Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
File:                     FFiKS-nrikuZgtGyXesMYHOK77s.mft (raw, json)
Hash identifier:          CvpvbRnq9uk+98YSTZkNrXGoAf/Qi0XhDyxVicymeCk=
Subject key identifier:   8C:F7:3F:97:3C:0D:B5:2E:CF:48:F7:EF:A8:20:BB:C9:34:38:88:AA
Authority key identifier: 14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB
Certificate issuer:       /CN=A91E9CE4/serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB
Certificate serial:       0391
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
Manifest number:          0386
Signing time:             Wed 07 Oct 2026 00:52:45 +0000
Manifest this update:     Wed 07 Oct 2026 00:52:45 +0000
Manifest next update:     Wed 14 Oct 2026 00:52:45 +0000
Files and hashes:         1: FFiKS-nrikuZgtGyXesMYHOK77s.crl (hash: TE8bQHFnwPGjl2yernB1sxe+LvvZOWo+aFxk5NhFyQw=)
                          2: 4D942BCE08A011ED8AD21272C4F9AE02.roa (hash: oy0EDqgWCRfQpZ6vG5jeXRbCC+vFPWXEnpVZombGo14=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.crl
                          rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 00:52:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 913 (0x391)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9CE4, serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB
        Validity
            Not Before: Oct  7 00:52:45 2026 GMT
            Not After : Oct 14 00:52:45 2026 GMT
        Subject: CN=6ac597dd-0ad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:43:fc:e3:f8:28:eb:61:b6:c0:01:44:98:6d:
                    26:1d:25:f5:3f:e4:cd:65:65:a0:6f:6c:e4:14:55:
                    54:d1:8a:fe:eb:cf:29:ef:46:82:f6:23:c4:62:a1:
                    a5:36:a4:87:92:d4:4e:13:da:90:d1:c3:41:b4:e6:
                    24:5d:19:8f:dd:b4:1b:b8:cc:b1:26:68:6a:be:66:
                    76:82:82:31:cb:8c:0a:8d:9a:aa:10:e3:bb:b5:7a:
                    7e:e3:df:9c:4c:75:69:4f:2c:de:26:a2:ab:4f:21:
                    6a:46:c5:d6:09:cc:90:04:07:4f:d2:30:17:ab:14:
                    63:7a:52:43:85:bc:fa:fa:6d:60:17:f8:b4:d4:2c:
                    f7:d4:91:43:f5:b3:d5:41:00:00:2b:83:0b:c4:5d:
                    1c:de:d2:68:59:70:2d:a4:0d:f6:90:db:8a:14:2d:
                    21:e6:10:45:11:38:44:6d:56:43:b0:8c:ac:de:9a:
                    3f:8e:55:80:82:20:61:34:c1:a4:f1:24:fa:cb:b7:
                    4e:0d:ae:36:bd:6b:00:62:42:4a:48:1e:38:f0:25:
                    0f:5f:d0:a4:6c:ec:36:4b:be:cf:36:1f:f0:b6:73:
                    30:56:36:f5:f3:d6:3f:e0:cb:97:a0:16:2c:66:cc:
                    f9:cc:e4:11:0f:aa:2a:8d:23:90:a2:98:2b:33:af:
