Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft
File:                     fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft (raw, json)
Hash identifier:          LSs8+RiQgM0gQrw6byVV9L+lGxWJwOZE1vIJ0P1NNKo=
Subject key identifier:   8E:96:A6:1D:8A:0B:A6:45:63:96:55:17:4B:6A:8F:16:A6:44:9B:40
Authority key identifier: 7E:39:FE:21:F9:D1:58:5C:AE:F5:98:FB:7D:6A:06:EB:FD:31:06:C2
Certificate issuer:       /CN=A91AF4CC/serialNumber=7E39FE21F9D1585CAEF598FB7D6A06EBFD3106C2
Certificate serial:       A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft
Manifest number:          A9
Signing time:             Wed 17 Sep 2025 06:51:08 +0000
Manifest this update:     Wed 17 Sep 2025 06:51:07 +0000
Manifest next update:     Wed 24 Sep 2025 06:51:07 +0000
Files and hashes:         1: fjn-IfnRWFyu9Zj7fWoG6_0xBsI.crl (hash: d0GlCXKqv0+2bXYQuWrjcuNihyhfECMTlHo1RLr1wmQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.crl
                          rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 06:51:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF4CC, serialNumber=7E39FE21F9D1585CAEF598FB7D6A06EBFD3106C2
        Validity
            Not Before: Sep 17 06:51:07 2025 GMT
            Not After : Sep 24 06:51:07 2025 GMT
        Subject: CN=68ca5a5b-3ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9a:96:bc:49:24:81:72:99:e1:1e:bf:e3:eb:
                    99:f1:b1:30:f1:00:85:d9:7e:c9:2c:25:fd:19:2a:
                    86:9b:02:35:83:aa:2c:4d:d5:6e:67:6e:c3:0f:bb:
                    2c:6b:1f:63:f2:27:bb:91:81:5e:00:2f:2e:48:fc:
                    3d:91:5f:00:c1:c8:af:a2:fd:7a:ef:92:3c:01:d7:
                    e3:fc:8d:cc:17:90:7f:43:dd:43:50:15:4a:af:03:
                    cd:0c:fd:c4:f4:7e:c9:a6:8b:de:8c:76:49:f7:20:
                    c7:a8:8d:3f:1f:24:a2:e3:ec:94:53:b3:05:c5:68:
                    ab:18:3b:40:be:bb:3a:ef:41:ed:28:6a:7c:68:a0:
                    37:cc:70:38:3b:2d:20:4b:77:62:8e:ed:da:78:7f:
                    f0:9a:20:3f:0e:34:1a:98:f8:4f:61:02:43:fe:a2:
                    0f:b1:8d:95:51:ab:23:51:e4:41:17:58:03:b4:34:
                    d6:cc:6a:c4:7b:1c:c1:96:c7:5e:73:89:2c:7d:04:
                    0e:d1:99:c6:eb:7a:8c:bd:eb:b4:3b:92:9c:70:1c:
                    18:4a:73:c9:dd:73:36:eb:c9:08:ad:f8:5e:b9:88:
                    2f:83:29:83:5d:d8:d2:a9:5f:c2:fd:3f:cc:02:67:
                    d5:1f:99:e5:6d:83:7d:7e:c3:58:72:06:0f:42:be:
                    8a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:96:A6:1D:8A:0B:A6:45:63:96:55:17:4B:6A:8F:16:A6:44:9B:40
            X509v3 Authority Key Identifier:
                keyid:7E:39:FE:21:F9:D1:58:5C:AE:F5:98:FB:7D:6A:06:EB:FD:31:06:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:0b:2d:15:d4:3c:58:20:82:7c:8e:80:93:37:90:60:f2:c9:
         19:1e:b0:a0:a0:5c:d0:a4:e0:c8:29:8d:5d:c7:79:cd:72:69:
         ed:e3:58:80:fd:55:0b:82:64:8d:24:dd:08:dc:37:d7:2f:27:
         63:b4:ff:eb:50:63:91:03:33:b3:78:5a:6a:00:97:47:20:58:
         c1:9b:a0:89:15:18:cc:e9:74:0a:14:e1:9f:3e:75:b3:cf:11:
         51:6c:ab:6b:1d:a0:36:e9:4f:57:4e:c1:91:00:80:47:91:b2:
         ae:54:b1:fe:de:f9:24:00:ce:f2:6f:17:8f:6f:a3:0f:07:dd:
         59:d0:91:1b:4a:b4:97:51:5b:d0:ab:f5:f9:ac:d6:ed:50:8a:
         9d:42:21:56:d3:20:97:37:53:f3:94:22:f3:6d:53:71:cf:e7:
         d1:ea:e2:66:18:72:08:6b:ae:59:e0:3b:b3:7a:90:59:80:40:
         f4:56:f6:be:30:a9:ef:90:53:e5:74:98:dd:06:7d:79:a2:8d:
         44:09:d2:6e:db:04:72:25:61:dd:43:50:4d:03:73:51:ec:41:
         96:fe:5c:c5:66:7e:3c:2e:d4:8b:6c:64:a9:77:5b:3b:72:a1:
         e5:e3:b8:59:90:79:fc:38:5c:0c:f1:71:d0:0f:57:df:53:1c:
         73:d4:82:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 00:40:38 2025 by rpki-client