Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
File:                     FFiKS-nrikuZgtGyXesMYHOK77s.mft (raw, json)
Hash identifier:          dJUEQBFEa6G4plOv4OmFDWrxHyvZmC7wJ6C2S5/XIDI=
Subject key identifier:   CC:06:04:2C:75:7D:9D:C5:50:50:9D:A2:EA:F8:EB:98:6F:AE:40:E8
Authority key identifier: 14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB
Certificate issuer:       /CN=A91E9CE4/serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB
Certificate serial:       0375
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
Manifest number:          036B
Signing time:             Wed 19 Aug 2026 01:12:31 +0000
Manifest this update:     Wed 19 Aug 2026 01:12:30 +0000
Manifest next update:     Wed 26 Aug 2026 01:12:30 +0000
Files and hashes:         1: FFiKS-nrikuZgtGyXesMYHOK77s.crl (hash: TJ8Nb8D/O/xKlBIhHQixUqvoRkeaWA3nUXSJ8XPkZHY=)
                          2: 4D942BCE08A011ED8AD21272C4F9AE02.roa (hash: jgftd+/9ZeJs/SIOse//P6waVUAgX808BhHUM0pG+LE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.crl
                          rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 01:12:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 885 (0x375)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9CE4, serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB
        Validity
            Not Before: Aug 19 01:12:30 2026 GMT
            Not After : Aug 26 01:12:30 2026 GMT
        Subject: CN=6a8502fe-bfbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:66:a7:dc:54:38:15:87:91:a9:cc:7a:f2:5d:
                    c3:43:79:32:15:38:53:e6:bf:00:68:cb:c6:6c:73:
                    77:88:9d:62:b7:66:45:07:c5:4f:28:f7:5e:f9:8d:
                    6b:b4:9c:48:36:fe:65:34:e1:2c:ed:9b:59:47:22:
                    dd:a7:eb:43:e8:2b:47:8c:e5:e7:10:f0:91:34:c7:
                    5b:48:13:42:36:e3:c5:e3:3a:41:49:75:3c:dc:eb:
                    d9:5d:f9:dd:c1:16:ab:10:bf:7a:82:04:0e:84:6b:
                    47:ea:ae:69:1d:48:dd:ac:18:0a:28:e5:2c:45:6e:
                    94:9d:a9:69:5d:ec:94:d5:f7:d5:cc:13:af:c1:74:
                    b6:e3:55:e3:ca:e2:89:d3:13:b6:6b:04:96:d9:28:
                    1b:25:2e:6f:08:9d:99:b6:c7:37:b6:26:bd:04:8a:
                    43:0c:34:bd:ad:4f:90:a5:52:01:d4:45:da:aa:cc:
                    20:5d:81:6d:58:b0:0d:a4:f5:8e:cd:b8:e6:d5:45:
                    e2:d3:79:1a:0b:62:d6:17:33:ab:21:cd:39:cb:dc:
                    fb:9b:ee:e3:cb:f7:45:03:f4:14:90:b7:bb:02:fa:
                    3d:47:ae:09:48:9d:59:cf:37:25:fe:92:83:7a:bc:
                    b0:48:18:ae:21:37:23:18:7f:cb:b7:2b:8d:24:5d:
                    14:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:06:04:2C:75:7D:9D:C5:50:50:9D:A2:EA:F8:EB:98:6F:AE:40:E8
            X509v3 Authority Key Identifier:
                keyid:14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:40:2a:7b:d0:65:04:87:97:54:d4:d7:49:42:9f:ee:0f:12:
         49:64:9b:99:51:c6:0a:8e:1a:d4:83:10:ff:45:6c:de:d3:e7:
         99:df:79:f0:20:41:db:e4:b1:16:6f:d1:6e:f6:5a:25:41:07:
         14:a3:25:cb:28:2b:cb:ab:d0:61:5e:02:0e:d6:f7:18:47:a4:
         6f:30:80:d4:7f:5f:aa:00:a7:33:f7:8c:ea:eb:bb:1d:e6:e4:
         9d:f3:a7:34:8b:c8:9f:a6:78:c9:64:41:d9:e4:82:98:43:12:
         28:40:66:d7:70:80:d7:42:da:d2:50:a8:78:5c:70:17:35:6d:
         1e:c3:7c:df:70:6b:92:f0:73:77:d5:93:29:c7:b5:1a:26:25:
         37:54:10:56:c6:ce:e4:08:60:8d:98:84:4a:38:59:e6:60:78:
         e6:4f:a4:e0:c4:f3:02:e0:45:aa:b8:34:99:42:98:17:fc:bf:
         bd:22:d8:a6:f9:08:0e:04:35:2a:d8:79:c9:5c:d4:0f:33:a2:
         7b:92:52:e4:c3:b0:13:9f:04:98:cc:1a:f0:8c:a3:91:0e:28:
         b6:a5:e1:24:3c:b1:1a:a5:c5:d6:59:a3:c9:0d:9b:00:f9:59:
         f2:17:d8:8e:f5:b1:08:1e:29:81:a5:57:69:58:ee:76:14:f4:
         80:50:50:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:42 2026 by rpki-client