Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft
File:                     Nocz_cVgxeuJ5FJA331AOcsvYQg.mft (raw, json)
Hash identifier:          b31Fi3ESBPrVmQV4HgUYfcMsRU/69ErMapvZC+VJwwU=
Subject key identifier:   66:18:2B:F3:06:C7:4F:20:45:F9:D2:8F:5D:1F:D7:7D:A5:58:69:CC
Authority key identifier: 36:87:33:FD:C5:60:C5:EB:89:E4:52:40:DF:7D:40:39:CB:2F:61:08
Certificate issuer:       /CN=A91C97F5/serialNumber=368733FDC560C5EB89E45240DF7D4039CB2F6108
Certificate serial:       028F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft
Manifest number:          0289
Signing time:             Wed 05 Nov 2025 01:41:55 +0000
Manifest this update:     Wed 05 Nov 2025 01:41:54 +0000
Manifest next update:     Wed 12 Nov 2025 01:41:54 +0000
Files and hashes:         1: Nocz_cVgxeuJ5FJA331AOcsvYQg.crl (hash: ym3Ffv3Odg+wydfiFKj7UPbsOAiVBexFmScaBUXGtsQ=)
                          2: 48B639C8B85E11F0B0F0B01CC4F9AE02.roa (hash: 7WPqwG1SjXeSVpDuyJqejWY1jhEBBefx5pu/jvpGXtc=)
                          3: 020D49E0283211ED9E29FA70C4F9AE02.roa (hash: LQxrSI0KNNYbihu8S9SLx+zDE07D+HfcizadCn96Tg0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.crl
                          rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 01:41:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 655 (0x28f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C97F5, serialNumber=368733FDC560C5EB89E45240DF7D4039CB2F6108
        Validity
            Not Before: Nov  5 01:41:54 2025 GMT
            Not After : Nov 12 01:41:54 2025 GMT
        Subject: CN=690aab62-d1fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:47:54:85:a3:db:eb:f6:d8:3d:fc:4f:51:cf:
                    ec:de:f5:89:e8:a2:ff:fe:b9:6c:2c:26:bf:4e:e4:
                    10:61:48:5b:b5:b8:5e:7b:70:59:b7:1c:95:b0:5a:
                    47:a7:fb:dd:9a:63:3f:39:fc:d1:e4:ad:fd:1e:0f:
                    e2:64:fe:d7:7f:60:87:fc:ed:47:72:c6:a9:70:7b:
                    08:8e:af:9d:c8:d2:97:ba:d9:40:b5:70:99:1d:6d:
                    0a:97:18:d1:e5:0e:5e:67:a9:9b:d3:52:27:84:f6:
                    1a:34:d9:d3:47:45:89:04:4a:5a:c5:5a:43:8a:dd:
                    5b:9e:a3:63:0f:1c:09:ac:71:58:01:44:5e:53:e7:
                    17:ee:e4:9e:0e:e4:ad:ea:2b:fb:1d:b4:3d:75:52:
                    2c:1d:30:9c:19:02:3c:a9:1c:62:ec:ff:0a:a4:e3:
                    46:1a:e4:33:c4:9c:69:20:86:a0:d6:31:c5:ae:84:
                    c5:30:66:6d:10:fa:fe:d3:18:33:6a:3c:26:2a:ae:
                    3a:05:a8:f9:31:51:14:77:fa:30:bd:be:7f:fa:d8:
                    7e:fa:a5:08:17:19:5e:7b:84:af:d8:f9:75:b7:3a:
                    a5:59:e2:5e:0e:00:27:97:f8:b4:01:0a:ad:4c:50:
                    ff:ab:a2:07:6b:bb:5b:62:1c:da:47:40:e8:ee:41:
                    9e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:18:2B:F3:06:C7:4F:20:45:F9:D2:8F:5D:1F:D7:7D:A5:58:69:CC
            X509v3 Authority Key Identifier:
                keyid:36:87:33:FD:C5:60:C5:EB:89:E4:52:40:DF:7D:40:39:CB:2F:61:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:96:06:0f:a6:40:d7:37:e6:95:38:77:52:1a:15:ac:b4:45:
         d7:9d:0f:0e:10:96:2a:ed:c4:62:2b:ca:ed:9b:40:34:e1:25:
         47:e8:ba:a9:11:89:e9:3d:fb:cf:aa:41:7d:01:da:33:2d:25:
         b9:8e:2f:db:81:1d:80:9c:34:9c:62:5a:8f:a3:15:4c:5e:54:
         9c:bd:0a:a4:d2:10:a3:90:7f:11:ce:21:6b:4a:28:43:89:c2:
         60:6a:d2:e3:35:52:e0:c1:40:b2:9c:46:6d:af:3d:66:a1:73:
         bc:7a:bd:46:22:73:f2:ac:2f:fb:a4:95:ab:0b:aa:48:84:a1:
         33:ff:5b:89:94:ce:95:be:d3:31:bd:ec:7b:45:a2:18:7c:cc:
         5b:72:19:80:43:28:10:6b:13:b5:2f:ea:66:89:52:d1:3d:11:
         5b:a5:3d:de:a0:15:6d:27:6a:fe:a5:96:54:2a:56:46:e0:2c:
         44:cf:25:ba:0a:86:52:36:c3:56:98:82:33:aa:a2:64:a2:c6:
         a1:a1:e3:9b:f4:84:9b:0d:b8:b6:12:76:9f:4d:7b:14:de:1d:
         8a:fe:98:e6:b5:45:a9:a8:9b:a4:53:a9:83:83:b1:de:64:22:
         d9:d0:cc:98:4e:17:4b:98:ac:bc:c8:ea:b2:62:cb:71:63:6c:
         f9:29:1f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:23:38 2025 by rpki-client