Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
File:                     FWV3K3tOvoUEnSr5syrMh4AxGl0.mft (raw, json)
Hash identifier:          sB3zwsFw3jBz3JSSJplbSa0LyuiR1xNgjkwwGtlTOXo=
Subject key identifier:   06:16:68:E1:CD:52:57:51:BF:79:A0:22:46:D1:20:41:2E:A5:E3:16
Authority key identifier: 15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D
Certificate issuer:       /CN=A91251AD/serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
Certificate serial:       03C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
Manifest number:          03B9
Signing time:             Thu 03 Jul 2025 01:03:16 +0000
Manifest this update:     Thu 03 Jul 2025 01:03:15 +0000
Manifest next update:     Thu 10 Jul 2025 01:03:15 +0000
Files and hashes:         1: FWV3K3tOvoUEnSr5syrMh4AxGl0.crl (hash: BrjcULRRWKr40a2LgXu3njszUsnpMz237ZdlskAJUcE=)
                          2: D2FE3A16501411F084311D4CC4F9AE02.roa (hash: sczNDr9Uf1o14TeMLvhQpR0Eoi4DkVd7EM/ILBPX2f8=)
                          3: EB9FE0C2500C11F0AC93B675C4F9AE02.roa (hash: ZEuV8rnSTrAUL1+f9B0DJgZDQV0kGj4jMARqkjlC+9I=)
                          4: 2106E428992111EC99E0095AC4F9AE02.roa (hash: E9NEqlH96lKzIMQJHYm3U7gAA+i7maF4xaW2S95jQF0=)
                          5: 412371002A5911F08EA23244C4F9AE02.roa (hash: nv5XmU97C++H82vtSbaW06zkLpVOeaF9Xg49KK/5bYU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl
                          rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 01:03:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 961 (0x3c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91251AD, serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
        Validity
            Not Before: Jul  3 01:03:15 2025 GMT
            Not After : Jul 10 01:03:15 2025 GMT
        Subject: CN=6865d6d3-8cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8c:50:d3:80:3d:79:78:0f:5f:7b:11:91:4d:
                    f6:79:a4:22:96:1f:a4:23:9d:92:62:c8:f3:1c:b1:
                    8a:8b:4c:98:d3:1e:ff:03:2d:d4:d5:9a:11:1c:a3:
                    36:38:c1:c3:72:ae:55:e1:98:7a:35:cc:e7:27:0a:
                    ba:a9:31:9f:ed:ad:4c:d7:c8:e5:d7:11:0b:19:9b:
                    bf:30:e6:4d:84:14:4a:a3:a6:cb:ee:77:9a:b9:38:
                    2a:81:51:d3:f0:ec:cc:0b:1e:d8:c1:67:c8:f3:6e:
                    9b:74:3d:ae:6c:80:97:3b:b2:fe:4e:71:09:f1:39:
                    23:09:13:ef:3d:70:eb:f6:db:6f:32:39:f8:cd:db:
                    aa:93:b5:ef:bc:ec:ed:90:0f:b7:3f:50:4e:b2:91:
                    db:3c:7d:e0:68:bf:7e:1a:bc:a5:ec:29:ea:48:0e:
                    6d:67:4a:64:ab:a7:f1:b3:2d:0c:f1:f3:23:e5:37:
                    ca:a4:b8:d2:4c:f0:c2:7d:31:b9:83:85:b1:5b:8e:
                    f7:61:52:b0:60:61:94:87:f8:19:4e:17:16:65:40:
                    3b:0c:0d:4b:5f:25:b0:3c:13:51:23:be:a1:b1:65:
