Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
File:                     Ntd-kkOrui_VSWopGDC304sLy8Q.mft (raw, json)
Hash identifier:          HtJCGHSrHEUOXUab2SOp+82XqQ52dOqiP4ClwCbkKyI=
Subject key identifier:   CC:03:1E:A9:77:38:16:62:D0:1C:5C:6D:AC:3C:70:1B:E0:70:B1:C0
Authority key identifier: 36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4
Certificate issuer:       /CN=A91452AC/serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4
Certificate serial:       09D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
Manifest number:          09AD
Signing time:             Sat 26 Sep 2026 20:04:26 +0000
Manifest this update:     Sat 26 Sep 2026 20:04:25 +0000
Manifest next update:     Sat 03 Oct 2026 20:04:25 +0000
Files and hashes:         1: Ntd-kkOrui_VSWopGDC304sLy8Q.crl (hash: VfTYGmrafXwSXn8PjCrTN9j5qPljVEZE+67gerD0c8Y=)
                          2: 0F91DE9EAD4C11EB903C150DC4F9AE02.roa (hash: 2MWq2gYgL8Z2r2vMKeBL4wxSZIjEodsX3g/1Rc+PbcA=)
                          3: A58B9338AD4A11EBA6B48687C4F9AE02.roa (hash: JFLo1Ja1paalAQ9cRjNBAw9+CXjqmX6hCmHw3VDuOWQ=)
                          4: B453EBC4BB4011EAAF70B028C4F9AE02.roa (hash: lT94xNEkm0/RuJcMLykdff4mRseMOoMW/OqsJc8kVvg=)
                          5: 72E60DEA3CC911EDA5EBD21DC4F9AE02.roa (hash: z5nXpQYggF7FtxvjRhPO50T8ACMAQ3fNgZEPR5O1d4k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl
                          rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 18:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2517 (0x9d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91452AC, serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4
        Validity
            Not Before: Sep 26 20:04:25 2026 GMT
            Not After : Oct  3 20:04:25 2026 GMT
        Subject: CN=6ab8254a-b33a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e8:53:b4:9e:5d:6c:78:25:d5:51:2f:5d:2e:
                    c3:56:62:34:4d:2e:9e:db:3e:5a:1f:95:ad:e6:fc:
                    7b:02:f2:02:31:90:40:f4:34:4a:94:08:87:cc:a2:
                    1e:cc:3d:f8:67:0d:82:ff:fa:cb:c2:39:1e:73:c4:
                    47:81:91:c1:37:05:d5:c7:84:dd:d1:8e:08:a7:54:
                    5f:96:a2:7c:50:37:77:d2:03:4f:0c:60:b3:43:60:
                    f9:03:1b:c6:5e:54:9d:11:52:5e:72:0e:9a:ee:7e:
                    12:8c:bd:8f:9d:dc:ea:44:a6:f2:d2:29:d1:7d:92:
                    cd:b8:97:67:52:b7:90:59:c7:65:0c:5f:d5:da:93:
                    a6:d7:c9:54:fa:ba:63:25:73:6b:2a:80:b8:1f:7e:
                    6d:7b:96:a7:8b:9b:06:47:f2:db:00:d4:54:4d:43:
                    f5:1b:9e:3b:3a:1e:18:9a:b0:bc:d2:31:0c:55:9b:
                    64:3f:75:de:90:51:30:2d:37:ac:80:e0:e7:7f:88:
                    88:50:84:e1:2d:72:2d:d0:76:f8:ac:c6:f3:ec:61:
                    d6:83:69:16:90:fc:a0:ab:37:7f:13:9e:1e:d8:bf:
                    c3:4f:c2:b6:74:b6:fc:f3:9e:bd:9e:de:5c:71:88:
                    78:71:24:53:5c:6a:0e:78:d5:74:42:62:9a:f5:39:
                    f4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:03:1E:A9:77:38:16:62:D0:1C:5C:6D:AC:3C:70:1B:E0:70:B1:C0
            X509v3 Authority Key Identifier:
                keyid:36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:54:64:e1:af:fe:65:2a:77:3a:be:a5:91:ef:e2:6e:3b:68:
         f3:f5:e2:90:a8:8e:92:7a:94:80:38:ce:75:37:34:08:8e:8c:
         6a:65:ff:45:61:24:59:c8:84:5d:9d:f8:10:f3:ab:4e:1a:d9:
         86:9b:bd:20:17:ea:00:3d:5f:6b:b4:1c:bb:96:bd:3f:4b:f4:
         35:ff:2a:9b:ac:90:4f:80:ff:a4:02:c2:f8:d8:0a:8f:b1:9b:
         6c:11:d0:ec:8d:50:23:41:99:6d:c1:42:63:f8:a0:a2:8e:bc:
         4e:ec:83:7c:88:bd:1e:cb:13:4a:82:92:b3:64:63:2d:48:92:
         f7:aa:82:ce:7c:9d:2e:c3:67:64:4a:28:75:e3:4e:7d:59:19:
         84:9c:f6:b0:fe:35:ca:33:d1:29:9f:b5:98:20:cc:2b:f9:86:
         20:e5:82:bb:ee:16:65:46:ab:c5:6c:82:91:63:30:e4:d9:62:
         b2:26:2a:93:54:66:c9:6f:36:a5:0e:2f:46:8f:9b:b9:cf:47:
         d9:7c:e1:06:90:8f:d2:ca:d1:80:27:10:af:4e:93:d8:1c:b7:
         5d:bc:3c:51:6d:85:5b:df:21:84:69:0b:34:04:3c:53:f7:f9:
         19:5a:3c:a2:92:f8:a6:9b:bf:78:11:3e:f8:a4:4d:d6:30:1e:
         32:84:00:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:44:14 2026 by rpki-client