Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft
File:                     fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft (raw, json)
Hash identifier:          ye2Bw8N7hCI15fm0CW1jOaVVcLjkIA+OJ/m82Iu/0pA=
Subject key identifier:   86:05:74:72:6F:56:12:A2:26:CC:14:9F:CC:81:12:0E:70:99:3A:A5
Authority key identifier: 7E:39:FE:21:F9:D1:58:5C:AE:F5:98:FB:7D:6A:06:EB:FD:31:06:C2
Certificate issuer:       /CN=A91AF4CC/serialNumber=7E39FE21F9D1585CAEF598FB7D6A06EBFD3106C2
Certificate serial:       0147
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft
Manifest number:          0147
Signing time:             Thu 23 Jul 2026 06:53:29 +0000
Manifest this update:     Thu 23 Jul 2026 06:53:28 +0000
Manifest next update:     Thu 30 Jul 2026 06:53:28 +0000
Files and hashes:         1: fjn-IfnRWFyu9Zj7fWoG6_0xBsI.crl (hash: OSvFI6NtMxQ5b7ldDEyzVHaBekJBuFmIbcVKnRUlmZ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.crl
                          rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:53:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 327 (0x147)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF4CC, serialNumber=7E39FE21F9D1585CAEF598FB7D6A06EBFD3106C2
        Validity
            Not Before: Jul 23 06:53:28 2026 GMT
            Not After : Jul 30 06:53:28 2026 GMT
        Subject: CN=6a61ba69-aee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:e8:6e:62:d9:4c:fe:03:b3:dd:bd:e3:a9:e6:
                    b8:4e:29:01:81:f2:f4:e0:05:c4:93:40:b1:98:33:
                    a9:f5:63:f9:6c:5d:de:e7:55:bd:b4:2a:52:95:2b:
                    49:d4:f9:ae:05:72:f3:63:78:21:3a:9b:ad:44:10:
                    0f:46:e2:c9:9f:2c:f7:a9:6a:66:b7:d3:15:4d:24:
                    34:68:2b:24:6e:35:34:61:10:c9:51:77:e4:b1:bb:
                    be:0c:88:84:ae:df:4a:3c:47:f7:96:c0:44:87:c6:
                    9a:38:a8:66:19:31:70:e2:3d:99:9e:c7:f6:65:6e:
                    c4:b5:33:97:28:07:7f:b7:91:7b:c1:5c:93:29:d6:
                    a2:59:a9:79:a6:c9:5c:4a:34:80:74:5e:08:79:8f:
                    14:75:bf:4d:b2:d8:69:1a:98:06:d9:c6:25:48:dc:
                    6e:94:8a:b2:bf:85:85:38:64:39:63:1b:e1:8a:3d:
                    8d:e4:3b:62:ed:4d:c6:d7:cb:06:07:b7:55:77:5d:
                    76:46:1d:a3:39:e7:a2:d9:9f:df:e7:1b:99:63:14:
                    59:f4:ba:83:c9:bd:d3:38:ab:2d:3f:94:12:20:b1:
                    52:76:6c:98:51:a8:55:66:7e:c2:4e:ca:9b:8c:04:
                    ab:1b:1a:c9:02:bb:f3:ad:45:ad:6b:21:76:8a:b9:
                    88:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:05:74:72:6F:56:12:A2:26:CC:14:9F:CC:81:12:0E:70:99:3A:A5
