Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
File:                     nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft (raw, json)
Hash identifier:          jgsM6EoW8Dacx3bV0im0X9LZylpbqgemiAR5UOOns4g=
Subject key identifier:   4F:74:75:C9:BF:8A:B5:F2:F7:F5:64:A4:B7:49:F4:A8:02:57:BF:8E
Authority key identifier: 9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E
Certificate issuer:       /CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
Certificate serial:       06CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
Manifest number:          06A4
Signing time:             Sat 14 Nov 2026 22:19:38 +0000
Manifest this update:     Sat 14 Nov 2026 22:19:38 +0000
Manifest next update:     Sat 21 Nov 2026 22:19:38 +0000
Files and hashes:         1: nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl (hash: AVDlY83AUxudr+TDquQvl47ttjmQ39F+ZtNePD9fMw0=)
                          2: 7AFB859484C711EF9740BE81C4F9AE02.roa (hash: x8sZ4QxQXhvPiVMJ2oKAKBGtbntHbWyBpumXqbB9h14=)
                          3: 729F253CAB7611F0BCB28743C4F9AE02.roa (hash: RNZ4spqntA0JMCZsSqaH+sqpORW1IDmuJusYPmcPZSk=)
                          4: A7EBD74EAB7611F0A4F18663C4F9AE02.roa (hash: fMUinF8FSeKtIYLfJ88CgvoxibOKGi4+/9nzdFUr5UY=)
                          5: 12EDB8D284C711EFA075A16AC4F9AE02.roa (hash: 6oy8vfXbR13Fccn1nC7FTUc7Ni330SgxcaSdkrjuIvk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl
                          rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 22:19:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1740 (0x6cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB383, serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
        Validity
            Not Before: Nov 14 22:19:38 2026 GMT
            Not After : Nov 21 22:19:38 2026 GMT
        Subject: CN=6af8de7a-0d11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a5:ed:4f:f6:9c:fe:f3:45:ac:e7:ad:08:0c:
                    92:bb:df:77:78:71:c9:b2:97:4f:dd:76:ba:e3:b2:
                    7f:68:19:49:ce:00:c5:aa:75:05:b2:bc:2d:86:f5:
                    5f:86:9a:f5:99:9d:cd:46:89:de:79:e9:69:76:e6:
                    18:d7:e0:13:62:ff:4d:7a:04:d4:49:27:84:35:8c:
                    d7:5c:8b:2a:3d:97:f4:9b:09:e5:f6:83:47:27:86:
                    1e:85:c1:c1:fa:97:c3:be:4c:9f:44:b1:64:e6:73:
                    9f:bc:f5:f6:81:6c:bf:0a:05:70:f0:70:bf:e6:03:
                    5a:91:95:4e:c9:05:73:51:12:3a:cd:31:1f:8c:02:
                    b3:a7:5a:15:23:f6:d9:9f:79:d8:3f:bb:5b:46:12:
                    85:0b:04:ff:8b:62:05:f7:7a:c1:55:6b:60:33:f9:
                    68:a7:76:e6:e7:72:3b:5e:b5:2e:5b:00:56:f8:26:
                    8c:1a:f6:2a:ea:a7:32:8a:1d:74:db:40:b5:b3:3a:
                    c0:d8:4e:13:f0:d6:d8:76:3f:d5:34:5e:f6:43:a1:
                    6a:cb:a7:89:3e:a6:4a:7d:f6:80:1d:e0:b0:4f:54:
