Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
File:                     nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft (raw, json)
Hash identifier:          j61BQ4I9SEqIAfNRnwkQWy4upK/anfYq9aj3tWTn0Ak=
Subject key identifier:   2C:F2:8C:0C:0F:32:C0:1B:D9:4E:DA:BE:4E:95:E0:D0:D1:D0:18:27
Authority key identifier: 9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E
Certificate issuer:       /CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
Certificate serial:       064E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
Manifest number:          062A
Signing time:             Tue 24 Mar 2026 22:33:07 +0000
Manifest this update:     Tue 24 Mar 2026 22:33:07 +0000
Manifest next update:     Tue 31 Mar 2026 22:33:07 +0000
Files and hashes:         1: nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl (hash: oqe6laBss13R2Ftr3YKTcTJJs5CJwZkphw91Q27OaQU=)
                          2: 729F253CAB7611F0BCB28743C4F9AE02.roa (hash: cgiDC2IeZyxnx0YTTuxfu//CGtgQm8yJluwva/OgfKI=)
                          3: 7AFB859484C711EF9740BE81C4F9AE02.roa (hash: 9L/8rIC6SRhqg6qSd6LFBimcV8KPIkKPiXaPwT3ytbY=)
                          4: A7EBD74EAB7611F0A4F18663C4F9AE02.roa (hash: LeLRqsxMpp4Ky8wD6G3jj2qk2RePehhwztN5Ryshg7k=)
                          5: 12EDB8D284C711EFA075A16AC4F9AE02.roa (hash: KV24/bEBcylNLG4cs1n5VfE+kOmO6T6A1cs3Vw5jHfo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl
                          rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:33:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1614 (0x64e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB383, serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
        Validity
            Not Before: Mar 24 22:33:07 2026 GMT
            Not After : Mar 31 22:33:07 2026 GMT
        Subject: CN=69c31123-2d4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cb:e4:37:d5:f3:84:53:20:6a:c8:01:e5:92:
                    62:21:22:13:d8:61:55:b3:03:66:ac:a0:52:ae:bc:
                    49:0b:ba:e8:e9:1e:80:eb:5f:25:68:5f:19:49:63:
                    4f:df:da:bf:83:93:e9:98:5b:1e:f2:3a:ce:a7:ec:
                    90:75:b0:74:55:1d:ef:fa:31:5e:9f:d2:4c:dc:db:
                    b7:cd:df:8f:18:a5:45:61:64:f8:6e:cb:38:aa:9e:
                    67:cc:ec:96:56:44:8c:4e:85:f5:49:d6:12:d9:c2:
                    9b:84:cf:ee:0b:d6:49:a0:7a:d3:2d:1e:aa:7a:35:
                    67:e2:5c:c4:d7:bf:70:1c:a4:9a:b1:21:87:55:e3:
                    1f:b2:05:4a:cc:b2:3c:a5:91:7a:e6:18:9a:ef:e0:
                    55:2d:6f:c5:a5:57:cd:45:63:62:3b:61:a3:34:b0:
                    84:0f:e2:21:c3:9f:bc:09:01:32:1a:f1:7d:be:71:
                    6e:ac:7a:bb:74:86:7b:4e:2e:e9:4b:19:85:6a:de:
                    b7:11:28:f8:8b:b4:03:02:9e:8b:36:8b:1c:7f:7f:
                    4c:a9:c7:a6:7d:e2:2d:ee:99:c8:3a:e0:a7:09:d6:
                    3f:45:ea:ca:83:60:f6:b1:29:88:e4:ac:22:a2:f5:
                    29:d6:35:22:2f:a5:c7:9d:07:fb:d1:5e:18:c1:59:
                    e6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F2:8C:0C:0F:32:C0:1B:D9:4E:DA:BE:4E:95:E0:D0:D1:D0:18:27
            X509v3 Authority Key Identifier:
                keyid:9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:c4:47:d1:0a:6e:7a:79:35:b4:b8:e3:6b:0c:3a:62:6a:a8:
         31:4d:5d:3c:68:08:5a:6f:88:3d:3f:2a:34:b1:4c:f8:96:35:
         48:34:5c:b6:af:dd:37:c3:d6:b1:83:a7:42:39:dd:20:9b:2c:
         f9:6a:cd:d4:92:05:5d:fd:2d:e1:c5:49:07:90:8b:ce:bf:15:
         df:cc:b3:3e:73:e5:56:2c:80:fc:32:9d:6a:58:24:ad:c7:e1:
         4c:4f:ea:f0:7d:1f:6d:d9:77:18:38:c0:60:e4:4c:29:f2:a1:
         b8:8e:88:91:ba:8c:8e:10:b6:2a:38:2f:3a:bf:41:f6:4a:0e:
         95:92:00:1d:95:1a:3d:92:62:a9:56:05:f3:9e:1b:a2:13:f9:
         96:50:5e:2c:76:7d:67:d5:70:04:be:97:51:dd:16:fb:c1:5d:
         7f:85:46:b0:04:e4:74:86:5b:82:a7:33:e2:c9:32:a5:2e:b7:
         f3:bd:b7:00:c6:57:d4:14:ac:3b:93:29:8e:bc:4a:49:ad:1b:
         9b:24:f7:85:c5:33:0f:e7:1e:35:61:a7:0d:59:51:68:96:7b:
         85:d8:0b:3a:e6:ed:0c:da:b1:53:70:33:56:17:36:a2:4a:1f:
         ad:7a:af:a7:4a:d8:4c:b9:25:76:c6:b5:1a:44:ef:0f:79:46:
         8a:3d:a6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:13:52 2026 by rpki-client