Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
File:                     nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft (raw, json)
Hash identifier:          eSf1/2f12wYR7WwlMS+Ozgyvn44ALbBnE6b9GObjrRM=
Subject key identifier:   72:A1:7F:7F:CF:F0:E1:13:76:F6:A0:90:7D:0B:60:36:40:8D:96:81
Authority key identifier: 9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E
Certificate issuer:       /CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
Certificate serial:       06AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
Manifest number:          0682
Signing time:             Tue 08 Sep 2026 22:39:01 +0000
Manifest this update:     Tue 08 Sep 2026 22:39:01 +0000
Manifest next update:     Tue 15 Sep 2026 22:39:01 +0000
Files and hashes:         1: nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl (hash: 5rPbHCeSzw9ZpJ64LNlFictqYOnpysG5RVrUfXp4HzI=)
                          2: 7AFB859484C711EF9740BE81C4F9AE02.roa (hash: x8sZ4QxQXhvPiVMJ2oKAKBGtbntHbWyBpumXqbB9h14=)
                          3: 12EDB8D284C711EFA075A16AC4F9AE02.roa (hash: 6oy8vfXbR13Fccn1nC7FTUc7Ni330SgxcaSdkrjuIvk=)
                          4: A7EBD74EAB7611F0A4F18663C4F9AE02.roa (hash: fMUinF8FSeKtIYLfJ88CgvoxibOKGi4+/9nzdFUr5UY=)
                          5: 729F253CAB7611F0BCB28743C4F9AE02.roa (hash: RNZ4spqntA0JMCZsSqaH+sqpORW1IDmuJusYPmcPZSk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl
                          rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 15 Sep 2026 22:39:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1706 (0x6aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB383, serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
        Validity
            Not Before: Sep  8 22:39:01 2026 GMT
            Not After : Sep 15 22:39:01 2026 GMT
        Subject: CN=6aa08e85-b215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cf:6e:04:ad:b5:6c:29:8b:c5:40:24:90:44:
                    5c:eb:e5:72:9c:f3:c4:93:4f:55:11:ac:da:34:89:
                    4d:89:ec:50:4c:0c:0e:9f:cd:3d:f3:0f:a5:13:dc:
                    24:16:91:2a:e8:9d:af:6b:34:30:95:93:af:bc:8e:
                    a0:3b:bc:c2:84:60:7e:de:ee:a6:c8:60:70:ae:fa:
                    e8:66:1d:7e:d3:13:4b:0a:57:ff:4c:df:cc:b4:39:
                    a4:14:c0:d4:25:a5:36:43:52:17:10:84:17:44:e4:
                    6d:0c:14:27:f5:09:50:c0:57:fe:33:30:21:51:32:
                    c8:e6:15:b0:4a:24:51:7c:8f:2d:2b:cb:68:b6:b0:
                    72:71:05:30:4d:8f:e3:f2:ac:bb:4a:95:9b:7c:3c:
                    43:98:f2:1c:1b:36:ae:7e:3f:d1:40:d8:68:32:78:
                    0b:64:7f:27:45:7b:74:39:43:e6:d6:1f:d1:4b:3a:
                    9b:ea:2d:cb:24:f9:f0:a6:04:6c:c9:0a:6e:3e:e5:
                    9b:5a:93:82:53:0c:de:6e:ae:4a:0c:6f:91:98:7a:
                    33:9d:d0:86:f4:3b:78:41:1f:62:b9:68:12:e4:b0:
