Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
File:                     nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft (raw, json)
Hash identifier:          XlX4RKFwPtPbRQtiomB2aAyJE4VSjo8FvL2ORYrFcac=
Subject key identifier:   73:E8:76:5E:4E:A2:2B:6D:4B:31:55:E3:E5:58:88:03:98:94:30:69
Authority key identifier: 9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E
Certificate issuer:       /CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
Certificate serial:       0676
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
Manifest number:          0652
Signing time:             Wed 10 Jun 2026 22:50:19 +0000
Manifest this update:     Wed 10 Jun 2026 22:50:19 +0000
Manifest next update:     Wed 17 Jun 2026 22:50:19 +0000
Files and hashes:         1: nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl (hash: wFLI4c7r6qioh7OKYmEtY/36JfWB05JVwQ96g/b+Wkc=)
                          2: 729F253CAB7611F0BCB28743C4F9AE02.roa (hash: cgiDC2IeZyxnx0YTTuxfu//CGtgQm8yJluwva/OgfKI=)
                          3: A7EBD74EAB7611F0A4F18663C4F9AE02.roa (hash: LeLRqsxMpp4Ky8wD6G3jj2qk2RePehhwztN5Ryshg7k=)
                          4: 7AFB859484C711EF9740BE81C4F9AE02.roa (hash: 9L/8rIC6SRhqg6qSd6LFBimcV8KPIkKPiXaPwT3ytbY=)
                          5: 12EDB8D284C711EFA075A16AC4F9AE02.roa (hash: KV24/bEBcylNLG4cs1n5VfE+kOmO6T6A1cs3Vw5jHfo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl
                          rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 22:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1654 (0x676)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB383, serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
        Validity
            Not Before: Jun 10 22:50:19 2026 GMT
            Not After : Jun 17 22:50:19 2026 GMT
        Subject: CN=6a29ea2b-1e63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6f:47:31:0a:a9:32:6a:de:2d:ee:ea:20:36:
                    fa:5c:6a:20:4a:ec:b2:5e:ac:ac:87:7f:84:b4:02:
                    a3:0f:27:39:b2:20:99:a8:a4:b1:e5:d5:e3:c3:de:
                    f2:d6:9e:61:2b:4b:46:7c:fc:b1:cf:ff:48:56:9f:
                    da:ec:d6:d6:53:93:56:5c:4a:1a:b2:2a:a3:2c:1a:
                    fb:69:5f:67:4d:83:3c:69:55:f5:f3:c6:07:52:8b:
                    81:06:78:4a:69:b2:88:32:87:13:33:73:e7:c3:06:
                    57:12:d1:d5:bc:8e:b5:92:ac:e5:b2:6b:3d:3e:61:
                    16:29:e8:ab:e4:b6:d0:ce:50:da:f2:59:28:bd:52:
                    ab:82:7b:6c:b6:ae:b0:ca:d9:43:c4:b7:92:cc:f0:
                    6e:44:77:70:d1:84:20:4e:12:c7:52:b4:ec:16:df:
                    c7:b5:24:84:78:3a:79:12:73:d6:5d:e4:3b:ca:47:
                    f3:1d:53:e2:a3:f2:d5:5c:5b:6a:41:d9:8f:cd:7a:
                    8b:6f:66:6a:9f:c0:f9:65:8c:13:fa:f9:03:d2:05:
                    2d:61:ff:8c:3e:7f:2b:a2:9e:b4:92:73:24:72:8b:
                    6b:d4:db:d5:e2:02:01:ed:0e:95:05:c0:44:95:f8:
                    6f:30:aa:bf:af:10:f7:9b:be:a8:69:ae:f5:db:7e:
                    71:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E8:76:5E:4E:A2:2B:6D:4B:31:55:E3:E5:58:88:03:98:94:30:69
            X509v3 Authority Key Identifier:
                keyid:9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:bb:c5:31:c5:51:f0:1a:e2:1e:6e:84:c4:a6:03:6c:a9:5a:
         c5:fc:57:d9:31:c0:33:00:fd:84:bd:e2:11:36:a6:84:a4:bd:
         87:8b:05:db:a2:76:21:79:06:f3:91:6c:02:d9:7d:bd:f6:77:
         7e:8c:e1:b7:79:11:92:6e:2f:fe:11:96:03:2b:38:f0:5d:37:
         cb:1d:dc:9d:96:bb:03:1d:41:35:34:bf:c1:a3:fc:56:5a:25:
         be:95:40:3a:78:1f:02:13:2a:2a:26:dd:d4:bb:fb:34:18:cf:
         5e:41:29:7f:5c:0e:cb:89:be:9f:31:14:81:84:6a:5c:75:e7:
         41:60:8a:c4:87:08:2b:bc:ce:62:1e:01:9f:de:cd:68:cc:15:
         da:94:22:0d:ce:06:d1:4e:c5:75:3a:de:ed:13:4f:92:1e:71:
         96:4b:08:a4:f1:20:86:bf:1f:ff:7b:b0:60:b3:ca:24:86:74:
         67:c1:e3:0d:c3:b4:45:e5:ae:c8:45:0e:4f:bb:82:87:1b:51:
         93:61:c2:81:01:66:a3:73:4c:c5:4e:7a:d9:65:0f:e9:a2:ba:
         0f:a5:4e:71:7c:4d:d8:10:11:71:71:7c:b7:5a:b0:23:93:b9:
         45:a4:fa:7c:5c:ab:ec:6e:27:9a:c8:88:60:34:8e:4b:c3:30:
         93:0c:9c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:29:46 2026 by rpki-client