Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
File:                     FWV3K3tOvoUEnSr5syrMh4AxGl0.mft (raw, json)
Hash identifier:          3+6ur5hwII56cKaKkI4OJefJGHXk4NuhoMPsuMPm7Ks=
Subject key identifier:   0A:CF:26:6E:87:63:68:B5:0E:9A:6B:6B:C0:F1:F3:59:A0:C7:1E:AD
Authority key identifier: 15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D
Certificate issuer:       /CN=A91251AD/serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
Certificate serial:       0445
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
Manifest number:          0438
Signing time:             Mon 02 Mar 2026 02:17:35 +0000
Manifest this update:     Mon 02 Mar 2026 02:17:33 +0000
Manifest next update:     Mon 09 Mar 2026 02:17:33 +0000
Files and hashes:         1: FWV3K3tOvoUEnSr5syrMh4AxGl0.crl (hash: /Bo3p/A2CY1EkuRymfIW0PD6GZ+ZuUkTA8RuccMBKqU=)
                          2: D2FE3A16501411F084311D4CC4F9AE02.roa (hash: Ih18N0ZlEXa5GPjKzmYa/HukwovCk2Dz4cEt3P6AJJ8=)
                          3: 2106E428992111EC99E0095AC4F9AE02.roa (hash: 7ecr1n1Zo/Dn7wRvOCDCqKRPZFhIMNgMiJFpWC69X3E=)
                          4: EB9FE0C2500C11F0AC93B675C4F9AE02.roa (hash: 8P4cxBnEApm9teGgTCOZDoVPWcT1sNp+ISt+fwINyTg=)
                          5: 412371002A5911F08EA23244C4F9AE02.roa (hash: 7c3u9hI//6GP6wh5eNEGIzK7bP/Rm6SAZqr8skhh2yc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl
                          rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:17:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1093 (0x445)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91251AD, serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
        Validity
            Not Before: Mar  2 02:17:33 2026 GMT
            Not After : Mar  9 02:17:33 2026 GMT
        Subject: CN=69a4f33f-81c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:73:f5:3e:6e:4b:93:01:7a:ea:dd:b8:66:b7:
                    c6:55:85:b0:b1:da:9d:0f:e7:4d:ab:dc:7c:45:b2:
                    b2:e5:d9:35:a9:7e:27:c6:98:1e:1b:2f:ea:d8:af:
                    4b:a5:1a:5e:a8:37:5d:0f:14:5e:e1:68:03:cb:ad:
                    24:a8:9e:e3:7e:37:f6:49:dc:1f:60:eb:b7:b5:36:
                    cd:2e:8a:b0:60:00:f2:db:e6:2b:e2:99:e5:ca:f2:
                    30:b4:c3:3e:ce:e4:ec:11:4b:19:a7:07:4b:f1:ce:
                    a8:b2:1d:5a:f2:3b:41:44:05:8a:c3:75:a9:83:d6:
                    20:c5:b4:f1:be:f4:13:af:41:6c:17:e0:1b:db:a6:
                    57:ed:42:d1:eb:60:24:1c:c5:c1:ce:cd:22:b3:a2:
                    2a:3d:26:c1:3b:e4:76:da:72:1d:ac:bd:76:94:2a:
                    4f:29:4f:7d:54:4d:e1:1e:30:ed:12:9c:32:7d:c6:
                    04:d6:b2:f8:d3:1e:19:39:1e:b3:15:1f:41:39:3f:
                    5a:66:77:43:23:cc:9d:2a:29:1b:d0:48:3b:ba:17:
                    31:67:04:fa:bf:79:d1:c9:46:de:74:f3:21:83:37:
                    14:79:b8:dd:96:8f:5f:af:1e:e0:d1:a2:96:d9:1b:
                    ae:f8:ab:7e:86:7c:ed:b4:a5:37:33:01:92:7e:9f:
                    7f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:CF:26:6E:87:63:68:B5:0E:9A:6B:6B:C0:F1:F3:59:A0:C7:1E:AD
            X509v3 Authority Key Identifier:
                keyid:15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:30:b9:b2:c9:c0:23:be:ff:3a:62:2c:71:24:11:12:5e:5a:
         09:61:55:40:54:3a:ed:53:e3:2a:f4:d9:f7:75:cf:21:f8:c9:
         99:a0:82:ed:02:ee:41:c7:99:bf:54:a7:9d:32:3c:43:39:81:
         5b:8a:bf:2b:80:1b:cd:9e:cc:df:e3:4d:e2:13:b9:23:1d:d5:
         c9:7a:16:fc:8e:a2:20:d3:5a:a3:65:fd:99:74:eb:e8:56:4d:
         42:11:f9:c6:c2:b4:a7:0c:e0:7a:df:20:0a:af:f5:71:71:e8:
         5c:5f:e3:21:bb:9d:a2:e9:06:8e:c6:a8:91:40:55:1b:e9:b2:
         01:04:57:bb:d5:b5:21:46:76:9c:4a:b7:7e:58:bd:4d:99:d7:
         71:96:8e:91:32:97:3b:34:51:cb:7a:0a:8f:66:30:c4:93:13:
         a8:8d:e6:32:d3:2d:43:0e:54:3d:a0:5a:be:59:dc:7f:29:50:
         3f:4b:d1:f6:bb:c0:9d:ff:bc:4c:e1:f2:97:ed:a6:be:ff:8d:
         dd:a9:3a:c8:06:e5:8c:19:e0:ad:75:ff:52:83:32:57:de:f2:
         43:43:0f:3f:38:97:8a:74:ff:04:f6:b3:36:64:bb:10:57:f6:
         55:98:64:ab:29:3d:ed:73:32:e6:94:8c:a4:21:8c:0c:27:54:
         6d:63:c3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:05:03 2026 by rpki-client