Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.mft
File:                     ficJop5GIOVCf3NfN8A0c-NrWXo.mft (raw, json)
Hash identifier:          ggu8xjXidz10UJVDCDR/XpD+wktWLLmUfModQEE/q9M=
Subject key identifier:   67:13:93:AF:4A:45:0B:AC:1D:41:F6:0B:EC:3A:98:1D:BD:EB:DC:A9
Authority key identifier: 7E:27:09:A2:9E:46:20:E5:42:7F:73:5F:37:C0:34:73:E3:6B:59:7A
Certificate issuer:       /CN=A91DD0A4/serialNumber=7E2709A29E4620E5427F735F37C03473E36B597A
Certificate serial:       09D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ficJop5GIOVCf3NfN8A0c-NrWXo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.mft
Manifest number:          09CB
Signing time:             Fri 12 Jun 2026 19:57:00 +0000
Manifest this update:     Fri 12 Jun 2026 19:56:59 +0000
Manifest next update:     Fri 19 Jun 2026 19:56:59 +0000
Files and hashes:         1: ficJop5GIOVCf3NfN8A0c-NrWXo.crl (hash: GYmXyCxJaLg9pxJRddOPEHMlNj0P7SC2jLvDos+tfqI=)
                          2: C8CCE2CCAA7411EA9DF2E685C4F9AE02.roa (hash: MxcRCOMDVxWYLuz/1DuRHNURRxOV2Q55QL6ZvvYDCSE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.crl
                          rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ficJop5GIOVCf3NfN8A0c-NrWXo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:56:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2519 (0x9d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD0A4, serialNumber=7E2709A29E4620E5427F735F37C03473E36B597A
        Validity
            Not Before: Jun 12 19:56:59 2026 GMT
            Not After : Jun 19 19:56:59 2026 GMT
        Subject: CN=6a2c648b-bfaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:53:53:e9:cb:55:95:08:f1:5e:89:56:44:ba:
                    8a:b9:a8:df:6d:b9:ca:7f:4d:95:19:4c:bf:bb:2c:
                    a3:d8:28:d9:3e:d4:da:8d:cf:27:a8:2f:a8:6f:d4:
                    ff:44:61:20:b1:0c:28:f5:2c:b3:e6:28:cc:15:93:
                    e3:13:80:58:ee:5b:e1:90:61:c5:15:c4:59:5e:ba:
                    9b:26:ca:21:78:dc:fd:17:51:0b:48:c0:4c:8e:26:
                    ea:e8:85:04:67:8c:fd:3b:53:02:f4:8d:37:50:9e:
                    5c:0c:62:55:fd:39:e2:27:fb:d0:2f:02:e0:ab:97:
                    d1:a9:7f:23:b4:1b:79:0f:b7:cb:9d:1f:86:42:63:
                    f9:f3:d2:0e:eb:b2:72:d7:ba:b5:03:a9:4b:b0:1d:
                    2c:99:a8:d4:30:b7:bf:c1:9b:28:8e:65:60:ef:bf:
                    30:26:ce:04:c0:b5:c6:be:bb:58:93:6b:d0:c9:c2:
                    af:bf:99:7d:22:b1:61:56:f4:b9:3e:09:16:a6:a9:
                    9a:97:b1:d7:fb:1e:3d:58:d8:37:39:eb:8a:37:4a:
                    3f:42:22:c5:aa:d1:48:b1:77:5e:f3:aa:45:90:99:
                    20:4c:e0:82:ed:a0:d1:6b:c2:9c:be:b0:80:ad:e0:
                    7d:8f:97:95:5b:8a:0d:fd:1b:5b:09:b8:22:90:ac:
                    b5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:13:93:AF:4A:45:0B:AC:1D:41:F6:0B:EC:3A:98:1D:BD:EB:DC:A9
            X509v3 Authority Key Identifier:
                keyid:7E:27:09:A2:9E:46:20:E5:42:7F:73:5F:37:C0:34:73:E3:6B:59:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ficJop5GIOVCf3NfN8A0c-NrWXo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:be:f4:ee:d8:16:86:7b:cc:35:58:69:1e:9f:8b:2b:21:cb:
         c4:a0:c7:74:52:5e:53:7f:41:d8:ca:9e:33:7d:18:81:99:f0:
         55:44:04:50:12:a5:2c:67:a6:de:a4:96:6d:ad:6a:36:c1:e9:
         e5:21:03:8f:4c:c4:04:4a:80:70:2b:b1:46:99:85:e3:b4:98:
         02:49:c8:fc:9c:60:90:84:8b:3e:ae:df:db:1c:9b:ce:82:d0:
         3d:4e:c6:77:97:23:6b:53:09:86:20:2c:8a:0f:0b:87:6b:2b:
         4c:37:8e:6e:c2:a0:cc:91:6e:5d:8f:db:6a:57:b0:47:01:48:
         80:0b:8d:0e:b4:e6:45:26:4d:0e:b3:33:df:40:31:2a:8a:8e:
         80:5c:33:d5:98:7b:b6:77:86:cf:60:b4:d0:04:7e:70:ba:fa:
         18:2f:1c:c4:b2:f5:23:72:4d:86:95:10:35:0c:50:96:5c:31:
         13:21:84:3a:48:b7:d7:e5:9e:ae:67:73:17:10:f6:2d:ba:a3:
         e2:38:a1:c2:d0:60:e7:28:b1:cb:fb:b5:96:9d:23:cf:2a:cf:
         2b:2d:d7:de:7a:70:12:b2:a9:e8:d2:5e:e8:a0:41:03:c5:01:
         01:f2:ce:e9:bd:e8:e7:3e:35:3d:12:04:da:d4:02:12:55:c6:
         eb:50:ec:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:50:13 2026 by rpki-client