                    a4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F7:3F:97:3C:0D:B5:2E:CF:48:F7:EF:A8:20:BB:C9:34:38:88:AA
            X509v3 Authority Key Identifier:
                keyid:14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:0d:e8:db:02:88:5c:e0:ba:06:3e:00:5b:d5:0a:9a:0c:69:
         c4:09:26:52:c7:15:5f:03:04:c7:da:4f:a2:c9:9e:6c:40:aa:
         30:93:fa:e0:d0:19:eb:43:7d:70:80:a6:23:e4:05:e6:da:d4:
         cf:99:e2:ce:7a:94:e6:91:d2:d8:69:5b:ee:46:dc:55:92:7e:
         5b:46:00:db:a6:be:18:3d:0e:a0:aa:dd:2b:88:85:f4:3a:7b:
         5a:97:e3:7c:f8:90:65:6a:f1:2c:3b:ca:f3:55:bc:9c:b2:df:
         c7:38:98:29:5b:9b:ad:7a:8f:48:40:1a:5e:f8:ba:ec:80:1e:
         84:7b:f8:af:1c:81:f7:e4:c5:aa:13:71:9d:7f:5d:13:de:d3:
         6f:15:55:a3:ec:0e:e2:4f:b8:e9:88:44:6f:63:28:43:b4:b9:
         1f:81:69:88:a5:86:a5:cf:8b:4b:0a:96:e3:59:60:50:ef:07:
         9f:0f:1a:ab:64:64:20:4d:5f:9b:34:b7:5c:9c:4b:3b:8c:55:
         92:65:42:98:bc:f3:f1:f2:cc:be:90:d2:53:6c:1c:78:21:40:
         27:f0:01:49:56:ac:12:2b:41:30:e9:a5:08:7b:c5:52:a5:59:
         e1:53:b9:95:b3:5a:4b:79:50:af:af:8e:b2:0f:3e:7d:b8:a1:
         f0:d3:89:6e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTlDRTQxMTAvBgNVBAUTKDE0NTg4QTRCRTlFQjhBNEI5OTgyRDFCMjVERUIwQzYw
NzM4QUVGQkIwHhcNMjYxMDA3MDA1MjQ1WhcNMjYxMDE0MDA1MjQ1WjAYMRYwFAYD
VQQDEw02YWM1OTdkZC0wYWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAskP84/go62G2wAFEmG0mHSX1P+TNZWWgb2zkFFVU0Yr+688p70aC9iPEYqGl
NqSHktROE9qQ0cNBtOYkXRmP3bQbuMyxJmhqvmZ2goIxy4wKjZqqEOO7tXp+49+c
THVpTyzeJqKrTyFqRsXWCcyQBAdP0jAXqxRjelJDhbz6+m1gF/i01Cz31JFD9bPV
QQAAK4MLxF0c3tJoWXAtpA32kNuKFC0h5hBFEThEbVZDsIys3po/jlWAgiBhNMGk
8ST6y7dODa42vWsAYkJKSB448CUPX9CkbOw2S77PNh/wtnMwVjb189Y/4MuXoBYs
Zsz5zOQRD6oqjSOQopgrM6+kUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIz3P5c8
DbUuz0j376ggu8k0OIiqMB8GA1UdIwQYMBaAFBRYikvp64pLmYLRsl3rDGBziu+7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUNFNC82OUNDQjVCQzA4
OUMxMUVEQkZBMkZCNEJDNEY5QUUwMi9GRmlLUy1ucmlrdVpndEd5WGVzTVlIT0s3
N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZGaUtTLW5yaWt1Wmd0R3lYZXNNWUhPSzc3cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OUNFNC82OUNDQjVCQzA4OUMxMUVEQkZBMkZCNEJDNEY5QUUwMi9GRmlLUy1ucmlr
dVpndEd5WGVzTVlIT0s3N3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMQ3o2wKIXOC6Bj4AW9UKmgxpxAkmUscVXwMEx9pPosmebECqMJP64NAZ60N9
cICmI+QF5trUz5niznqU5pHS2Glb7kbcVZJ+W0YA26a+GD0OoKrdK4iF9Dp7Wpfj
fPiQZWrxLDvK81W8nLLfxziYKVubrXqPSEAaXvi67IAehHv4rxyB9+TFqhNxnX9d
E97TbxVVo+wO4k+46YhEb2MoQ7S5H4FpiKWGpc+LSwqW41lgUO8Hnw8aq2RkIE1f
mzS3XJxLO4xVkmVCmLzz8fLMvpDSU2wceCFAJ/ABSVasEitBMOmlCHvFUqVZ4VO5
lbNaS3lQr6+Osg8+fbih8NOJbg==
-----END CERTIFICATE-----
Generated at Wed Oct 7 11:19:41 2026 by rpki-client