Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
File:                     FFiKS-nrikuZgtGyXesMYHOK77s.mft (raw, json)
Hash identifier:          V3C2UWFSYM/nf+F6tqbejPxgpcT02XqM9Gp79AX6Cyo=
Subject key identifier:   2A:B0:94:5A:B7:D0:5A:CC:8B:0B:9F:BA:1D:E5:C1:EC:AE:AD:5B:BF
Authority key identifier: 14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB
Certificate issuer:       /CN=A91E9CE4/serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB
Certificate serial:       0369
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
Manifest number:          035F
Signing time:             Mon 27 Jul 2026 02:01:38 +0000
Manifest this update:     Mon 27 Jul 2026 02:01:37 +0000
Manifest next update:     Mon 03 Aug 2026 02:01:37 +0000
Files and hashes:         1: FFiKS-nrikuZgtGyXesMYHOK77s.crl (hash: KSHUqFvJQxSSS6O65gY3cBGhxOYqo6R2GzOXJ9oAorY=)
                          2: 4D942BCE08A011ED8AD21272C4F9AE02.roa (hash: jgftd+/9ZeJs/SIOse//P6waVUAgX808BhHUM0pG+LE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.crl
                          rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 873 (0x369)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9CE4, serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB
        Validity
            Not Before: Jul 27 02:01:37 2026 GMT
            Not After : Aug  3 02:01:37 2026 GMT
        Subject: CN=6a66bc02-73a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e3:17:fe:a4:c3:f6:9f:c1:70:dc:49:76:e2:
                    61:87:7b:cd:38:9a:22:7a:4b:6a:26:49:f4:40:94:
                    7b:87:06:5e:ea:66:4e:69:9e:9b:d9:ac:2b:2f:9e:
                    2e:91:f2:8c:35:2a:bb:94:81:a0:0d:81:52:6c:d6:
                    b2:1e:db:e4:21:7a:b2:2c:52:60:c7:eb:1b:2a:35:
                    1f:05:24:33:f3:3e:ad:c8:fa:66:c3:84:32:18:ad:
                    67:92:cc:53:50:90:aa:10:b8:ff:9f:1f:26:47:9c:
                    99:e7:61:23:9b:f1:fe:17:91:07:da:45:d9:10:85:
                    0b:81:3f:95:fb:a7:18:1d:b3:b8:02:f0:83:15:56:
                    ad:e8:21:ee:f1:8a:82:cc:3f:f7:c0:9c:75:f5:40:
                    38:56:22:3e:57:0a:20:97:7d:d0:53:c7:32:7c:b1:
                    af:4a:72:12:33:ce:b1:ec:6d:9b:20:ab:51:73:41:
                    69:2d:93:94:c5:2d:2e:ad:e6:d5:79:1f:af:09:54:
                    75:ac:b5:9b:eb:fb:56:4d:45:cd:ad:d4:47:7d:19:
                    b5:68:9c:0a:15:e8:01:d7:7d:c4:ec:d8:c1:4f:8b:
                    0c:de:6d:48:c5:e3:c4:79:65:92:15:92:6f:60:90:
                    3f:a0:aa:04:7b:e8:8b:9d:9f:b1:db:7a:28:b4:c4:
                    e6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B0:94:5A:B7:D0:5A:CC:8B:0B:9F:BA:1D:E5:C1:EC:AE:AD:5B:BF
