Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
File:                     FFiKS-nrikuZgtGyXesMYHOK77s.mft (raw, json)
Hash identifier:          dK3EdVYl8a6ys1vKCaBdvCiW/PRk9r2hblb02Hb/HAE=
Subject key identifier:   EC:77:8D:A6:0F:F7:10:19:DA:86:9F:ED:29:EE:8C:43:59:EA:11:FF
Authority key identifier: 14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB
Certificate issuer:       /CN=A91E9CE4/serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB
Certificate serial:       0387
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
Manifest number:          037D
Signing time:             Wed 23 Sep 2026 00:22:58 +0000
Manifest this update:     Wed 23 Sep 2026 00:22:57 +0000
Manifest next update:     Wed 30 Sep 2026 00:22:57 +0000
Files and hashes:         1: FFiKS-nrikuZgtGyXesMYHOK77s.crl (hash: 6CJ0Z3/AaQvQHA92z2/9dFI7KoXLi5agnNPgKinObfw=)
                          2: 4D942BCE08A011ED8AD21272C4F9AE02.roa (hash: jgftd+/9ZeJs/SIOse//P6waVUAgX808BhHUM0pG+LE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.crl
                          rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 00:22:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 903 (0x387)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9CE4, serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB
        Validity
            Not Before: Sep 23 00:22:57 2026 GMT
            Not After : Sep 30 00:22:57 2026 GMT
        Subject: CN=6ab31be2-a6e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:20:a3:da:13:0e:fd:1d:f7:79:db:95:5c:d1:
                    87:d2:d4:ed:73:9d:9f:e8:e4:a2:60:ba:15:7b:da:
                    d4:99:f5:c1:d5:1a:42:51:c4:3c:0a:8e:33:18:0e:
                    ec:5d:dd:c8:cb:87:8e:37:e2:fc:43:8d:ad:6a:f0:
                    f6:73:66:94:33:54:9c:39:f2:ea:8c:61:dd:e2:1c:
                    72:7f:d2:20:93:ed:41:5b:b8:f7:12:4b:95:e7:78:
                    52:94:62:2d:ec:a4:a0:14:3c:d3:7f:d0:81:6d:bc:
                    0f:ae:42:7b:58:fa:31:34:09:d3:8a:08:7f:70:56:
                    14:54:08:13:fd:c1:5f:1d:58:5a:73:7f:a4:29:4d:
                    1b:54:33:5d:1a:13:21:03:c9:ba:4c:fa:04:87:66:
                    ae:40:9c:50:16:0a:e6:af:24:da:db:0d:2c:db:83:
                    0f:ab:05:5e:8d:9c:02:30:b6:cf:06:8b:45:6d:f9:
                    f8:29:77:5b:0b:ee:b5:ab:a8:bd:6a:8a:2f:a1:b3:
                    bc:86:7f:f8:f1:28:bd:7f:6d:0c:70:22:b9:7d:5e:
                    b2:d3:1e:bc:b7:9b:43:84:16:d6:d1:0f:68:fa:3f:
                    65:f2:2d:0b:bd:0d:d8:0e:bc:5d:d1:16:9c:3c:c1:
                    af:78:95:2f:b4:c4:f5:0a:d4:d3:f5:18:41:f9:9d:
                    40:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:77:8D:A6:0F:F7:10:19:DA:86:9F:ED:29:EE:8C:43:59:EA:11:FF
            X509v3 Authority Key Identifier:
                keyid:14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:b2:04:ad:23:62:da:dc:e0:5e:c3:39:07:d0:22:24:f9:c8:
         66:78:5f:c1:b8:ea:43:f6:77:70:4a:45:fb:25:23:11:6c:11:
         c3:e5:d6:89:75:b6:d4:05:e3:ea:58:1f:8c:2b:b1:a3:40:4e:
         fa:a9:35:b7:33:6e:44:1d:27:60:b0:fe:97:82:c9:a1:f7:15:
         d9:13:eb:d7:1b:dc:d1:59:62:1d:95:ba:6c:73:5c:51:f5:3e:
         51:19:4f:c8:cc:29:ef:07:8f:c8:b3:3c:9f:51:54:f5:c5:02:
         2b:cc:2f:3a:d1:57:b5:0d:3e:36:69:51:65:b3:40:a6:c6:5f:
         b0:9f:9a:f4:bc:a4:02:bc:96:3f:b4:d6:0f:39:2f:5b:ea:63:
         c6:27:fa:e3:b9:ad:a6:fa:09:db:ad:f1:e2:dd:89:da:8e:0c:
         ab:09:75:0a:40:f8:e4:b9:65:df:56:24:44:b4:60:68:1e:7b:
         f4:0a:8c:3b:5a:77:4b:62:20:e8:1a:df:8c:50:9e:fb:42:68:
         39:2a:5a:21:2f:02:23:27:46:4a:a4:9a:27:a1:de:93:10:d8:
         82:f3:cc:5c:83:75:89:06:c8:aa:e6:e9:bf:a3:66:30:d2:59:
         44:38:fc:6f:4f:ab:d6:8c:0f:85:33:cd:da:89:5e:bd:74:da:
         7b:cc:4e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:52:02 2026 by rpki-client