                    47:2b:6c:71:7d:e7:73:c1:c3:a2:8b:b4:12:14:40:
                    30:81:2b:25:c6:d2:83:43:d3:cf:81:45:cf:75:45:
                    50:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:74:75:C9:BF:8A:B5:F2:F7:F5:64:A4:B7:49:F4:A8:02:57:BF:8E
            X509v3 Authority Key Identifier:
                keyid:9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:64:37:f6:3f:fc:cf:84:7c:3c:f4:3a:c8:32:38:b7:10:35:
         c7:79:20:c8:9d:d6:d2:16:1e:94:45:1d:be:20:47:7b:48:7e:
         87:bb:0c:d4:39:84:70:ac:a5:a6:9e:0e:29:39:2a:41:0b:ea:
         e1:2f:a4:1d:d6:76:5f:53:7b:4c:13:c7:63:ee:17:2f:55:73:
         39:a7:b1:7c:4d:5e:2d:66:d7:8f:54:ec:da:5c:6f:93:fa:35:
         80:a9:39:37:10:19:64:de:8b:e0:c7:a7:83:7b:d5:d9:73:46:
         39:7b:3d:3c:c9:10:a2:7c:79:07:6c:5b:0f:b0:f0:1a:80:96:
         8f:09:27:d8:3b:67:61:18:e8:ba:ba:a8:4b:7b:ed:1b:05:96:
         45:56:0b:d3:fb:1d:f2:77:37:60:bb:2b:35:4f:fd:e8:15:60:
         fd:f5:b3:c2:6c:d2:eb:06:6c:f4:2a:e5:c7:d3:e6:1b:d2:dc:
         4d:d6:ae:61:93:bc:ad:aa:db:83:c1:97:72:03:02:f0:da:ee:
         13:29:b7:94:f8:6c:05:5d:47:58:35:28:39:82:84:94:88:cd:
         e5:89:0f:40:12:f9:07:32:40:a9:d5:22:bf:8f:b6:64:0b:1e:
         6d:af:b8:5d:3c:4f:44:14:6b:88:52:53:4e:4d:07:5a:b6:d3:
         cf:0e:52:be
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUIzODMxMTAvBgNVBAUTKDlDMjM1MUQ0NUE5N0Q3MUQwM0Q2QkMzODVCMzdERDlC
RkI4MENGNUUwHhcNMjYxMTE0MjIxOTM4WhcNMjYxMTIxMjIxOTM4WjAYMRYwFAYD
VQQDEw02YWY4ZGU3YS0wZDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhqXtT/ac/vNFrOetCAySu993eHHJspdP3Xa647J/aBlJzgDFqnUFsrwthvVf
hpr1mZ3NRoneeelpduYY1+ATYv9NegTUSSeENYzXXIsqPZf0mwnl9oNHJ4YehcHB
+pfDvkyfRLFk5nOfvPX2gWy/CgVw8HC/5gNakZVOyQVzURI6zTEfjAKzp1oVI/bZ
n3nYP7tbRhKFCwT/i2IF93rBVWtgM/lop3bm53I7XrUuWwBW+CaMGvYq6qcyih10
20C1szrA2E4T8NbYdj/VNF72Q6Fqy6eJPqZKffaAHeCwT1RHK2xxfedzwcOii7QS
FEAwgSslxtKDQ9PPgUXPdUVQowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE90dcm/
irXy9/VkpLdJ9KgCV7+OMB8GA1UdIwQYMBaAFJwjUdRal9cdA9a8OFs33Zv7gM9e
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjM4My84Q0MyQTlBQURF
NzcxMUVCODczOUVDMTFDNEY5QUUwMi9uQ05SMUZxWDF4MEQxcnc0V3pmZG1fdUF6
MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25DTlIxRnFYMXgwRDFydzRXemZkbV91QXoxNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QjM4My84Q0MyQTlBQURFNzcxMUVCODczOUVDMTFDNEY5QUUwMi9uQ05SMUZxWDF4
MEQxcnc0V3pmZG1fdUF6MTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxmQ39j/8z4R8PPQ6yDI4txA1x3kgyJ3W0hYelEUdviBHe0h+h7sM1DmEcKyl
pp4OKTkqQQvq4S+kHdZ2X1N7TBPHY+4XL1VzOaexfE1eLWbXj1Ts2lxvk/o1gKk5
NxAZZN6L4Meng3vV2XNGOXs9PMkQonx5B2xbD7DwGoCWjwkn2DtnYRjourqoS3vt
GwWWRVYL0/sd8nc3YLsrNU/96BVg/fWzwmzS6wZs9Crlx9PmG9LcTdauYZO8rarb
g8GXcgMC8NruEym3lPhsBV1HWDUoOYKElIjN5YkPQBL5BzJAqdUiv4+2ZAseba+4
XTxPRBRriFJTTk0HWrbTzw5Svg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:47:18 2026 by rpki-client