Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft
File:                     1h3BeAj1jg-ZsoUs50hg-FPLINs.mft (raw, json)
Hash identifier:          7NtWXvRCh+IufixXN6ZdH/UNsKeaB1hVsDfmH74WzQ0=
Subject key identifier:   CE:65:64:5B:44:98:E1:93:73:C0:32:C6:F7:D7:02:6A:BD:FC:9B:BD
Authority key identifier: D6:1D:C1:78:08:F5:8E:0F:99:B2:85:2C:E7:48:60:F8:53:CB:20:DB
Certificate issuer:       /CN=A916FD2B/serialNumber=D61DC17808F58E0F99B2852CE74860F853CB20DB
Certificate serial:       01FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h3BeAj1jg-ZsoUs50hg-FPLINs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft
Manifest number:          01FA
Signing time:             Sun 19 Oct 2025 05:07:33 +0000
Manifest this update:     Sun 19 Oct 2025 05:07:32 +0000
Manifest next update:     Sun 26 Oct 2025 05:07:32 +0000
Files and hashes:         1: 1h3BeAj1jg-ZsoUs50hg-FPLINs.crl (hash: +CcRhuZudA57F8wlmvBbmGrLXBuj871KZKZe7R/m6cw=)
                          2: FB4FC092A83811ED94EE0437C4F9AE02.roa (hash: PwUsQccop9Cf8FtxwxhpO1uR6/Yqyp0+oubBrUUdudU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.crl
                          rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h3BeAj1jg-ZsoUs50hg-FPLINs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:07:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 511 (0x1ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916FD2B, serialNumber=D61DC17808F58E0F99B2852CE74860F853CB20DB
        Validity
            Not Before: Oct 19 05:07:32 2025 GMT
            Not After : Oct 26 05:07:32 2025 GMT
        Subject: CN=68f47214-dc66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ab:1c:3b:41:f7:13:12:53:e9:47:8a:88:da:
                    6b:78:8f:2b:1e:c2:e1:10:03:1b:ae:3a:77:ad:f9:
                    67:15:e1:17:64:fe:cf:f3:65:96:43:a4:c0:ab:a6:
                    f4:fa:ef:c6:ba:e0:74:ac:f2:03:fc:1a:5b:dd:c1:
                    68:88:8c:98:ca:dd:69:bb:e1:73:05:a2:f0:f2:a9:
                    d6:2a:28:c3:ce:95:a3:47:01:f0:28:62:2e:26:31:
                    1e:be:56:3f:75:44:9e:5d:d6:36:8a:a8:2d:43:d1:
                    c6:04:c3:10:1f:02:4b:61:ae:6a:70:73:f2:41:86:
                    b2:be:72:a7:0a:b1:ad:e0:f2:99:20:a9:91:31:18:
                    d6:d5:0b:02:7d:48:e6:fb:46:8e:49:c5:4d:12:81:
                    4b:02:a3:28:01:96:96:20:e9:92:26:e4:fb:54:1b:
                    ea:3f:fe:04:ff:ef:4b:f8:c0:f1:01:82:ec:36:75:
                    94:87:85:eb:da:6c:07:f5:e9:75:a8:81:67:f2:e3:
                    69:02:7d:61:1d:4c:89:35:43:54:0b:1c:1b:46:e8:
                    9a:19:62:a5:d7:b2:ef:8e:82:36:71:60:ef:a5:83:
                    19:5c:d6:44:76:2c:24:1f:eb:04:61:30:5d:e8:af:
                    9c:0c:b9:1f:ce:ba:10:b5:22:d1:51:d1:c9:50:ee:
                    0a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:65:64:5B:44:98:E1:93:73:C0:32:C6:F7:D7:02:6A:BD:FC:9B:BD
            X509v3 Authority Key Identifier:
                keyid:D6:1D:C1:78:08:F5:8E:0F:99:B2:85:2C:E7:48:60:F8:53:CB:20:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h3BeAj1jg-ZsoUs50hg-FPLINs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:41:71:80:b9:be:b5:f1:b3:e6:21:8d:22:85:b3:d8:e5:ce:
         92:05:67:b5:74:2a:26:52:1e:bb:65:45:c4:c6:e3:ff:33:de:
         a9:78:c6:6a:5a:bd:0b:11:ff:4b:96:53:89:ce:7b:8c:ae:87:
         11:10:e0:10:5e:2e:84:cb:68:63:fa:95:5f:22:ed:b0:b9:c6:
         e1:12:87:9f:e3:48:24:a8:19:cd:59:88:51:4e:33:6e:74:7f:
         c6:fd:ac:2b:76:ab:bf:78:f0:d8:28:46:e7:6f:3d:af:fc:5e:
         b0:5f:de:7f:a4:62:9e:96:60:2a:ba:29:76:fa:83:82:1b:9c:
         cc:96:40:c1:bd:61:9e:cf:91:e0:55:0f:f7:2d:ba:f9:6d:c6:
         de:8d:c5:29:89:22:07:de:a6:d1:f1:54:18:3c:95:69:f4:e6:
         8a:34:69:b0:65:91:30:21:5b:dd:0d:2c:82:90:4d:ad:de:7a:
         ed:c8:a7:76:75:42:2e:eb:ef:f5:bd:30:61:86:cd:95:f6:96:
         d1:5e:c6:99:1d:95:f9:3e:27:43:7e:ef:18:fd:26:7f:81:04:
         8f:af:19:88:69:ca:3a:7e:22:4a:66:ae:b1:09:16:93:46:ca:
         f8:94:eb:71:a5:e5:a5:6c:4c:58:83:82:09:1a:7c:c3:41:2e:
         52:2b:93:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:11:37 2025 by rpki-client