Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft
File:                     RS-rvfCd335V_Q-dvd1CePRPuIE.mft (raw, json)
Hash identifier:          dEYEC7cONk2EzFgJUfuvzgsskkWKak9umDPlpLFL5qM=
Subject key identifier:   6F:D5:61:1F:87:97:8C:9D:D7:09:CE:E3:E0:67:48:FB:67:62:BE:CD
Authority key identifier: 45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81
Certificate issuer:       /CN=A917E5DC/serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881
Certificate serial:       05BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft
Manifest number:          059D
Signing time:             Sun 02 Nov 2025 23:13:34 +0000
Manifest this update:     Sun 02 Nov 2025 23:13:34 +0000
Manifest next update:     Sun 09 Nov 2025 23:13:34 +0000
Files and hashes:         1: RS-rvfCd335V_Q-dvd1CePRPuIE.crl (hash: Xk9ZD0nipfgkGLUjmEUsjDWQMuDN9aq9oy0KE1FhQSM=)
                          2: C41221884B6011F092B79129C4F9AE02.roa (hash: 3roNmt7K5VqQHXl17ohr26LZwHHKacsURqWDoDXNWa4=)
                          3: C54C42C04D7611EEA69CE262C4F9AE02.roa (hash: 3vGbgZeBX2ux3qD/sA/eOOnJkTBw50rlrCAjdQKlgEE=)
                          4: C611EE6CBCF711EEA90A1F1DC4F9AE02.roa (hash: i9dMAMF25KUvras5KvDG1QM1xBWeYt+C+ALZFoy+wTs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.crl
                          rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 23:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1466 (0x5ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E5DC, serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881
        Validity
            Not Before: Nov  2 23:13:34 2025 GMT
            Not After : Nov  9 23:13:34 2025 GMT
        Subject: CN=6907e59e-58e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:52:af:3b:b3:7f:89:9d:ce:40:a7:e9:c8:64:
                    09:7a:7b:20:74:07:99:3f:d3:a1:36:88:11:8d:68:
                    de:6b:50:c8:44:17:3a:e4:8d:f8:ec:fe:4b:0d:68:
                    48:50:34:9c:08:8e:6a:3d:b3:c6:9f:c5:86:ec:eb:
                    17:39:9e:94:1c:e7:49:1e:ac:7a:b0:63:29:5b:2b:
                    58:d6:ad:fe:48:41:0f:e6:ec:3c:31:28:a9:20:33:
                    24:23:0f:f4:27:ac:16:01:d5:99:a6:e4:32:9b:72:
                    91:ca:5a:61:2a:31:d9:0a:c8:c5:61:fe:b3:35:73:
                    1b:d7:51:d5:3f:62:cc:8b:91:04:f1:e8:d4:cc:0f:
                    d7:13:aa:60:23:4d:c1:a9:16:0c:29:98:8e:32:b9:
                    63:e4:80:db:e1:b7:a4:5c:c6:a2:5a:68:c0:e7:6c:
                    d6:b6:6c:59:2b:de:f5:26:92:18:7d:1c:eb:91:1f:
                    92:f4:d1:69:f1:07:35:b2:31:0c:41:b4:65:b9:fd:
                    2b:66:fe:1f:12:85:b6:0d:21:c3:36:d1:68:67:b3:
                    4c:26:e6:15:28:08:50:5f:b5:38:48:09:83:40:c2:
                    44:44:2a:f3:18:f8:6b:c0:e0:39:ce:8d:54:51:85:
                    ee:bf:0f:a7:d9:eb:2b:88:70:e9:ae:75:c4:a6:c2:
                    49:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D5:61:1F:87:97:8C:9D:D7:09:CE:E3:E0:67:48:FB:67:62:BE:CD
            X509v3 Authority Key Identifier:
                keyid:45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:41:08:dd:c0:18:9f:91:b8:ce:80:d5:93:b1:3c:b9:fc:54:
         94:05:7e:9a:ae:b0:39:b5:af:00:f9:ea:95:5f:3c:91:bd:4e:
         d7:ca:ab:b5:c0:62:0e:c5:d3:be:3f:a4:1e:74:4d:25:8d:2f:
         52:e1:6c:37:d9:38:b5:70:f8:48:ab:4a:7d:ed:b5:4d:d5:db:
         07:e4:09:87:34:ee:86:85:a2:67:31:93:76:61:1b:e9:12:56:
         e8:5f:aa:8c:8c:6d:18:16:3a:43:82:a2:87:e4:fe:cb:33:06:
         38:f2:78:12:c4:79:fa:c1:4f:75:73:8e:11:80:00:e9:78:27:
         76:9a:14:10:e0:a6:35:8b:71:2d:32:09:3c:d7:6e:fc:5d:59:
         f3:10:c3:79:3c:e2:5c:87:9e:50:c1:4d:2d:e1:31:14:f5:e5:
         17:1b:99:a6:47:06:49:97:be:82:26:f6:fb:3b:0b:54:a3:aa:
         9d:e1:bc:f2:e9:b3:0b:93:ad:a4:b4:fa:50:69:62:3a:de:02:
         14:62:f2:45:c3:35:a9:7b:7a:f1:69:d9:37:f2:b1:12:a1:a3:
         e8:98:a6:a9:ee:d4:86:d6:01:f6:6c:eb:aa:69:f5:06:da:1f:
         e9:af:f1:b3:eb:35:88:c3:81:5c:42:43:da:a7:3d:a6:ca:f5:
         5d:e0:45:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:33:29 2025 by rpki-client