Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.mft
File:                     ntVkKdGun2AE-2-2eI6T-vYiV1k.mft (raw, json)
Hash identifier:          RDXKy3h0h+j1KsAU3hAJMH2c/Vs/53bus+Z5vE1v67A=
Subject key identifier:   FB:23:2E:A8:AC:D4:CD:4C:04:7D:58:0E:C0:4F:C1:6E:5E:A7:97:D4
Authority key identifier: 9E:D5:64:29:D1:AE:9F:60:04:FB:6F:B6:78:8E:93:FA:F6:22:57:59
Certificate issuer:       /CN=A9142769/serialNumber=9ED56429D1AE9F6004FB6FB6788E93FAF6225759
Certificate serial:       A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntVkKdGun2AE-2-2eI6T-vYiV1k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.mft
Manifest number:          9D
Signing time:             Fri 17 Apr 2026 07:03:43 +0000
Manifest this update:     Fri 17 Apr 2026 07:03:43 +0000
Manifest next update:     Fri 24 Apr 2026 07:03:43 +0000
Files and hashes:         1: ntVkKdGun2AE-2-2eI6T-vYiV1k.crl (hash: B8qJxBDal8ocdH7CAEjbCzbHxP4i04R5zbjhKxSr8Sc=)
                          2: C96601404B8D11F0B198C040C4F9AE02.roa (hash: O07QDQp51IDcZ+cpnquCpnv6BnCKuO17uo5hWjNAdc4=)
                          3: C8B7607C4B8D11F0B198C040C4F9AE02.roa (hash: f/Nl1FwOLx1KSPyWLmKAwdOSQoqlndMjeXvqEuCDnzo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.crl
                          rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntVkKdGun2AE-2-2eI6T-vYiV1k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:03:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161 (0xa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142769, serialNumber=9ED56429D1AE9F6004FB6FB6788E93FAF6225759
        Validity
            Not Before: Apr 17 07:03:43 2026 GMT
            Not After : Apr 24 07:03:43 2026 GMT
        Subject: CN=69e1db4f-2cdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e4:4a:78:e9:ec:3e:55:6e:8c:1c:9b:80:7a:
                    f0:c1:b6:0e:b6:1b:11:15:b1:f8:bc:cf:bc:9f:07:
                    12:02:62:2a:ab:c4:3e:81:c1:63:18:63:38:f0:d2:
                    6f:8d:c1:5f:96:25:b7:f3:c5:b1:6e:ae:3f:05:a7:
                    e4:b8:fa:16:e4:ba:e5:0b:c4:3b:26:ec:01:82:48:
                    7a:11:29:e9:31:c5:1e:f6:76:f0:32:1b:a6:ba:f0:
                    66:1f:1c:cb:92:8e:81:bd:e7:63:c1:64:8a:2a:95:
                    11:17:9b:62:ae:e7:54:dc:7b:22:dd:41:00:2d:e8:
                    4c:7b:1b:91:6f:01:bf:9a:89:00:3a:ba:f7:58:c7:
                    1f:90:05:e6:65:0d:5c:c2:49:90:58:df:b8:a0:c8:
                    f5:a7:98:5c:4a:8d:c2:a8:22:86:4f:b4:58:79:c7:
                    78:c6:76:9d:6d:4a:9b:8f:e4:6e:b9:fc:04:1c:8f:
                    de:76:dd:cc:0d:23:b8:a5:44:19:ee:e8:5f:67:78:
                    f9:be:7b:61:bd:73:52:2c:75:46:ba:b6:43:0a:d5:
                    05:25:02:0a:4c:99:33:5c:55:47:7b:85:45:af:4a:
                    9f:a7:3e:6c:13:6f:80:81:d5:f2:d6:bb:aa:83:85:
                    db:93:41:ef:8e:46:9f:d2:e7:0a:2b:bc:c5:39:ee:
                    2a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:23:2E:A8:AC:D4:CD:4C:04:7D:58:0E:C0:4F:C1:6E:5E:A7:97:D4
            X509v3 Authority Key Identifier:
                keyid:9E:D5:64:29:D1:AE:9F:60:04:FB:6F:B6:78:8E:93:FA:F6:22:57:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntVkKdGun2AE-2-2eI6T-vYiV1k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:39:9b:ed:7e:3a:48:c3:f4:b4:18:f1:f8:26:3c:a6:d3:3a:
         d7:a1:e8:2c:ca:58:19:41:f8:44:b2:af:f0:97:10:73:d8:f0:
         e8:ad:ea:a2:67:2d:ea:17:c1:07:45:3a:76:de:d3:d1:c8:2c:
         97:d3:00:c1:38:b6:6b:f5:f8:67:65:d5:3b:fa:90:d6:74:36:
         81:17:09:33:f6:7b:3a:1e:be:cf:da:bf:e4:27:c7:a8:d4:b8:
         13:53:a2:9a:e7:37:2c:eb:3d:fe:5c:41:87:8d:77:f6:f7:f1:
         5d:33:d5:71:a3:9e:91:f7:9c:7d:ab:1c:31:06:88:9c:72:76:
         65:3f:3d:90:be:8d:5a:95:79:ea:7e:e8:98:5c:ce:65:10:fb:
         ab:77:a0:43:98:8f:ce:54:fd:c1:e8:ab:69:71:4b:11:f1:76:
         e9:51:8e:e3:32:f7:7d:6d:5c:5a:ff:92:45:e8:74:5f:2e:79:
         8d:23:2b:17:2e:8c:b1:65:36:f2:f7:3f:bb:3d:0f:2e:9a:c2:
         68:13:f1:4a:07:6c:e4:4e:03:1d:8e:db:d5:ff:18:c9:b1:a5:
         5e:5e:11:cc:c5:79:7b:80:a7:94:8b:c8:5a:a0:3d:4a:a5:43:
         0a:61:c3:8f:25:ad:26:b5:2d:c0:c5:50:41:83:5e:e4:e5:71:
         41:76:fa:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:33:31 2026 by rpki-client