Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft
File:                     NE-0maajfSYymrfV_1JiUQmOXfI.mft (raw, json)
Hash identifier:          OL4X5JQ0FfvgHjueFefT/dM3py3zAj76KLRz5i4E5So=
Subject key identifier:   E8:56:A5:7C:45:56:2B:74:47:BA:CA:59:5A:A9:4C:4B:C4:DB:62:75
Authority key identifier: 34:4F:B4:99:A6:A3:7D:26:32:9A:B7:D5:FF:52:62:51:09:8E:5D:F2
Certificate issuer:       /CN=A912190F/serialNumber=344FB499A6A37D26329AB7D5FF526251098E5DF2
Certificate serial:       1002
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft
Manifest number:          0FF5
Signing time:             Fri 04 Apr 2025 17:34:50 +0000
Manifest this update:     Fri 04 Apr 2025 17:34:50 +0000
Manifest next update:     Fri 11 Apr 2025 17:34:49 +0000
Files and hashes:         1: NE-0maajfSYymrfV_1JiUQmOXfI.crl (hash: inGMWg02YK1kaaV+FAX9Z2cGCli7ApRtZLTOGmDODZo=)
                          2: 995AA100551611E9BDD3CB66C4F9AE02.roa (hash: OFPIMpQg51qSJdzRG2hnBGn1IXeWBpS0NU5Xq+7iYjk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.crl
                          rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 17:34:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4098 (0x1002)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912190F
        Validity
            Not Before: Apr  4 17:34:50 2025 GMT
            Not After : Apr 11 17:34:49 2025 GMT
        Subject: CN=67f0183a-05bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c4:6f:44:ca:53:3c:4b:d6:17:8e:96:cd:ec:
                    aa:56:d4:07:aa:11:22:09:a5:a5:fb:79:80:b0:ac:
                    25:b4:5d:d3:23:3f:5f:6e:55:24:89:85:b9:88:16:
                    cb:e4:c2:9d:d3:34:e3:5a:e8:5f:d6:3b:48:02:8b:
                    6a:91:48:b9:af:14:b4:6e:e3:16:81:25:5f:a0:9d:
                    f6:d5:ba:64:29:f7:26:2a:e4:5d:72:5c:cf:04:fe:
                    b4:49:d2:df:f0:d9:dd:af:f6:29:02:f9:62:98:c8:
                    a0:50:26:c1:e0:20:61:94:1e:a6:52:f3:68:89:d6:
                    cc:86:24:3a:2d:6f:96:d8:cf:2b:e6:7c:23:2a:08:
                    45:8c:d1:56:54:bf:84:66:d5:8c:bd:f5:1c:95:b0:
                    0b:a2:ec:80:8f:dd:45:37:5d:56:81:d5:98:3e:e5:
                    27:8e:21:eb:c5:c3:f7:aa:0c:90:61:c8:7f:55:91:
                    c2:ab:b2:b6:83:ae:5e:7e:d2:57:5c:88:81:00:55:
                    77:ef:03:4a:5b:7f:b1:c1:e1:70:32:2f:01:46:ba:
                    69:ac:4d:19:f4:8b:14:d0:ba:43:8f:ba:0b:ac:d9:
                    9d:a2:8e:aa:5c:bf:39:79:8c:9b:77:c1:d7:e0:a2:
                    1a:f1:f8:78:a6:d8:89:b5:3e:c1:55:7d:6d:97:18:
                    a0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:56:A5:7C:45:56:2B:74:47:BA:CA:59:5A:A9:4C:4B:C4:DB:62:75
            X509v3 Authority Key Identifier:
                keyid:34:4F:B4:99:A6:A3:7D:26:32:9A:B7:D5:FF:52:62:51:09:8E:5D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:c7:df:67:2f:9c:fc:74:63:af:37:74:d1:52:c1:2e:3c:c8:
         31:b4:2e:da:f4:94:a9:1c:af:5a:d9:1a:97:e9:5b:c8:f9:ae:
         27:cd:cd:8b:a8:a2:3b:f1:54:e3:42:3f:34:55:97:2e:91:73:
         74:05:ea:f3:88:ef:ef:b3:a1:70:22:8d:ad:72:bf:18:01:56:
         d8:e9:fc:49:c7:38:40:b7:45:29:48:62:46:64:68:7d:40:f2:
         5d:38:5f:6d:03:29:5e:b3:9c:b9:c5:2c:3a:75:7e:30:90:d8:
         7d:44:2f:0b:e5:4d:95:64:e6:ee:28:de:a7:64:9d:ce:14:2e:
         47:de:96:b5:4d:c8:e5:7f:e1:2f:04:17:a1:a9:49:25:ff:18:
         11:9a:9f:c4:dc:69:55:24:57:04:92:28:c3:8b:0c:e2:c8:96:
         ee:69:5f:18:4f:5a:6f:3a:65:a9:a8:eb:3f:1b:e9:49:cb:30:
         41:53:f7:ae:b1:be:bf:07:90:fd:d6:d1:04:7b:13:94:86:7b:
         7d:ef:92:79:5e:19:6d:42:c4:d5:30:e3:24:c7:a9:29:eb:1e:
         10:98:5f:a5:dd:93:f5:f2:98:df:a8:73:a1:6b:0a:c4:48:36:
         19:e8:fa:99:5e:a7:72:0a:c1:2e:2e:f1:81:99:99:2e:46:8a:
         78:08:30:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:41:57 2025 by rpki-client