Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
File:                     FWV3K3tOvoUEnSr5syrMh4AxGl0.mft (raw, json)
Hash identifier:          vT/B4gxPrXUYh9dQulMOqlUEQx3mV7uSjnFEPOJiOxc=
Subject key identifier:   B2:EE:53:E8:27:F0:DB:68:88:D9:1B:F0:8F:40:7C:BD:67:F6:4A:3C
Authority key identifier: 15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D
Certificate issuer:       /CN=A91251AD/serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
Certificate serial:       03A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
Manifest number:          039E
Signing time:             Tue 13 May 2025 00:34:26 +0000
Manifest this update:     Tue 13 May 2025 00:34:25 +0000
Manifest next update:     Tue 20 May 2025 00:34:25 +0000
Files and hashes:         1: FWV3K3tOvoUEnSr5syrMh4AxGl0.crl (hash: zXlBCnssmaq3kXz9HRSY9GNKM58CexsPp5BnxMb0ft0=)
                          2: 2106E428992111EC99E0095AC4F9AE02.roa (hash: E9NEqlH96lKzIMQJHYm3U7gAA+i7maF4xaW2S95jQF0=)
                          3: 412371002A5911F08EA23244C4F9AE02.roa (hash: nv5XmU97C++H82vtSbaW06zkLpVOeaF9Xg49KK/5bYU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl
                          rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 00:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 932 (0x3a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91251AD, serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
        Validity
            Not Before: May 13 00:34:25 2025 GMT
            Not After : May 20 00:34:25 2025 GMT
        Subject: CN=68229392-f7e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:87:7b:fe:77:e8:a8:cb:76:60:a9:52:be:41:
                    e5:ce:41:30:ce:e3:95:0d:4f:3b:bd:c3:cb:38:79:
                    52:46:6e:46:fe:90:0e:1d:e0:03:57:40:09:12:7b:
                    d3:ed:7d:1a:3c:4e:f5:a6:0a:bc:b3:a3:a4:bd:71:
                    02:4e:65:17:38:df:bc:dd:a7:cc:68:e1:35:ef:f5:
                    42:22:45:72:d3:0a:a5:9d:d4:82:9b:8c:6b:7b:3e:
                    6b:02:1a:ee:29:6a:88:23:68:fe:fa:a9:82:21:5d:
                    e9:d5:83:e5:c4:16:68:fa:30:1e:25:56:3b:6b:f3:
                    ff:52:b9:b1:e0:e9:e1:39:7a:61:8a:05:2b:30:62:
                    a1:81:1c:18:58:c2:d6:1a:d8:d3:65:66:55:88:eb:
                    33:9e:70:b5:b9:66:90:e5:89:47:2a:7c:8c:b2:8c:
                    f7:09:da:4c:08:21:49:cd:fe:e3:0f:94:09:b3:5f:
                    61:4a:5a:03:2c:fc:61:fe:0d:b9:25:ee:e2:a1:f8:
                    74:58:a7:f0:93:08:f4:c0:e8:78:4f:5a:1f:41:62:
                    fd:ef:32:bf:5e:47:8f:65:bc:69:f3:ce:26:6b:52:
                    2a:18:9f:99:0f:5c:ce:7e:e2:7e:dd:57:95:16:3c:
                    12:b5:4a:01:c1:b2:cf:b0:fe:50:dc:3e:09:bd:e8:
                    c8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:EE:53:E8:27:F0:DB:68:88:D9:1B:F0:8F:40:7C:BD:67:F6:4A:3C
            X509v3 Authority Key Identifier:
                keyid:15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:c0:16:ae:ae:73:67:14:a4:32:12:f1:17:4f:c1:89:8a:34:
         e6:49:f5:83:98:f5:fd:a8:db:93:30:bc:e5:42:d7:f3:94:31:
         39:59:f0:05:07:3d:2c:0b:2b:8f:a5:47:47:ea:44:2f:fa:06:
         66:25:98:27:4c:4b:93:f4:c2:25:53:b7:61:6f:2d:11:9b:cd:
         d0:8d:78:0d:8f:44:87:f4:3d:c2:b2:02:46:b8:4d:d6:34:c0:
         19:7e:24:bd:79:50:7a:64:15:02:3d:bd:b7:19:82:b0:24:6c:
         be:6c:9e:b7:94:dc:02:d7:9b:62:96:51:4b:b9:56:5a:60:6a:
         0f:f5:2e:9b:80:4e:66:61:6d:d2:44:d9:b7:a0:b8:71:73:8c:
         ab:84:6c:78:9a:57:bb:be:32:59:a2:d8:2d:7b:86:9c:db:68:
         eb:15:a6:2e:23:a6:e6:fa:ac:71:7a:2c:5d:02:8e:77:98:6d:
         49:80:38:3c:9f:b6:5f:c5:aa:fd:17:02:4a:f3:19:1d:df:bd:
         4c:93:62:5d:09:de:9c:b4:07:01:fd:b1:c6:b7:82:fb:83:88:
         44:e1:00:20:29:00:7f:36:a9:6f:25:4b:d7:45:f8:32:ac:fe:
         60:3e:3c:43:f5:0c:01:ff:aa:49:ce:10:94:df:a9:b2:e1:b4:
         55:fc:54:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 07:29:41 2025 by rpki-client