Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
File:                     nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft (raw, json)
Hash identifier:          Sai50202hUBiMBTdNpqdyU+0nbe3GfBZciDo7hD+lLg=
Subject key identifier:   44:89:69:EE:D6:EC:52:93:C4:62:94:AA:46:8B:3F:EF:6C:55:C8:8C
Authority key identifier: 9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E
Certificate issuer:       /CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
Certificate serial:       05AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
Manifest number:          0592
Signing time:             Thu 12 Jun 2025 23:03:11 +0000
Manifest this update:     Thu 12 Jun 2025 23:03:10 +0000
Manifest next update:     Thu 19 Jun 2025 23:03:10 +0000
Files and hashes:         1: nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl (hash: 41xfROTL0F2jPCzFXmPoC5gcEe8GKzNlCV/PwCkaUEI=)
                          2: 7AFB859484C711EF9740BE81C4F9AE02.roa (hash: 414/5RyiyMUZFN0SEFameoFpU4rRSpvpvgBCGAe+h0s=)
                          3: B5579BEA421911EC832A4A41C4F9AE02.roa (hash: G80CVYb1Ik+/tcRJsx2ECeYr4cToFW70btAWzXQMVLM=)
                          4: B69E6026355C11F0B8094E3AC4F9AE02.roa (hash: flZUyrEx/m5nugLzwpifQhh18V8aEEhO9FbVnmFKA6A=)
                          5: 12EDB8D284C711EFA075A16AC4F9AE02.roa (hash: 5J+X0LjgteZA7gTRmfGapcuapYL3WvWAdk4QrzcZNQo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl
                          rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 23:03:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1454 (0x5ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB383, serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
        Validity
            Not Before: Jun 12 23:03:10 2025 GMT
            Not After : Jun 19 23:03:10 2025 GMT
        Subject: CN=684b5cae-b56f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5c:e3:63:d5:d2:5e:d9:d1:ff:f9:40:80:51:
                    9b:1e:10:80:1d:ba:63:3c:08:61:71:6e:db:7d:e5:
                    19:6b:fb:b0:bf:e9:00:88:2a:78:ea:1e:47:f5:5a:
                    1b:9c:8f:22:fa:ee:da:ca:f8:f0:e0:0e:a6:49:0e:
                    34:67:97:f4:1a:56:20:92:b7:6d:17:a4:e4:f4:5d:
                    1f:67:c4:bc:a2:45:d2:b9:9f:04:36:02:cd:e2:bd:
                    2c:5e:82:60:85:e8:a5:3b:e1:a2:2c:19:99:44:dd:
                    ff:76:33:84:e2:4f:8f:99:fd:2e:32:58:b7:d5:3a:
                    6a:d2:b0:b0:e7:3d:7f:15:d6:03:c7:3f:7b:62:10:
                    1d:4d:61:2f:cb:3b:24:96:9f:f6:9c:01:a5:aa:aa:
                    9a:c7:b3:f3:d5:bc:56:f3:d2:45:e2:59:42:52:32:
                    5c:7b:7d:f0:c5:56:66:6d:b0:c6:46:f3:fd:76:53:
                    d6:a3:ba:fb:a1:36:cb:cd:a7:4f:ad:de:17:20:1e:
                    ea:b1:35:7e:1b:95:cb:85:d6:c9:20:36:53:39:4a:
                    23:ed:dd:36:45:3b:51:8a:69:37:c8:f3:78:66:78:
                    5a:1b:e4:e1:f6:f3:cf:40:0d:f3:73:89:01:72:75:
                    e7:b6:4c:b3:a9:50:b7:83:da:6f:04:b7:3f:7d:41:
                    27:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:89:69:EE:D6:EC:52:93:C4:62:94:AA:46:8B:3F:EF:6C:55:C8:8C
            X509v3 Authority Key Identifier:
                keyid:9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:74:a9:02:03:b3:16:45:12:fd:db:19:64:ec:0e:b6:12:c1:
         f8:2a:37:37:5a:30:7a:64:22:c5:83:e9:fc:7e:bc:d7:03:78:
         aa:6f:df:0e:03:dd:a0:4e:c7:06:18:d6:a2:79:b2:57:c3:47:
         f4:cd:e9:31:0e:90:55:24:87:bf:75:d5:c2:bc:b3:94:e8:f4:
         ea:0e:bc:f5:2c:58:12:2b:56:7d:3d:75:b5:3c:91:66:50:94:
         c9:4d:f1:1a:9e:64:e1:11:1d:29:31:27:35:c1:18:a2:bc:66:
         4f:0f:ed:e2:46:4c:b1:7c:63:b3:33:e8:83:fa:ef:ed:7c:6c:
         98:f3:a8:bd:75:06:95:b8:84:58:b8:ae:6c:0c:f5:34:ca:55:
         78:37:8d:42:42:25:7e:d2:e3:a2:db:2d:20:79:1a:fa:52:79:
         f8:63:16:06:07:43:f5:d9:f3:fa:df:29:d5:38:10:46:c8:8b:
         6a:64:c2:e3:08:07:55:09:10:ff:7e:7c:08:9e:2f:4c:cc:58:
         0b:52:68:29:15:b8:21:14:0d:4f:0b:f1:d2:02:a9:1f:6c:42:
         90:22:e8:75:c5:e3:6c:68:5a:74:13:15:ab:b2:03:08:8d:20:
         fc:fa:da:e4:7f:9c:ab:1c:94:84:15:d1:c5:cf:0d:86:01:4d:
         48:2f:8c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 17:23:56 2025 by rpki-client