Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
File:                     Ntd-kkOrui_VSWopGDC304sLy8Q.mft (raw, json)
Hash identifier:          VgTgaDbLDsFDDo3CQ81gSYmRljdRlZSl3ZtDsPsQOgM=
Subject key identifier:   1F:D9:0C:FE:48:25:85:B5:29:0E:3A:7E:4C:7B:AA:1F:3B:DF:8E:A8
Authority key identifier: 36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4
Certificate issuer:       /CN=A91452AC/serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4
Certificate serial:       0968
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
Manifest number:          0940
Signing time:             Mon 02 Mar 2026 02:29:35 +0000
Manifest this update:     Mon 02 Mar 2026 02:29:35 +0000
Manifest next update:     Mon 09 Mar 2026 02:29:35 +0000
Files and hashes:         1: Ntd-kkOrui_VSWopGDC304sLy8Q.crl (hash: 1iNnfMtcnus1RTbVBDxhxeEDVSyHX4OeWRDaxaukH2E=)
                          2: 0F91DE9EAD4C11EB903C150DC4F9AE02.roa (hash: 2MWq2gYgL8Z2r2vMKeBL4wxSZIjEodsX3g/1Rc+PbcA=)
                          3: A58B9338AD4A11EBA6B48687C4F9AE02.roa (hash: JFLo1Ja1paalAQ9cRjNBAw9+CXjqmX6hCmHw3VDuOWQ=)
                          4: B453EBC4BB4011EAAF70B028C4F9AE02.roa (hash: lT94xNEkm0/RuJcMLykdff4mRseMOoMW/OqsJc8kVvg=)
                          5: 72E60DEA3CC911EDA5EBD21DC4F9AE02.roa (hash: z5nXpQYggF7FtxvjRhPO50T8ACMAQ3fNgZEPR5O1d4k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl
                          rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:29:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2408 (0x968)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91452AC, serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4
        Validity
            Not Before: Mar  2 02:29:35 2026 GMT
            Not After : Mar  9 02:29:35 2026 GMT
        Subject: CN=69a4f60f-376e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5e:f9:a4:6f:a8:bf:14:65:bc:0d:c7:fb:12:
                    ec:95:a2:8b:85:c6:0d:b3:f1:1f:7d:af:03:fc:03:
                    1e:34:4c:d9:f1:41:b8:0f:17:70:ac:43:8f:c9:5a:
                    71:b1:8f:aa:03:53:42:10:7b:b1:31:32:f2:b3:2c:
                    1c:14:e9:9b:05:bc:d8:86:c2:98:dc:1b:85:f6:d6:
                    88:9c:1f:93:9b:39:01:4b:f4:b4:d6:38:f2:56:1c:
                    ab:7e:15:72:98:5e:80:87:aa:e8:38:d9:25:9e:e7:
                    76:2c:4c:72:e7:c1:fb:3d:ba:34:84:9a:a7:36:6d:
                    85:28:f4:8f:a2:7b:7e:4c:b5:89:8a:03:bf:2d:05:
                    d6:e2:65:6b:b0:a2:23:d0:f3:66:ec:f8:1b:60:5c:
                    48:4e:17:9f:1a:9d:13:6e:66:9b:f8:65:4f:9b:ca:
                    5b:00:af:37:79:0c:75:52:03:2b:03:2c:e6:47:69:
                    5c:a2:57:f2:b0:22:a8:a3:f8:20:8d:99:3e:48:c1:
                    f7:e4:c6:ef:93:47:44:77:e3:71:cd:c9:fa:22:2a:
                    c6:58:82:5e:4a:61:38:68:38:0d:b4:f2:a0:d8:10:
