Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft
File:                     fn-3i_rxIdy3dJPgd5raTNDVmBo.mft (raw, json)
Hash identifier:          sB1kpmlY9Wz5CwFRUM5H7NYqnelTaye1G6TcJcm33HY=
Subject key identifier:   F3:D5:DB:B6:BF:7A:3F:B4:EF:06:83:95:55:F8:60:2B:37:9C:E2:2B
Authority key identifier: 7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A
Certificate issuer:       /CN=A91DE7DE/serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A
Certificate serial:       122A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft
Manifest number:          1220
Signing time:             Fri 12 Jun 2026 17:06:01 +0000
Manifest this update:     Fri 12 Jun 2026 17:06:00 +0000
Manifest next update:     Fri 19 Jun 2026 17:06:00 +0000
Files and hashes:         1: fn-3i_rxIdy3dJPgd5raTNDVmBo.crl (hash: FvxOmQ39TMtxJmyiSITqJph+UTMN2JJSlenIfLIdx6s=)
                          2: D728B250060011F0A0448C64C4F9AE02.roa (hash: jr1Bh2Tza0ZsNT3OcPcUQ8PAuKdrZij+9+lC6Zj1Cvg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl
                          rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4650 (0x122a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE7DE, serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A
        Validity
            Not Before: Jun 12 17:06:00 2026 GMT
            Not After : Jun 19 17:06:00 2026 GMT
        Subject: CN=6a2c3c79-7d9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8b:43:2d:96:3b:f9:a5:23:da:8f:6e:8c:cc:
                    e8:aa:84:f9:c9:95:78:ff:36:a6:7e:9e:9b:78:d5:
                    9b:88:65:29:a4:d8:c7:32:3f:10:f4:15:47:23:2e:
                    4c:04:4a:00:4e:ab:fc:49:4c:80:33:8b:c8:aa:8c:
                    ed:d8:3d:5a:6c:6e:57:16:76:5e:e5:8a:72:56:84:
                    77:db:a8:da:0d:97:06:57:6f:a3:b8:f4:e9:31:ac:
                    fb:31:6c:0b:e5:75:bb:96:6a:8e:2e:15:1e:c2:b8:
                    24:f3:ab:b9:3a:9b:e3:02:b0:dd:35:06:f4:83:66:
                    34:21:52:27:4a:b6:da:d8:24:0f:11:81:b0:94:72:
                    c1:83:8c:0b:2a:26:5f:be:e7:de:8a:41:2c:76:e0:
                    1a:d1:29:ce:56:73:0f:d8:1b:58:d5:c4:05:8e:fd:
                    c8:c2:2a:97:9b:46:a0:f6:46:8b:ff:54:fd:a8:30:
                    0e:d8:95:a7:d7:64:26:f3:35:99:ee:b7:e9:af:0e:
                    cb:4a:cf:69:c4:40:ba:b8:54:e6:d7:0a:f7:5f:f4:
                    0f:dc:8a:8c:6c:95:47:64:a5:38:3b:0e:21:1a:67:
                    3d:4e:c0:1a:f7:7c:14:1d:24:db:30:29:fb:9e:66:
                    3f:cd:01:ea:3b:a4:29:fe:f3:0d:07:5a:2f:6d:8c:
                    e9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D5:DB:B6:BF:7A:3F:B4:EF:06:83:95:55:F8:60:2B:37:9C:E2:2B
            X509v3 Authority Key Identifier:
                keyid:7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:89:b6:cd:14:f6:79:20:22:0e:1e:e5:f0:2a:08:fc:8f:77:
         d5:5f:9e:99:f2:af:22:f5:18:76:5f:a6:b1:4e:ee:8b:2e:50:
         ab:e2:5a:70:94:e8:3d:7e:9f:f7:27:23:6e:76:3e:c9:a8:af:
         f9:4d:3b:f6:b3:a8:84:5a:ff:f2:e9:56:aa:35:9d:46:c5:70:
         82:e3:72:2a:24:09:e7:81:27:69:0d:db:8f:42:89:07:19:69:
         c3:26:e9:da:33:c1:86:1f:7e:bc:dd:1b:21:ee:20:df:f3:5f:
         ea:16:da:14:79:88:e5:29:a4:b4:5e:fd:34:20:65:f2:53:fd:
         1b:46:bf:3d:a6:8f:74:20:88:fb:8e:a6:b9:de:49:91:a6:3f:
         f1:52:86:bf:37:ff:4d:40:63:c4:cd:f6:1f:d7:8a:c1:ce:25:
         2f:2e:fb:94:39:e6:b0:99:e4:46:b8:3d:ca:63:9d:b6:b0:79:
         35:c7:4c:19:a2:0a:9b:42:ba:f5:86:cb:5c:c0:86:cc:79:44:
         4c:29:08:a7:02:34:24:4e:ce:e1:84:56:c2:da:9e:94:47:33:
         2d:19:7a:85:a0:75:21:ce:df:9b:ad:f5:98:d1:83:01:bc:92:
         f2:82:20:a0:af:89:b4:a3:85:29:b4:41:2b:22:51:84:93:29:
         2e:69:66:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:26:02 2026 by rpki-client