            X509v3 Authority Key Identifier:
                keyid:7E:39:FE:21:F9:D1:58:5C:AE:F5:98:FB:7D:6A:06:EB:FD:31:06:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:d1:6f:3d:1f:d6:11:76:cf:e5:14:8d:cd:d3:e2:f7:a3:1e:
         f6:22:6d:ed:5d:0d:20:1e:c4:9c:7f:7d:56:99:87:6d:6d:4b:
         b3:af:2e:0d:f7:5b:aa:3b:df:0c:22:ca:50:f9:c2:1e:08:5d:
         3c:1b:59:c3:db:0b:ca:60:0e:fd:6f:9d:b3:b3:6c:98:b2:77:
         8d:c2:9e:de:65:a5:13:f4:54:a2:e8:ee:b7:69:d4:11:64:0f:
         21:89:f7:f9:c5:67:ee:e3:a7:ef:ac:3b:86:bb:3b:3f:dd:6d:
         86:18:17:a0:70:68:aa:6e:31:0f:57:1b:be:d6:dc:7a:06:6b:
         2b:cb:1d:c4:6b:84:8d:f6:d0:03:10:79:65:4b:ee:ee:2a:8e:
         ad:0e:11:4b:d8:bd:de:93:2d:ca:10:95:82:a3:13:f0:6b:f1:
         2a:35:7a:22:d6:6e:b5:1f:29:d7:c9:e6:ad:9a:ef:6e:1b:13:
         54:90:0f:73:a3:48:9f:e0:bc:d1:e4:3e:b8:18:f0:a1:1b:22:
         dd:0e:cc:1c:27:1e:e4:90:f6:35:eb:f4:70:09:f4:ee:7f:ae:
         22:22:94:af:5b:df:ef:d4:93:55:e0:48:6e:61:71:c0:86:9e:
         29:cd:7d:a2:2c:89:be:fd:80:fb:78:cf:55:ec:b3:ea:b7:5d:
         43:7d:d7:e3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUY0Q0MxMTAvBgNVBAUTKDdFMzlGRTIxRjlEMTU4NUNBRUY1OThGQjdENkEwNkVC
RkQzMTA2QzIwHhcNMjYwNzIzMDY1MzI4WhcNMjYwNzMwMDY1MzI4WjAYMRYwFAYD
VQQDEw02YTYxYmE2OS1hZWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9OhuYtlM/gOz3b3jqea4TikBgfL04AXEk0CxmDOp9WP5bF3e51W9tCpSlStJ
1PmuBXLzY3ghOputRBAPRuLJnyz3qWpmt9MVTSQ0aCskbjU0YRDJUXfksbu+DIiE
rt9KPEf3lsBEh8aaOKhmGTFw4j2Znsf2ZW7EtTOXKAd/t5F7wVyTKdaiWal5pslc
SjSAdF4IeY8Udb9NsthpGpgG2cYlSNxulIqyv4WFOGQ5Yxvhij2N5Dti7U3G18sG
B7dVd112Rh2jOeei2Z/f5xuZYxRZ9LqDyb3TOKstP5QSILFSdmyYUahVZn7CTsqb
jASrGxrJArvzrUWtayF2irmIXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIYFdHJv
VhKiJswUn8yBEg5wmTqlMB8GA1UdIwQYMBaAFH45/iH50VhcrvWY+31qBuv9MQbC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjRDQy9ENTgxQzFCQzkx
NDgxMUVGODdFQURENTJDNEY5QUUwMi9mam4tSWZuUldGeXU5Wmo3ZldvRzZfMHhC
c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Zqbi1JZm5SV0Z5dTlaajdmV29HNl8weEJzSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RjRDQy9ENTgxQzFCQzkxNDgxMUVGODdFQURENTJDNEY5QUUwMi9mam4tSWZuUldG
eXU5Wmo3ZldvRzZfMHhCc0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWNFvPR/WEXbP5RSNzdPi96Me9iJt7V0NIB7EnH99VpmHbW1Ls68uDfdbqjvf
DCLKUPnCHghdPBtZw9sLymAO/W+ds7NsmLJ3jcKe3mWlE/RUoujut2nUEWQPIYn3
+cVn7uOn76w7hrs7P91thhgXoHBoqm4xD1cbvtbcegZrK8sdxGuEjfbQAxB5ZUvu
7iqOrQ4RS9i93pMtyhCVgqMT8GvxKjV6ItZutR8p18nmrZrvbhsTVJAPc6NIn+C8
0eQ+uBjwoRsi3Q7MHCce5JD2Nev0cAn07n+uIiKUr1vf79STVeBIbmFxwIaeKc19
oiyJvv2A+3jPVeyz6rddQ33X4w==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:41:59 2026 by rpki-client