Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
File:                     nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft (raw, json)
Hash identifier:          NuASRyV+r3H30ibRC7h+JUT59XWqvFgLUlVqlLfXGqo=
Subject key identifier:   E7:7C:A2:94:C9:6A:6D:3B:5D:F3:51:A6:AA:06:9C:71:70:FC:22:C5
Authority key identifier: 9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E
Certificate issuer:       /CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
Certificate serial:       05D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
Manifest number:          05B6
Signing time:             Fri 22 Aug 2025 23:22:00 +0000
Manifest this update:     Fri 22 Aug 2025 23:22:00 +0000
Manifest next update:     Fri 29 Aug 2025 23:22:00 +0000
Files and hashes:         1: nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl (hash: 8J1MJ5ozharW25xZJrGRWfYDCMfEsyWM/oz/loxMVGc=)
                          2: 7AFB859484C711EF9740BE81C4F9AE02.roa (hash: 414/5RyiyMUZFN0SEFameoFpU4rRSpvpvgBCGAe+h0s=)
                          3: B69E6026355C11F0B8094E3AC4F9AE02.roa (hash: flZUyrEx/m5nugLzwpifQhh18V8aEEhO9FbVnmFKA6A=)
                          4: 12EDB8D284C711EFA075A16AC4F9AE02.roa (hash: 5J+X0LjgteZA7gTRmfGapcuapYL3WvWAdk4QrzcZNQo=)
                          5: B5579BEA421911EC832A4A41C4F9AE02.roa (hash: G80CVYb1Ik+/tcRJsx2ECeYr4cToFW70btAWzXQMVLM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl
                          rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 23:21:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1490 (0x5d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB383, serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
        Validity
            Not Before: Aug 22 23:22:00 2025 GMT
            Not After : Aug 29 23:22:00 2025 GMT
        Subject: CN=68a8fb98-abaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:76:4e:74:9e:45:2b:87:72:b8:a8:87:29:92:
                    a2:00:68:65:8a:16:68:22:cc:8f:e3:59:7e:e9:ea:
                    ee:4b:4a:ec:ba:9c:f6:5c:13:b6:70:08:5c:6a:a1:
                    da:ae:8c:7b:d2:aa:66:19:be:ba:da:57:1e:84:85:
                    ee:d0:f0:b6:03:79:22:41:3f:4a:d5:e1:1e:92:47:
                    a2:6c:53:e1:b1:9d:16:3f:b1:41:7e:34:78:f8:36:
                    36:3e:84:a4:60:86:46:f7:da:db:e7:8c:54:cb:a9:
                    c9:66:6a:21:6f:b1:79:13:8a:d2:65:f0:6f:3e:58:
                    12:9e:60:30:e8:60:f0:f8:e9:1b:53:7a:a1:30:91:
                    b4:9b:71:f0:0a:18:f7:98:ec:5a:fa:84:83:75:f0:
                    7c:34:4a:cf:77:1c:08:3f:19:e0:1a:c6:55:87:45:
                    92:b1:28:d5:79:48:1e:d2:29:9e:7b:d4:04:df:10:
                    74:61:bc:ba:73:3a:07:76:ae:71:ae:de:e3:9c:76:
                    5b:82:03:c9:27:60:88:f3:0f:b6:74:a4:6e:c1:bd:
                    6c:4a:fd:50:f8:11:c3:b4:5a:fb:2e:48:13:8b:7f:
                    79:62:9d:9e:9d:c2:ae:fb:7e:48:5d:4e:a1:09:e4:
                    7d:89:72:6b:17:eb:7e:3d:34:0b:f1:ee:76:dd:d7:
                    52:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:7C:A2:94:C9:6A:6D:3B:5D:F3:51:A6:AA:06:9C:71:70:FC:22:C5
            X509v3 Authority Key Identifier:
                keyid:9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:54:7a:4d:d0:b7:34:ea:09:2f:36:12:8c:41:6d:a9:8c:5e:
         22:16:b5:bf:ef:10:45:f8:26:28:d7:05:5d:30:af:cd:63:31:
         78:98:1d:66:ef:2e:a6:e0:92:42:73:60:8d:fb:9e:7b:2a:16:
         0e:a0:b3:dc:de:42:71:70:fb:05:36:57:c4:39:e6:d0:4f:e0:
         df:8c:dd:7a:33:8c:1a:9b:c3:a9:69:b6:df:b5:4d:67:9b:59:
         82:a4:10:8e:43:51:99:ef:79:14:70:98:9c:26:aa:b3:67:24:
         5d:41:4e:0d:8d:76:cd:9b:0c:64:4d:b2:2f:9d:c4:47:76:f0:
         2d:6a:29:fe:06:0d:fa:34:fe:af:85:73:a0:dd:24:70:d4:80:
         ea:26:1f:92:6a:98:9c:ac:a7:37:bc:14:73:dc:77:26:f8:a3:
         3a:ea:4c:db:78:d6:bc:dc:ef:b6:65:0a:bf:b6:00:c8:c4:dc:
         9a:48:7f:ed:26:03:b3:a5:9a:97:34:84:74:af:31:31:f6:21:
         bb:af:95:d1:06:fc:a5:29:24:a9:e1:41:9f:6f:bf:73:0a:02:
         36:0e:e1:30:b1:30:1e:4d:ef:99:f6:8e:94:53:6d:cb:86:15:
         2f:80:77:bf:98:0e:de:eb:87:90:0b:3a:08:7e:17:b0:35:df:
         a0:c6:a1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:39:00 2025 by rpki-client