Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
File:                     nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft (raw, json)
Hash identifier:          P91Qo/Gz2Bl0M3mz/+vgkwh6Yx0YRS4dQKqxetobOCQ=
Subject key identifier:   76:61:94:E7:7B:D2:83:88:99:92:34:61:ED:66:CE:B3:70:84:0F:5D
Authority key identifier: 9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E
Certificate issuer:       /CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
Certificate serial:       0694
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
Manifest number:          066C
Signing time:             Tue 28 Jul 2026 23:16:09 +0000
Manifest this update:     Tue 28 Jul 2026 23:16:09 +0000
Manifest next update:     Tue 04 Aug 2026 23:16:09 +0000
Files and hashes:         1: nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl (hash: YxW93nyt/lPew0i0N2ldtfdZD/iK9vvLgs8AAkI65GY=)
                          2: 12EDB8D284C711EFA075A16AC4F9AE02.roa (hash: 6oy8vfXbR13Fccn1nC7FTUc7Ni330SgxcaSdkrjuIvk=)
                          3: 7AFB859484C711EF9740BE81C4F9AE02.roa (hash: x8sZ4QxQXhvPiVMJ2oKAKBGtbntHbWyBpumXqbB9h14=)
                          4: 729F253CAB7611F0BCB28743C4F9AE02.roa (hash: RNZ4spqntA0JMCZsSqaH+sqpORW1IDmuJusYPmcPZSk=)
                          5: A7EBD74EAB7611F0A4F18663C4F9AE02.roa (hash: fMUinF8FSeKtIYLfJ88CgvoxibOKGi4+/9nzdFUr5UY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl
                          rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 23:16:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1684 (0x694)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB383, serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
        Validity
            Not Before: Jul 28 23:16:09 2026 GMT
            Not After : Aug  4 23:16:09 2026 GMT
        Subject: CN=6a693839-caf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:23:c8:2f:61:9f:f5:ae:c8:26:da:27:42:87:
                    22:04:08:4e:f2:a8:df:93:3e:1b:3b:66:8a:21:47:
                    b9:47:3b:64:1d:33:5d:da:d6:fd:8b:c7:79:33:d2:
                    b0:d1:0a:4e:7f:0d:5b:74:5a:df:04:73:41:0d:c5:
                    51:5c:d4:7e:94:05:be:54:4c:61:90:91:9c:07:0b:
                    f9:33:81:9d:b7:e2:07:24:af:9e:da:35:5c:79:d1:
                    9a:82:cd:69:43:17:41:99:1c:8f:30:ce:8a:7c:3d:
                    cd:02:57:50:f8:6f:4c:ba:d2:2d:c2:28:fa:bd:34:
                    60:bb:c1:df:46:af:e5:8f:65:2b:e4:db:33:ed:56:
                    f4:da:be:39:82:b3:8e:51:b5:f7:e5:28:e8:9f:be:
                    91:b5:75:b6:88:e0:c8:c9:f9:80:1d:13:b5:b2:98:
                    1b:aa:53:a9:ec:35:cc:06:eb:42:d0:84:fd:9a:9a:
                    26:27:12:d0:ab:89:62:d8:99:0a:4e:5f:d9:b4:5a:
                    db:da:35:af:dd:d7:f2:c0:82:b6:f9:3e:8a:ea:de:
                    0d:68:af:26:22:ea:f6:27:0a:e3:f0:a8:38:d7:2a:
                    5a:72:aa:cd:38:0c:0d:13:be:07:00:2b:0c:9c:d2:
                    63:0a:45:c6:d7:2b:71:e4:a6:4c:ba:85:bf:ad:79:
                    2b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:61:94:E7:7B:D2:83:88:99:92:34:61:ED:66:CE:B3:70:84:0F:5D
            X509v3 Authority Key Identifier:
                keyid:9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:5f:52:bb:1c:44:b9:d0:0c:5c:f2:79:77:cf:d9:41:b9:b5:
         a1:ae:49:c9:9b:43:ed:40:a0:f8:5e:ef:c9:33:d8:e9:61:e6:
         a4:8b:a8:3a:5b:e9:0f:70:19:d6:ac:68:47:07:f6:ef:d2:5e:
         70:6f:53:a1:61:3d:cb:42:74:94:3e:f5:2c:06:6c:0e:a6:ff:
         d7:55:5f:9f:78:d9:15:76:25:91:86:c0:c4:0b:d0:2f:b0:f9:
         c5:e2:81:3c:b8:98:d5:ea:2a:21:23:ad:4b:14:1c:37:47:41:
         e5:2a:32:7a:e4:b3:6b:46:00:74:71:89:17:73:0c:60:74:2b:
         ba:9a:58:eb:fb:6e:3f:31:f0:e7:00:27:50:fd:1f:8e:ce:29:
         6a:c3:09:de:ae:cf:ad:18:c7:5a:92:49:52:cd:e9:70:be:79:
         26:3d:86:98:bc:f8:99:64:0b:78:6c:7b:58:ae:c1:35:60:1d:
         09:a4:fb:4b:2b:d4:af:51:f3:30:9f:59:d0:75:f9:c5:7e:27:
         5f:04:55:0d:8c:c6:21:6c:36:b5:1a:6c:1e:95:7f:36:6a:b4:
         a6:fb:e4:4b:ad:d2:27:f1:3d:a9:66:19:9b:7f:c4:b7:03:71:
         d4:40:0b:3f:47:05:4c:ce:2a:5d:cc:43:bf:2e:28:d9:13:1b:
         7e:c2:08:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:41:06 2026 by rpki-client