                    1f:c9:c6:0a:a2:cc:f2:ca:c7:37:2b:ee:84:bd:79:
                    45:fe:45:66:0d:20:32:84:fe:1f:80:27:34:bc:6a:
                    34:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:16:68:E1:CD:52:57:51:BF:79:A0:22:46:D1:20:41:2E:A5:E3:16
            X509v3 Authority Key Identifier:
                keyid:15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:11:c4:4a:58:09:71:44:a2:86:a9:74:fb:ef:6f:4d:6d:ad:
         85:35:03:7b:1d:5a:e8:ae:9d:78:c9:e6:73:f0:66:d1:79:ab:
         b0:20:fa:c1:95:ef:f5:d8:55:3e:0c:78:74:94:5e:78:21:2c:
         ab:90:ed:22:82:1f:79:2e:a1:d4:6d:48:83:3d:be:1a:4e:2b:
         db:5b:88:10:06:c2:9d:f7:ac:41:ff:b9:cc:44:19:92:62:39:
         ef:7c:8b:f4:a3:f7:4c:c1:7e:38:8f:81:45:60:3a:53:da:e6:
         dc:4b:dc:2d:d9:82:ca:88:19:51:5b:3b:f1:0a:27:68:84:b1:
         5e:63:9c:09:56:98:24:fc:8c:24:c6:00:49:57:bd:17:84:f6:
         26:81:73:71:57:2e:38:39:2b:00:cc:23:53:11:18:da:c6:6f:
         67:c0:44:ca:ac:84:0f:b6:b2:fc:bd:33:c2:9c:58:07:76:34:
         7d:36:97:d2:d4:be:cb:c6:4d:23:64:32:d3:89:8f:01:6c:bf:
         af:68:d0:3f:ec:96:0d:59:96:32:47:5b:be:91:42:bc:5e:cb:
         3a:ee:87:d0:28:5c:50:b6:65:ad:5c:30:45:8f:cf:b1:77:f7:
         3d:19:45:9e:b0:56:78:99:64:9d:4f:6c:5d:23:93:8c:a0:58:
         da:84:fb:0b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjUxQUQxMTAvBgNVBAUTKDE1NjU3NzJCN0I0RUJFODUwNDlEMkFGOUIzMkFDQzg3
ODAzMTFBNUQwHhcNMjUwNzAzMDEwMzE1WhcNMjUwNzEwMDEwMzE1WjAYMRYwFAYD
VQQDEw02ODY1ZDZkMy04Y2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3YxQ04A9eXgPX3sRkU32eaQilh+kI52SYsjzHLGKi0yY0x7/Ay3U1ZoRHKM2
OMHDcq5V4Zh6NcznJwq6qTGf7a1M18jl1xELGZu/MOZNhBRKo6bL7neauTgqgVHT
8OzMCx7YwWfI826bdD2ubICXO7L+TnEJ8TkjCRPvPXDr9ttvMjn4zduqk7XvvOzt
kA+3P1BOspHbPH3gaL9+Gryl7CnqSA5tZ0pkq6fxsy0M8fMj5TfKpLjSTPDCfTG5
g4WxW473YVKwYGGUh/gZThcWZUA7DA1LXyWwPBNRI76hsWUfycYKoszyysc3K+6E
vXlF/kVmDSAyhP4fgCc0vGo0eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAYWaOHN
UldRv3mgIkbRIEEupeMWMB8GA1UdIwQYMBaAFBVldyt7Tr6FBJ0q+bMqzIeAMRpd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTFBRC84RkRERjVFODk5
MUQxMUVDODA5MzlBNTRDNEY5QUUwMi9GV1YzSzN0T3ZvVUVuU3I1c3lyTWg0QXhH
bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZXVjNLM3RPdm9VRW5TcjVzeXJNaDRBeEdsMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NTFBRC84RkRERjVFODk5MUQxMUVDODA5MzlBNTRDNEY5QUUwMi9GV1YzSzN0T3Zv
VUVuU3I1c3lyTWg0QXhHbDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCoEcRKWAlxRKKGqXT7729Nba2FNQN7HVrorp14yeZz8GbReauwIPrB
le/12FU+DHh0lF54ISyrkO0igh95LqHUbUiDPb4aTivbW4gQBsKd96xB/7nMRBmS
YjnvfIv0o/dMwX44j4FFYDpT2ubcS9wt2YLKiBlRWzvxCidohLFeY5wJVpgk/Iwk
xgBJV70XhPYmgXNxVy44OSsAzCNTERjaxm9nwETKrIQPtrL8vTPCnFgHdjR9NpfS
1L7Lxk0jZDLTiY8BbL+vaNA/7JYNWZYyR1u+kUK8Xss67ofQKFxQtmWtXDBFj8+x
d/c9GUWesFZ4mWSdT2xdI5OMoFjahPsL
-----END CERTIFICATE-----
Generated at Thu Jul 3 10:34:25 2025 by rpki-client