                    dc:03:56:21:eb:fb:b5:5a:a4:5c:c8:13:89:ed:4a:
                    11:6a:12:1c:ad:ba:ec:4b:dc:24:71:4d:ee:3c:65:
                    8e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A1:7F:7F:CF:F0:E1:13:76:F6:A0:90:7D:0B:60:36:40:8D:96:81
            X509v3 Authority Key Identifier:
                keyid:9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:21:6d:c7:14:18:cb:c1:44:c1:ec:05:5d:4e:44:62:0c:cb:
         e6:2b:5b:66:13:49:19:1a:a7:22:29:84:c2:d2:9c:90:85:e6:
         d0:37:2b:bb:a2:e1:ff:ca:59:63:f0:91:1c:83:35:d0:49:3b:
         d9:5d:72:2b:57:a7:72:67:3f:bb:93:02:50:02:71:bf:8e:cc:
         f4:ac:e5:f7:71:00:e3:28:97:cc:57:45:72:57:cd:7c:9b:3e:
         e4:4f:ca:48:80:88:4d:a4:d2:0b:55:bd:5e:d6:28:26:c5:ba:
         c8:8d:5f:6f:e7:c5:1b:dc:6e:ed:e9:a5:93:fb:71:1c:fe:ea:
         24:c2:08:7a:b0:dd:36:6e:9b:33:15:fe:6a:00:f4:31:da:88:
         8d:5a:e5:1b:26:67:9e:7e:93:25:36:12:99:47:5e:31:1d:e0:
         dd:0f:46:7b:91:93:9e:86:7d:60:d1:80:20:b9:97:71:e8:f3:
         e0:78:91:44:a0:28:c1:99:de:e6:14:53:bf:be:15:33:59:26:
         be:5b:80:c0:83:90:26:90:d3:f6:70:32:50:9c:62:27:11:9f:
         70:85:42:97:d6:a2:b9:42:fc:90:30:41:af:52:72:7e:2e:74:
         94:39:1a:34:5a:d9:42:39:2a:ff:40:28:a4:76:48:3d:44:60:
         b4:49:17:90
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUIzODMxMTAvBgNVBAUTKDlDMjM1MUQ0NUE5N0Q3MUQwM0Q2QkMzODVCMzdERDlC
RkI4MENGNUUwHhcNMjYwOTA4MjIzOTAxWhcNMjYwOTE1MjIzOTAxWjAYMRYwFAYD
VQQDEw02YWEwOGU4NS1iMjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnM9uBK21bCmLxUAkkERc6+VynPPEk09VEazaNIlNiexQTAwOn8098w+lE9wk
FpEq6J2vazQwlZOvvI6gO7zChGB+3u6myGBwrvroZh1+0xNLClf/TN/MtDmkFMDU
JaU2Q1IXEIQXRORtDBQn9QlQwFf+MzAhUTLI5hWwSiRRfI8tK8totrBycQUwTY/j
8qy7SpWbfDxDmPIcGzaufj/RQNhoMngLZH8nRXt0OUPm1h/RSzqb6i3LJPnwpgRs
yQpuPuWbWpOCUwzebq5KDG+RmHozndCG9Dt4QR9iuWgS5LDcA1Yh6/u1WqRcyBOJ
7UoRahIcrbrsS9wkcU3uPGWOsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHKhf3/P
8OETdvagkH0LYDZAjZaBMB8GA1UdIwQYMBaAFJwjUdRal9cdA9a8OFs33Zv7gM9e
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjM4My84Q0MyQTlBQURF
NzcxMUVCODczOUVDMTFDNEY5QUUwMi9uQ05SMUZxWDF4MEQxcnc0V3pmZG1fdUF6
MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25DTlIxRnFYMXgwRDFydzRXemZkbV91QXoxNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QjM4My84Q0MyQTlBQURFNzcxMUVCODczOUVDMTFDNEY5QUUwMi9uQ05SMUZxWDF4
MEQxcnc0V3pmZG1fdUF6MTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiyFtxxQYy8FEwewFXU5EYgzL5itbZhNJGRqnIimEwtKckIXm0Dcru6Lh/8pZ
Y/CRHIM10Ek72V1yK1encmc/u5MCUAJxv47M9Kzl93EA4yiXzFdFclfNfJs+5E/K
SICITaTSC1W9XtYoJsW6yI1fb+fFG9xu7emlk/txHP7qJMIIerDdNm6bMxX+agD0
MdqIjVrlGyZnnn6TJTYSmUdeMR3g3Q9Ge5GTnoZ9YNGAILmXcejz4HiRRKAowZne
5hRTv74VM1kmvluAwIOQJpDT9nAyUJxiJxGfcIVCl9aiuUL8kDBBr1Jyfi50lDka
NFrZQjkq/0AopHZIPURgtEkXkA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 16:58:50 2026 by rpki-client