                    16:c0:0d:8c:8a:33:7e:21:fe:0c:8f:f7:e9:1c:3c:
                    c5:0d:86:4d:0c:43:c5:ef:8b:3f:35:9c:da:69:2f:
                    0e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D9:0C:FE:48:25:85:B5:29:0E:3A:7E:4C:7B:AA:1F:3B:DF:8E:A8
            X509v3 Authority Key Identifier:
                keyid:36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:f9:f1:25:47:23:a5:b7:e3:90:32:33:f4:87:0f:16:b4:c5:
         89:c5:c8:a8:7d:ac:4f:dc:95:d8:e6:30:bb:d6:41:3b:b0:52:
         49:d7:44:21:bf:78:0b:8a:a7:a6:72:64:73:0d:e6:84:c5:0b:
         a0:c1:09:2d:b1:2f:4b:5b:1f:96:17:b0:60:53:5b:e2:13:24:
         20:36:0e:cf:2f:56:74:c2:35:74:08:1e:3e:2d:74:0b:9c:fd:
         b3:3e:41:d6:92:cd:fd:78:d2:77:6e:46:3a:2a:4c:fa:22:05:
         a1:cc:a2:6f:a6:91:2d:f3:74:b8:4e:23:bd:77:5f:c3:73:2d:
         9a:f5:b3:2f:54:57:61:00:2e:8d:bc:7b:da:70:28:8a:ed:17:
         98:ec:1d:45:c9:b0:cc:6f:6c:8e:4c:ec:8a:4e:97:b3:8e:1c:
         9d:a9:2c:d6:fa:e7:26:ef:92:8b:31:62:a8:5e:9a:e3:77:04:
         92:9e:7e:34:69:18:04:a6:f8:d3:49:7c:ab:ea:f9:5c:02:a5:
         13:1e:c2:4a:ff:8a:01:76:71:86:04:e6:24:fa:b1:07:0a:9e:
         bf:b2:0c:4d:ba:50:7d:04:af:ff:b2:36:43:5f:07:19:23:14:
         df:21:c0:e1:1e:68:46:ac:58:92:6d:79:4f:0a:40:97:e0:9e:
         a2:05:36:64
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDUyQUMxMTAvBgNVBAUTKDM2RDc3RTkyNDNBQkJBMkZENTQ5NkEyOTE4MzBCN0Qz
OEIwQkNCQzQwHhcNMjYwMzAyMDIyOTM1WhcNMjYwMzA5MDIyOTM1WjAYMRYwFAYD
VQQDEw02OWE0ZjYwZi0zNzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnF75pG+ovxRlvA3H+xLslaKLhcYNs/Effa8D/AMeNEzZ8UG4DxdwrEOPyVpx
sY+qA1NCEHuxMTLysywcFOmbBbzYhsKY3BuF9taInB+TmzkBS/S01jjyVhyrfhVy
mF6Ah6roONklnud2LExy58H7Pbo0hJqnNm2FKPSPont+TLWJigO/LQXW4mVrsKIj
0PNm7PgbYFxIThefGp0Tbmab+GVPm8pbAK83eQx1UgMrAyzmR2lcolfysCKoo/gg
jZk+SMH35Mbvk0dEd+Nxzcn6IirGWIJeSmE4aDgNtPKg2BAWwA2MijN+If4Mj/fp
HDzFDYZNDEPF74s/NZzaaS8OsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB/ZDP5I
JYW1KQ46fkx7qh87346oMB8GA1UdIwQYMBaAFDbXfpJDq7ov1UlqKRgwt9OLC8vE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTJBQy9BNDhENTk2NkJC
M0UxMUVBQTI5RUUzMjFDNEY5QUUwMi9OdGQta2tPcnVpX1ZTV29wR0RDMzA0c0x5
OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL050ZC1ra09ydWlfVlNXb3BHREMzMDRzTHk4US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NTJBQy9BNDhENTk2NkJCM0UxMUVBQTI5RUUzMjFDNEY5QUUwMi9OdGQta2tPcnVp
X1ZTV29wR0RDMzA0c0x5OFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApvnxJUcjpbfjkDIz9IcPFrTFicXIqH2sT9yV2OYwu9ZBO7BSSddEIb94C4qn
pnJkcw3mhMULoMEJLbEvS1sflhewYFNb4hMkIDYOzy9WdMI1dAgePi10C5z9sz5B
1pLN/XjSd25GOipM+iIFocyib6aRLfN0uE4jvXdfw3MtmvWzL1RXYQAujbx72nAo
iu0XmOwdRcmwzG9sjkzsik6Xs44cnaks1vrnJu+SizFiqF6a43cEkp5+NGkYBKb4
00l8q+r5XAKlEx7CSv+KAXZxhgTmJPqxBwqev7IMTbpQfQSv/7I2Q18HGSMU3yHA
4R5oRqxYkm15TwpAl+CeogU2ZA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:04:54 2026 by rpki-client