Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166CD3/F69BCD4C9F8411EC93695531C4F9AE02/fvtg2-isjcfDKzQJTcvj-mYiH6E.mft
File:                     fvtg2-isjcfDKzQJTcvj-mYiH6E.mft (raw, json)
Hash identifier:          UyRUxHT4OZYE5ukuEFbdLY2qRD0/qtO4by9KHamO7ss=
Subject key identifier:   FD:3E:CB:26:FB:6C:8D:5E:27:E1:46:1A:64:8C:40:46:C5:FF:E9:B7
Authority key identifier: 7E:FB:60:DB:E8:AC:8D:C7:C3:2B:34:09:4D:CB:E3:FA:66:22:1F:A1
Certificate issuer:       /CN=A9166CD3/serialNumber=7EFB60DBE8AC8DC7C32B34094DCBE3FA66221FA1
Certificate serial:       03EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvtg2-isjcfDKzQJTcvj-mYiH6E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166CD3/F69BCD4C9F8411EC93695531C4F9AE02/fvtg2-isjcfDKzQJTcvj-mYiH6E.mft
Manifest number:          03DF
Signing time:             Sun 19 Oct 2025 02:34:23 +0000
Manifest this update:     Sun 19 Oct 2025 02:34:22 +0000
Manifest next update:     Sun 26 Oct 2025 02:34:22 +0000
Files and hashes:         1: fvtg2-isjcfDKzQJTcvj-mYiH6E.crl (hash: E9bVn/wgnH7gTQQjGXzJjdwg17Wbi9elzAVsLccm1FQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166CD3/F69BCD4C9F8411EC93695531C4F9AE02/fvtg2-isjcfDKzQJTcvj-mYiH6E.crl
                          rsync://rpki.apnic.net/member_repository/A9166CD3/F69BCD4C9F8411EC93695531C4F9AE02/fvtg2-isjcfDKzQJTcvj-mYiH6E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvtg2-isjcfDKzQJTcvj-mYiH6E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:34:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1002 (0x3ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166CD3, serialNumber=7EFB60DBE8AC8DC7C32B34094DCBE3FA66221FA1
        Validity
            Not Before: Oct 19 02:34:22 2025 GMT
            Not After : Oct 26 02:34:22 2025 GMT
        Subject: CN=68f44e2f-e43a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2e:1c:cc:18:89:68:af:bf:48:cd:03:b1:e5:
                    d1:db:03:93:2c:a8:2b:64:fd:7a:3a:a8:49:d6:32:
                    0a:52:ec:c4:d7:03:ad:76:0c:1c:d8:d8:7f:b0:63:
                    4b:30:8a:a6:7c:6d:87:49:f2:14:f0:7b:d2:b3:7b:
                    6c:70:45:b7:17:1f:72:6a:f2:0c:0a:e0:e0:bb:ca:
                    80:a4:2c:2e:91:12:b5:75:8d:71:42:4e:cf:9b:9c:
                    70:fd:71:32:db:ab:f0:4b:b6:aa:70:2f:c0:df:19:
                    e5:dc:64:e0:29:eb:d5:2a:20:78:df:1d:6b:32:22:
                    d9:36:11:26:1b:58:35:95:f6:74:45:d7:ad:dc:cc:
                    1b:d0:4a:2f:40:a9:19:5f:76:b1:88:e8:60:ca:e6:
                    ca:07:2f:11:c0:ac:a9:82:fe:06:f3:c8:b0:66:10:
                    73:80:a8:42:d0:62:5f:7f:ea:ef:1c:bb:b9:bd:74:
                    94:df:ff:60:53:56:dd:82:cd:ba:9e:00:e4:d8:c4:
                    4a:1d:43:6e:5b:12:bb:f5:39:21:0a:bf:4b:08:da:
                    fc:93:93:e1:52:db:f7:a5:d2:97:04:fb:f5:00:7f:
                    d9:f5:dd:bc:a4:a2:11:71:9d:82:66:df:51:d4:c1:
                    1f:db:ed:ea:da:4c:4d:b9:ea:43:ab:7f:60:05:ac:
                    89:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:3E:CB:26:FB:6C:8D:5E:27:E1:46:1A:64:8C:40:46:C5:FF:E9:B7
            X509v3 Authority Key Identifier:
                keyid:7E:FB:60:DB:E8:AC:8D:C7:C3:2B:34:09:4D:CB:E3:FA:66:22:1F:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166CD3/F69BCD4C9F8411EC93695531C4F9AE02/fvtg2-isjcfDKzQJTcvj-mYiH6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvtg2-isjcfDKzQJTcvj-mYiH6E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166CD3/F69BCD4C9F8411EC93695531C4F9AE02/fvtg2-isjcfDKzQJTcvj-mYiH6E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:c2:52:54:94:58:d6:e5:45:90:dc:f7:5a:d5:92:a4:42:c7:
         1e:80:04:29:1f:48:01:a2:7b:33:b0:3b:f7:7f:b8:dd:05:b8:
         57:43:1b:5c:03:17:91:03:ec:50:e2:ab:33:ac:16:17:4e:54:
         e4:36:12:53:31:1f:04:a8:c6:40:cd:b8:3a:c1:d8:c0:62:a9:
         c1:d0:0b:ce:90:f5:5b:9a:ee:f4:0b:e0:b5:4e:79:78:19:29:
         95:58:1b:c8:e6:e9:c1:22:c3:c1:8e:14:25:82:7d:62:88:20:
         7a:39:64:b2:30:df:b5:42:9a:76:38:37:f9:c2:7b:91:d5:49:
         9d:29:90:7e:cf:a7:94:ef:0c:44:58:0f:02:62:50:f2:3b:a1:
         5b:a4:4a:cf:08:8e:ae:bf:14:5c:08:1b:47:5f:01:9e:a6:e3:
         c9:83:c4:85:a4:b5:51:52:3c:10:dd:3d:83:bc:54:c5:0f:a8:
         9c:a4:53:01:42:85:c5:a6:1e:ef:39:d3:d4:34:db:43:04:5f:
         59:a7:2a:df:d3:47:77:42:f6:ce:3b:6c:4b:d1:e4:05:61:3c:
         73:fe:19:5d:1f:6d:05:25:90:80:81:60:0d:ee:c8:6e:5e:8c:
         52:8f:07:57:f3:56:4b:d7:fb:63:89:52:96:58:00:5b:ba:04:
         c8:5e:68:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:41:34 2025 by rpki-client