Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
File:                     FWV3K3tOvoUEnSr5syrMh4AxGl0.mft (raw, json)
Hash identifier:          r60j6E2WDU2t5sOzio/t8jeXxST0pV3zfOGOGob2akA=
Subject key identifier:   0D:91:7D:5A:20:D1:E4:76:94:47:DF:10:73:43:6C:08:6C:D9:CA:8D
Authority key identifier: 15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D
Certificate issuer:       /CN=A91251AD/serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
Certificate serial:       03F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
Manifest number:          03F1
Signing time:             Thu 23 Oct 2025 01:46:54 +0000
Manifest this update:     Thu 23 Oct 2025 01:46:53 +0000
Manifest next update:     Thu 30 Oct 2025 01:46:53 +0000
Files and hashes:         1: FWV3K3tOvoUEnSr5syrMh4AxGl0.crl (hash: CInJiT4FZ6K48hU11vvdTMI0MaTk22AOGFISWbeH8QM=)
                          2: D2FE3A16501411F084311D4CC4F9AE02.roa (hash: sczNDr9Uf1o14TeMLvhQpR0Eoi4DkVd7EM/ILBPX2f8=)
                          3: EB9FE0C2500C11F0AC93B675C4F9AE02.roa (hash: ZEuV8rnSTrAUL1+f9B0DJgZDQV0kGj4jMARqkjlC+9I=)
                          4: 2106E428992111EC99E0095AC4F9AE02.roa (hash: E9NEqlH96lKzIMQJHYm3U7gAA+i7maF4xaW2S95jQF0=)
                          5: 412371002A5911F08EA23244C4F9AE02.roa (hash: nv5XmU97C++H82vtSbaW06zkLpVOeaF9Xg49KK/5bYU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl
                          rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Oct 2025 01:46:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1017 (0x3f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91251AD, serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
        Validity
            Not Before: Oct 23 01:46:53 2025 GMT
            Not After : Oct 30 01:46:53 2025 GMT
        Subject: CN=68f9890d-e536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3d:39:c8:ad:8c:40:d8:8f:49:7f:42:50:93:
                    09:6f:27:3c:ca:15:0f:bc:61:74:64:09:d4:a3:2e:
                    ae:90:c9:c7:92:9d:cd:0f:b0:21:47:44:d3:d0:2d:
                    5d:f6:a1:94:2f:b6:14:35:4b:12:ce:a6:3f:40:a5:
                    52:b2:35:ff:55:8a:36:79:f7:77:1c:68:b0:51:78:
                    e4:10:91:0a:1c:8e:58:5e:eb:c5:b0:30:58:5d:13:
                    42:cf:ff:41:62:ef:8f:1f:59:99:90:99:c5:52:79:
                    f4:36:d8:4f:94:87:64:cf:a8:fc:29:f0:fe:69:1d:
                    71:f7:60:05:5e:b5:4f:f7:6e:d7:da:d4:43:e5:d9:
                    15:15:4c:3a:fb:85:a8:d2:79:23:91:25:61:3e:6a:
                    e9:ae:f4:7b:1e:69:ec:68:89:fa:01:53:de:d8:47:
                    0b:44:7a:d7:7c:3b:c0:71:fd:0f:ac:ca:23:36:91:
                    21:ba:20:55:42:d8:54:3f:a6:3d:0a:49:dc:53:07:
                    74:20:24:80:a0:8d:10:fa:4b:60:e1:43:21:d2:ac:
                    66:23:0b:b2:b8:a2:30:db:fe:dc:e6:eb:fd:12:de:
                    c7:22:88:76:c1:48:2e:13:41:6e:c1:cb:6b:5e:82:
                    17:5c:dc:5e:1d:ff:fe:a5:f4:52:2d:a3:71:92:ee:
                    b0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:91:7D:5A:20:D1:E4:76:94:47:DF:10:73:43:6C:08:6C:D9:CA:8D
            X509v3 Authority Key Identifier:
                keyid:15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:8a:50:68:ac:fb:69:7f:bb:50:60:14:6c:45:16:75:42:2c:
         9d:94:44:b5:6c:b4:17:3c:14:a3:5b:c7:f7:92:b4:d4:7d:c3:
         4d:c1:55:c6:d4:c0:f8:09:f0:a1:f9:ea:a2:a9:e5:f4:51:10:
         d5:6a:bb:c6:2d:de:72:ae:51:3b:da:1c:43:c2:01:3e:bc:4a:
         e2:47:c9:08:bc:8a:fa:78:8f:ff:c3:e5:33:de:16:28:25:3b:
         c1:72:04:b1:de:82:7a:0d:42:8f:c1:ba:1c:45:96:13:22:bf:
         8a:ac:5c:85:8e:19:43:d2:a0:34:65:0d:d2:8d:6e:37:69:b2:
         91:80:d5:85:70:87:ee:e1:52:02:82:c3:5b:7b:63:dd:ca:ab:
         da:dd:66:bb:58:fe:40:b4:25:f3:b6:06:97:7c:c1:41:66:74:
         24:08:76:2f:33:ed:ff:5b:13:8d:d8:72:2e:a2:1e:b9:9b:7a:
         f7:09:61:a2:7f:b4:b6:ef:c2:4b:78:bf:b8:c5:4d:65:75:f9:
         4b:fa:a8:b3:95:0b:3f:68:9c:1b:5c:f3:11:3b:80:1b:45:e0:
         31:f6:6d:5f:3e:8d:56:d1:e5:bc:0f:8e:0e:10:e8:27:20:f8:
         45:80:87:89:8b:11:dc:a6:ad:0a:87:74:7b:17:86:14:f4:b9:
         a8:09:b4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 10:16:49 2025 by rpki-client