Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.mft
File:                     FF-_nuMXN-kcPNSE7AFq48jzgDw.mft (raw, json)
Hash identifier:          L3vWqxrB4aIfvlrEW+DR5V+3Zq3SuM8Him22ZSG4Wwk=
Subject key identifier:   BD:EB:60:B2:63:72:75:DF:DA:CD:CE:28:55:43:74:44:04:EE:34:91
Authority key identifier: 14:5F:BF:9E:E3:17:37:E9:1C:3C:D4:84:EC:01:6A:E3:C8:F3:80:3C
Certificate issuer:       /CN=A91B978D/serialNumber=145FBF9EE31737E91C3CD484EC016AE3C8F3803C
Certificate serial:       0397
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FF-_nuMXN-kcPNSE7AFq48jzgDw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.mft
Manifest number:          0390
Signing time:             Wed 19 Aug 2026 01:04:49 +0000
Manifest this update:     Wed 19 Aug 2026 01:04:48 +0000
Manifest next update:     Wed 26 Aug 2026 01:04:48 +0000
Files and hashes:         1: FF-_nuMXN-kcPNSE7AFq48jzgDw.crl (hash: ZKw336sfTrcP89c97RBNJugx1gpUKOG0U6RjIoG8sHg=)
                          2: D5D64BB0FB6811EC863B8150C4F9AE02.roa (hash: QRtlstVkdBXEszVrg/iIFuaNaUBnHazamE53eJaDdno=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.crl
                          rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FF-_nuMXN-kcPNSE7AFq48jzgDw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 01:04:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 919 (0x397)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B978D, serialNumber=145FBF9EE31737E91C3CD484EC016AE3C8F3803C
        Validity
            Not Before: Aug 19 01:04:48 2026 GMT
            Not After : Aug 26 01:04:48 2026 GMT
        Subject: CN=6a850131-9a20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b2:a9:cf:71:bf:fe:d8:6c:90:a3:5d:f0:47:
                    f2:34:69:d4:7e:e9:40:99:91:94:77:8b:1c:0c:4e:
                    db:2d:dd:f3:00:f8:38:3a:26:12:66:7c:e0:fb:b9:
                    4a:70:c7:c6:9b:9f:2c:d5:1e:53:17:7d:d6:be:00:
                    69:ee:52:ea:45:e4:96:8b:fb:3f:3c:4a:f9:37:d5:
                    4b:ff:51:8e:e8:e8:d7:7a:84:75:05:77:e0:84:3d:
                    a3:87:4a:ad:78:d6:5e:bd:7b:11:df:2b:f9:57:01:
                    65:93:21:63:97:f7:a0:98:d5:c2:96:2a:18:65:53:
                    8e:a3:7c:60:cc:16:b1:ef:08:0a:a6:d8:75:e1:18:
                    4e:ee:79:f5:f4:a2:3d:d2:ca:5d:27:59:b6:3e:88:
                    d0:b9:d9:99:15:d2:99:76:8b:5a:94:71:a3:89:a6:
                    90:4d:3f:47:bc:a4:c2:75:f0:ca:5a:34:58:27:e2:
                    ad:5f:28:68:c9:0a:ee:d1:e7:19:5c:76:21:ab:10:
                    ce:27:43:d9:8f:b9:b1:dc:c8:71:ef:c4:98:66:13:
                    2b:5d:2c:1b:de:57:7f:c1:d7:be:1f:55:c1:8b:57:
                    66:14:b5:2d:c0:f2:0b:95:05:2e:73:ec:bb:98:e9:
                    dd:7b:21:f1:d5:71:a1:9a:c5:6e:a4:4a:e8:76:36:
                    d2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:EB:60:B2:63:72:75:DF:DA:CD:CE:28:55:43:74:44:04:EE:34:91
            X509v3 Authority Key Identifier:
                keyid:14:5F:BF:9E:E3:17:37:E9:1C:3C:D4:84:EC:01:6A:E3:C8:F3:80:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FF-_nuMXN-kcPNSE7AFq48jzgDw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:26:b8:86:b5:86:44:56:20:f2:3e:e3:30:8f:92:68:49:1f:
         6f:4a:cb:e6:3a:c6:24:4a:dc:41:68:13:7d:6f:d8:0a:4d:76:
         b5:31:7d:b3:23:51:ca:ca:2e:29:ff:d1:51:af:cc:f5:c9:2c:
         9a:54:d3:ed:be:f0:d2:53:a7:b8:41:a7:43:a2:e8:49:0f:5b:
         bb:c5:80:7c:a2:58:20:c4:75:e1:71:69:46:db:3a:1c:c6:30:
         e0:e2:e7:ef:70:0b:02:86:d6:8f:fb:ca:a8:8c:7c:29:d7:4d:
         8f:e7:8f:aa:18:b9:7c:8e:9d:25:fb:54:a0:26:7e:78:4f:c8:
         48:fe:ae:1b:cb:31:83:15:1f:68:e3:7e:6b:d0:fa:56:9d:31:
         6a:45:74:53:15:ba:a7:54:70:32:39:45:70:72:d6:c6:03:30:
         1f:8b:cb:57:f3:f4:3d:19:eb:a1:ee:d6:8b:16:92:be:e6:ff:
         a4:60:cd:b9:c3:97:31:be:0e:50:5c:9b:2c:ec:cf:57:37:0b:
         f5:ff:de:39:0f:46:9d:91:a1:2a:ed:8b:b5:88:1e:32:83:28:
         61:b7:b0:95:cb:de:73:71:dd:37:ff:49:20:9a:dd:3e:20:40:
         80:b8:05:15:68:b1:a4:50:b8:47:6a:2c:d9:1e:a1:a2:6e:98:
         c4:58:be:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:59 2026 by rpki-client