Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
File:                     Ntd-kkOrui_VSWopGDC304sLy8Q.mft (raw, json)
Hash identifier:          DmCmeIfcNNXsEv2Pda8ut5nmNNJCsR9q/lSGMdzUM2c=
Subject key identifier:   AF:63:16:DA:CD:DC:36:CB:E9:B7:06:57:E5:8C:1E:1D:C0:45:0B:15
Authority key identifier: 36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4
Certificate issuer:       /CN=A91452AC/serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4
Certificate serial:       0980
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
Manifest number:          0958
Signing time:             Thu 16 Apr 2026 20:03:53 +0000
Manifest this update:     Thu 16 Apr 2026 20:03:53 +0000
Manifest next update:     Thu 23 Apr 2026 20:03:53 +0000
Files and hashes:         1: Ntd-kkOrui_VSWopGDC304sLy8Q.crl (hash: 2p1RBD++tVUkgbBn3NM/YlgnidhmTcAJAr2di3ZhQpY=)
                          2: 72E60DEA3CC911EDA5EBD21DC4F9AE02.roa (hash: z5nXpQYggF7FtxvjRhPO50T8ACMAQ3fNgZEPR5O1d4k=)
                          3: B453EBC4BB4011EAAF70B028C4F9AE02.roa (hash: lT94xNEkm0/RuJcMLykdff4mRseMOoMW/OqsJc8kVvg=)
                          4: A58B9338AD4A11EBA6B48687C4F9AE02.roa (hash: JFLo1Ja1paalAQ9cRjNBAw9+CXjqmX6hCmHw3VDuOWQ=)
                          5: 0F91DE9EAD4C11EB903C150DC4F9AE02.roa (hash: 2MWq2gYgL8Z2r2vMKeBL4wxSZIjEodsX3g/1Rc+PbcA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl
                          rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:03:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2432 (0x980)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91452AC, serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4
        Validity
            Not Before: Apr 16 20:03:53 2026 GMT
            Not After : Apr 23 20:03:53 2026 GMT
        Subject: CN=69e140a9-4c58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:11:1c:ff:8b:09:2b:b9:fe:29:8e:26:6f:7f:
                    ee:5a:86:c5:b9:2f:a9:30:b4:27:19:4d:2e:e4:f7:
                    17:ed:51:c5:6e:f5:dc:cf:71:4b:65:e5:f9:18:d0:
                    cc:a4:14:19:9f:69:16:1d:48:0f:d5:35:3a:9e:53:
                    5e:9d:6d:94:67:02:5c:c3:1a:5d:32:7b:55:5e:d6:
                    43:6b:a7:61:73:90:b5:fe:c9:96:75:b2:39:f4:3e:
                    80:dc:ac:9a:9b:25:bf:ff:97:76:e6:af:3d:29:2a:
                    4e:8b:f0:b4:33:f0:03:40:7e:de:6b:d4:d5:6f:44:
                    29:d7:67:df:15:b5:47:54:af:e9:e6:0e:f4:a1:ff:
                    56:15:fa:dc:9c:02:1b:8f:de:20:68:e8:19:2e:c9:
                    d0:a9:6b:20:32:04:c4:3b:44:36:96:95:88:00:37:
                    10:e5:62:6f:af:f2:42:02:23:f6:14:e7:93:da:a4:
                    e9:30:c0:49:e0:fb:41:2a:20:51:30:08:85:f1:84:
                    6c:e1:a1:a4:fa:94:8c:0c:f2:60:4b:73:0a:79:c2:
                    18:2d:e9:21:a4:16:6c:a8:1c:f0:a6:0b:2e:c2:65:
                    f9:04:a8:fa:23:bd:3b:3a:e9:c9:27:16:ce:8a:13:
                    86:65:1a:9b:b7:0b:fd:3e:f2:16:cc:31:5c:14:66:
                    64:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:63:16:DA:CD:DC:36:CB:E9:B7:06:57:E5:8C:1E:1D:C0:45:0B:15
            X509v3 Authority Key Identifier:
                keyid:36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:fd:ed:79:24:01:af:da:6c:ed:1c:c1:4c:dc:b0:b3:9f:d7:
         6e:f1:13:bb:36:f4:6c:60:ce:94:69:6a:70:9b:41:3b:b3:07:
         c8:ef:f8:cf:93:d0:43:60:1d:cc:aa:aa:dc:3a:12:bf:cf:24:
         4b:17:7a:9e:7e:56:2f:40:d3:7f:d6:91:2c:8b:6a:1e:5f:9a:
         6e:2d:e3:db:81:1e:d9:ad:1f:f9:9a:34:67:d8:99:85:ed:54:
         24:33:e4:0d:33:53:bd:60:7b:30:4e:c0:bf:68:46:be:de:9d:
         11:4b:16:f2:d3:c9:c7:62:15:4e:b6:db:54:fb:c6:6e:c3:66:
         54:08:7f:9a:82:4b:73:0b:62:c1:9c:10:bc:5f:2b:cf:d7:7f:
         b2:e9:b4:c3:44:7e:1e:db:d3:d7:a5:43:9a:55:20:bf:d3:0a:
         4e:f1:eb:e7:24:7b:74:2c:17:0d:c8:2f:e0:fa:1a:5e:db:fb:
         1c:a5:19:10:04:4b:63:20:3e:9e:5e:85:23:e3:6b:0a:47:84:
         7f:16:f2:db:ee:29:89:4b:2f:02:cb:c4:b4:de:db:79:51:ad:
         8e:10:37:83:15:c3:35:95:09:92:ed:88:ac:0f:a7:c4:4f:16:
         3f:44:6c:09:54:a1:d2:9e:7a:46:39:aa:72:5d:3d:d9:eb:15:
         8f:84:07:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:24:34 2026 by rpki-client