Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
File:                     nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft (raw, json)
Hash identifier:          nz3eOwOCILefW8nMZBCv2SDaa9JbIVVQSab2s9pgDhI=
Subject key identifier:   E8:3A:9A:40:D3:46:A8:1A:95:35:A5:A1:64:6C:5D:DF:F3:9A:59:5B
Authority key identifier: 9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E
Certificate issuer:       /CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
Certificate serial:       065F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
Manifest number:          063B
Signing time:             Sun 26 Apr 2026 22:44:38 +0000
Manifest this update:     Sun 26 Apr 2026 22:44:37 +0000
Manifest next update:     Sun 03 May 2026 22:44:37 +0000
Files and hashes:         1: nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl (hash: XRYHkmQ+uc8DUi0E3bxIjlMCPGA+PR/gRjBiyXEaEBc=)
                          2: 729F253CAB7611F0BCB28743C4F9AE02.roa (hash: cgiDC2IeZyxnx0YTTuxfu//CGtgQm8yJluwva/OgfKI=)
                          3: 12EDB8D284C711EFA075A16AC4F9AE02.roa (hash: KV24/bEBcylNLG4cs1n5VfE+kOmO6T6A1cs3Vw5jHfo=)
                          4: 7AFB859484C711EF9740BE81C4F9AE02.roa (hash: 9L/8rIC6SRhqg6qSd6LFBimcV8KPIkKPiXaPwT3ytbY=)
                          5: A7EBD74EAB7611F0A4F18663C4F9AE02.roa (hash: LeLRqsxMpp4Ky8wD6G3jj2qk2RePehhwztN5Ryshg7k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl
                          rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 May 2026 22:44:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1631 (0x65f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB383, serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
        Validity
            Not Before: Apr 26 22:44:37 2026 GMT
            Not After : May  3 22:44:37 2026 GMT
        Subject: CN=69ee9556-817f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a4:4d:80:92:f1:0e:79:05:a5:a3:01:ee:bc:
                    ee:c0:d3:35:69:4d:60:71:30:81:12:92:f9:41:0f:
                    ee:f7:b0:28:be:9f:01:95:af:c3:26:e8:00:d0:f7:
                    09:03:22:91:17:78:5e:93:7c:ff:01:8f:ae:2d:23:
                    92:bf:88:6c:6c:5d:10:51:5f:43:31:1e:0a:22:74:
                    47:b9:c1:8e:c9:1a:b2:2a:2c:de:53:de:f7:c5:72:
                    60:35:e1:8d:1f:b4:35:cd:d7:e0:2f:0a:57:e5:0e:
                    11:ec:57:84:64:3c:72:2a:76:d9:e5:51:1e:bb:6f:
                    b1:b7:4f:82:fd:c5:b3:55:04:35:5a:89:ed:bd:da:
                    21:72:a3:ce:e9:8c:3e:0a:6b:09:e1:a7:30:9d:1c:
                    e9:9a:5a:cf:7d:d2:d8:d5:89:0b:db:10:8c:68:4a:
                    38:2e:ac:cd:71:58:9a:d9:e8:bc:2c:d4:5d:58:47:
                    27:3e:8c:99:e4:7c:3d:5f:5a:3a:8e:a0:4f:09:e6:
                    bf:57:34:00:e0:15:ca:6b:05:89:a9:9f:8b:cf:2f:
                    76:cb:b2:d7:9d:6e:e9:fe:d0:73:60:e8:61:78:32:
                    f9:e5:a6:07:e6:85:5d:00:92:e8:aa:4e:22:b0:7a:
                    a2:88:61:7f:95:55:a0:7d:6e:7a:db:13:96:4d:d0:
                    8c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3A:9A:40:D3:46:A8:1A:95:35:A5:A1:64:6C:5D:DF:F3:9A:59:5B
            X509v3 Authority Key Identifier:
                keyid:9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:3f:19:00:28:88:4d:03:44:9a:66:0a:6d:77:cf:0c:ae:ff:
         8d:e5:8d:a1:10:67:e6:2c:98:42:2a:17:43:3e:76:f8:48:47:
         60:80:93:76:55:b0:cc:90:19:ce:00:73:4d:46:39:51:a4:c1:
         da:43:cb:e9:c4:8b:b5:b6:2d:ae:b9:9b:f0:64:a2:ee:0c:bc:
         31:08:7c:81:04:73:11:ba:bd:56:69:bb:e3:2d:33:f9:b7:0b:
         50:d5:35:e4:a2:0a:cd:17:3a:0a:a6:d9:0c:dc:87:95:1b:a4:
         9a:66:9b:53:e0:14:06:85:14:ec:5d:f1:26:b3:d8:13:c3:6b:
         52:8c:92:cb:9a:b4:e9:34:59:f6:b9:7f:18:f8:99:f2:66:0b:
         b5:8e:ea:df:d7:92:8a:d1:c6:59:4c:46:29:73:64:26:b6:8c:
         20:6e:50:aa:5c:63:14:f4:c6:bd:ef:a2:38:01:c0:6d:78:69:
         6a:92:8f:46:da:50:35:15:08:40:14:b3:03:00:c8:6a:6c:25:
         52:ec:c4:ee:19:10:7a:99:d7:80:a2:5e:40:99:4b:07:c1:1b:
         55:10:30:b5:06:5f:9b:e7:b2:b2:56:9b:3b:e7:3a:38:d9:35:
         06:92:28:ad:71:64:aa:6c:5f:b6:8b:79:26:eb:90:5a:43:4b:
         53:1d:d4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:41:16 2026 by rpki-client