            X509v3 Authority Key Identifier:
                keyid:14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:2d:d1:d2:c9:2b:56:51:19:98:0b:fb:20:61:3b:6f:75:dd:
         e4:a1:e5:f7:b5:58:d3:32:6d:3b:52:b2:3f:11:f0:0e:8a:10:
         dd:1e:51:f3:08:2a:01:fe:9a:43:3a:81:c2:3d:f7:61:15:7a:
         bf:a2:4b:84:53:a2:e8:e9:06:d5:68:68:29:79:65:b2:ac:92:
         66:9d:96:f7:ec:9f:96:85:2c:d5:fe:97:50:9d:39:d1:f9:e0:
         8b:10:21:ab:83:b2:7e:b5:0f:02:aa:b3:bc:ca:8d:6f:b0:75:
         01:e5:72:0f:2f:d5:74:a4:22:30:a2:ac:91:53:fd:df:a5:2f:
         57:83:65:09:cb:4f:64:12:6b:50:ba:21:be:33:3c:46:d1:03:
         5b:a0:18:86:91:61:5f:26:1c:fc:51:25:92:8d:c5:dc:ad:24:
         87:0e:76:dd:85:6d:5f:96:be:ab:48:58:fe:fc:0b:2c:25:8b:
         0d:7e:ce:2e:a2:dc:5a:1d:e0:63:d7:3e:52:7d:4d:46:68:74:
         d8:75:08:33:92:c7:62:f4:bb:f1:dd:01:51:5a:5d:c5:72:00:
         08:b7:5b:c3:c0:55:d6:fd:96:93:14:19:3b:ce:cd:af:a2:7d:
         64:0f:37:71:d9:01:3d:3c:b6:af:ea:67:53:57:bc:69:27:6e:
         89:a9:18:f5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTlDRTQxMTAvBgNVBAUTKDE0NTg4QTRCRTlFQjhBNEI5OTgyRDFCMjVERUIwQzYw
NzM4QUVGQkIwHhcNMjYwNzI3MDIwMTM3WhcNMjYwODAzMDIwMTM3WjAYMRYwFAYD
VQQDEw02YTY2YmMwMi03M2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyuMX/qTD9p/BcNxJduJhh3vNOJoiektqJkn0QJR7hwZe6mZOaZ6b2awrL54u
kfKMNSq7lIGgDYFSbNayHtvkIXqyLFJgx+sbKjUfBSQz8z6tyPpmw4QyGK1nksxT
UJCqELj/nx8mR5yZ52Ejm/H+F5EH2kXZEIULgT+V+6cYHbO4AvCDFVat6CHu8YqC
zD/3wJx19UA4ViI+Vwogl33QU8cyfLGvSnISM86x7G2bIKtRc0FpLZOUxS0urebV
eR+vCVR1rLWb6/tWTUXNrdRHfRm1aJwKFegB133E7NjBT4sM3m1IxePEeWWSFZJv
YJA/oKoEe+iLnZ+x23ootMTm2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCqwlFq3
0FrMiwufuh3lweyurVu/MB8GA1UdIwQYMBaAFBRYikvp64pLmYLRsl3rDGBziu+7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUNFNC82OUNDQjVCQzA4
OUMxMUVEQkZBMkZCNEJDNEY5QUUwMi9GRmlLUy1ucmlrdVpndEd5WGVzTVlIT0s3
N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZGaUtTLW5yaWt1Wmd0R3lYZXNNWUhPSzc3cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OUNFNC82OUNDQjVCQzA4OUMxMUVEQkZBMkZCNEJDNEY5QUUwMi9GRmlLUy1ucmlr
dVpndEd5WGVzTVlIT0s3N3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOS3R0skrVlEZmAv7IGE7b3Xd5KHl97VY0zJtO1KyPxHwDooQ3R5R8wgqAf6a
QzqBwj33YRV6v6JLhFOi6OkG1WhoKXllsqySZp2W9+yfloUs1f6XUJ050fngixAh
q4OyfrUPAqqzvMqNb7B1AeVyDy/VdKQiMKKskVP936UvV4NlCctPZBJrULohvjM8
RtEDW6AYhpFhXyYc/FElko3F3K0khw523YVtX5a+q0hY/vwLLCWLDX7OLqLcWh3g
Y9c+Un1NRmh02HUIM5LHYvS78d0BUVpdxXIACLdbw8BV1v2WkxQZO87Nr6J9ZA83
cdkBPTy2r+pnU1e8aSduiakY9Q==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:52:25 2026 by rpki-client