Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft
File:                     NE-0maajfSYymrfV_1JiUQmOXfI.mft (raw, json)
Hash identifier:          VCg3HcJYTFv8qiMlShfEIWsOFOjdRM++caKlbD6a6LE=
Subject key identifier:   D1:B0:CC:6E:76:65:15:CC:2B:92:35:93:7A:C5:7A:34:76:4C:78:A1
Authority key identifier: 34:4F:B4:99:A6:A3:7D:26:32:9A:B7:D5:FF:52:62:51:09:8E:5D:F2
Certificate issuer:       /CN=A912190F/serialNumber=344FB499A6A37D26329AB7D5FF526251098E5DF2
Certificate serial:       1124
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft
Manifest number:          1110
Signing time:             Fri 18 Sep 2026 17:16:23 +0000
Manifest this update:     Fri 18 Sep 2026 17:16:22 +0000
Manifest next update:     Fri 25 Sep 2026 17:16:22 +0000
Files and hashes:         1: NE-0maajfSYymrfV_1JiUQmOXfI.crl (hash: Pv5gKPzFIg83C0HqOXGZkAfLtaqtLzbarCcsOFYUsiA=)
                          2: 995AA100551611E9BDD3CB66C4F9AE02.roa (hash: ix8Y0mmn+/uiIe+QXDDaxKrAmCa1p4V0bjpTh/sxjE4=)
                          3: 252B08AA394411F18E3B3D83C3833773.roa (hash: OnSxIzXoVolQDucHFePW8Iyl7AQJrkNWpcnFIbtiYl0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.crl
                          rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4388 (0x1124)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912190F, serialNumber=344FB499A6A37D26329AB7D5FF526251098E5DF2
        Validity
            Not Before: Sep 18 17:16:22 2026 GMT
            Not After : Sep 25 17:16:22 2026 GMT
        Subject: CN=6aad71e7-728e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:02:b7:e2:ec:38:76:15:d3:d3:c3:25:b5:bf:
                    9a:b4:db:a8:d0:85:5a:7e:34:35:1a:f3:8e:6e:cf:
                    00:ba:65:64:de:e5:2c:55:bf:e2:23:1a:5f:e2:f8:
                    08:c3:46:62:07:af:e3:e0:e2:97:85:ba:f4:8d:4d:
                    0e:e8:e6:36:61:27:ba:7d:89:ab:5c:66:ee:42:1b:
                    49:7f:5a:52:2b:8a:b9:53:08:0a:43:92:a9:76:2e:
                    a2:cb:3f:45:08:ec:d6:6a:47:cf:eb:10:e7:37:23:
                    80:32:d8:a4:39:b1:5d:c7:c5:ac:b9:c2:ba:34:ec:
                    9f:05:f7:41:ac:5c:0b:2c:65:a1:76:fb:d9:d5:a6:
                    4d:cf:59:49:4d:27:3b:03:bc:3d:3c:a4:e1:4b:a4:
                    34:02:62:b6:14:d9:01:f8:5f:7d:e4:48:17:a5:ae:
                    9b:84:ab:e5:c9:08:7a:b4:46:01:98:b7:81:f2:7f:
                    e8:2e:86:8c:04:3a:67:b1:db:87:99:a0:87:06:25:
                    f4:94:5a:5f:69:92:a2:1a:52:91:d0:e5:9f:bd:77:
                    d9:0d:49:b7:37:21:a8:37:c7:03:9f:6b:f3:c2:e2:
                    dd:01:d8:e6:73:09:17:36:bc:31:50:0e:2c:78:b9:
                    56:74:5c:b6:64:99:3f:b5:ae:87:b9:17:fc:d4:41:
                    0b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B0:CC:6E:76:65:15:CC:2B:92:35:93:7A:C5:7A:34:76:4C:78:A1
            X509v3 Authority Key Identifier:
                keyid:34:4F:B4:99:A6:A3:7D:26:32:9A:B7:D5:FF:52:62:51:09:8E:5D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:da:69:c0:47:b6:32:00:09:a3:d7:dc:f4:e2:3c:08:c5:0f:
         54:0e:0f:03:3a:ae:70:30:61:70:2e:7c:79:36:cc:8e:0c:42:
         02:bb:eb:a7:2d:92:b9:03:49:e8:d9:42:d7:fa:ef:7a:cc:1f:
         7b:13:e4:45:66:be:53:89:9a:69:0d:b5:2e:f1:68:13:7b:41:
         f8:7c:c6:52:1b:35:7d:93:1d:e2:81:1a:84:aa:b6:73:ac:99:
         ed:2d:42:55:f9:ff:a9:ec:69:1f:fa:a9:f0:a6:11:b8:17:01:
         06:d9:4d:31:92:03:ae:23:13:d8:54:1d:63:c5:3e:1e:f1:f5:
         ae:8d:7f:7c:ad:89:4f:83:23:36:42:52:a9:2e:b9:d1:a2:fc:
         78:38:a2:55:c4:8b:a5:38:45:c7:23:6d:99:f3:c5:96:4b:3e:
         45:0f:86:24:13:77:38:01:18:1f:7d:bc:b4:1b:48:df:b5:d3:
         3e:dc:87:af:f0:df:1b:b1:a6:0b:26:70:d4:6b:b4:e3:89:f6:
         b5:ef:8c:23:88:2f:43:4a:ba:73:0c:8b:1c:aa:7b:f8:03:ce:
         cb:10:c9:1d:d3:29:85:3c:8c:12:07:87:70:e3:4b:c4:5c:f7:
         a7:af:cb:02:28:1c:c6:d3:4c:67:a1:43:33:2b:fe:a1:ee:79:
         04:1b:a7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:13:50 2026 by rpki-client