Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
File:                     nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft (raw, json)
Hash identifier:          BmVevoO+9Pou9ITEr/iLktJaTg5Zg5Lv3rFQhnfbI+Y=
Subject key identifier:   90:5D:D7:90:E9:47:AF:49:EC:BB:C7:5E:00:C7:A5:26:44:46:70:A3
Authority key identifier: 9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E
Certificate issuer:       /CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
Certificate serial:       05FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
Manifest number:          05DF
Signing time:             Sun 02 Nov 2025 23:03:40 +0000
Manifest this update:     Sun 02 Nov 2025 23:03:39 +0000
Manifest next update:     Sun 09 Nov 2025 23:03:39 +0000
Files and hashes:         1: nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl (hash: x4WkeCeqP2qPWtY56vVcDj5InGfW+bvNE8iT/pxFots=)
                          2: 7AFB859484C711EF9740BE81C4F9AE02.roa (hash: 414/5RyiyMUZFN0SEFameoFpU4rRSpvpvgBCGAe+h0s=)
                          3: 729F253CAB7611F0BCB28743C4F9AE02.roa (hash: /i4Id8Q+jnrw5e+R6tIy1tKz8MPyg9GBRlUx3W4xwjI=)
                          4: 12EDB8D284C711EFA075A16AC4F9AE02.roa (hash: 5J+X0LjgteZA7gTRmfGapcuapYL3WvWAdk4QrzcZNQo=)
                          5: A7EBD74EAB7611F0A4F18663C4F9AE02.roa (hash: 1ILmh7AVLQm5eSNZItp8QnZ0ivg8piYKVtyisI3TQ00=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl
                          rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 23:03:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1535 (0x5ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB383, serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
        Validity
            Not Before: Nov  2 23:03:39 2025 GMT
            Not After : Nov  9 23:03:39 2025 GMT
        Subject: CN=6907e34b-e5f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:24:d1:0e:20:61:e3:19:7d:e7:b1:33:d8:ca:
                    05:cf:25:2c:00:12:10:cf:19:5f:fb:a6:81:d9:c9:
                    90:d5:94:36:b7:02:62:72:b3:a9:6f:ab:40:db:70:
                    c3:e2:48:03:99:f1:fc:52:41:ae:6c:aa:ee:c9:4f:
                    19:26:2c:5d:18:05:37:8b:65:9e:ec:55:ad:6b:70:
                    f3:60:ae:2d:92:1e:49:40:0d:f3:26:50:03:58:23:
                    b9:62:40:6e:f5:16:a1:f0:f2:d7:ca:d4:69:86:ae:
                    7d:68:b3:1c:45:9d:03:e0:d5:4f:25:54:95:be:b2:
                    c7:81:1a:21:ce:4f:48:8b:6e:1e:e4:5f:1e:a8:e9:
                    f3:e7:0d:67:d6:6b:99:c9:f9:2d:a5:90:72:c6:db:
                    40:8d:f9:7c:b0:2a:46:f5:93:e8:cc:e6:93:74:03:
                    70:e9:2a:87:f6:e5:52:51:b6:3f:a8:9a:0e:95:17:
                    8b:f4:a3:df:81:cc:c3:f5:7f:d8:60:c1:fa:ea:7a:
                    83:be:fa:64:b9:4b:f6:c2:02:5c:cc:5f:9c:35:1b:
                    00:f9:82:18:f2:df:39:5d:cb:c2:1f:49:e3:6d:ce:
                    2a:2c:3f:b9:b0:b7:5c:a5:e6:9c:e4:56:83:34:1b:
                    03:8c:17:31:a8:e1:17:95:3c:ee:03:b5:20:c3:84:
                    6d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:5D:D7:90:E9:47:AF:49:EC:BB:C7:5E:00:C7:A5:26:44:46:70:A3
            X509v3 Authority Key Identifier:
                keyid:9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:30:67:df:e0:66:47:1f:44:de:5d:ba:72:1a:00:71:4b:01:
         bb:12:e6:c3:21:a1:e2:11:86:80:05:d6:e7:80:31:49:cb:c3:
         4c:86:ae:b7:cd:d4:18:5c:5b:cb:51:08:75:6c:43:20:41:a8:
         15:a5:21:ab:93:d3:de:f5:60:c1:7b:d4:e5:ff:6f:5c:b6:23:
         29:f6:08:13:f4:43:56:74:15:68:d0:4e:91:4a:2a:63:f4:53:
         94:bf:bf:dc:8c:01:d7:a4:69:c0:03:f1:79:7a:30:b8:a9:ee:
         ee:cd:55:55:26:ff:8e:61:f4:61:b9:66:f6:0d:ff:c5:2b:48:
         37:01:d8:f6:90:d0:59:ea:58:15:61:55:b3:92:0b:3a:9c:a4:
         d4:04:90:eb:ae:6c:83:7f:ac:ee:5d:5a:1d:d1:bf:ce:dc:cf:
         75:6a:7e:7f:44:d7:88:12:1b:d8:9c:9d:91:7e:d5:5b:30:98:
         33:74:c8:fa:bf:97:60:5c:6d:05:59:bc:b3:2c:1c:ab:b8:1a:
         cd:6b:46:c7:4e:b2:da:2e:80:4f:6e:07:44:11:2c:2e:2d:e9:
         9a:77:fe:e9:3f:6f:99:08:8e:1f:34:53:11:65:f6:58:0a:08:
         39:39:4f:55:86:b1:11:58:c9:22:e8:61:7c:4f:fa:92:31:4b:
         de:88:9c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:03:25 2025 by rpki-client