Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft
File:                     fn-3i_rxIdy3dJPgd5raTNDVmBo.mft (raw, json)
Hash identifier:          il4yo8FEssoHHTsQGHgqdIAU0wX5wYDgzGnFOlpnzEg=
Subject key identifier:   FA:8E:A7:19:A2:5B:09:A8:48:C5:7B:51:42:CF:9C:2C:64:EC:44:B8
Authority key identifier: 7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A
Certificate issuer:       /CN=A91DE7DE/serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A
Certificate serial:       123B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft
Manifest number:          1231
Signing time:             Thu 16 Jul 2026 17:11:03 +0000
Manifest this update:     Thu 16 Jul 2026 17:11:02 +0000
Manifest next update:     Thu 23 Jul 2026 17:11:02 +0000
Files and hashes:         1: fn-3i_rxIdy3dJPgd5raTNDVmBo.crl (hash: 1jyHXF1MIr5xk46WKn3pbI84lcmxk5E8dhKFy/TBqL8=)
                          2: D728B250060011F0A0448C64C4F9AE02.roa (hash: jr1Bh2Tza0ZsNT3OcPcUQ8PAuKdrZij+9+lC6Zj1Cvg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl
                          rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 17:11:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4667 (0x123b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE7DE, serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A
        Validity
            Not Before: Jul 16 17:11:02 2026 GMT
            Not After : Jul 23 17:11:02 2026 GMT
        Subject: CN=6a5910a7-dde1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:dd:f5:49:10:07:6f:14:fe:22:5d:58:cd:f9:
                    15:66:74:d4:16:47:2d:d4:32:e4:0e:71:4f:a0:60:
                    f9:a4:24:82:f5:9d:b5:74:0f:3c:81:4f:0a:8a:98:
                    f2:6b:dc:52:21:36:94:ad:27:d3:ab:e4:c6:e0:ae:
                    c4:83:6a:e0:0c:36:a7:56:24:14:25:cb:64:30:e8:
                    d2:91:cd:8e:83:3e:79:10:c8:cd:23:0b:4a:c1:f5:
                    99:d5:93:c3:e4:42:5f:fe:6f:a3:d6:96:88:8a:55:
                    aa:25:3a:18:0c:75:26:0b:9c:73:97:92:e5:62:8a:
                    e9:27:bb:7b:58:5b:cd:21:24:ed:8c:d7:a2:e6:53:
                    fe:b8:4c:6f:e7:87:b1:b1:8c:99:97:0c:27:ae:b1:
                    c0:98:1d:7d:2e:b2:7e:db:71:4d:d3:5d:ec:00:f2:
                    b9:1e:7b:c5:02:fb:2e:9b:98:08:7b:c4:cc:3f:7a:
                    87:f0:92:03:32:02:ad:61:53:ff:de:81:13:0a:93:
                    a5:91:14:ab:c2:f8:4e:72:fa:fa:ea:40:fe:c1:eb:
                    f5:df:9c:c2:fc:bf:2f:c7:ec:8a:4b:7e:5f:2e:95:
                    ce:6d:3f:a8:bb:27:ae:1a:c4:a2:c4:1f:96:93:17:
                    b5:73:dd:ab:df:b2:b1:aa:c7:d3:69:e8:1a:2d:d8:
                    4b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:8E:A7:19:A2:5B:09:A8:48:C5:7B:51:42:CF:9C:2C:64:EC:44:B8
