Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
File:                     FFiKS-nrikuZgtGyXesMYHOK77s.mft (raw, json)
Hash identifier:          XR9xXqOREiLDgkecJdpjMkguC1LfeV620r+W1ohsU60=
Subject key identifier:   78:64:FB:67:CF:DA:48:63:33:D1:B3:13:D5:BB:32:21:61:05:5E:22
Authority key identifier: 14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB
Certificate issuer:       /CN=A91E9CE4/serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB
Certificate serial:       0358
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
Manifest number:          034E
Signing time:             Tue 23 Jun 2026 01:02:35 +0000
Manifest this update:     Tue 23 Jun 2026 01:02:34 +0000
Manifest next update:     Tue 30 Jun 2026 01:02:34 +0000
Files and hashes:         1: FFiKS-nrikuZgtGyXesMYHOK77s.crl (hash: GwdR6qFtwSS+JfWDgNq/eBIklFYhyJ0D9PGNS/u2UkI=)
                          2: 4D942BCE08A011ED8AD21272C4F9AE02.roa (hash: jgftd+/9ZeJs/SIOse//P6waVUAgX808BhHUM0pG+LE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.crl
                          rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 01:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 856 (0x358)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9CE4, serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB
        Validity
            Not Before: Jun 23 01:02:34 2026 GMT
            Not After : Jun 30 01:02:34 2026 GMT
        Subject: CN=6a39db2b-5748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b8:4f:72:34:df:f1:28:42:ee:a9:3d:3a:4d:
                    ad:bd:e3:b3:4b:f5:aa:db:d2:1b:1b:f1:39:6f:25:
                    25:39:5e:7d:8b:38:2d:72:52:cb:f5:a5:a0:54:d6:
                    32:fc:20:90:f8:e2:f9:dc:85:7c:06:fa:9e:6e:a2:
                    d7:54:71:62:4f:f0:8e:f9:8e:84:8f:94:da:38:af:
                    4d:36:25:5a:02:6f:ac:31:44:a6:88:fd:e7:7f:d8:
                    97:55:8b:1e:74:ac:6a:04:1d:ee:71:ca:b6:cf:36:
                    97:aa:4e:e9:0c:cb:d3:9f:e5:96:0d:c5:3d:ef:33:
                    7a:f2:84:59:63:47:12:49:d9:f0:b5:b9:9d:52:79:
                    69:ca:d7:76:e9:11:fa:17:ba:6a:0b:13:a1:3a:54:
                    cf:e0:a6:8f:ed:eb:e7:90:a1:9c:30:aa:43:8c:2c:
                    df:f6:04:77:6c:b1:47:54:e9:2a:34:04:f1:47:6b:
                    38:cc:d7:0c:cc:62:52:d5:3a:a8:82:1f:37:f5:14:
                    31:14:d7:1a:d9:cf:bf:48:6a:e4:c2:f8:24:c8:2b:
                    f3:a8:4e:fe:09:50:c9:3c:90:a2:80:c9:d4:5b:8e:
                    cc:d3:ed:68:0d:aa:45:47:ff:9d:d1:1f:89:ec:8e:
                    28:99:1a:be:e2:28:28:39:a1:e8:79:f0:a4:35:bd:
                    20:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:64:FB:67:CF:DA:48:63:33:D1:B3:13:D5:BB:32:21:61:05:5E:22
            X509v3 Authority Key Identifier:
                keyid:14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:7a:05:53:8c:00:57:8b:aa:46:91:a2:80:14:6c:2d:d2:12:
         4c:ca:f6:e8:9f:45:7b:b8:45:8d:b5:17:83:4d:38:73:d5:05:
         5a:0e:32:60:db:8b:c0:30:dd:45:83:cc:bf:2e:77:91:29:81:
         0f:1c:82:66:6f:4c:86:85:39:64:8b:f8:1c:be:fa:02:ce:59:
         7f:00:92:b9:24:f0:90:32:17:0d:f7:ce:26:cf:f7:48:b8:0d:
         5f:13:67:b4:cf:bf:58:26:74:d5:b9:9b:a8:14:ec:87:dd:4f:
         95:20:ff:d5:9f:c1:60:6f:d0:df:b5:45:6a:16:87:e9:eb:cc:
         27:55:e0:61:c4:d3:c0:b6:99:44:45:02:8d:35:1c:82:79:e8:
         f6:a1:2b:02:fa:93:06:5e:b4:0c:b4:67:51:13:71:ff:ec:8f:
         85:00:c3:7f:c0:26:52:0b:4b:15:67:aa:7c:6c:4c:c4:cb:84:
         a6:da:0f:fc:de:44:24:56:2b:cd:d1:ce:28:b8:a6:61:89:8e:
         26:1c:5d:74:a3:d5:02:cf:e3:3f:94:69:5b:b3:0e:34:06:51:
         42:56:f9:57:32:3a:c9:ea:4b:f0:50:4d:a3:fb:d0:4f:0d:a7:
         fa:a8:f0:31:7e:0f:71:95:c4:5e:82:96:47:1d:f2:dc:c0:6a:
         58:a9:12:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:18:07 2026 by rpki-client