Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.mft
File:                     FF-_nuMXN-kcPNSE7AFq48jzgDw.mft (raw, json)
Hash identifier:          iAKrrJfn58apFU6x2oL3ruwQ2SqguTVOg8Gsvag0aag=
Subject key identifier:   2C:85:54:2C:70:CF:D6:B4:CB:FB:1C:57:C5:5A:F6:62:8D:8D:5B:0D
Authority key identifier: 14:5F:BF:9E:E3:17:37:E9:1C:3C:D4:84:EC:01:6A:E3:C8:F3:80:3C
Certificate issuer:       /CN=A91B978D/serialNumber=145FBF9EE31737E91C3CD484EC016AE3C8F3803C
Certificate serial:       0365
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FF-_nuMXN-kcPNSE7AFq48jzgDw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.mft
Manifest number:          035E
Signing time:             Wed 13 May 2026 01:01:45 +0000
Manifest this update:     Wed 13 May 2026 01:01:44 +0000
Manifest next update:     Wed 20 May 2026 01:01:44 +0000
Files and hashes:         1: FF-_nuMXN-kcPNSE7AFq48jzgDw.crl (hash: gsBuMMbDFDoyhuSc0YJEEJgZ/EAD6sdmiCMLQtiVN2c=)
                          2: D5D64BB0FB6811EC863B8150C4F9AE02.roa (hash: QRtlstVkdBXEszVrg/iIFuaNaUBnHazamE53eJaDdno=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.crl
                          rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FF-_nuMXN-kcPNSE7AFq48jzgDw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 869 (0x365)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B978D, serialNumber=145FBF9EE31737E91C3CD484EC016AE3C8F3803C
        Validity
            Not Before: May 13 01:01:44 2026 GMT
            Not After : May 20 01:01:44 2026 GMT
        Subject: CN=6a03cd78-c83f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:29:5b:7b:95:3c:74:c6:fd:7e:31:0d:a1:2b:
                    78:93:86:87:cd:d7:06:c7:a0:a6:e0:00:29:3d:62:
                    ed:21:ff:b8:d9:10:1e:4f:ad:48:4a:ff:aa:e7:35:
                    ba:18:1c:9f:c9:37:3a:41:ba:d3:17:f4:14:51:15:
                    17:ff:4a:f4:a6:17:94:b0:0e:dc:56:83:3e:1a:c6:
                    8d:90:19:de:14:0e:34:79:c4:c2:15:31:f7:a7:2b:
                    44:60:c6:97:fd:71:95:73:49:25:dd:5f:1d:70:c9:
                    ba:48:18:ff:42:e7:07:13:1e:db:e3:1d:96:a4:00:
                    41:cb:16:e1:03:88:a7:df:7c:29:dd:5b:b6:f6:12:
                    0d:f0:cd:a1:20:a4:f3:48:75:d3:b4:aa:03:64:92:
                    b0:a1:54:54:04:0c:48:99:25:1f:32:13:22:4d:be:
                    b8:d5:49:f9:54:7e:00:cf:c3:6f:39:47:5d:22:da:
                    36:e0:07:7f:04:9b:cf:49:b9:1d:23:21:74:17:7e:
                    75:95:29:26:5c:99:73:39:78:72:66:46:f5:21:81:
                    c7:7a:65:02:eb:c5:a3:e8:74:36:a4:e3:71:aa:2f:
                    23:22:06:43:d9:b5:74:0d:15:d3:0c:58:19:19:a1:
                    73:38:c3:49:b6:cd:18:1e:93:3c:b6:e7:94:ae:ae:
                    1e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:85:54:2C:70:CF:D6:B4:CB:FB:1C:57:C5:5A:F6:62:8D:8D:5B:0D
            X509v3 Authority Key Identifier:
                keyid:14:5F:BF:9E:E3:17:37:E9:1C:3C:D4:84:EC:01:6A:E3:C8:F3:80:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FF-_nuMXN-kcPNSE7AFq48jzgDw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:77:68:78:eb:a9:a4:cb:c1:ad:73:14:37:c4:51:a1:61:bc:
         68:83:e7:03:30:1b:6b:26:3a:fc:bf:40:45:22:6d:d3:54:a8:
         ed:b6:c0:15:98:a0:f4:8c:d9:8d:15:81:ab:00:70:b2:3c:fd:
         41:05:9d:94:39:57:c1:3e:48:45:c8:1e:18:74:32:62:c8:2a:
         e3:74:a0:c8:78:3d:9e:66:47:93:9a:26:96:64:9d:4c:3e:5c:
         f7:e1:9f:11:ce:74:af:db:e0:8f:c9:05:8d:72:ca:30:f7:7d:
         36:d7:54:d1:ed:ba:9f:c2:cd:65:5b:59:c1:66:36:d9:c3:d8:
         09:95:3a:cb:15:dd:0a:03:a2:0b:10:be:4a:05:f5:e7:10:c0:
         19:f0:52:78:3d:48:6f:33:3f:93:dd:80:4a:1c:2d:96:4c:70:
         de:2f:be:82:84:ec:6a:48:7f:46:fa:87:74:aa:e2:6d:af:74:
         9b:15:7b:ea:da:22:77:52:d6:fe:c3:c1:01:03:5c:e5:cd:bd:
         fd:fe:fc:6c:b9:07:02:0c:d5:84:f4:e0:71:58:16:43:3c:bc:
         f9:bb:c0:be:5c:35:6c:1c:44:1f:32:2e:37:6e:83:7f:8e:c6:
         f1:a5:54:03:7e:12:37:fc:fd:69:01:70:c6:20:53:02:bf:99:
         25:20:6b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:45:07 2026 by rpki-client