Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/FnVwIM-0mowfe-H3xI1FR9_JZu8.mft
File:                     FnVwIM-0mowfe-H3xI1FR9_JZu8.mft (raw, json)
Hash identifier:          ZCYdtuudtmjvkoEDsvz/IlxOpIe+eZBOfoQmIXF6CF0=
Subject key identifier:   90:AB:63:4F:D6:70:C7:78:3A:7E:50:32:A0:27:32:F8:0B:BB:01:4C
Authority key identifier: 16:75:70:20:CF:B4:9A:8C:1F:7B:E1:F7:C4:8D:45:47:DF:C9:66:EF
Certificate issuer:       /CN=A9150EAB/serialNumber=16757020CFB49A8C1F7BE1F7C48D4547DFC966EF
Certificate serial:       072D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnVwIM-0mowfe-H3xI1FR9_JZu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/FnVwIM-0mowfe-H3xI1FR9_JZu8.mft
Manifest number:          1274
Signing time:             Tue 04 Nov 2025 19:17:42 +0000
Manifest this update:     Tue 04 Nov 2025 19:17:41 +0000
Manifest next update:     Tue 11 Nov 2025 19:17:41 +0000
Files and hashes:         1: FnVwIM-0mowfe-H3xI1FR9_JZu8.crl (hash: H3107uWA1x9gKapbnbFssFcxIgrq2t/p860yMb2TnWg=)
                          2: 99871E14B32A11F0A592C451C4F9AE02.roa (hash: NrC1/64Q4pVUX0t00BSlKYPKXM6IsVAN9Gh5EcD0cmw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/FnVwIM-0mowfe-H3xI1FR9_JZu8.crl
                          rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/FnVwIM-0mowfe-H3xI1FR9_JZu8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnVwIM-0mowfe-H3xI1FR9_JZu8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 19:17:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1837 (0x72d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150EAB, serialNumber=16757020CFB49A8C1F7BE1F7C48D4547DFC966EF
        Validity
            Not Before: Nov  4 19:17:41 2025 GMT
            Not After : Nov 11 19:17:41 2025 GMT
        Subject: CN=690a5156-e763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:20:62:55:3b:d0:10:9b:d9:43:a4:ac:66:b9:
                    e7:40:9e:40:c9:4d:df:2d:38:39:02:1f:4b:36:63:
                    85:ba:ad:4e:50:6f:0c:33:b8:e6:ab:c1:3d:9c:35:
                    88:db:7d:f0:fc:f0:d7:c2:54:f6:37:0a:a3:ef:02:
                    d6:a2:52:3b:16:a7:21:21:fa:d3:ec:92:03:f1:c7:
                    17:72:9d:ce:25:47:97:e7:c6:e7:b0:5d:33:02:6c:
                    31:dd:a5:8c:f3:e8:d5:da:77:40:87:1b:aa:ae:86:
                    87:4c:39:0e:45:b1:6b:6c:67:28:2d:83:0d:08:9d:
                    f6:59:bf:cf:d8:6e:70:d3:ea:44:2c:7b:d7:9e:77:
                    da:e4:ec:49:c0:53:0b:e2:f8:d5:8c:02:bd:b5:db:
                    08:24:16:09:b1:79:e8:aa:49:70:36:e1:46:de:83:
                    a6:27:ca:28:a0:ae:ff:cb:93:ce:ef:84:2a:c4:91:
                    4f:99:3d:fe:3f:74:4d:fe:9e:c5:89:7f:29:b3:a2:
                    12:3a:ee:e2:69:e9:25:68:7a:59:f8:04:86:8e:c7:
                    ec:fc:40:a1:71:48:55:9c:33:4a:e7:9e:1f:1b:f0:
                    a3:ba:f6:1a:3e:b3:08:a6:bf:bb:05:80:7c:5b:a4:
                    22:1d:23:a7:be:f4:65:ea:4f:c4:a8:e5:d0:ee:ba:
                    c7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:AB:63:4F:D6:70:C7:78:3A:7E:50:32:A0:27:32:F8:0B:BB:01:4C
