Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
File:                     nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft (raw, json)
Hash identifier:          YEIppN2nPQWdJR6pMF+G5JjiURl+GqYQjRtgawKO6UQ=
Subject key identifier:   B7:59:00:76:D6:56:BE:8B:6A:51:23:0D:CE:EA:31:DF:CD:19:DF:09
Authority key identifier: 9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E
Certificate issuer:       /CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
Certificate serial:       0592
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
Manifest number:          057C
Signing time:             Thu 08 May 2025 23:09:39 +0000
Manifest this update:     Thu 08 May 2025 23:09:38 +0000
Manifest next update:     Thu 15 May 2025 23:09:38 +0000
Files and hashes:         1: nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl (hash: 4WlVw7hIAHZkvyt8pr9gOJKDIAcx/lLpq8Gz5kFoQtw=)
                          2: 7AFB859484C711EF9740BE81C4F9AE02.roa (hash: JaP8DbxQir8/0bWtIBOnJ0xxJ2zmG81J8TY5KOYqo20=)
                          3: BA8EFE48E5D411EFA67E0112C4F9AE02.roa (hash: YM8s+3bT2BEwmeTkM6cVfT4A9yMiZXxziOwMzUAciWo=)
                          4: 12EDB8D284C711EFA075A16AC4F9AE02.roa (hash: iJ+3fFN0ePrtmOVIDHG94Bkp4m0H5KVuwmeRjgUmL3I=)
                          5: B5579BEA421911EC832A4A41C4F9AE02.roa (hash: ezrYPRz2mMJqogCAVE9iLagUvmStXqPt/J4TeogUnNU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl
                          rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 May 2025 23:09:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1426 (0x592)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB383, serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
        Validity
            Not Before: May  8 23:09:38 2025 GMT
            Not After : May 15 23:09:38 2025 GMT
        Subject: CN=681d39b2-7f74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:57:8d:6d:19:61:0a:3c:c4:f8:e4:15:f8:aa:
                    21:44:29:26:d6:8f:74:d9:ec:ac:45:01:80:37:93:
                    ab:fa:aa:4c:50:06:eb:d2:75:78:29:a3:e3:c4:56:
                    63:e7:4f:d3:6e:4b:06:ea:e8:f7:91:52:42:de:d1:
                    14:d6:f6:f2:77:95:b1:d5:fa:6b:8a:e5:41:42:a8:
                    c5:56:e6:f6:ce:03:86:94:43:08:27:0b:bb:ca:58:
                    98:4d:8c:40:21:dc:d6:b3:3d:a6:50:b7:3c:23:8f:
                    d4:b7:7e:58:55:09:50:51:6f:01:12:9f:69:8a:f0:
                    ac:1a:2a:f7:03:25:c0:80:9d:f4:0e:af:db:03:81:
                    8c:c0:fd:58:a9:ff:05:8d:25:63:b9:e4:fb:39:c9:
                    37:be:a1:b0:f3:45:49:96:1e:4a:4b:58:63:d9:79:
                    6c:ca:f9:e2:bc:f9:ab:af:14:c1:9f:3e:a9:0b:ba:
                    0a:36:ef:09:e1:b3:f2:f7:58:57:cb:2c:7c:35:67:
                    f5:9a:97:ea:eb:58:8e:26:e8:1b:17:94:b4:53:54:
                    38:d8:68:a1:7d:af:2d:40:eb:b3:e1:b5:2c:98:e0:
