Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
File:                     nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft (raw, json)
Hash identifier:          jYiy0KRQO1PsYA4WrTiFpONM4EY7js3SRSWR70jBb/0=
Subject key identifier:   34:6F:5C:39:F0:0E:2E:FA:19:34:73:38:B5:3C:4D:88:02:B0:BF:9E
Authority key identifier: 9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E
Certificate issuer:       /CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
Certificate serial:       0693
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
Manifest number:          066B
Signing time:             Sun 26 Jul 2026 23:30:38 +0000
Manifest this update:     Sun 26 Jul 2026 23:30:37 +0000
Manifest next update:     Sun 02 Aug 2026 23:30:37 +0000
Files and hashes:         1: nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl (hash: jzka7ZsKRuFcYUgGItXo4/KJlvnstc+1EGep8gJ5/GI=)
                          2: 729F253CAB7611F0BCB28743C4F9AE02.roa (hash: RNZ4spqntA0JMCZsSqaH+sqpORW1IDmuJusYPmcPZSk=)
                          3: 12EDB8D284C711EFA075A16AC4F9AE02.roa (hash: 6oy8vfXbR13Fccn1nC7FTUc7Ni330SgxcaSdkrjuIvk=)
                          4: 7AFB859484C711EF9740BE81C4F9AE02.roa (hash: x8sZ4QxQXhvPiVMJ2oKAKBGtbntHbWyBpumXqbB9h14=)
                          5: A7EBD74EAB7611F0A4F18663C4F9AE02.roa (hash: fMUinF8FSeKtIYLfJ88CgvoxibOKGi4+/9nzdFUr5UY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl
                          rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 23:30:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1683 (0x693)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB383, serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
        Validity
            Not Before: Jul 26 23:30:37 2026 GMT
            Not After : Aug  2 23:30:37 2026 GMT
        Subject: CN=6a66989d-be3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1f:02:61:30:87:b1:a1:cd:82:8e:11:19:ed:
                    15:41:91:a2:c3:5a:7f:34:21:49:f6:4b:03:d2:f6:
                    18:db:97:ca:5c:5a:f3:56:e2:28:6b:7b:c6:a8:e8:
                    a9:08:c1:27:e2:64:c7:6e:81:dc:dc:24:44:89:01:
                    ac:49:cb:1b:80:78:4c:63:c2:71:36:8a:a6:5b:9d:
                    4b:3b:7f:77:66:a5:75:f8:9a:ea:99:49:89:24:53:
                    5d:42:1e:f0:d7:d1:ea:41:a5:5e:29:3f:7b:db:40:
                    64:ed:2e:e7:b7:2c:b5:4f:58:58:3f:a8:88:ed:46:
                    24:2d:54:4a:88:74:d7:4f:bf:20:b6:cf:db:76:3c:
                    ad:1f:35:38:ca:7c:19:c9:df:62:17:80:bb:fc:2a:
                    31:f4:fb:09:ba:9a:bb:a6:46:fc:10:77:0b:c2:ab:
                    72:c1:71:82:8b:99:15:b3:8e:6c:fe:71:9c:f9:73:
                    8a:28:ae:96:76:d5:13:d1:87:64:93:63:ee:fe:6c:
                    47:3d:59:52:d3:b5:7b:e0:cc:ce:82:9e:f0:a0:e2:
                    ee:9c:16:e0:3b:67:e3:7f:14:93:07:a4:7a:45:dd:
                    69:9b:7c:76:4d:89:83:2a:ac:c4:a5:57:63:07:36:
                    ca:67:e3:fd:aa:8a:a1:8c:7b:25:59:bf:96:89:be:
                    02:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6F:5C:39:F0:0E:2E:FA:19:34:73:38:B5:3C:4D:88:02:B0:BF:9E
            X509v3 Authority Key Identifier:
                keyid:9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:7d:b4:99:bc:2b:f7:b3:be:72:3f:ff:ee:62:1b:c6:71:ea:
         0b:28:ea:70:8b:89:13:37:38:a3:d4:e4:cf:bc:eb:79:6f:89:
         0e:05:7c:75:f8:3b:a9:01:06:07:de:79:03:70:6a:68:63:0e:
         11:cd:ec:6e:9a:25:5b:bc:23:0c:c1:13:a6:40:7c:9b:6e:68:
         e4:e9:30:60:2d:96:63:04:32:f9:eb:53:ed:d2:a3:84:b5:66:
         d9:c8:29:d9:d0:a8:7a:58:c5:87:91:49:4f:d8:24:ca:f5:1e:
         e3:25:85:71:91:4c:3a:c7:24:3b:4b:02:66:c3:5f:17:7b:f4:
         a2:dc:0f:08:7d:05:d1:2f:0a:1a:c3:d9:c3:1f:9c:50:b4:d3:
         eb:93:9d:6b:5a:e5:6a:0a:8f:c2:da:b4:ad:ca:93:72:27:de:
         1c:ed:b9:fb:60:48:64:dc:3e:f2:5b:4e:ee:5f:96:ec:84:0d:
         7f:00:2a:63:b1:4c:f4:eb:71:fc:42:d4:f3:97:b1:cf:5b:1d:
         e5:e7:b0:9f:95:cc:41:8f:ad:d0:90:ce:ca:32:e1:63:9e:51:
         8e:d1:57:09:c2:b7:2b:53:b7:f9:d6:e5:9f:c6:d5:b2:fd:67:
         88:93:48:e7:4f:bc:9f:9b:42:73:f4:4c:c2:d9:29:01:37:28:
         bf:ae:8e:ce
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBpMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUIzODMxMTAvBgNVBAUTKDlDMjM1MUQ0NUE5N0Q3MUQwM0Q2QkMzODVCMzdERDlC
RkI4MENGNUUwHhcNMjYwNzI2MjMzMDM3WhcNMjYwODAyMjMzMDM3WjAYMRYwFAYD
VQQDEw02YTY2OTg5ZC1iZTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlR8CYTCHsaHNgo4RGe0VQZGiw1p/NCFJ9ksD0vYY25fKXFrzVuIoa3vGqOip
CMEn4mTHboHc3CREiQGsScsbgHhMY8JxNoqmW51LO393ZqV1+JrqmUmJJFNdQh7w
19HqQaVeKT9720Bk7S7ntyy1T1hYP6iI7UYkLVRKiHTXT78gts/bdjytHzU4ynwZ
yd9iF4C7/Cox9PsJupq7pkb8EHcLwqtywXGCi5kVs45s/nGc+XOKKK6WdtUT0Ydk
k2Pu/mxHPVlS07V74MzOgp7woOLunBbgO2fjfxSTB6R6Rd1pm3x2TYmDKqzEpVdj
BzbKZ+P9qoqhjHslWb+Wib4CfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDRvXDnw
Di76GTRzOLU8TYgCsL+eMB8GA1UdIwQYMBaAFJwjUdRal9cdA9a8OFs33Zv7gM9e
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjM4My84Q0MyQTlBQURF
NzcxMUVCODczOUVDMTFDNEY5QUUwMi9uQ05SMUZxWDF4MEQxcnc0V3pmZG1fdUF6
MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25DTlIxRnFYMXgwRDFydzRXemZkbV91QXoxNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QjM4My84Q0MyQTlBQURFNzcxMUVCODczOUVDMTFDNEY5QUUwMi9uQ05SMUZxWDF4
MEQxcnc0V3pmZG1fdUF6MTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABn20mbwr97O+cj//7mIbxnHqCyjqcIuJEzc4o9Tkz7zreW+JDgV8dfg7qQEG
B955A3BqaGMOEc3sbpolW7wjDMETpkB8m25o5OkwYC2WYwQy+etT7dKjhLVm2cgp
2dCoeljFh5FJT9gkyvUe4yWFcZFMOsckO0sCZsNfF3v0otwPCH0F0S8KGsPZwx+c
ULTT65Oda1rlagqPwtq0rcqTcifeHO25+2BIZNw+8ltO7l+W7IQNfwAqY7FM9Otx
/ELU85exz1sd5eewn5XMQY+t0JDOyjLhY55RjtFXCcK3K1O3+dbln8bVsv1niJNI
50+8n5tCc/RMwtkpATcov66Ozg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 07:11:04 2026 by rpki-client