9e:
         eb:4f:6f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:47:39 2026 by rpki-client