            X509v3 Authority Key Identifier:
                keyid:16:75:70:20:CF:B4:9A:8C:1F:7B:E1:F7:C4:8D:45:47:DF:C9:66:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/FnVwIM-0mowfe-H3xI1FR9_JZu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnVwIM-0mowfe-H3xI1FR9_JZu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/FnVwIM-0mowfe-H3xI1FR9_JZu8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:62:4b:68:35:d7:6d:fd:5a:e5:ea:05:96:bc:05:b2:35:a9:
         cb:6c:42:0b:81:d9:b6:c1:ba:e7:23:cb:9d:f6:f7:78:40:7b:
         8b:cc:5d:e9:47:37:b9:30:b3:21:4f:ea:c0:fe:36:22:c9:fd:
         c8:b2:67:09:ac:47:91:ee:b0:05:ee:82:c4:ca:ed:d7:93:be:
         92:06:54:aa:a5:19:77:cc:d0:4c:b5:86:d0:3c:08:9e:28:4e:
         ee:47:ab:db:8e:53:bb:ad:c1:79:f9:89:3e:61:cf:07:a7:78:
         e9:37:46:70:5a:11:f7:eb:c8:5e:48:6e:e8:e9:f8:96:bc:65:
         07:b0:43:b5:17:39:2f:a7:64:e7:7a:f8:ab:ac:20:ba:43:bd:
         22:c0:92:0f:9b:3f:f2:2b:01:64:e7:19:b8:e9:18:79:cc:f0:
         f7:ad:24:be:1c:df:21:05:d1:e5:57:51:1e:dc:2b:ba:9c:17:
         d8:ec:37:49:2d:34:9f:74:2a:78:03:19:68:48:6e:1c:b2:bf:
         7a:8d:8f:6c:f8:85:af:96:60:7c:cd:3f:9b:d2:04:f0:a9:7d:
         44:d9:ab:14:51:43:87:79:89:88:de:74:3d:1f:df:50:9a:f2:
         be:96:f7:ae:2b:cc:b6:ff:72:0d:67:6d:27:4d:7c:cf:9b:f9:
         11:10:a2:72
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBy0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTBFQUIxMTAvBgNVBAUTKDE2NzU3MDIwQ0ZCNDlBOEMxRjdCRTFGN0M0OEQ0NTQ3
REZDOTY2RUYwHhcNMjUxMTA0MTkxNzQxWhcNMjUxMTExMTkxNzQxWjAYMRYwFAYD
VQQDEw02OTBhNTE1Ni1lNzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5iBiVTvQEJvZQ6SsZrnnQJ5AyU3fLTg5Ah9LNmOFuq1OUG8MM7jmq8E9nDWI
233w/PDXwlT2Nwqj7wLWolI7FqchIfrT7JID8ccXcp3OJUeX58bnsF0zAmwx3aWM
8+jV2ndAhxuqroaHTDkORbFrbGcoLYMNCJ32Wb/P2G5w0+pELHvXnnfa5OxJwFML
4vjVjAK9tdsIJBYJsXnoqklwNuFG3oOmJ8oooK7/y5PO74QqxJFPmT3+P3RN/p7F
iX8ps6ISOu7iaeklaHpZ+ASGjsfs/EChcUhVnDNK554fG/CjuvYaPrMIpr+7BYB8
W6QiHSOnvvRl6k/EqOXQ7rrH/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJCrY0/W
cMd4On5QMqAnMvgLuwFMMB8GA1UdIwQYMBaAFBZ1cCDPtJqMH3vh98SNRUffyWbv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEVBQi8xQjJFNzA1MDQ0
NkIxMUVBOURFNTlBNTdDNEY5QUUwMi9GblZ3SU0tMG1vd2ZlLUgzeEkxRlI5X0pa
dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZuVndJTS0wbW93ZmUtSDN4STFGUjlfSlp1OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MEVBQi8xQjJFNzA1MDQ0NkIxMUVBOURFNTlBNTdDNEY5QUUwMi9GblZ3SU0tMG1v
d2ZlLUgzeEkxRlI5X0padTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBjYktoNddt/Vrl6gWWvAWyNanLbEILgdm2wbrnI8ud9vd4QHuLzF3p
Rze5MLMhT+rA/jYiyf3IsmcJrEeR7rAF7oLEyu3Xk76SBlSqpRl3zNBMtYbQPAie
KE7uR6vbjlO7rcF5+Yk+Yc8Hp3jpN0ZwWhH368heSG7o6fiWvGUHsEO1Fzkvp2Tn
evirrCC6Q70iwJIPmz/yKwFk5xm46Rh5zPD3rSS+HN8hBdHlV1Ee3Cu6nBfY7DdJ
LTSfdCp4AxloSG4csr96jY9s+IWvlmB8zT+b0gTwqX1E2asUUUOHeYmI3nQ9H99Q
mvK+lveuK8y2/3INZ20nTXzPm/kREKJy
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:16:36 2025 by rpki-client