Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft
File:                     fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft (raw, json)
Hash identifier:          en2XWcd1owpABkX3P8GuJkYo/6+iiGvli8KlyoMg8pU=
Subject key identifier:   37:51:60:EE:CE:A1:31:C6:C4:5A:2F:B2:98:37:33:0B:50:AB:75:F6
Authority key identifier: 7E:39:FE:21:F9:D1:58:5C:AE:F5:98:FB:7D:6A:06:EB:FD:31:06:C2
Certificate issuer:       /CN=A91AF4CC/serialNumber=7E39FE21F9D1585CAEF598FB7D6A06EBFD3106C2
Certificate serial:       0149
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft
Manifest number:          0149
Signing time:             Mon 27 Jul 2026 07:11:00 +0000
Manifest this update:     Mon 27 Jul 2026 07:10:59 +0000
Manifest next update:     Mon 03 Aug 2026 07:10:59 +0000
Files and hashes:         1: fjn-IfnRWFyu9Zj7fWoG6_0xBsI.crl (hash: wFcAgIwpW+D293fflXGj7Zao/2CNQL4wA6ZRH+lf4VM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.crl
                          rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:10:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 329 (0x149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF4CC, serialNumber=7E39FE21F9D1585CAEF598FB7D6A06EBFD3106C2
        Validity
            Not Before: Jul 27 07:10:59 2026 GMT
            Not After : Aug  3 07:10:59 2026 GMT
        Subject: CN=6a670484-43f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ca:35:c3:4a:9b:3d:a3:74:b7:b5:8d:fb:d8:
                    3b:de:a9:42:7f:12:70:44:a2:78:c3:2c:03:6a:41:
                    95:42:ad:b7:a5:b8:89:a0:2b:bd:81:c0:e5:39:f1:
                    bd:ca:b4:84:d8:7f:68:52:cd:9e:25:05:a1:1c:3d:
                    ea:10:b8:74:14:8b:01:9b:89:0b:af:dd:b2:a5:86:
                    b8:90:66:d8:80:91:35:79:48:b7:9b:c1:6c:d0:77:
                    51:df:f4:2a:13:02:3e:6b:97:b7:a2:96:cb:77:ba:
                    ec:97:f7:9c:f0:58:04:b0:29:f3:58:6c:8e:b3:33:
                    00:4e:fe:17:28:9b:5d:27:81:ac:37:46:24:d0:16:
                    68:83:3c:0a:2c:62:51:d2:ef:7a:88:b7:de:df:40:
                    42:66:83:08:a7:dd:a8:b3:85:26:52:16:6c:d4:ff:
                    dd:2b:a9:16:5e:19:52:40:4f:23:c2:e4:32:2e:52:
                    c4:18:df:3d:2b:63:15:be:f9:8c:48:00:07:d1:79:
                    54:5d:b3:79:d5:99:49:ed:7e:85:4f:96:bd:69:09:
                    0a:60:9a:82:19:73:b7:97:7f:8d:af:a5:1d:bd:ed:
                    43:38:19:3f:51:20:18:68:64:83:67:17:3a:91:02:
                    52:8d:5c:38:83:26:f1:2f:da:ae:4f:e7:03:7c:35:
                    9c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:51:60:EE:CE:A1:31:C6:C4:5A:2F:B2:98:37:33:0B:50:AB:75:F6
            X509v3 Authority Key Identifier:
                keyid:7E:39:FE:21:F9:D1:58:5C:AE:F5:98:FB:7D:6A:06:EB:FD:31:06:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:eb:7b:00:0a:43:a2:31:bf:d9:5e:6c:32:6a:dc:c7:a8:a3:
         ba:b0:b4:ff:1f:d2:e2:4a:79:e1:25:40:7e:cb:46:67:5d:a7:
         13:e2:12:00:8a:27:65:01:4d:1e:7c:84:74:f3:6b:df:84:ba:
         dd:80:8d:c9:cf:b9:e3:6b:49:93:73:08:6c:1f:70:31:68:16:
         bc:b2:04:f2:8e:fe:b3:de:07:b8:d4:91:c5:48:d6:76:ce:51:
         e6:08:83:6b:9b:f0:c3:72:03:fb:0c:56:00:a9:59:83:09:49:
         89:16:7e:e9:97:2c:f3:0c:d8:9e:a8:2d:83:b6:6f:27:3f:82:
         7e:21:4c:bd:d4:83:49:64:a6:76:fc:c4:37:41:12:0f:fc:21:
         88:6b:c1:51:d3:ef:a2:61:7a:bf:6e:80:f5:6c:a1:f4:b0:82:
         06:5a:ef:de:80:7d:03:6b:48:7c:7a:47:a1:96:04:3d:9d:f6:
         1f:06:4f:7f:a5:df:33:4d:25:9f:63:8f:ab:c5:cd:0c:78:30:
         6f:01:32:b2:69:b8:11:fc:b7:e8:ac:3a:ce:d6:b5:56:44:75:
         73:a5:ce:d5:5d:78:17:de:2e:96:f3:cc:62:d0:e3:66:14:b1:
         8e:fb:56:82:10:b6:1e:19:66:40:9f:7f:59:63:62:b5:e7:6f:
         01:31:14:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:53:53 2026 by rpki-client