Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
File:                     nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft (raw, json)
Hash identifier:          rkipscOV/npyAcxmZGXy4eltazoUYlISDl0Gb1Q/mWo=
Subject key identifier:   E6:E0:B6:88:3C:2C:C6:EB:20:50:CB:F1:0C:CA:D1:F3:BD:1D:2E:51
Authority key identifier: 9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E
Certificate issuer:       /CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
Certificate serial:       0667
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
Manifest number:          0643
Signing time:             Tue 12 May 2026 22:52:21 +0000
Manifest this update:     Tue 12 May 2026 22:52:21 +0000
Manifest next update:     Tue 19 May 2026 22:52:21 +0000
Files and hashes:         1: nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl (hash: rUZsbf5qDUx53Gsh5FWsIP8xWXXnX+O10hX8XMLs12Y=)
                          2: 7AFB859484C711EF9740BE81C4F9AE02.roa (hash: 9L/8rIC6SRhqg6qSd6LFBimcV8KPIkKPiXaPwT3ytbY=)
                          3: 729F253CAB7611F0BCB28743C4F9AE02.roa (hash: cgiDC2IeZyxnx0YTTuxfu//CGtgQm8yJluwva/OgfKI=)
                          4: A7EBD74EAB7611F0A4F18663C4F9AE02.roa (hash: LeLRqsxMpp4Ky8wD6G3jj2qk2RePehhwztN5Ryshg7k=)
                          5: 12EDB8D284C711EFA075A16AC4F9AE02.roa (hash: KV24/bEBcylNLG4cs1n5VfE+kOmO6T6A1cs3Vw5jHfo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl
                          rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:52:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1639 (0x667)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB383, serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
        Validity
            Not Before: May 12 22:52:21 2026 GMT
            Not After : May 19 22:52:21 2026 GMT
        Subject: CN=6a03af25-de41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:17:54:7b:53:1e:3c:b7:98:2f:d5:bf:9a:34:
                    39:2b:83:53:81:d5:0a:ae:2c:77:1b:43:bc:fd:cf:
                    9b:7a:01:b5:b2:cc:67:60:76:ef:28:66:ae:b5:9e:
                    6c:24:5b:fb:05:2b:d0:91:e5:f3:c1:bf:86:2e:5b:
                    51:f2:c1:6c:04:6f:26:fd:f7:c7:0c:7e:ad:df:e3:
                    13:21:86:0d:ee:bc:a9:ea:93:67:32:58:66:1b:8c:
                    91:08:1b:37:c6:6b:ab:65:d7:e7:b4:79:17:a2:db:
                    c9:e5:64:44:29:f7:05:4c:16:99:b7:56:be:d9:1f:
                    24:5a:10:82:d8:d1:76:8b:85:9b:32:0b:89:f6:4c:
                    3d:d6:7b:fa:c1:aa:90:5b:d6:97:d2:da:3f:c4:ac:
                    30:43:34:1a:e3:34:26:3b:bf:5e:39:37:32:0b:75:
                    98:c7:17:75:52:b4:f3:8b:4a:bf:b9:b3:6a:cf:e4:
                    2b:ad:21:63:d8:b8:ba:5a:0a:ad:e6:6b:2b:ff:4c:
                    da:4c:25:ad:b7:cd:86:46:a4:38:fb:eb:46:33:11:
                    ac:4c:4a:ba:25:89:d5:8c:cc:98:cd:ca:29:ab:12:
                    33:8b:b8:47:ae:27:01:45:21:6b:78:ad:e9:ac:f4:
                    04:bc:7a:7e:9b:0e:68:74:de:cc:e7:34:73:e2:ac:
                    6f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E0:B6:88:3C:2C:C6:EB:20:50:CB:F1:0C:CA:D1:F3:BD:1D:2E:51
            X509v3 Authority Key Identifier:
                keyid:9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:9e:b3:99:43:e2:35:a1:d2:70:0f:76:1c:eb:78:d3:3e:f8:
         59:3d:81:0c:0e:17:24:48:52:d4:8d:5e:7f:ef:f4:66:c0:26:
         9e:11:93:68:a6:b4:81:ec:f8:4f:c6:bd:d0:03:7d:90:f1:a4:
         76:18:93:6b:63:bd:90:64:12:65:3a:a0:56:38:40:03:34:f3:
         b3:8f:1f:77:89:89:1e:39:26:7e:85:8b:99:60:57:bd:6b:e7:
         a3:16:59:e8:ed:5b:46:ca:02:29:f7:45:2a:45:9c:64:9d:84:
         f8:75:2e:03:d7:66:83:55:61:4f:0e:ba:f2:5d:57:06:0e:00:
         6a:7d:d2:0a:93:2f:de:5f:fb:a6:ff:95:70:d7:55:24:6a:c9:
         37:56:c1:ed:a1:6a:5c:04:56:f2:76:e2:3a:01:d1:cb:8d:57:
         8d:2d:98:b8:42:16:ae:35:a0:9b:56:e6:1b:76:c0:dd:9f:f5:
         da:7e:d9:1e:84:9f:82:7f:00:45:5f:59:f8:8b:2c:2b:31:6c:
         a7:f6:fb:0f:63:9e:ff:af:65:5e:dd:41:19:a9:a3:fd:d2:b5:
         3c:a1:c9:b4:c1:bf:7d:0c:06:f0:f0:34:07:28:18:47:11:e8:
         99:6d:68:41:f2:07:fb:37:aa:df:6d:68:97:6a:66:7e:71:9f:
         13:3f:cb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:13:51 2026 by rpki-client