Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft
File:                     fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft (raw, json)
Hash identifier:          U+kiq5h4W3xWdQIOx02A/x/vtEg0PpIWLNBANqB1jhA=
Subject key identifier:   A2:0B:73:E3:F2:32:3A:08:B4:AE:99:1D:99:0C:96:58:5C:BE:6C:A8
Authority key identifier: 7E:39:FE:21:F9:D1:58:5C:AE:F5:98:FB:7D:6A:06:EB:FD:31:06:C2
Certificate issuer:       /CN=A91AF4CC/serialNumber=7E39FE21F9D1585CAEF598FB7D6A06EBFD3106C2
Certificate serial:       95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft
Manifest number:          95
Signing time:             Sat 09 Aug 2025 06:52:07 +0000
Manifest this update:     Sat 09 Aug 2025 06:52:06 +0000
Manifest next update:     Sat 16 Aug 2025 06:52:06 +0000
Files and hashes:         1: fjn-IfnRWFyu9Zj7fWoG6_0xBsI.crl (hash: MFwOTo2ej+GYBq/If+IVy2z/MytpZANeJC88smy5g3k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.crl
                          rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149 (0x95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF4CC, serialNumber=7E39FE21F9D1585CAEF598FB7D6A06EBFD3106C2
        Validity
            Not Before: Aug  9 06:52:06 2025 GMT
            Not After : Aug 16 06:52:06 2025 GMT
        Subject: CN=6896f016-f15e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9e:13:cc:55:73:da:28:12:5a:43:bf:ac:c7:
                    95:5f:48:59:63:ff:31:84:e6:24:b8:f0:64:8c:25:
                    c4:ca:4e:31:71:36:b1:ab:03:76:77:fe:55:8f:0a:
                    43:d0:cc:cc:89:0e:b6:c1:fc:6d:30:02:68:84:4a:
                    9d:c3:5b:29:d2:0d:6c:5b:18:b3:42:a1:b7:69:26:
                    f1:f9:43:37:8e:34:21:51:f4:bf:ac:9f:f2:08:56:
                    7d:c3:fc:13:ba:ab:c3:3e:12:c1:13:14:6d:b1:ac:
                    38:7a:61:fa:c5:87:76:a5:ee:11:81:09:b1:b1:91:
                    8e:52:3e:3e:7b:fd:43:10:bd:22:b0:0f:48:31:eb:
                    ff:f9:78:89:9f:df:e3:07:de:d8:b3:3d:03:bf:d0:
                    da:3d:ae:40:62:5f:2f:43:34:72:73:0e:14:be:0b:
                    da:b1:4b:4e:0a:98:cf:08:58:58:85:db:fc:db:2d:
                    cd:58:95:51:ef:27:25:c1:e9:e6:19:52:5f:d2:77:
                    8a:54:fe:51:59:ac:3a:98:35:4c:5d:9b:77:21:3c:
                    8f:66:bf:28:52:42:46:30:d7:77:5a:0a:ae:46:48:
                    80:50:5f:e4:c3:4b:ab:b1:f4:0a:ff:03:2f:dc:14:
                    3e:3b:f2:2c:20:c2:28:58:1e:1b:07:1c:61:69:fe:
                    ce:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:0B:73:E3:F2:32:3A:08:B4:AE:99:1D:99:0C:96:58:5C:BE:6C:A8
            X509v3 Authority Key Identifier:
                keyid:7E:39:FE:21:F9:D1:58:5C:AE:F5:98:FB:7D:6A:06:EB:FD:31:06:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:c8:97:f2:f8:8d:4f:4f:a9:04:2c:c8:db:e1:4b:2d:ba:4b:
         e8:91:1b:3f:59:6e:92:a5:9e:be:1f:fe:56:ea:a7:d1:0d:d6:
         bb:41:ed:95:0d:51:2b:b4:d9:53:52:fe:12:cc:c4:9f:f1:5e:
         23:95:03:e1:6c:92:9a:a4:15:ba:e5:8a:58:94:ec:87:d7:10:
         c6:48:99:b5:0c:84:ff:d9:5d:fd:ac:83:d3:1c:b3:13:23:29:
         10:25:f6:6e:c0:0b:74:84:dc:77:1a:9f:4d:19:b9:dd:4f:62:
         df:be:fb:42:4e:e8:e8:03:93:f2:4b:ae:a3:c6:83:f4:92:e4:
         17:d6:8f:70:ac:23:28:d5:be:8f:5e:22:72:b7:55:3a:c8:e3:
         30:4a:e9:15:c9:40:00:98:d4:b3:ae:87:16:9e:d6:a7:23:30:
         94:dc:69:d9:ea:74:44:a1:b5:a7:43:45:03:48:80:cc:ce:96:
         1d:15:b6:8f:77:77:4c:f1:39:e2:e9:d7:0a:53:bf:3d:fa:5a:
         a7:20:2e:18:c6:50:ec:b4:c9:8d:ce:7d:8e:15:b9:e8:b4:6d:
         cc:1a:03:4d:d8:12:59:46:d3:5f:a0:87:18:f9:d5:61:0e:59:
         2b:7b:54:89:20:0c:c5:0a:91:17:02:59:1a:11:c8:23:0b:a3:
         61:94:a2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:18:12 2025 by rpki-client