Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
File:                     FWV3K3tOvoUEnSr5syrMh4AxGl0.mft (raw, json)
Hash identifier:          DDWnt7moKuBgbj+lmehqUC9V5Cn0WL/x1HXMq6SIVt4=
Subject key identifier:   20:EA:D0:6B:8E:F2:F8:07:08:30:C0:34:59:C5:68:63:B0:AF:70:DC
Authority key identifier: 15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D
Certificate issuer:       /CN=A91251AD/serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
Certificate serial:       03F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
Manifest number:          03F0
Signing time:             Sun 19 Oct 2025 02:28:09 +0000
Manifest this update:     Sun 19 Oct 2025 02:28:09 +0000
Manifest next update:     Sun 26 Oct 2025 02:28:09 +0000
Files and hashes:         1: FWV3K3tOvoUEnSr5syrMh4AxGl0.crl (hash: DpVeiZe+KONztIbWvD4MkzYHBJMYWXHliJljME77F98=)
                          2: D2FE3A16501411F084311D4CC4F9AE02.roa (hash: sczNDr9Uf1o14TeMLvhQpR0Eoi4DkVd7EM/ILBPX2f8=)
                          3: EB9FE0C2500C11F0AC93B675C4F9AE02.roa (hash: ZEuV8rnSTrAUL1+f9B0DJgZDQV0kGj4jMARqkjlC+9I=)
                          4: 2106E428992111EC99E0095AC4F9AE02.roa (hash: E9NEqlH96lKzIMQJHYm3U7gAA+i7maF4xaW2S95jQF0=)
                          5: 412371002A5911F08EA23244C4F9AE02.roa (hash: nv5XmU97C++H82vtSbaW06zkLpVOeaF9Xg49KK/5bYU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl
                          rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:28:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1016 (0x3f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91251AD, serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
        Validity
            Not Before: Oct 19 02:28:09 2025 GMT
            Not After : Oct 26 02:28:09 2025 GMT
        Subject: CN=68f44cb9-165d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d1:96:88:24:9d:90:26:68:22:9d:d6:3c:35:
                    fd:82:e6:87:43:0f:56:a0:52:80:c4:4e:08:83:80:
                    ea:0d:9b:8c:88:de:85:53:ba:d0:fd:99:5b:09:12:
                    7f:ff:89:c7:fa:96:0a:a1:b4:3a:fb:20:4d:bf:c6:
                    db:56:6d:20:6f:56:3d:1b:ff:63:17:4e:5f:c1:73:
                    0b:46:42:8e:5f:7b:b5:e6:bd:2b:63:3e:4b:69:83:
                    e7:dd:4c:cf:be:52:80:68:82:b3:4a:e2:2f:bb:a9:
                    76:f8:89:e5:d8:ca:ec:79:f8:71:03:0e:03:da:c0:
                    0f:07:05:ce:53:72:81:c6:82:d3:ac:57:af:a1:05:
                    8c:51:ce:03:04:ec:d7:ab:01:d9:f2:60:b9:60:a2:
                    4c:fb:77:34:2e:15:33:8d:be:4b:38:82:44:91:e8:
                    80:6c:db:60:7e:61:c1:44:ec:3e:ef:cb:5c:ef:91:
                    f3:31:45:f9:36:cb:29:aa:82:7d:f3:8f:3b:52:ed:
                    45:c0:5d:d1:c0:68:fe:f9:d6:c7:79:67:57:99:6d:
                    a3:57:6b:ae:af:28:c7:dd:98:5b:bd:6c:9a:00:5b:
                    4b:69:e3:7f:20:f6:96:da:2d:40:fc:d3:f9:b1:a6:
                    5a:4d:3c:d5:3e:d6:40:90:39:6a:01:38:6e:26:8d:
                    71:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:EA:D0:6B:8E:F2:F8:07:08:30:C0:34:59:C5:68:63:B0:AF:70:DC
            X509v3 Authority Key Identifier:
                keyid:15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:1f:74:7a:0b:25:2c:a0:6d:0c:1e:97:b8:71:53:94:17:f0:
         ad:d1:f0:ab:09:06:57:cc:7e:6a:4c:13:d4:6f:27:c5:10:ce:
         57:df:e4:b3:e3:11:2b:fb:ea:06:79:8e:b4:bc:aa:b1:0d:69:
         1e:8f:4f:a9:ed:9e:ed:a7:2b:7e:9b:87:13:85:d3:99:71:e7:
         b4:98:09:6f:34:b8:ce:3a:38:1e:ea:5f:8d:ba:69:fb:51:cd:
         16:f4:6e:ba:e7:8b:5f:bf:36:db:e0:99:ae:ab:76:c4:cb:cd:
         fc:a6:19:e4:58:75:0d:f9:b6:69:b4:d5:22:8d:22:37:e6:f6:
         5b:39:66:07:82:d1:4b:45:89:f5:d9:ba:df:2c:d6:ab:5c:15:
         9e:b6:7c:16:ff:a9:31:9c:a9:e8:33:36:4c:27:52:2a:ee:9c:
         a8:99:a6:53:4c:e1:9f:20:0c:7d:48:7b:f4:3e:c3:b9:02:53:
         8e:d6:d4:bf:d7:42:b1:70:79:45:ee:65:bf:d0:88:16:83:20:
         e1:20:a5:2f:31:9a:39:c2:2a:41:41:91:36:8a:09:73:49:aa:
         d9:e8:bf:d8:1f:24:a2:49:69:84:8c:bc:f9:56:fa:4b:c8:c8:
         12:d5:4b:72:10:0d:7a:89:f3:b3:64:77:56:62:9b:1c:d9:4a:
         d4:17:53:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:47:13 2025 by rpki-client