Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft
File:                     RS-rvfCd335V_Q-dvd1CePRPuIE.mft (raw, json)
Hash identifier:          onGk16rsHqxbP49w89GDNZNZfDpQnrXmg0eGj1l4V7A=
Subject key identifier:   27:0E:DB:FD:50:FD:9C:E8:98:20:B6:F6:DF:76:B3:A9:AC:93:4F:B8
Authority key identifier: 45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81
Certificate issuer:       /CN=A917E5DC/serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881
Certificate serial:       05B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft
Manifest number:          0596
Signing time:             Sun 19 Oct 2025 00:57:17 +0000
Manifest this update:     Sun 19 Oct 2025 00:57:16 +0000
Manifest next update:     Sun 26 Oct 2025 00:57:16 +0000
Files and hashes:         1: RS-rvfCd335V_Q-dvd1CePRPuIE.crl (hash: YJyFgBpH35Ab4AumxeiMxlGn2V+yVf0FehCNO8Ok9k8=)
                          2: C41221884B6011F092B79129C4F9AE02.roa (hash: 3roNmt7K5VqQHXl17ohr26LZwHHKacsURqWDoDXNWa4=)
                          3: C54C42C04D7611EEA69CE262C4F9AE02.roa (hash: 3vGbgZeBX2ux3qD/sA/eOOnJkTBw50rlrCAjdQKlgEE=)
                          4: C611EE6CBCF711EEA90A1F1DC4F9AE02.roa (hash: i9dMAMF25KUvras5KvDG1QM1xBWeYt+C+ALZFoy+wTs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.crl
                          rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:57:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1459 (0x5b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E5DC, serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881
        Validity
            Not Before: Oct 19 00:57:16 2025 GMT
            Not After : Oct 26 00:57:16 2025 GMT
        Subject: CN=68f4376d-ad32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:16:de:eb:26:f1:3e:da:14:b2:b7:3d:97:9e:
                    a5:31:94:03:2b:af:e5:d9:93:70:cd:71:fc:65:28:
                    a5:62:8b:d7:48:69:49:e1:61:b4:ee:18:b2:d0:da:
                    ee:04:a3:7c:76:76:54:c9:1c:86:b2:53:2d:8f:c3:
                    a8:9e:5b:6c:0e:32:3d:b9:35:f9:ef:dc:14:4b:cf:
                    62:9c:30:3b:82:8b:97:30:b0:79:1b:85:82:8a:68:
                    c2:e1:a2:96:ef:d7:85:24:4a:c1:cc:00:c6:10:39:
                    d0:27:34:c5:1d:9c:2d:b0:fb:6e:6f:ca:e3:ee:38:
                    a5:dc:ba:c9:ef:d6:1d:25:ad:d6:67:a9:43:a1:d6:
                    4f:65:dd:a1:a0:2e:47:30:3a:e2:03:f5:c8:5e:20:
                    ad:97:bb:e7:55:d7:8d:6c:18:f7:38:c6:c4:9d:c1:
                    10:f4:86:42:e7:a4:61:cf:d5:cc:53:2f:6f:c9:54:
                    02:a8:98:e1:c8:39:90:61:24:45:15:11:f9:b4:3e:
                    5c:fc:ff:15:e5:bb:c5:c4:2c:59:80:00:6f:21:d1:
                    e4:54:2d:48:4d:02:74:2d:c1:d4:37:e9:b2:8d:a5:
                    7b:77:0e:18:86:50:f6:a0:19:a4:f7:4f:42:d0:16:
