Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft
File:                     NE-0maajfSYymrfV_1JiUQmOXfI.mft (raw, json)
Hash identifier:          2TmP4di1d93OOm4A0uI/0rglgcoSEnq9rqWbiQ5lqbg=
Subject key identifier:   58:0D:F7:71:F8:E9:53:D6:E8:F0:07:21:DB:EA:6F:66:F6:C3:E9:DB
Authority key identifier: 34:4F:B4:99:A6:A3:7D:26:32:9A:B7:D5:FF:52:62:51:09:8E:5D:F2
Certificate issuer:       /CN=A912190F/serialNumber=344FB499A6A37D26329AB7D5FF526251098E5DF2
Certificate serial:       104E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft
Manifest number:          103F
Signing time:             Fri 22 Aug 2025 17:32:52 +0000
Manifest this update:     Fri 22 Aug 2025 17:32:51 +0000
Manifest next update:     Fri 29 Aug 2025 17:32:51 +0000
Files and hashes:         1: NE-0maajfSYymrfV_1JiUQmOXfI.crl (hash: EJgFB45/0B8iY3kUwRRAcIuvM3k0phMPgvZHy5qEwVE=)
                          2: 995AA100551611E9BDD3CB66C4F9AE02.roa (hash: vKUrCad/wDAN8DcFXzUyprhlGMmsi4Oqt3ZrPDf4rA8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.crl
                          rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 17:32:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4174 (0x104e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912190F, serialNumber=344FB499A6A37D26329AB7D5FF526251098E5DF2
        Validity
            Not Before: Aug 22 17:32:51 2025 GMT
            Not After : Aug 29 17:32:51 2025 GMT
        Subject: CN=68a8a9c4-9a4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1c:5b:06:2c:01:73:3d:05:93:53:5f:53:5a:
                    85:39:29:74:d0:4a:1c:30:e6:c4:32:52:bb:3c:6e:
                    f0:36:43:94:db:d8:2f:ba:80:10:56:b5:8c:be:1b:
                    0d:e0:2d:ce:3f:fd:ae:12:46:82:d6:99:6f:09:88:
                    4a:f6:3f:32:d4:4f:0e:a2:b9:13:77:e2:79:8e:32:
                    9b:49:9a:15:e3:02:6a:81:66:f6:02:a0:c6:3c:81:
                    fd:a1:54:cf:69:1a:50:9d:3c:30:52:85:93:23:f1:
                    d5:c3:c4:ad:98:e6:e2:b5:7b:64:31:ad:70:c0:dc:
                    4f:73:ac:dd:41:bb:45:c6:9c:78:a2:25:8d:90:26:
                    fb:6c:94:fc:31:58:f5:c8:fb:2a:38:cd:53:67:89:
                    19:36:2f:1e:c5:fd:72:fc:83:8a:4b:22:04:63:f2:
                    a4:37:93:04:54:b5:81:93:b1:5e:d3:f9:52:f7:0f:
                    34:f3:79:d4:2e:05:ef:cb:73:a3:f0:11:1d:fe:d6:
                    62:bd:e4:6e:9b:cd:06:fb:05:98:1b:28:b4:29:b6:
                    0b:72:49:63:0a:f8:a5:3a:ca:fc:a4:3f:e9:97:54:
                    eb:b2:f1:dc:2e:7e:3e:98:c0:4b:1a:f5:05:9e:f9:
                    c8:c2:31:90:d2:d5:1b:83:64:67:e8:7f:11:b8:93:
                    81:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:0D:F7:71:F8:E9:53:D6:E8:F0:07:21:DB:EA:6F:66:F6:C3:E9:DB
            X509v3 Authority Key Identifier:
                keyid:34:4F:B4:99:A6:A3:7D:26:32:9A:B7:D5:FF:52:62:51:09:8E:5D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:d2:0b:df:45:40:b1:13:f8:2d:df:36:44:54:42:ce:af:e2:
         c2:6c:9c:63:d1:a2:f7:83:5c:35:dd:0c:f8:92:d1:cc:2c:d7:
         2b:93:3c:67:77:1f:c8:3b:f0:23:2c:44:54:34:51:84:1d:63:
         83:5f:28:e8:b5:b8:14:f1:5f:ae:73:1c:09:0f:72:39:82:42:
         f9:34:b1:ff:bb:08:a6:d3:70:41:a3:3b:ec:4e:75:c1:76:41:
         52:7a:33:ce:24:55:be:8a:9e:db:88:df:9f:0c:36:ca:e4:e0:
         96:af:96:23:a0:74:2e:45:02:d9:59:44:96:fd:9c:eb:b9:e4:
         4f:f0:b7:aa:f0:9e:e6:51:80:11:48:c4:3f:33:a8:d0:41:30:
         79:6d:67:eb:d5:de:36:24:6c:8f:18:f3:69:8c:27:43:bf:ec:
         0f:ab:a0:c6:23:e0:92:a2:cf:82:7f:17:31:dd:60:db:4e:49:
         9a:b1:a6:83:7b:13:cb:f3:7a:c1:c4:42:29:5f:61:19:e1:8d:
         f1:16:94:57:77:9b:8f:7a:4c:d1:a7:65:29:42:55:7b:ff:28:
         8b:02:7e:bf:15:af:c3:2a:64:4b:6d:01:f7:00:b8:0f:bd:90:
         f8:6a:24:ba:e7:2e:0b:7b:35:cc:3b:ea:53:c6:db:9f:d9:8e:
         02:8d:68:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:07:22 2025 by rpki-client