Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
File:                     FWV3K3tOvoUEnSr5syrMh4AxGl0.mft (raw, json)
Hash identifier:          oP/dJPSE9+wE5wabXzbwwuTELE14QVWEVEBRSdrUF6U=
Subject key identifier:   5C:D3:E8:8F:A9:DC:83:3E:D6:23:C7:50:D0:75:14:25:EA:9E:B4:B1
Authority key identifier: 15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D
Certificate issuer:       /CN=A91251AD/serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
Certificate serial:       03D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
Manifest number:          03CC
Signing time:             Sat 09 Aug 2025 01:09:07 +0000
Manifest this update:     Sat 09 Aug 2025 01:09:07 +0000
Manifest next update:     Sat 16 Aug 2025 01:09:07 +0000
Files and hashes:         1: FWV3K3tOvoUEnSr5syrMh4AxGl0.crl (hash: 3Bwx8H2silMOZB6n9YOdMFMDDId/vfLnr+KDZlzckaw=)
                          2: D2FE3A16501411F084311D4CC4F9AE02.roa (hash: sczNDr9Uf1o14TeMLvhQpR0Eoi4DkVd7EM/ILBPX2f8=)
                          3: EB9FE0C2500C11F0AC93B675C4F9AE02.roa (hash: ZEuV8rnSTrAUL1+f9B0DJgZDQV0kGj4jMARqkjlC+9I=)
                          4: 2106E428992111EC99E0095AC4F9AE02.roa (hash: E9NEqlH96lKzIMQJHYm3U7gAA+i7maF4xaW2S95jQF0=)
                          5: 412371002A5911F08EA23244C4F9AE02.roa (hash: nv5XmU97C++H82vtSbaW06zkLpVOeaF9Xg49KK/5bYU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl
                          rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 980 (0x3d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91251AD, serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
        Validity
            Not Before: Aug  9 01:09:07 2025 GMT
            Not After : Aug 16 01:09:07 2025 GMT
        Subject: CN=68969fb3-2d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:40:b1:66:b4:ca:c3:6a:1f:42:99:b9:28:19:
                    51:1d:73:ab:86:26:4c:86:41:cc:17:24:51:c3:9f:
                    02:20:3a:83:87:d2:5c:f4:17:11:f8:be:18:b5:e2:
                    11:aa:d2:1c:75:5a:4f:d4:8e:78:93:de:8a:39:a1:
                    7e:79:e6:3a:1d:1c:cf:2e:e5:21:62:2f:f7:62:70:
                    3d:1c:c9:77:35:da:83:f0:3f:21:88:49:f6:1a:e7:
                    0a:91:d9:c5:aa:fa:61:bc:b4:13:35:71:67:c8:48:
                    37:a6:cf:86:4a:d4:a4:37:27:30:7a:77:45:68:a8:
                    07:ea:04:3b:d4:53:6e:81:ea:dd:48:47:0b:88:cd:
                    f0:55:5e:72:20:53:49:95:8a:17:5e:99:7f:32:12:
                    c8:d7:c1:da:fb:35:81:de:d1:2a:b5:1f:e2:19:53:
                    67:ee:29:c7:e8:0c:0a:cd:a1:9b:76:c8:e7:39:23:
                    61:52:e5:cc:38:00:fb:1d:fd:80:eb:40:59:00:06:
                    d4:4c:77:91:4c:2d:62:ab:1d:6a:b1:08:61:e7:55:
                    95:ba:bc:42:c7:33:43:6f:be:ec:27:02:69:fa:1d:
                    c4:bd:4b:82:32:84:7d:fd:d8:16:3d:7c:5a:72:d5:
                    21:f8:c0:ea:3e:d4:3e:8e:20:99:90:a4:f6:71:5b:
                    88:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D3:E8:8F:A9:DC:83:3E:D6:23:C7:50:D0:75:14:25:EA:9E:B4:B1
            X509v3 Authority Key Identifier:
                keyid:15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:05:1b:b8:c6:1c:ef:05:4f:18:89:11:85:9d:63:ee:6e:8f:
         83:77:4d:2a:36:1c:e0:90:6e:19:1f:6c:61:67:b2:d1:ea:e7:
         30:c2:2e:35:4f:08:8c:7d:d6:cc:6d:42:34:ef:95:4a:7a:4b:
         1d:d1:d6:97:c9:fe:01:4a:39:14:cf:f4:a3:de:cb:32:ce:d2:
         90:a4:28:fc:7d:04:fc:e8:28:70:dd:dc:9e:e5:bd:2f:59:51:
         4e:d1:a1:b6:3f:be:78:f2:b0:68:0d:97:41:05:8a:e1:3d:fe:
         d8:5a:36:98:74:a5:49:88:ff:0a:21:a5:30:12:9b:0d:35:57:
         a3:8d:07:d7:0e:49:a8:09:68:44:6b:ac:22:fe:0f:f6:a1:ea:
         39:9e:54:87:26:75:c8:ed:82:77:66:ce:91:56:31:59:a9:53:
         35:5b:8b:73:c8:78:32:db:7b:85:bd:37:f6:ac:19:28:06:37:
         8d:b3:9c:b3:34:d1:0d:de:64:ba:ee:6c:1c:50:24:1e:fe:55:
         60:13:0d:7f:2b:5d:4b:8a:00:8a:4f:eb:29:84:81:8a:c9:f8:
         8d:2c:48:a7:ac:c0:87:ff:40:d0:7c:09:d1:85:74:a4:1e:0c:
         9a:1b:59:c1:04:c5:d0:68:8a:f5:aa:23:91:c6:37:f3:85:8e:
         3e:cf:b4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:00:29 2025 by rpki-client