                    fa:f5:a9:2b:5c:1d:74:31:0e:91:35:18:43:4b:8c:
                    38:e1:d2:39:c4:fd:68:cc:82:af:02:82:9b:cb:4a:
                    bf:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:59:00:76:D6:56:BE:8B:6A:51:23:0D:CE:EA:31:DF:CD:19:DF:09
            X509v3 Authority Key Identifier:
                keyid:9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:9c:1f:a1:77:d0:38:54:24:56:0c:93:c7:93:d8:d6:97:44:
         d6:19:0b:ca:d2:5a:22:ca:8e:6f:6d:a1:05:70:71:b5:ef:42:
         ba:38:c8:b3:5e:2b:e2:70:97:39:d9:77:9f:d3:a6:85:fa:93:
         42:60:99:6b:be:04:54:52:49:14:98:c4:ad:fa:49:d1:81:ae:
         2f:7f:69:00:4e:cd:66:ba:ee:c4:c6:d8:dc:2f:30:bd:68:1e:
         da:c7:94:b3:44:3e:05:95:18:11:e4:d9:2e:d2:6e:7d:42:9a:
         a7:89:ca:ef:1f:5d:3c:bf:3a:d6:06:a0:d9:80:81:4f:61:7d:
         f8:ef:96:74:9e:de:12:ff:f2:5b:94:bd:be:88:b4:b8:0e:59:
         9a:1a:08:2b:e1:ab:4b:6f:bc:9b:4b:18:53:51:15:8e:62:18:
         59:5f:62:3b:99:b7:4b:f3:f6:82:39:e9:c8:e2:9f:b9:fe:ab:
         ec:59:37:46:9f:8f:d3:96:47:6b:a4:8d:2a:8f:fb:f2:0f:7a:
         76:bc:4f:4b:d5:6b:a9:32:99:18:7d:8a:7f:ba:5b:11:0f:3f:
         9d:51:98:38:1f:69:7d:f0:fb:6c:9d:b9:5e:86:42:10:7d:05:
         8a:ef:d6:f5:5d:7c:ed:4b:08:5c:73:14:f8:5d:b1:3b:47:73:
         f2:b6:00:9c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUIzODMxMTAvBgNVBAUTKDlDMjM1MUQ0NUE5N0Q3MUQwM0Q2QkMzODVCMzdERDlC
RkI4MENGNUUwHhcNMjUwNTA4MjMwOTM4WhcNMjUwNTE1MjMwOTM4WjAYMRYwFAYD
VQQDEw02ODFkMzliMi03Zjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy1eNbRlhCjzE+OQV+KohRCkm1o902eysRQGAN5Or+qpMUAbr0nV4KaPjxFZj
50/TbksG6uj3kVJC3tEU1vbyd5Wx1fpriuVBQqjFVub2zgOGlEMIJwu7yliYTYxA
IdzWsz2mULc8I4/Ut35YVQlQUW8BEp9pivCsGir3AyXAgJ30Dq/bA4GMwP1Yqf8F
jSVjueT7Ock3vqGw80VJlh5KS1hj2XlsyvnivPmrrxTBnz6pC7oKNu8J4bPy91hX
yyx8NWf1mpfq61iOJugbF5S0U1Q42Gihfa8tQOuz4bUsmOD69akrXB10MQ6RNRhD
S4w44dI5xP1ozIKvAoKby0q/XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLdZAHbW
Vr6LalEjDc7qMd/NGd8JMB8GA1UdIwQYMBaAFJwjUdRal9cdA9a8OFs33Zv7gM9e
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjM4My84Q0MyQTlBQURF
NzcxMUVCODczOUVDMTFDNEY5QUUwMi9uQ05SMUZxWDF4MEQxcnc0V3pmZG1fdUF6
MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25DTlIxRnFYMXgwRDFydzRXemZkbV91QXoxNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QjM4My84Q0MyQTlBQURFNzcxMUVCODczOUVDMTFDNEY5QUUwMi9uQ05SMUZxWDF4
MEQxcnc0V3pmZG1fdUF6MTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAonB+hd9A4VCRWDJPHk9jWl0TWGQvK0loiyo5vbaEFcHG170K6OMiz
XivicJc52Xef06aF+pNCYJlrvgRUUkkUmMSt+knRga4vf2kATs1muu7ExtjcLzC9
aB7ax5SzRD4FlRgR5Nku0m59QpqnicrvH108vzrWBqDZgIFPYX3475Z0nt4S//Jb
lL2+iLS4DlmaGggr4atLb7ybSxhTURWOYhhZX2I7mbdL8/aCOenI4p+5/qvsWTdG
n4/TlkdrpI0qj/vyD3p2vE9L1WupMpkYfYp/ulsRDz+dUZg4H2l98PtsnblehkIQ
fQWK79b1XXztSwhccxT4XbE7R3PytgCc
-----END CERTIFICATE-----
Generated at Sat May 10 01:40:53 2025 by rpki-client