Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft
File:                     fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft (raw, json)
Hash identifier:          HHmUNBoKXK3dol8sbdH6yJ+uUurRKeS3eks5gg78sEU=
Subject key identifier:   F9:71:7B:B0:F4:BC:2C:1D:EF:82:C7:0A:CA:02:CB:7F:E0:2B:A7:5A
Authority key identifier: 7E:39:FE:21:F9:D1:58:5C:AE:F5:98:FB:7D:6A:06:EB:FD:31:06:C2
Certificate issuer:       /CN=A91AF4CC/serialNumber=7E39FE21F9D1585CAEF598FB7D6A06EBFD3106C2
Certificate serial:       8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft
Manifest number:          8A
Signing time:             Sat 19 Jul 2025 06:46:21 +0000
Manifest this update:     Sat 19 Jul 2025 06:46:20 +0000
Manifest next update:     Sat 26 Jul 2025 06:46:20 +0000
Files and hashes:         1: fjn-IfnRWFyu9Zj7fWoG6_0xBsI.crl (hash: SZMSnXM+jdwGPxRWyDBYkW5eW/QAjvXGedMP5WD3x28=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.crl
                          rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 06:46:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF4CC, serialNumber=7E39FE21F9D1585CAEF598FB7D6A06EBFD3106C2
        Validity
            Not Before: Jul 19 06:46:20 2025 GMT
            Not After : Jul 26 06:46:20 2025 GMT
        Subject: CN=687b3f3d-a348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:79:44:ff:09:26:5c:00:86:d2:52:b1:d1:c4:
                    72:65:2e:88:a5:14:bd:30:2b:e4:d5:6e:57:cc:60:
                    d2:4f:9c:ff:9c:74:bf:b1:01:db:46:03:ca:5e:17:
                    a6:d8:ed:1f:bd:00:6f:13:33:d2:15:de:47:a5:8c:
                    8a:d2:76:20:03:28:d8:03:4e:69:83:31:08:c1:6a:
                    a0:79:35:d8:06:01:ae:41:fd:db:a9:5c:d9:0e:d7:
                    38:1d:3c:ae:61:4e:21:27:a1:63:1e:4e:18:48:3b:
                    27:bf:69:6d:14:17:b9:58:35:b6:95:a7:98:4f:47:
                    db:2c:95:67:11:86:36:61:45:a9:d6:82:1d:2f:0d:
                    53:63:87:15:c7:42:ca:38:91:fd:8d:8b:6d:a6:19:
                    91:27:f7:df:52:66:e5:71:95:b5:54:3d:2e:14:7d:
                    8e:77:bf:3a:96:0a:19:80:6b:6a:3f:52:6d:0e:46:
                    2d:ea:37:4e:5a:48:85:81:e9:74:86:28:12:c1:ba:
                    7b:9c:06:07:25:b1:b0:30:23:a1:ee:ef:31:c2:a9:
                    39:22:74:08:fd:d8:5d:5d:e4:7f:ad:30:e1:6d:1f:
                    d5:01:db:e2:36:0d:f0:9e:71:8e:a1:32:f7:3e:3c:
                    2a:4a:81:05:00:77:02:c5:64:78:e3:9a:dd:fb:2a:
                    03:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:71:7B:B0:F4:BC:2C:1D:EF:82:C7:0A:CA:02:CB:7F:E0:2B:A7:5A
            X509v3 Authority Key Identifier:
                keyid:7E:39:FE:21:F9:D1:58:5C:AE:F5:98:FB:7D:6A:06:EB:FD:31:06:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:8a:10:f0:8f:33:a4:9a:2d:00:36:3b:ed:ef:d2:d8:5b:1f:
         dd:b2:13:93:af:a9:4e:12:82:d4:0b:99:ea:ac:7d:b8:e0:17:
         e2:18:ad:80:fe:57:01:0b:d1:d9:d1:cc:6d:00:a3:24:c3:f2:
         d2:74:24:22:f6:c2:ca:89:62:71:d3:9a:6e:45:dc:21:e4:76:
         d6:66:c3:f9:4d:b8:49:6c:f7:24:04:90:82:43:4b:af:a7:fe:
         cb:72:fb:22:53:95:ce:1b:5c:3a:24:0e:5a:4a:ac:9b:f6:30:
         72:b0:b6:b3:f6:6c:9f:6c:0b:f3:ac:70:12:94:ec:b2:a2:33:
         7d:2a:96:6c:cc:7a:9d:1e:19:8d:82:db:3c:64:d3:d6:a1:8a:
         1d:3b:b6:34:52:af:1c:fc:7f:b9:b6:25:02:4a:8a:1a:16:10:
         fe:44:65:d7:3c:2b:7d:f8:4c:0b:43:00:aa:6f:9b:34:5c:04:
         fd:0a:c2:e1:7e:f9:b2:fc:58:2c:73:57:7a:dd:17:1b:32:4b:
         6e:85:7d:c8:48:aa:b8:0f:1e:14:e4:a7:bb:bc:2a:3a:83:bf:
         2a:51:28:36:d3:dd:26:98:12:85:61:94:e3:75:dc:ee:8e:97:
         70:72:b9:ed:2b:1b:c0:cc:37:19:2c:87:70:91:19:8f:80:92:
         cb:01:88:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:05:34 2025 by rpki-client