Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft
File:                     fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft (raw, json)
Hash identifier:          fTxUWVPgfT3d482DXrQkVtY+uS4+b68zWppXZuiLGP4=
Subject key identifier:   52:97:D8:A1:09:53:38:29:F6:37:A8:0B:C8:27:EC:37:90:A8:05:DC
Authority key identifier: 7E:39:FE:21:F9:D1:58:5C:AE:F5:98:FB:7D:6A:06:EB:FD:31:06:C2
Certificate issuer:       /CN=A91AF4CC/serialNumber=7E39FE21F9D1585CAEF598FB7D6A06EBFD3106C2
Certificate serial:       02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft
Manifest number:          02
Signing time:             Wed 23 Oct 2024 14:16:06 +0000
Manifest this update:     Wed 23 Oct 2024 14:16:05 +0000
Manifest next update:     Wed 30 Oct 2024 14:16:05 +0000
Files and hashes:         1: fjn-IfnRWFyu9Zj7fWoG6_0xBsI.crl (hash: jaOWkwICd5e9FrKA4xx4/2md1ejBQBWnmO2O1QG87NY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.crl
                          rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Oct 2024 14:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF4CC/serialNumber=7E39FE21F9D1585CAEF598FB7D6A06EBFD3106C2
        Validity
            Not Before: Oct 23 14:16:05 2024 GMT
            Not After : Oct 30 14:16:05 2024 GMT
        Subject: CN=67190526-f04b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:eb:d9:74:81:6e:ad:2c:a6:6c:96:18:a5:48:
                    f8:98:9b:4d:d8:6d:70:de:c9:43:c0:ec:ff:c4:14:
                    cd:c5:76:6c:f2:5d:5f:e5:10:6a:27:82:12:5c:a6:
                    c5:12:8d:7d:8c:6a:7a:cf:26:c3:9d:47:8b:f5:9d:
                    a8:e5:ec:44:c6:f9:6c:ca:a3:6e:98:73:ce:a0:78:
                    f5:1f:c9:0f:16:40:22:94:b0:06:35:55:ce:8c:34:
                    ba:d7:65:f3:d9:49:2a:76:6e:00:a9:d9:13:51:36:
                    12:8d:19:99:3f:ab:ca:8b:04:b7:c5:ea:e7:74:e6:
                    01:e1:90:bf:21:db:e2:4b:55:d8:3c:d2:7f:06:91:
                    f9:9a:6c:6a:82:b6:56:3b:16:b0:6e:ba:f6:5e:5f:
                    77:6b:f2:c0:ef:d7:f3:f1:db:4f:2b:52:bb:96:07:
                    cc:1b:25:9c:38:7c:4e:60:17:9e:fa:bb:0f:35:ef:
                    d5:6b:cc:86:58:04:fe:14:42:18:e7:0b:7e:67:37:
                    af:b3:84:4a:f5:54:5a:01:be:9a:2f:db:78:2b:9f:
                    a3:40:a7:c0:96:f2:8c:ca:1b:a1:b9:c4:fa:c4:f0:
                    f7:0e:3a:f9:30:b9:15:4c:69:66:cb:fa:b9:d6:7f:
                    63:da:33:f9:b2:f7:aa:22:c1:ae:97:4c:e3:00:1e:
                    0f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:97:D8:A1:09:53:38:29:F6:37:A8:0B:C8:27:EC:37:90:A8:05:DC
            X509v3 Authority Key Identifier:
                keyid:7E:39:FE:21:F9:D1:58:5C:AE:F5:98:FB:7D:6A:06:EB:FD:31:06:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:c3:85:b4:6b:28:b1:54:bc:0d:c9:88:43:64:9b:92:29:cc:
         85:4a:ca:b3:e9:52:ba:ed:f1:08:a7:c7:23:aa:63:eb:08:23:
         66:7b:cf:ef:48:8c:ac:a7:a2:9b:b7:83:26:96:30:9d:c4:37:
         72:4e:1e:5e:08:28:bf:f9:f8:17:21:85:64:86:f5:70:09:4b:
         82:a8:3f:2c:a1:61:f1:a4:32:2c:ab:3c:d1:5c:17:42:df:7a:
         c9:24:e0:82:51:1b:f8:f1:8c:2d:0b:2a:92:07:77:29:e2:3b:
         d1:82:55:62:d6:fb:6b:3f:24:96:58:4f:b4:62:25:83:f0:55:
         57:7f:be:03:5c:15:8d:11:80:79:12:dc:93:fb:c7:74:6f:6f:
         ef:08:54:8b:10:21:00:e6:23:1f:82:87:96:7a:0b:34:db:45:
         22:27:59:b2:6f:3d:f7:31:7f:61:ec:0a:78:2c:d2:72:65:23:
         e2:be:4f:43:ec:05:58:7e:ae:cc:df:39:17:e6:36:36:d1:78:
         4c:ac:fa:41:5c:84:b0:f0:bf:a1:cf:6e:c0:a9:67:97:17:6b:
         d2:2a:11:6d:f7:2d:08:80:f5:4f:ed:8e:5e:9d:b8:3a:a8:aa:
         62:fd:ff:3d:cd:0a:f8:22:85:85:6b:dc:ae:dc:54:e8:57:31:
         fd:00:08:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 17:31:01 2024 by rpki-client on console-fra.rpki-client.org