Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft
File:                     RS-rvfCd335V_Q-dvd1CePRPuIE.mft (raw, json)
Hash identifier:          v2UGrdRH0aRvHDGrROLHVkt85ngSF45/ZaUgDoGZwJo=
Subject key identifier:   E1:B1:45:EB:D7:26:9B:57:87:A6:0F:B6:AB:80:18:40:F3:EE:E3:73
Authority key identifier: 45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81
Certificate issuer:       /CN=A917E5DC/serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881
Certificate serial:       05B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft
Manifest number:          0599
Signing time:             Mon 27 Oct 2025 00:12:24 +0000
Manifest this update:     Mon 27 Oct 2025 00:12:23 +0000
Manifest next update:     Mon 03 Nov 2025 00:12:23 +0000
Files and hashes:         1: RS-rvfCd335V_Q-dvd1CePRPuIE.crl (hash: XoVLua3yUApf8mQGdwyGzhkYN4xIbkwj5IEvdaTJbN4=)
                          2: C41221884B6011F092B79129C4F9AE02.roa (hash: 3roNmt7K5VqQHXl17ohr26LZwHHKacsURqWDoDXNWa4=)
                          3: C54C42C04D7611EEA69CE262C4F9AE02.roa (hash: 3vGbgZeBX2ux3qD/sA/eOOnJkTBw50rlrCAjdQKlgEE=)
                          4: C611EE6CBCF711EEA90A1F1DC4F9AE02.roa (hash: i9dMAMF25KUvras5KvDG1QM1xBWeYt+C+ALZFoy+wTs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.crl
                          rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Nov 2025 00:12:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1462 (0x5b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E5DC, serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881
        Validity
            Not Before: Oct 27 00:12:23 2025 GMT
            Not After : Nov  3 00:12:23 2025 GMT
        Subject: CN=68feb8e8-2182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a0:2f:93:c2:e9:b6:7b:d1:9a:40:07:4f:df:
                    50:63:6e:15:99:be:70:81:11:aa:18:4d:4c:57:8c:
                    de:a5:19:bc:91:9b:e3:34:11:d1:1f:b9:0e:d6:f8:
                    eb:32:3d:01:e4:a6:df:92:0e:53:4a:db:07:83:9e:
                    a8:aa:bf:fd:80:42:ef:7d:2b:12:45:a7:1b:89:bc:
                    63:ee:98:5c:29:ff:79:07:f3:01:e7:77:2b:d9:f2:
                    76:7b:0b:0a:a6:80:fc:64:00:79:f4:83:75:04:d2:
                    32:32:68:ca:06:7f:32:4f:17:ae:9e:dc:90:f2:ed:
                    6f:6f:a1:ce:20:01:4d:55:54:c8:a8:52:ac:6a:f4:
                    95:25:57:2d:0b:1a:74:dd:73:c4:1e:ce:65:0c:b5:
                    c2:97:b3:31:8c:f9:bb:4c:99:09:92:c4:40:c1:d2:
                    f7:b8:da:64:67:d2:3c:d9:5c:bb:32:52:56:2b:7a:
                    19:0c:c8:56:c2:ac:c1:42:1b:3c:3d:7c:38:e0:89:
                    9b:4a:3c:af:05:8d:46:81:8f:6d:ef:fd:9f:31:6a:
                    60:80:59:22:6b:90:4a:3d:64:73:0e:0b:5f:67:55:
                    87:94:f3:91:26:0e:60:1b:f1:6a:98:93:86:b9:b4:
                    49:60:e0:74:9b:21:c1:2e:3a:0c:81:5a:d6:be:1b:
                    44:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B1:45:EB:D7:26:9B:57:87:A6:0F:B6:AB:80:18:40:F3:EE:E3:73
            X509v3 Authority Key Identifier:
                keyid:45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:21:f8:b6:a8:2d:31:05:ee:ab:02:0c:9c:2b:4f:a0:13:aa:
         38:5c:ab:b0:04:6e:9e:0f:63:9c:67:35:dd:fd:ba:61:d2:e9:
         06:58:e2:75:f5:f8:79:52:97:73:f2:31:ef:7f:4d:c8:69:93:
         15:66:25:9e:32:10:60:cd:7b:bc:ef:b7:73:d9:78:a8:71:75:
         ff:4d:dd:d0:40:52:32:23:48:b7:33:9b:69:de:5d:88:e5:92:
         82:f7:a8:6a:3b:1f:0d:b5:da:b8:1a:e7:49:24:64:d8:6d:b2:
         e3:a7:79:92:5d:d2:c9:83:54:ac:e9:80:bd:45:50:b9:2a:60:
         e2:e7:1c:62:76:34:89:87:7a:67:0d:3f:57:a6:45:0c:c8:d1:
         44:ea:e9:44:79:1f:f7:f0:c2:de:86:ce:1d:01:73:f0:63:66:
         e4:fa:b6:05:1e:70:c0:ba:82:57:48:b9:1c:8e:78:c2:cb:a8:
         4f:6e:41:a2:1e:68:49:17:3b:09:be:e0:77:9c:1f:25:4f:c3:
         87:65:c2:24:f8:9d:5b:a4:50:6d:8a:f8:c3:c8:40:81:6a:24:
         12:ef:03:b8:23:4e:3b:b7:45:7c:7b:09:0b:2d:6d:70:e1:d1:
         05:af:a5:66:29:90:b7:21:65:d3:44:84:3f:e8:d4:71:c8:3e:
         08:2c:0f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 15:09:03 2025 by rpki-client