            X509v3 Authority Key Identifier:
                keyid:7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d8:56:f3:c6:6e:74:64:d0:9d:c4:58:7f:f6:99:84:66:c1:
         71:30:b3:91:34:58:48:c0:e2:0d:1d:2c:8a:33:ef:5b:b2:4a:
         5d:8c:fe:c3:38:13:40:da:9e:34:14:8a:3d:76:ff:f0:62:11:
         78:46:7c:8b:8e:99:45:89:a0:a5:99:21:48:cc:5c:cd:c1:a2:
         0e:89:4a:80:dc:ad:d7:0d:30:2e:20:61:e5:de:98:fb:19:d3:
         22:a5:28:6d:8d:c5:f8:8f:b2:84:55:ef:32:e2:c2:91:83:40:
         26:1f:1e:cd:b3:86:2d:13:64:f0:9b:ae:d4:50:b9:5c:ea:63:
         77:79:5f:f8:56:5a:bc:e0:34:7f:ef:cb:ff:c7:ab:d0:8c:98:
         00:8e:9a:f9:20:31:bf:44:15:13:3a:83:09:43:c3:40:66:ab:
         ad:0f:01:27:b8:aa:bf:eb:39:18:0d:a2:08:93:7e:a1:60:dd:
         96:22:c8:b0:1a:13:d5:f6:2b:65:ea:67:be:1f:e1:31:dc:c8:
         09:0b:48:ba:ba:33:37:f8:64:5a:3d:6e:23:bd:0b:c8:eb:b1:
         92:50:49:f1:89:17:c3:ca:2f:fa:96:8a:c9:4b:94:0f:29:40:
         83:93:3e:76:87:c4:9d:a2:c1:e3:5c:5b:9f:c8:eb:67:74:83:
         db:90:40:b5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REU3REUxMTAvBgNVBAUTKDdFN0ZCNzhCRkFGMTIxRENCNzc0OTNFMDc3OUFEQTRD
RDBENTk4MUEwHhcNMjYwNzE2MTcxMTAyWhcNMjYwNzIzMTcxMTAyWjAYMRYwFAYD
VQQDEw02YTU5MTBhNy1kZGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1N31SRAHbxT+Il1YzfkVZnTUFkct1DLkDnFPoGD5pCSC9Z21dA88gU8Kipjy
a9xSITaUrSfTq+TG4K7Eg2rgDDanViQUJctkMOjSkc2Ogz55EMjNIwtKwfWZ1ZPD
5EJf/m+j1paIilWqJToYDHUmC5xzl5LlYorpJ7t7WFvNISTtjNei5lP+uExv54ex
sYyZlwwnrrHAmB19LrJ+23FN013sAPK5HnvFAvsum5gIe8TMP3qH8JIDMgKtYVP/
3oETCpOlkRSrwvhOcvr66kD+wev135zC/L8vx+yKS35fLpXObT+ouyeuGsSixB+W
kxe1c92r37KxqsfTaegaLdhLlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPqOpxmi
WwmoSMV7UULPnCxk7ES4MB8GA1UdIwQYMBaAFH5/t4v68SHct3ST4Hea2kzQ1Zga
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTdERS9DMzMyQUZCNjA0
RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9mbi0zaV9yeElkeTNkSlBnZDVyYVRORFZt
Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2ZuLTNpX3J4SWR5M2RKUGdkNXJhVE5EVm1Cby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RTdERS9DMzMyQUZCNjA0RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9mbi0zaV9yeElk
eTNkSlBnZDVyYVRORFZtQm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEthW88ZudGTQncRYf/aZhGbBcTCzkTRYSMDiDR0sijPvW7JKXYz+wzgTQNqe
NBSKPXb/8GIReEZ8i46ZRYmgpZkhSMxczcGiDolKgNyt1w0wLiBh5d6Y+xnTIqUo
bY3F+I+yhFXvMuLCkYNAJh8ezbOGLRNk8Juu1FC5XOpjd3lf+FZavOA0f+/L/8er
0IyYAI6a+SAxv0QVEzqDCUPDQGarrQ8BJ7iqv+s5GA2iCJN+oWDdliLIsBoT1fYr
Zepnvh/hMdzICQtIurozN/hkWj1uI70LyOuxklBJ8YkXw8ov+paKyUuUDylAg5M+
dofEnaLB41xbn8jrZ3SD25BAtQ==
-----END CERTIFICATE-----
Generated at Sat Jul 18 05:32:27 2026 by rpki-client