Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/RCP79BrZ8Px008FVWLjQmhZLJhs.mft
File:                     RCP79BrZ8Px008FVWLjQmhZLJhs.mft (raw, json)
Hash identifier:          JvP3mPYDpz1LkFTaQ9IDPCzT/gM5Uf8dKyI6AaSlLkw=
Subject key identifier:   9C:1F:DF:DB:B9:3D:1F:31:EA:3B:C8:0B:8E:AC:5F:D1:FE:57:D4:7F
Authority key identifier: 44:23:FB:F4:1A:D9:F0:FC:74:D3:C1:55:58:B8:D0:9A:16:4B:26:1B
Certificate issuer:       /CN=A915DB55/serialNumber=4423FBF41AD9F0FC74D3C15558B8D09A164B261B
Certificate serial:       068B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RCP79BrZ8Px008FVWLjQmhZLJhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/RCP79BrZ8Px008FVWLjQmhZLJhs.mft
Manifest number:          0684
Signing time:             Tue 04 Nov 2025 20:35:13 +0000
Manifest this update:     Tue 04 Nov 2025 20:35:13 +0000
Manifest next update:     Tue 11 Nov 2025 20:35:13 +0000
Files and hashes:         1: RCP79BrZ8Px008FVWLjQmhZLJhs.crl (hash: 8P+HfyQl1kNnRmwhw3IS8uFEr69YDvu8SUywBkLlaG4=)
                          2: 061C3362985911EBA5F39B54C4F9AE02.roa (hash: 58ITnOEIWhsg3VC5900dxvG6wKzEJQmdtWvJjNGVUdw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/RCP79BrZ8Px008FVWLjQmhZLJhs.crl
                          rsync://rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/RCP79BrZ8Px008FVWLjQmhZLJhs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RCP79BrZ8Px008FVWLjQmhZLJhs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 20:35:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1675 (0x68b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DB55, serialNumber=4423FBF41AD9F0FC74D3C15558B8D09A164B261B
        Validity
            Not Before: Nov  4 20:35:13 2025 GMT
            Not After : Nov 11 20:35:13 2025 GMT
        Subject: CN=690a6381-0807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:14:8a:ae:99:d9:f6:be:d0:91:f3:b6:ae:7f:
                    8e:92:71:d2:8b:e9:c6:9b:d0:30:39:73:80:e2:a7:
                    6d:4c:98:83:07:ca:8b:64:77:d8:99:0b:f7:9a:ed:
                    83:c2:fb:e9:c5:c3:62:d7:a4:df:9d:6e:b6:92:78:
                    5d:38:29:32:41:e8:38:25:53:49:d6:c1:50:4c:67:
                    84:c1:de:46:a3:2a:6e:2e:d3:3f:30:03:60:4e:b8:
                    1b:82:0a:de:46:96:cd:77:a0:cd:72:bf:6a:51:60:
                    1c:46:79:90:11:be:50:e7:a8:29:4d:26:af:f4:ca:
                    ad:d6:51:ab:41:56:80:86:4e:86:4d:30:5c:1d:8a:
                    84:f4:b2:bb:d4:e9:7b:eb:14:64:41:27:80:74:ac:
                    44:68:b2:6f:95:f2:c7:d5:5a:e8:f5:58:b8:d8:76:
                    b2:59:cf:bd:7e:6c:ae:c3:25:b9:6c:66:f5:39:06:
                    8f:c7:f8:b6:94:30:fc:e2:0e:09:5b:ff:a0:89:d3:
                    06:ff:5a:28:db:04:31:36:22:54:ce:3a:77:9e:07:
                    34:39:70:f5:45:9c:82:02:50:f6:38:ec:c3:b9:62:
                    70:4c:71:f4:f2:be:5d:74:b2:4b:62:3a:72:99:5c:
                    b2:b2:ef:18:3f:0c:46:57:ff:1b:27:23:eb:e0:a8:
                    f2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:1F:DF:DB:B9:3D:1F:31:EA:3B:C8:0B:8E:AC:5F:D1:FE:57:D4:7F
            X509v3 Authority Key Identifier:
                keyid:44:23:FB:F4:1A:D9:F0:FC:74:D3:C1:55:58:B8:D0:9A:16:4B:26:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/RCP79BrZ8Px008FVWLjQmhZLJhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RCP79BrZ8Px008FVWLjQmhZLJhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/RCP79BrZ8Px008FVWLjQmhZLJhs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:52:a7:19:26:65:a9:5f:de:50:e2:6f:a5:04:d8:0f:ea:63:
         67:37:a4:8d:e0:0c:a6:38:09:c2:af:54:98:89:58:44:15:21:
         9b:ec:c4:bf:ab:67:2b:06:60:e3:ac:85:ab:58:66:ed:bc:36:
         b7:ef:fb:59:98:07:47:d4:1c:56:8e:37:d6:3f:d1:79:dd:70:
         8b:c1:bc:54:e7:01:fb:0b:3a:26:f1:2a:07:14:ff:19:ca:b1:
         cc:4c:24:4b:1a:82:00:5f:bc:39:7b:42:2d:18:f6:90:10:64:
         0e:bf:98:f5:89:e4:9d:3c:77:a4:fe:b6:4c:1e:2a:f3:ee:12:
         69:c9:38:ba:ff:64:cf:1f:fb:e5:60:40:56:29:18:8e:02:c9:
         e3:53:3b:fb:88:e5:a4:41:1f:52:c2:d1:9a:14:b2:7e:0a:d2:
         72:32:c8:17:d9:c9:b5:7d:ec:14:04:99:4c:7b:87:5c:6c:23:
         e7:18:c4:39:3e:fa:cc:00:3b:e3:3b:be:7b:b2:a0:9d:bf:62:
         e3:e7:2d:41:0a:e9:17:94:e3:15:5f:be:6e:e7:a7:d0:b5:b9:
         64:f6:48:a4:8f:34:29:7b:25:73:f5:bd:62:87:6e:7b:5f:01:
         bf:56:a6:d7:a0:59:75:12:16:09:ee:ad:6d:d5:3d:0e:3e:16:
         d5:50:a0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:35:29 2025 by rpki-client