                    ec:a5:f1:dc:fe:ec:1b:d0:cc:fd:c2:ec:ef:89:ac:
                    0a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:0E:DB:FD:50:FD:9C:E8:98:20:B6:F6:DF:76:B3:A9:AC:93:4F:B8
            X509v3 Authority Key Identifier:
                keyid:45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:93:23:2e:9c:41:bc:e4:6e:4d:40:b8:a0:0d:d6:99:34:46:
         fe:45:14:d8:0b:e5:55:f3:24:be:df:51:79:35:75:4c:fa:e5:
         d9:9e:d3:9b:b3:20:c7:04:72:25:02:c5:51:27:9b:48:89:9d:
         d2:07:df:37:e5:8e:6a:ca:ef:26:6f:42:69:96:f5:d0:ee:0b:
         07:0a:fb:93:de:d5:35:34:63:84:2c:7d:c1:ae:18:a7:89:34:
         b9:ef:b0:b4:c0:83:98:d2:db:f7:e3:37:34:1e:37:a1:cd:0f:
         20:47:07:1c:53:f7:b7:78:2a:b7:d4:06:0b:ce:81:89:11:53:
         b9:81:d3:af:22:38:43:1e:c6:b7:3b:b9:b0:92:86:c0:32:af:
         e3:f4:52:b8:d3:6c:99:e8:1e:3d:b8:68:dd:b1:0f:ed:b3:d1:
         ec:96:d2:b8:f1:e2:36:ea:db:6c:24:d0:1d:d6:31:14:53:37:
         8b:17:ab:63:db:f3:11:35:ce:c4:82:4c:07:c5:c6:51:d8:b5:
         a6:5d:4b:52:11:71:88:a8:3e:d8:41:e0:4a:c0:b6:39:1c:0e:
         8f:1e:06:c9:f5:7c:61:2f:7f:df:14:05:a1:cf:6b:96:6e:d7:
         03:04:63:a2:04:73:93:51:a7:f2:56:c3:fe:c5:a8:6c:ed:cd:
         ac:75:ef:eb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0U1REMxMTAvBgNVBAUTKDQ1MkZBQkJERjA5RERGN0U1NUZEMEY5REJEREQ0Mjc4
RjQ0RkI4ODEwHhcNMjUxMDE5MDA1NzE2WhcNMjUxMDI2MDA1NzE2WjAYMRYwFAYD
VQQDEw02OGY0Mzc2ZC1hZDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3xbe6ybxPtoUsrc9l56lMZQDK6/l2ZNwzXH8ZSilYovXSGlJ4WG07hiy0Nru
BKN8dnZUyRyGslMtj8OonltsDjI9uTX579wUS89inDA7gouXMLB5G4WCimjC4aKW
79eFJErBzADGEDnQJzTFHZwtsPtub8rj7jil3LrJ79YdJa3WZ6lDodZPZd2hoC5H
MDriA/XIXiCtl7vnVdeNbBj3OMbEncEQ9IZC56Rhz9XMUy9vyVQCqJjhyDmQYSRF
FRH5tD5c/P8V5bvFxCxZgABvIdHkVC1ITQJ0LcHUN+myjaV7dw4YhlD2oBmk909C
0BbspfHc/uwb0Mz9wuzviawKoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCcO2/1Q
/ZzomCC29t92s6msk0+4MB8GA1UdIwQYMBaAFEUvq73wnd9+Vf0Pnb3dQnj0T7iB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTVEQy9CQkUyQjUwMkY4
RUIxMUVCQkVGNUFBMzdDNEY5QUUwMi9SUy1ydmZDZDMzNVZfUS1kdmQxQ2VQUlB1
SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JTLXJ2ZkNkMzM1Vl9RLWR2ZDFDZVBSUHVJRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTVEQy9CQkUyQjUwMkY4RUIxMUVCQkVGNUFBMzdDNEY5QUUwMi9SUy1ydmZDZDMz
NVZfUS1kdmQxQ2VQUlB1SUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAQkyMunEG85G5NQLigDdaZNEb+RRTYC+VV8yS+31F5NXVM+uXZntOb
syDHBHIlAsVRJ5tIiZ3SB9835Y5qyu8mb0JplvXQ7gsHCvuT3tU1NGOELH3Brhin
iTS577C0wIOY0tv34zc0HjehzQ8gRwccU/e3eCq31AYLzoGJEVO5gdOvIjhDHsa3
O7mwkobAMq/j9FK402yZ6B49uGjdsQ/ts9HsltK48eI26ttsJNAd1jEUUzeLF6tj
2/MRNc7EgkwHxcZR2LWmXUtSEXGIqD7YQeBKwLY5HA6PHgbJ9XxhL3/fFAWhz2uW
btcDBGOiBHOTUafyVsP+xahs7c2sde/r
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:30:45 2025 by rpki-client