Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft
File:                     NE-0maajfSYymrfV_1JiUQmOXfI.mft (raw, json)
Hash identifier:          ZHCLqGBCsrDvJjZuWIMgz4mJB4fLCfhEiLEy0PlJqCQ=
Subject key identifier:   CE:AD:82:45:08:6D:37:EC:77:09:34:79:7A:D3:24:40:56:65:81:47
Authority key identifier: 34:4F:B4:99:A6:A3:7D:26:32:9A:B7:D5:FF:52:62:51:09:8E:5D:F2
Certificate issuer:       /CN=A912190F/serialNumber=344FB499A6A37D26329AB7D5FF526251098E5DF2
Certificate serial:       10E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft
Manifest number:          10D2
Signing time:             Wed 20 May 2026 17:20:01 +0000
Manifest this update:     Wed 20 May 2026 17:20:01 +0000
Manifest next update:     Wed 27 May 2026 17:20:01 +0000
Files and hashes:         1: NE-0maajfSYymrfV_1JiUQmOXfI.crl (hash: Eg0A5jezkksufjKmGu1q+Hp4DTnSPHuEN88BddRkTrg=)
                          2: 995AA100551611E9BDD3CB66C4F9AE02.roa (hash: ix8Y0mmn+/uiIe+QXDDaxKrAmCa1p4V0bjpTh/sxjE4=)
                          3: 252B08AA394411F18E3B3D83C3833773.roa (hash: OnSxIzXoVolQDucHFePW8Iyl7AQJrkNWpcnFIbtiYl0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.crl
                          rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 17:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4326 (0x10e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912190F, serialNumber=344FB499A6A37D26329AB7D5FF526251098E5DF2
        Validity
            Not Before: May 20 17:20:01 2026 GMT
            Not After : May 27 17:20:01 2026 GMT
        Subject: CN=6a0ded41-29c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:da:53:b6:66:e8:00:53:34:d4:78:0c:1c:5b:
                    0c:5d:70:c5:70:13:46:f4:28:fe:ec:27:34:42:e2:
                    49:62:db:27:aa:96:ef:9e:ed:64:84:e5:4b:dc:03:
                    fe:46:73:fb:76:f6:0d:85:39:bd:12:56:28:50:6d:
                    c0:6a:a3:cb:2d:7a:1a:f7:e1:3e:54:74:fd:c5:94:
                    68:d3:c6:f2:67:09:51:50:bc:26:52:8f:24:d5:04:
                    ad:1f:0f:98:6f:8c:b8:bb:f4:72:be:09:d9:fe:1b:
                    6e:36:09:82:03:7e:4c:17:8e:82:eb:09:c1:77:51:
                    04:e3:c7:57:d0:aa:a9:5e:4f:25:39:a4:6a:ee:1a:
                    1b:81:ba:20:66:7c:a5:17:2c:5b:fc:d1:a5:e2:6f:
                    14:20:b2:e5:28:cc:da:ac:41:1d:ad:35:51:b8:2a:
                    c8:4e:f7:ce:99:d0:b3:06:17:90:a8:c4:af:81:8b:
                    2c:ee:ab:28:23:f5:e8:a0:9c:23:8a:24:8b:b0:0b:
                    71:ae:c5:64:6b:60:5d:30:11:d1:17:fd:8c:17:74:
                    34:cd:7c:6a:3b:de:f9:a1:fa:81:01:d2:bd:e8:79:
                    45:3f:1b:a7:9f:81:da:49:9e:41:8d:be:75:10:63:
                    1a:00:22:6b:4c:52:37:b4:e9:8e:27:25:46:a9:a4:
                    d3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:AD:82:45:08:6D:37:EC:77:09:34:79:7A:D3:24:40:56:65:81:47
            X509v3 Authority Key Identifier:
                keyid:34:4F:B4:99:A6:A3:7D:26:32:9A:B7:D5:FF:52:62:51:09:8E:5D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:5a:0d:43:bb:24:0f:05:21:5c:43:cf:29:79:df:95:5a:a3:
         ba:c0:24:b5:c5:bf:7a:67:f5:68:45:4c:b2:8f:b1:85:dc:8b:
         f5:02:4c:b3:98:a2:a7:48:75:1e:8f:12:6e:69:d7:af:3f:40:
         26:45:2a:68:92:d6:38:30:0a:d7:ac:01:57:f4:ad:ff:9f:b6:
         38:67:59:4c:e7:be:1d:fd:21:9b:e4:14:0e:1d:3d:0c:79:0d:
         e5:10:a2:8d:18:da:0a:47:dc:d8:0c:c4:8e:a4:1d:cc:e7:d4:
         0a:32:5c:06:fc:a6:78:8b:24:d5:05:25:ef:19:2a:48:59:d9:
         58:e9:b4:5f:04:79:90:ab:a1:85:4f:5c:ef:23:c6:d9:1c:a3:
         11:77:c4:5d:8a:ce:07:ae:83:d9:06:63:2f:1c:de:dc:9b:40:
         98:0c:11:07:1e:33:7f:65:9c:b0:7c:7f:11:84:bf:15:bd:d6:
         e4:85:fb:0e:6b:6e:8d:51:97:6b:53:45:e7:43:8e:0e:f3:43:
         5c:0d:a6:2f:aa:3a:1d:a2:6f:27:e8:72:ec:54:d9:9d:82:87:
         2d:a6:b0:95:a5:b0:33:97:89:9e:3d:cd:04:71:93:73:26:c5:
         24:fb:3d:df:77:85:f1:af:7d:27:4a:c5:6a:4b:4f:6e:3f:c2:
         fa:1a:af:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:15:07 2026 by rpki-client