Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft
File:                     fn-3i_rxIdy3dJPgd5raTNDVmBo.mft (raw, json)
Hash identifier:          Pu6EiM6aTqoOPkgrDUTs2ivxUEM+iNwHd2CY7BZ5ts0=
Subject key identifier:   65:DC:13:15:9B:D7:44:19:39:1F:35:7C:50:32:98:74:47:53:FB:59
Authority key identifier: 7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A
Certificate issuer:       /CN=A91DE7DE/serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A
Certificate serial:       1241
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft
Manifest number:          1237
Signing time:             Tue 28 Jul 2026 17:13:09 +0000
Manifest this update:     Tue 28 Jul 2026 17:13:09 +0000
Manifest next update:     Tue 04 Aug 2026 17:13:09 +0000
Files and hashes:         1: fn-3i_rxIdy3dJPgd5raTNDVmBo.crl (hash: Wm4E04HIxNOTr2N9hgg/ES1F0QUlr4QieBJ2rcW0c3w=)
                          2: D728B250060011F0A0448C64C4F9AE02.roa (hash: jr1Bh2Tza0ZsNT3OcPcUQ8PAuKdrZij+9+lC6Zj1Cvg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl
                          rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:13:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4673 (0x1241)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE7DE, serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A
        Validity
            Not Before: Jul 28 17:13:09 2026 GMT
            Not After : Aug  4 17:13:09 2026 GMT
        Subject: CN=6a68e325-dcaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6a:68:35:80:b5:4a:38:0f:48:25:a5:1a:96:
                    cf:53:70:f9:7f:af:9a:63:e3:8a:22:ea:0f:fc:cd:
                    98:9f:ea:ea:81:60:09:c8:a6:93:b9:5a:a7:83:02:
                    bb:64:2f:d7:c4:88:74:af:6d:96:51:7a:8e:3e:3f:
                    32:73:5e:17:3b:c1:67:db:bb:07:cd:3b:ef:2f:dd:
                    51:7d:1d:a1:9c:aa:4c:98:aa:69:6c:91:51:39:c1:
                    a8:1a:a1:d2:02:b2:cd:b3:d9:39:32:9a:d5:76:8e:
                    77:4b:c0:d5:36:fb:35:3c:68:cd:45:e5:ef:69:2b:
                    86:3e:96:df:b3:96:c7:40:56:5d:5e:e4:4b:2f:d5:
                    b1:6d:cb:85:fd:39:a7:45:11:25:40:fe:86:a3:d6:
                    66:80:79:96:53:63:b6:b8:5e:d2:83:c2:8e:89:18:
                    1f:bc:73:e4:de:b3:bf:7c:ef:e7:64:80:e6:2e:40:
                    97:47:cc:e6:d6:d0:2d:2f:79:96:17:6f:c1:ac:ab:
                    d2:e9:94:0d:5d:3c:1d:87:0a:8e:6c:1f:e4:21:c4:
                    60:7e:53:5f:cf:fe:3b:09:51:27:3b:ca:be:58:fd:
                    59:4d:b5:77:a4:43:4b:63:05:ff:b9:8a:17:9a:ad:
                    46:37:31:76:b1:ae:df:3a:63:2b:9e:8d:78:76:5e:
                    85:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DC:13:15:9B:D7:44:19:39:1F:35:7C:50:32:98:74:47:53:FB:59
            X509v3 Authority Key Identifier:
                keyid:7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:26:df:5b:bb:af:4d:48:8f:2a:f7:8c:a7:a5:e0:eb:7e:24:
         5b:6a:6f:32:be:59:1a:01:c9:dd:c9:b2:67:aa:64:39:75:6f:
         de:db:1f:00:8d:22:e3:3a:85:d3:eb:d0:40:74:d1:7e:38:4c:
         d8:bc:0c:ef:42:64:3e:a6:e3:45:47:99:28:30:27:5d:83:db:
         be:f8:8f:26:ef:b7:28:15:02:84:33:3e:fd:1e:ca:07:3e:97:
         d1:c4:a5:de:51:92:c8:07:8f:d4:2f:f3:df:87:03:74:b7:71:
         02:c6:df:43:90:5a:15:b0:a5:92:a5:d0:dd:e5:46:8c:3a:6e:
         dd:e0:0a:e7:91:89:75:f4:e4:15:4c:da:e6:a5:e7:84:56:94:
         6a:07:95:84:bd:76:0e:0c:29:3b:cf:76:3f:22:67:bb:91:9c:
         2a:ad:a7:f2:b2:27:d1:74:27:85:12:a1:61:88:c1:4d:54:cc:
         6e:14:e3:45:77:62:55:07:73:98:73:a4:93:74:e9:41:3e:02:
         58:f7:06:8e:e4:a8:bd:f7:f8:18:b9:46:01:34:80:82:ee:b2:
         97:e9:4d:4d:b4:14:41:84:98:ef:ef:b2:1e:6a:6b:b3:87:af:
         de:48:e8:b3:ce:dc:47:88:96:12:8f:e3:40:9e:ef:5e:7a:eb:
         5c:e7:0b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:52:11 2026 by rpki-client