Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
File:                     FWV3K3tOvoUEnSr5syrMh4AxGl0.mft (raw, json)
Hash identifier:          jqXFSlQ1nGh5ISnDb05yO88n+wYuutTT07zae3FawbI=
Subject key identifier:   12:FB:66:79:78:72:E9:85:CF:9E:9C:1F:CB:C7:C4:89:0D:AA:9E:CD
Authority key identifier: 15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D
Certificate issuer:       /CN=A91251AD/serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
Certificate serial:       03CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
Manifest number:          03C2
Signing time:             Mon 21 Jul 2025 00:55:14 +0000
Manifest this update:     Mon 21 Jul 2025 00:55:14 +0000
Manifest next update:     Mon 28 Jul 2025 00:55:13 +0000
Files and hashes:         1: FWV3K3tOvoUEnSr5syrMh4AxGl0.crl (hash: 0SvfY095jdMvYlsYKYPcZ21KuNnJGvwdnCwrSPCwkx8=)
                          2: D2FE3A16501411F084311D4CC4F9AE02.roa (hash: sczNDr9Uf1o14TeMLvhQpR0Eoi4DkVd7EM/ILBPX2f8=)
                          3: EB9FE0C2500C11F0AC93B675C4F9AE02.roa (hash: ZEuV8rnSTrAUL1+f9B0DJgZDQV0kGj4jMARqkjlC+9I=)
                          4: 2106E428992111EC99E0095AC4F9AE02.roa (hash: E9NEqlH96lKzIMQJHYm3U7gAA+i7maF4xaW2S95jQF0=)
                          5: 412371002A5911F08EA23244C4F9AE02.roa (hash: nv5XmU97C++H82vtSbaW06zkLpVOeaF9Xg49KK/5bYU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl
                          rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 00:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 970 (0x3ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91251AD, serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
        Validity
            Not Before: Jul 21 00:55:14 2025 GMT
            Not After : Jul 28 00:55:13 2025 GMT
        Subject: CN=687d8ff2-c4df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c9:89:c5:70:18:1c:f8:fa:5d:69:67:30:5e:
                    c1:1a:fa:b9:2b:2e:c7:c8:9a:19:38:9a:12:ce:7d:
                    fd:1d:80:02:00:06:45:4b:c1:db:ea:29:37:4f:86:
                    d4:68:cf:f0:30:9a:82:de:59:a1:c7:36:7c:17:9f:
                    1a:1a:d8:81:88:22:cd:78:94:cd:ce:0b:16:10:62:
                    8d:36:25:1f:79:5e:fa:6a:0e:0e:13:bf:10:ca:85:
                    da:e5:0a:65:40:69:7a:0f:b2:56:5d:36:63:67:a5:
                    b6:e7:ec:c1:48:44:2b:4f:c8:73:61:69:cd:4a:d8:
                    26:20:96:10:c6:8a:02:58:3e:b9:ec:72:5d:f3:68:
                    db:2b:c5:da:f7:11:37:6f:ff:0d:8e:23:cc:89:38:
                    a3:64:4d:4e:a6:63:b0:ad:38:a3:a3:94:7a:be:5f:
                    62:c7:e8:e3:68:50:9b:bc:42:7c:ae:34:11:44:17:
                    29:4c:91:a9:78:63:15:c0:f3:3b:d5:6c:b3:7a:fa:
                    3c:95:f7:33:1a:06:43:63:ca:a3:f7:5e:5b:d2:03:
                    00:b0:e2:b3:c0:59:e9:07:25:f7:4d:e3:e4:ba:05:
                    ff:0e:b5:d1:44:b2:a8:ca:95:79:77:5d:0a:a7:b3:
                    e4:18:72:6d:32:2c:0c:cc:e2:42:d6:3a:55:6e:d5:
                    2b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:FB:66:79:78:72:E9:85:CF:9E:9C:1F:CB:C7:C4:89:0D:AA:9E:CD
            X509v3 Authority Key Identifier:
                keyid:15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:31:82:32:2e:66:47:31:a2:6e:83:cf:aa:18:f7:bb:41:88:
         48:08:c4:da:c6:34:2f:48:25:c4:da:b5:32:ae:b3:5a:82:84:
         f3:11:3e:22:d4:cb:ef:be:6c:6b:b9:98:d4:46:88:d7:b5:68:
         26:08:26:e5:ff:d0:2b:5c:91:ba:e7:20:77:56:8d:25:a7:8f:
         c0:9d:8c:d5:59:ea:e9:83:71:55:08:b6:6c:90:06:cf:3e:9b:
         e4:14:37:58:d8:46:14:da:b5:54:07:18:40:7e:7f:a0:6c:76:
         04:27:12:28:ed:39:63:e2:3b:4b:37:2a:5b:1e:ae:39:4e:97:
         af:e6:7c:28:e2:c6:a4:ba:94:f1:62:b4:d1:c2:74:45:09:58:
         0f:bd:4c:b7:65:8f:67:74:45:11:ee:7a:4b:1e:c6:e8:85:64:
         a6:89:88:39:37:24:e9:79:35:16:82:d8:b4:52:1e:54:b3:3a:
         10:fc:b8:05:d0:fd:14:ea:9e:b1:95:8f:32:16:98:23:92:e2:
         40:f2:80:c5:1e:84:83:ce:2c:55:e1:c1:3e:74:9a:46:c0:00:
         4b:e6:9c:19:1d:8c:da:7f:e0:2b:7f:2e:3a:6e:fc:f2:92:70:
         8d:79:16:5a:60:ad:16:69:d2:14:cb:da:77:fe:7d:0a:4f:c2:
         53:b3:73:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:46:14 2025 by rpki-client