Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft
File:                     fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft (raw, json)
Hash identifier:          dpcz6diwnQpgMn4cJU4kmJiqNh6+qf57Lg5B3NpXkns=
Subject key identifier:   7B:1E:18:33:23:8F:F9:64:87:8C:40:EC:6A:02:5E:88:BE:C6:A0:1E
Authority key identifier: 7E:39:FE:21:F9:D1:58:5C:AE:F5:98:FB:7D:6A:06:EB:FD:31:06:C2
Certificate issuer:       /CN=A91AF4CC/serialNumber=7E39FE21F9D1585CAEF598FB7D6A06EBFD3106C2
Certificate serial:       9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft
Manifest number:          9C
Signing time:             Sat 23 Aug 2025 06:33:28 +0000
Manifest this update:     Sat 23 Aug 2025 06:33:28 +0000
Manifest next update:     Sat 30 Aug 2025 06:33:28 +0000
Files and hashes:         1: fjn-IfnRWFyu9Zj7fWoG6_0xBsI.crl (hash: /QxDtyMEH7yM8LQVEEJM3u8pZdZqrNENna22DBREaRI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.crl
                          rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 06:33:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF4CC, serialNumber=7E39FE21F9D1585CAEF598FB7D6A06EBFD3106C2
        Validity
            Not Before: Aug 23 06:33:28 2025 GMT
            Not After : Aug 30 06:33:28 2025 GMT
        Subject: CN=68a960b8-3860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c3:e8:da:7e:3b:f0:7f:06:42:1d:38:f8:d3:
                    2f:d6:46:37:4f:fe:82:1d:2b:a7:45:b8:3b:7f:0d:
                    eb:61:b3:68:17:6f:6e:40:93:8d:8c:28:6e:e8:00:
                    3a:31:5c:a5:9b:79:d0:3a:29:7a:7b:7e:15:42:a3:
                    44:b3:0c:18:1a:43:aa:02:d1:6c:b0:26:c3:7c:90:
                    d9:95:ed:84:0f:c6:ad:fb:9a:dc:15:90:60:a5:94:
                    9d:c1:36:03:79:c0:de:95:b1:01:92:0b:a9:bf:c3:
                    a7:aa:6c:75:33:4a:a7:8c:db:a1:57:10:33:cc:51:
                    57:a2:90:fe:e6:7d:04:d9:0e:f9:40:fb:bd:1d:ca:
                    c6:5d:9f:94:42:06:42:7c:d1:78:99:75:04:43:f7:
                    b2:ad:70:1e:c7:97:d7:47:8e:df:cd:11:82:dc:8d:
                    75:ea:06:b1:57:f9:1e:be:7e:05:73:1f:05:60:40:
                    ca:c3:c8:b2:76:6e:50:26:9d:72:b4:e4:ad:e5:2b:
                    1f:dc:64:9b:92:4f:55:4a:e4:49:e7:9e:80:1c:bb:
                    e4:23:17:e0:7d:49:52:46:13:64:8c:4d:a1:f6:be:
                    13:c8:e3:88:f9:b9:94:f8:64:be:c6:a0:25:2f:e0:
                    08:6c:08:c4:ea:90:09:2f:36:df:e3:5a:ea:4a:d9:
                    90:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:1E:18:33:23:8F:F9:64:87:8C:40:EC:6A:02:5E:88:BE:C6:A0:1E
            X509v3 Authority Key Identifier:
                keyid:7E:39:FE:21:F9:D1:58:5C:AE:F5:98:FB:7D:6A:06:EB:FD:31:06:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:08:df:80:7e:8c:61:cf:02:c0:b3:10:3c:70:7e:f6:db:b4:
         59:c5:b1:59:21:4d:89:b4:93:6f:4c:ad:3e:ff:76:1d:8b:24:
         3d:8f:a2:5b:6f:7e:60:b7:f8:ba:ab:f4:f6:ea:0c:2d:9c:04:
         04:88:39:9c:15:43:54:08:74:d2:ba:f5:01:f9:8e:0c:67:2e:
         2a:41:fe:ea:52:15:9e:7d:1d:cb:1f:61:67:1c:74:b8:8c:cc:
         4c:7c:51:8f:55:c4:88:78:48:ba:2d:c0:bb:03:59:68:9e:fd:
         60:ca:4d:b0:54:36:cf:08:d3:25:2b:ab:4c:c1:47:94:46:25:
         f9:18:32:be:2a:43:54:d9:c1:88:d4:a9:dd:ed:af:16:e8:86:
         16:3b:6d:0e:47:bb:5c:91:ec:77:ba:39:35:81:3a:53:4e:41:
         b3:bd:f4:d1:37:8e:b1:0b:5a:28:cd:a2:e8:f7:a4:77:41:38:
         1c:0a:46:80:6f:25:28:84:b9:5c:9c:17:2b:99:5e:36:21:ba:
         be:e9:1c:a0:6d:3a:fa:d4:c0:37:28:fd:e8:e9:8f:f9:21:fc:
         52:4f:de:0c:3d:32:a7:e9:ee:e8:3f:23:8e:04:9f:d5:eb:b7:
         f4:8f:ca:4e:81:a2:b4:bf:a2:42:7b:ae:c2:f5:a5:87:98:0a:
         4c:9f:a4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:14:32 2025 by rpki-client