Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
File:                     nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft (raw, json)
Hash identifier:          G33W9ld0p4XkNxtCEyWIEaGnzoQQFn/z+K0eCfULCF0=
Subject key identifier:   AA:8A:06:A8:E8:44:6C:EB:18:CB:78:70:DC:94:92:A3:64:95:D2:98
Authority key identifier: 9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E
Certificate issuer:       /CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
Certificate serial:       0691
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
Manifest number:          0669
Signing time:             Wed 22 Jul 2026 23:23:47 +0000
Manifest this update:     Wed 22 Jul 2026 23:23:47 +0000
Manifest next update:     Wed 29 Jul 2026 23:23:47 +0000
Files and hashes:         1: nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl (hash: 01CHIJxfIg68V6KyP8NqcFvNjtgZ/QTMDrvu3GBpqYM=)
                          2: 12EDB8D284C711EFA075A16AC4F9AE02.roa (hash: 6oy8vfXbR13Fccn1nC7FTUc7Ni330SgxcaSdkrjuIvk=)
                          3: 7AFB859484C711EF9740BE81C4F9AE02.roa (hash: x8sZ4QxQXhvPiVMJ2oKAKBGtbntHbWyBpumXqbB9h14=)
                          4: A7EBD74EAB7611F0A4F18663C4F9AE02.roa (hash: fMUinF8FSeKtIYLfJ88CgvoxibOKGi4+/9nzdFUr5UY=)
                          5: 729F253CAB7611F0BCB28743C4F9AE02.roa (hash: RNZ4spqntA0JMCZsSqaH+sqpORW1IDmuJusYPmcPZSk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl
                          rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1681 (0x691)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB383, serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
        Validity
            Not Before: Jul 22 23:23:47 2026 GMT
            Not After : Jul 29 23:23:47 2026 GMT
        Subject: CN=6a615103-e25d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6a:2a:85:e3:18:81:4e:b9:7c:8b:e9:da:83:
                    c5:79:8e:fe:61:bc:b5:75:fc:e1:bd:af:a2:28:9e:
                    cd:70:eb:d8:29:ad:06:4c:af:8f:17:f5:9d:9e:4c:
                    a2:40:a7:d5:bd:ce:07:e6:77:12:e4:4d:6d:50:79:
                    37:4a:e2:fa:10:fe:99:20:73:a4:3a:68:b7:15:b7:
                    2c:ff:a8:1a:62:01:aa:21:74:18:c0:81:a1:3e:54:
                    ca:bd:37:32:ed:68:b7:eb:9a:f7:53:a9:01:b6:ba:
                    6d:5c:95:1c:c4:f9:f1:d5:f0:c6:23:e9:a3:bf:e2:
                    d1:fe:c5:e2:93:4b:82:5e:d9:49:44:08:05:aa:36:
                    7c:cf:6f:db:16:d3:c7:98:88:39:18:13:bc:91:00:
                    09:44:71:d2:ab:90:17:ca:2b:ba:37:00:ec:0f:61:
                    92:07:3d:57:01:ff:91:a0:86:42:f7:4c:3b:b5:a3:
                    d9:83:81:e2:49:30:80:f6:2c:c9:50:5e:d0:b6:df:
                    6a:74:95:b8:a5:3b:20:a1:db:88:51:71:7a:e5:07:
                    8e:eb:09:9c:93:df:6b:1b:25:f7:8e:83:b7:68:f2:
                    ba:fc:ea:a7:3e:21:2d:7d:fb:f9:06:2a:16:61:d2:
                    ef:39:b6:bb:ac:c4:40:d4:e4:ae:4d:70:45:7a:54:
                    37:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:8A:06:A8:E8:44:6C:EB:18:CB:78:70:DC:94:92:A3:64:95:D2:98
            X509v3 Authority Key Identifier:
                keyid:9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:9f:ea:19:30:72:26:b9:3b:a3:57:81:da:06:b6:7a:a9:52:
         24:4f:9c:ab:9e:db:48:63:fb:ca:97:b1:55:07:3b:75:6d:3e:
         e0:92:ba:a6:65:ec:ba:a6:60:53:29:4c:bf:79:6e:45:21:af:
         0f:be:83:06:94:94:55:c3:1b:01:7a:ed:1e:68:f7:61:94:37:
         c8:5a:82:2a:95:f0:de:0d:01:fe:99:74:f2:5a:1c:00:85:3c:
         be:b7:4a:e2:f5:c8:52:e8:ff:58:45:e0:17:65:47:bb:d4:78:
         f5:81:d2:e3:81:27:47:53:28:0c:31:1f:6e:6f:cc:ff:b2:c6:
         e2:85:94:ff:57:e1:ca:1e:cb:f7:52:e5:04:60:24:46:b1:5e:
         6d:82:e6:15:eb:44:63:ec:bf:70:1b:a0:83:b7:2b:ce:54:f3:
         dd:c5:91:97:8a:d9:66:66:0d:be:d1:50:25:5a:3f:32:31:49:
         d8:3e:51:db:3e:b1:20:a4:38:be:2e:40:b5:4f:b8:82:9d:df:
         85:24:8e:c1:a4:7d:9c:dd:bf:66:21:51:1d:f0:d2:a4:6a:79:
         76:5a:0e:2f:35:27:a5:1f:da:4e:95:79:94:7b:9e:c4:b6:8e:
         a1:11:b4:bc:42:29:eb:45:3e:77:11:09:d4:3f:ca:ea:b9:7a:
         34:cf:f9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:19:07 2026 by rpki-client