Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
File:                     nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft (raw, json)
Hash identifier:          gQVzV6T4Jai8L2lC8/bhYvPKuzkepVSzUNVpQy+Uhqk=
Subject key identifier:   92:04:A7:F0:45:43:59:2D:7F:6B:2B:C4:01:8C:C5:BE:91:42:74:8B
Authority key identifier: 9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E
Certificate issuer:       /CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
Certificate serial:       05D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
Manifest number:          05BD
Signing time:             Thu 04 Sep 2025 23:25:56 +0000
Manifest this update:     Thu 04 Sep 2025 23:25:56 +0000
Manifest next update:     Thu 11 Sep 2025 23:25:56 +0000
Files and hashes:         1: nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl (hash: F54FaK9FO4omFLu0CmjxpT/5KGyBUv6kzCgq/ZkOVnM=)
                          2: 7AFB859484C711EF9740BE81C4F9AE02.roa (hash: 414/5RyiyMUZFN0SEFameoFpU4rRSpvpvgBCGAe+h0s=)
                          3: B69E6026355C11F0B8094E3AC4F9AE02.roa (hash: flZUyrEx/m5nugLzwpifQhh18V8aEEhO9FbVnmFKA6A=)
                          4: 12EDB8D284C711EFA075A16AC4F9AE02.roa (hash: 5J+X0LjgteZA7gTRmfGapcuapYL3WvWAdk4QrzcZNQo=)
                          5: B5579BEA421911EC832A4A41C4F9AE02.roa (hash: G80CVYb1Ik+/tcRJsx2ECeYr4cToFW70btAWzXQMVLM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl
                          rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 23:25:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1497 (0x5d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB383, serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
        Validity
            Not Before: Sep  4 23:25:56 2025 GMT
            Not After : Sep 11 23:25:56 2025 GMT
        Subject: CN=68ba2004-8527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b7:d5:ef:12:f4:7b:b0:a6:2a:81:32:95:9e:
                    00:e9:a5:61:2e:4c:26:c0:e3:a9:4c:58:2a:2b:87:
                    36:dd:1b:de:41:22:7c:50:88:35:16:05:6d:0e:63:
                    cf:5b:5b:39:3f:ca:8e:31:3e:df:73:8b:4b:e9:50:
                    0c:7c:55:be:c0:20:36:08:0f:b5:56:4f:fc:91:4c:
                    4c:7f:33:ac:b9:8e:66:ca:32:a2:0a:4b:fb:27:12:
                    b0:a2:85:90:0f:3f:a0:32:fe:34:4e:19:7f:a7:18:
                    09:ab:06:9c:84:16:f6:0b:88:32:d8:de:f9:22:d8:
                    a7:96:61:08:ae:3d:55:e4:c9:4e:73:f9:1e:73:8c:
                    c2:61:9b:d7:8c:37:3a:44:88:e7:6d:4b:0c:2d:f3:
                    77:d5:2f:9f:ec:ac:31:8a:b0:b2:5e:4e:ae:c0:b0:
                    67:23:c7:a1:a2:d3:46:07:17:5a:9d:17:46:64:2a:
                    f2:69:c0:6e:0a:5d:79:21:0c:e2:98:8d:cd:38:66:
                    c3:92:f5:e3:2e:16:56:63:08:45:34:e8:6c:de:7b:
                    0b:27:b4:ff:b1:c5:d0:f5:3e:39:22:3c:6b:d6:1a:
                    56:14:49:4b:ec:3e:02:13:59:e6:97:9e:ec:bc:f7:
                    30:02:b4:d2:21:ec:7e:1e:60:9c:09:b4:47:a9:45:
                    47:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:04:A7:F0:45:43:59:2D:7F:6B:2B:C4:01:8C:C5:BE:91:42:74:8B
            X509v3 Authority Key Identifier:
                keyid:9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:16:f1:02:27:e2:f6:e0:b9:9e:a7:f4:72:ff:54:e5:3a:2a:
         37:41:66:47:a4:45:c0:87:c9:a9:0b:14:93:19:8d:3d:05:77:
         c4:c7:1d:5e:22:20:d3:95:cd:a9:52:d8:0c:4e:99:ac:9d:ab:
         43:51:83:bb:65:11:94:0b:87:d5:2b:bd:09:c8:2f:2d:dc:fc:
         ba:4b:54:a9:3f:31:87:86:ff:0c:1c:61:49:10:5b:36:2b:48:
         07:33:25:80:20:7e:08:31:46:58:eb:ec:48:00:09:8b:aa:6c:
         46:a6:10:15:2a:6a:09:56:61:91:6b:8d:55:01:3e:10:c2:c2:
         0c:ca:e2:13:95:19:67:89:65:86:ab:ea:b3:a3:05:3c:5a:df:
         e8:bc:eb:24:73:0c:1f:92:1d:33:40:9a:83:4f:a3:51:a8:8d:
         a6:f8:d3:fa:05:08:7e:27:25:ae:4c:eb:53:8b:e5:33:56:43:
         72:2c:19:b1:69:a7:3a:be:17:87:8f:d5:d2:33:17:e0:ac:3a:
         d5:0e:ee:5b:bd:43:09:ab:d0:2a:43:85:fb:69:51:b5:d9:f7:
         13:95:13:42:6c:83:73:86:d4:df:b2:1f:0d:e1:a1:30:3e:88:
         d5:d7:27:7b:9f:ee:f8:5a:90:d7:0d:29:c6:62:0d:7b:fe:0d:
         2f:9e:5d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 16:58:07 2025 by rpki-client