Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
File:                     -ffptMwx85XFzbj6yfUvyldSTeE.mft (raw, json)
Hash identifier:          5GkkjyY8JjPiRZvApxe2wRoZeaQdWkjWrSMIIZgu32w=
Subject key identifier:   FC:89:3D:45:80:09:16:50:16:AC:BC:F0:81:48:21:45:48:D9:E3:8B
Authority key identifier: F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1
Certificate issuer:       /CN=A912DFFA/serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1
Certificate serial:       0389
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
Manifest number:          0365
Signing time:             Thu 21 May 2026 01:03:49 +0000
Manifest this update:     Thu 21 May 2026 01:03:48 +0000
Manifest next update:     Thu 28 May 2026 01:03:48 +0000
Files and hashes:         1: -ffptMwx85XFzbj6yfUvyldSTeE.crl (hash: OjYYQkowNbcVaqdxghiJZkLVVsfN3ILh+qgHeAf/ltg=)
                          2: 0EDE44B2797511EF9F3FEC4CC4F9AE02.roa (hash: X52OCC/lE3b4nsh0tIE1/ie7TTPJC9iTuuS5fQwz44I=)
                          3: A38DD8D40E1111F1B60944950A3D8C67.roa (hash: 8xomlP6u/pFuCS+4ZI0VqTn0cJ1Ypm6zhDkBB6EqaYQ=)
                          4: 14A16ED4F0C011EFB89A0131C4F9AE02.roa (hash: JiCW8fyrxd1H5hhanenqtI3Q+to3q8hEENBSB39tRpc=)
                          5: 9770D05EBC4211F0B94CE580C4F9AE02.roa (hash: EKVGFJ/g32vu6i1eB7NEFOf+Zsly8ubAP4iYudVd5gM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl
                          rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 01:03:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 905 (0x389)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DFFA, serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1
        Validity
            Not Before: May 21 01:03:48 2026 GMT
            Not After : May 28 01:03:48 2026 GMT
        Subject: CN=6a0e59f5-b7c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:83:11:99:f6:e6:1d:4d:05:4e:a3:ef:4a:88:
                    0b:f2:75:dd:56:b8:5e:ca:ce:6b:4e:48:91:57:2f:
                    eb:83:6b:d6:4b:be:62:e3:22:71:1d:c3:fc:d0:8c:
                    3e:44:ec:e9:ae:ec:92:11:83:95:49:a7:7e:bd:9b:
                    b0:21:45:c1:d4:3c:8c:63:bd:01:dd:59:d8:d2:7a:
                    20:c3:36:17:aa:fd:63:ea:05:c4:a7:99:e0:ce:a3:
                    42:ef:61:c6:00:f4:9e:31:70:b9:ec:2e:85:30:17:
                    0c:15:cb:88:5d:82:8b:ca:fb:5f:bc:3b:f2:5b:93:
                    c6:15:c2:91:6d:2b:a8:cf:fc:ee:2b:f6:ee:22:7c:
                    15:7f:08:af:3a:d3:94:c9:da:79:95:32:90:61:55:
                    8d:7a:b2:f0:5c:44:2e:58:e6:00:64:96:6a:d4:44:
                    bc:f6:60:d0:2c:8d:4f:10:36:07:86:d3:52:7d:69:
                    84:f2:58:59:02:ec:78:77:fc:e8:c8:e8:0a:c4:f3:
                    c5:97:ca:dc:a8:e6:ad:4f:ae:2d:ab:13:63:9f:52:
                    31:e5:d4:85:e4:be:0c:a8:fd:d4:b8:6f:11:e0:47:
                    d2:7c:98:65:a0:d4:b4:de:19:0a:87:ce:bc:b1:4f:
                    1c:96:96:83:81:5f:98:5b:98:74:79:cb:62:29:90:
                    67:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:89:3D:45:80:09:16:50:16:AC:BC:F0:81:48:21:45:48:D9:E3:8B
            X509v3 Authority Key Identifier:
                keyid:F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:09:c7:c0:28:2f:b6:e6:11:a3:39:03:c1:01:fe:3f:7b:93:
         24:65:39:84:3d:0f:00:3d:c3:1f:f6:b5:e1:b7:d4:34:93:8e:
         a6:9d:c5:17:a0:ad:e7:13:39:1f:67:f3:58:2c:de:98:b6:ac:
         8f:10:0f:6e:bc:89:44:9a:2f:f4:39:75:25:cd:fd:14:0b:6c:
         7a:37:4c:8b:af:f0:6c:de:ac:06:e4:d4:55:ac:5f:b8:23:8e:
         cb:43:88:2a:c0:07:d8:3a:36:6d:a4:51:b3:b7:c3:96:9c:57:
         a9:07:56:8e:42:a5:14:ec:aa:37:67:56:c0:d5:25:db:c7:af:
         d2:be:ad:37:21:b1:19:b6:68:08:94:78:00:18:d3:ab:c3:9b:
         a1:95:1b:5c:d4:a2:53:df:f1:3c:d0:40:6b:36:49:81:2d:97:
         82:1a:c9:b4:db:a1:ad:42:5e:3b:a6:f9:2f:c3:c9:47:fd:9c:
         b5:22:46:0c:e7:a3:d5:3b:e1:9a:1e:1b:a1:d2:ce:8b:1d:6a:
         f1:13:64:28:fc:54:65:d8:3f:63:e9:54:0a:ad:e9:b0:2b:c0:
         b3:6d:66:f7:16:97:5f:ab:54:69:f7:0d:13:08:da:9f:60:10:
         16:03:b7:13:8d:7a:21:a0:19:41:95:b2:a8:c7:e9:ea:9a:30:
         2d:52:45:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:15:06 2026 by rpki-client