Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft
File:                     NE-0maajfSYymrfV_1JiUQmOXfI.mft (raw, json)
Hash identifier:          MUH0xEQuVLeGcjppJ910p9svH9gV41YfgJdpy/vT+qo=
Subject key identifier:   C8:AF:7A:9D:55:92:67:4E:A1:0B:4A:DD:32:AC:3C:41:30:BA:87:E1
Authority key identifier: 34:4F:B4:99:A6:A3:7D:26:32:9A:B7:D5:FF:52:62:51:09:8E:5D:F2
Certificate issuer:       /CN=A912190F/serialNumber=344FB499A6A37D26329AB7D5FF526251098E5DF2
Certificate serial:       1031
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft
Manifest number:          1023
Signing time:             Wed 02 Jul 2025 17:38:31 +0000
Manifest this update:     Wed 02 Jul 2025 17:38:31 +0000
Manifest next update:     Wed 09 Jul 2025 17:38:31 +0000
Files and hashes:         1: NE-0maajfSYymrfV_1JiUQmOXfI.crl (hash: F6fEwvXzq8ODnUfUvlqC95+hQtGqem2xDrvROzUZ6DI=)
                          2: 995AA100551611E9BDD3CB66C4F9AE02.roa (hash: zr2KST+9dU+4R4eCfdJtEMQwgJDZK72RViONMY6uNQ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.crl
                          rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 17:38:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4145 (0x1031)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912190F, serialNumber=344FB499A6A37D26329AB7D5FF526251098E5DF2
        Validity
            Not Before: Jul  2 17:38:31 2025 GMT
            Not After : Jul  9 17:38:31 2025 GMT
        Subject: CN=68656e97-1598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ef:29:a7:d9:48:9f:f7:09:46:b5:d0:93:22:
                    64:af:ce:10:80:87:91:60:87:3a:7b:3e:65:0d:d6:
                    9d:6d:04:e5:5e:eb:c2:ee:cb:aa:56:f1:8c:a9:af:
                    e8:dc:09:78:0b:8a:83:56:4b:07:99:1c:e3:d2:ad:
                    5c:cd:62:0e:a1:09:d8:ac:d6:87:8b:ee:55:76:83:
                    51:8d:67:20:59:52:67:0a:8c:46:48:c0:aa:ef:89:
                    3d:12:ae:61:82:7a:2d:6e:cd:0d:4c:5f:c7:b4:da:
                    61:44:a7:61:fd:a4:55:b2:ad:94:c0:19:d6:35:62:
                    e4:76:b4:01:c7:03:2f:80:0a:73:d0:79:a6:62:ed:
                    b2:ac:bb:c3:39:c1:06:c1:1a:87:93:2e:74:b7:37:
                    54:29:55:6a:47:6d:91:eb:6a:8c:8b:f6:ce:a5:5b:
                    ff:f4:7c:52:ec:07:36:0f:0d:88:84:93:aa:77:09:
                    32:f4:f7:44:b2:6d:7a:fa:8b:5e:31:ab:85:bd:03:
                    df:ce:25:dc:2c:32:5e:72:22:41:38:ff:74:67:f3:
                    3a:53:39:ea:b5:9b:a9:31:45:ef:85:96:13:3a:ad:
                    bb:83:cd:58:ec:1a:dd:50:af:91:86:9e:fc:26:26:
                    ef:d6:92:fd:27:52:03:65:33:65:d9:4c:e5:1b:9e:
                    f5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:AF:7A:9D:55:92:67:4E:A1:0B:4A:DD:32:AC:3C:41:30:BA:87:E1
