Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft
File:                     fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft (raw, json)
Hash identifier:          oY9G16MzadaAEVcWLRsZl3TYiZKqqdeC5wpTf69ccf8=
Subject key identifier:   33:DF:65:13:B5:A9:D6:97:9F:94:AB:68:51:F1:B9:1F:CA:80:3E:90
Authority key identifier: 7E:39:FE:21:F9:D1:58:5C:AE:F5:98:FB:7D:6A:06:EB:FD:31:06:C2
Certificate issuer:       /CN=A91AF4CC/serialNumber=7E39FE21F9D1585CAEF598FB7D6A06EBFD3106C2
Certificate serial:       12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft
Manifest number:          12
Signing time:             Sat 23 Nov 2024 05:58:55 +0000
Manifest this update:     Sat 23 Nov 2024 05:58:55 +0000
Manifest next update:     Sat 30 Nov 2024 05:58:55 +0000
Files and hashes:         1: fjn-IfnRWFyu9Zj7fWoG6_0xBsI.crl (hash: r6e/cn63Z7VhFsYJhAbGRYwIW+/IQ+o1uqoC+v+50uA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.crl
                          rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF4CC/serialNumber=7E39FE21F9D1585CAEF598FB7D6A06EBFD3106C2
        Validity
            Not Before: Nov 23 05:58:55 2024 GMT
            Not After : Nov 30 05:58:55 2024 GMT
        Subject: CN=67416f1f-953b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c3:cb:31:90:fd:d4:6d:40:55:d5:0d:4b:d3:
                    64:b7:7d:7c:09:a9:29:67:40:ac:15:5d:50:10:b0:
                    37:0a:97:06:eb:b8:35:e7:36:08:de:a0:1c:0e:9c:
                    67:2c:00:ef:0a:ed:2f:f7:a2:86:24:9f:21:28:df:
                    a6:f8:5b:88:f0:c4:76:62:02:75:2d:9f:cc:ed:ed:
                    6e:7d:58:39:50:56:02:ed:86:13:0a:83:5a:ee:6a:
                    fc:ed:82:75:2b:ed:05:a3:42:e2:44:af:b0:34:2e:
                    2d:c7:41:c9:8c:06:26:59:f0:37:3c:39:17:03:a4:
                    80:03:ad:5e:bf:8a:02:6b:67:5f:4b:8b:b4:f1:b7:
                    27:38:cd:c9:2b:3c:2c:74:99:eb:1e:73:b4:d2:63:
                    21:d8:7a:ca:94:3a:74:f8:fa:31:bc:1d:74:42:b9:
                    2c:e3:19:27:6e:73:5b:da:38:36:6b:85:0a:19:d1:
                    9b:10:02:40:e6:62:2d:45:89:df:f4:0d:40:5c:2b:
                    a4:b2:0d:f6:3a:9f:d6:f2:dd:b0:3d:d8:4c:1a:50:
                    86:25:a1:32:32:4f:04:84:79:c7:d4:ea:40:25:e6:
                    d5:51:bf:21:63:a8:5c:14:73:32:b4:68:7b:94:e2:
                    b3:0c:fd:7b:b5:89:f8:6b:e6:b2:29:c2:65:94:66:
                    a1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:DF:65:13:B5:A9:D6:97:9F:94:AB:68:51:F1:B9:1F:CA:80:3E:90
            X509v3 Authority Key Identifier:
                keyid:7E:39:FE:21:F9:D1:58:5C:AE:F5:98:FB:7D:6A:06:EB:FD:31:06:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:73:c4:a1:9b:ad:29:b0:9e:04:51:3c:44:6d:56:e1:dc:91:
         81:e2:c3:b8:9d:39:f6:94:05:9a:0e:87:40:74:3c:cc:fa:55:
         fe:ee:3b:68:e5:04:68:a4:da:1c:75:13:9f:4a:d3:fa:e2:9d:
         6a:3d:53:dc:48:14:4e:c6:b3:60:14:e7:92:ae:6f:b4:cb:ce:
         ef:97:bd:38:27:93:51:be:17:8a:d5:4e:e6:0b:f1:cb:ba:90:
         b8:99:ca:02:0b:70:94:a5:f7:fe:9a:9c:7a:5f:10:8a:ee:82:
         1b:ae:db:b1:a2:05:6e:88:83:41:6d:dd:9e:56:3c:eb:aa:d9:
         1f:2b:5a:15:3a:a1:e2:0b:79:38:68:07:7c:8c:d1:c7:4a:e1:
         6d:95:08:0f:a8:e1:e8:e4:1a:cf:87:b2:ea:7b:bc:ff:b5:2c:
         26:ea:04:c5:ca:07:44:6a:75:28:35:02:12:bb:98:45:81:78:
         ab:9e:57:85:05:f6:16:6e:0b:ec:39:07:0c:39:2f:e0:b8:bb:
         9d:80:a7:54:ec:7e:4f:90:c2:e3:98:7f:b9:52:74:fc:29:f1:
         04:76:b0:de:8b:8b:63:4f:6d:8b:8e:83:92:67:b5:fe:6d:84:
         74:f8:08:b9:b3:f3:ef:7d:81:22:b6:df:31:9f:76:97:2d:d0:
         69:50:88:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:45:04 2024 by rpki-client on console-ams.rpki-client.org