            X509v3 Authority Key Identifier:
                keyid:34:4F:B4:99:A6:A3:7D:26:32:9A:B7:D5:FF:52:62:51:09:8E:5D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:69:fb:68:51:cb:fa:e4:c2:c6:f2:4c:71:bf:a7:2c:70:00:
         8e:94:c4:cf:64:d0:8e:78:e2:20:24:4d:ec:17:61:43:f4:fd:
         5c:81:d4:33:3c:16:f2:55:89:86:a8:84:9d:2d:24:7e:c0:73:
         5b:c6:60:16:92:6e:be:95:3e:06:00:6c:39:22:e6:98:38:76:
         4d:de:8e:22:32:83:d3:9f:60:13:4f:e2:17:6b:3a:39:29:e1:
         6c:b9:c0:e9:ef:96:07:1d:72:e4:a0:76:0a:90:90:74:8d:e5:
         40:58:b5:42:0f:a5:b4:6f:a2:45:ba:69:e8:29:de:07:ed:96:
         78:c9:d6:02:90:90:7c:0b:8b:45:2c:e3:a7:3a:8c:de:b3:42:
         a7:ac:2d:bd:77:1a:ce:4d:92:98:93:f4:3d:cd:4c:87:28:e3:
         05:9f:34:65:80:52:e8:8b:c8:e4:b3:e3:fa:cf:c0:f9:da:94:
         ef:2a:6b:96:22:8e:46:78:4d:ca:6d:c2:6f:cc:28:8d:1d:30:
         5a:d4:90:d4:88:c1:6c:a8:df:49:8b:db:4e:ae:4e:20:b2:87:
         bf:62:75:1b:d8:33:f0:af:3e:7e:b5:a5:85:c8:b3:e2:34:31:
         a4:18:ac:45:ef:12:1b:e7:44:cf:49:75:29:b9:35:87:9c:00:
         0b:79:9c:ad
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjE5MEYxMTAvBgNVBAUTKDM0NEZCNDk5QTZBMzdEMjYzMjlBQjdENUZGNTI2MjUx
MDk4RTVERjIwHhcNMjUwNzAyMTczODMxWhcNMjUwNzA5MTczODMxWjAYMRYwFAYD
VQQDEw02ODY1NmU5Ny0xNTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3+8pp9lIn/cJRrXQkyJkr84QgIeRYIc6ez5lDdadbQTlXuvC7suqVvGMqa/o
3Al4C4qDVksHmRzj0q1czWIOoQnYrNaHi+5VdoNRjWcgWVJnCoxGSMCq74k9Eq5h
gnotbs0NTF/HtNphRKdh/aRVsq2UwBnWNWLkdrQBxwMvgApz0HmmYu2yrLvDOcEG
wRqHky50tzdUKVVqR22R62qMi/bOpVv/9HxS7Ac2Dw2IhJOqdwky9PdEsm16+ote
MauFvQPfziXcLDJeciJBOP90Z/M6UznqtZupMUXvhZYTOq27g81Y7BrdUK+Rhp78
Jibv1pL9J1IDZTNl2UzlG5710wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMivep1V
kmdOoQtK3TKsPEEwuofhMB8GA1UdIwQYMBaAFDRPtJmmo30mMpq31f9SYlEJjl3y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTkwRi82Q0MwRjlGNDQ3
QjExMUU5OUZDQ0EwNTlDNEY5QUUwMi9ORS0wbWFhamZTWXltcmZWXzFKaVVRbU9Y
ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05FLTBtYWFqZlNZeW1yZlZfMUppVVFtT1hmSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MTkwRi82Q0MwRjlGNDQ3QjExMUU5OUZDQ0EwNTlDNEY5QUUwMi9ORS0wbWFhamZT
WXltcmZWXzFKaVVRbU9YZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBkaftoUcv65MLG8kxxv6cscACOlMTPZNCOeOIgJE3sF2FD9P1cgdQz
PBbyVYmGqISdLSR+wHNbxmAWkm6+lT4GAGw5IuaYOHZN3o4iMoPTn2ATT+IXazo5
KeFsucDp75YHHXLkoHYKkJB0jeVAWLVCD6W0b6JFumnoKd4H7ZZ4ydYCkJB8C4tF
LOOnOozes0KnrC29dxrOTZKYk/Q9zUyHKOMFnzRlgFLoi8jks+P6z8D52pTvKmuW
Io5GeE3KbcJvzCiNHTBa1JDUiMFsqN9Ji9tOrk4gsoe/YnUb2DPwrz5+taWFyLPi
NDGkGKxF7xIb50TPSXUpuTWHnAALeZyt
-----END CERTIFICATE-----
Generated at Wed Jul 2 19:25:34 2025 by rpki-client