Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
File:                     ntkFUQfHD4W7kajaAnC1ynYK61Q.mft (raw, json)
Hash identifier:          E1HqXxF/JpFhSfRia/XJ1MLgvPz3x8VMa+hn9vYcgQ8=
Subject key identifier:   AA:FA:68:91:24:FC:3E:2C:D8:3F:BA:14:BA:49:9C:93:72:4D:53:46
Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
Certificate issuer:       /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Certificate serial:       3746
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
Manifest number:          35CD
Signing time:             Tue 04 Nov 2025 14:51:18 +0000
Manifest this update:     Tue 04 Nov 2025 14:51:17 +0000
Manifest next update:     Tue 11 Nov 2025 14:51:17 +0000
Files and hashes:         1: ntkFUQfHD4W7kajaAnC1ynYK61Q.crl (hash: ZlqgOaTT0VKy0HpyegULj7Sro2pkMt/K1oZ/4PJoajA=)
                          2: 9D67280A844911EAA528AD63C4F9AE02.roa (hash: VYBHve/PNmOFeIWgiVN/Red7+4ngw1/OUZ+8fRDI5rI=)
                          3: F0D8670E641711EEB4A16E1FC4F9AE02.roa (hash: VubRHHBc3Mp0miN/hmjpYpMhRr6R/fcT8ESI96i2bn0=)
                          4: 35575C68844811EAB301615FC4F9AE02.roa (hash: IpJzY/E3RfTD/Jty42OF5cBR7XD15VMXMCEpMRRL3LU=)
                          5: 9604F4A6899911EBA32C6224C4F9AE02.roa (hash: irNVJAgK3pBegIwIYQHvfU2ICa37uezrCrR7Sshxk/Y=)
                          6: 7418230A6D4B11EBB1805C0DC4F9AE02.roa (hash: JqpaA6uavzScEzQE05g7FN0bGDgZqNMIyby4mXtlKkU=)
                          7: B89BA72097D711EBA8B8BA2AC4F9AE02.roa (hash: RZHpITklMqhnuO90bEeP3i7RWRtO5TJRoQwAU5BGgUs=)
                          8: 7A58C8D6BBEA11EA8DF46778C4F9AE02.roa (hash: VrbZ7ZecbNcImk9iVkkzXLKwbDb+F2iSfzr14g+V7aQ=)
                          9: 9F2B1EB0892C11EBB29AFF50C4F9AE02.roa (hash: C9sOI6EfTgRnMQGNjlrtl3KFe7JPwkVRiva430VVNhg=)
                          10: 35E95924844811EAB301615FC4F9AE02.roa (hash: LgoFbTvnCYGxtb9l3zKpoNxXJ+KSjB/JRV9oy3sEYvk=)
                          11: 32CF326ECA2E11EA80305F0DC4F9AE02.roa (hash: Tvw2f69b+5p+ID20B8iBZZ0yBfURv9eNZRD114TIL4I=)
                          12: BB7CEA8CEF3B11ECABCC5E3EC4F9AE02.roa (hash: Pysow4ghhE6bNtWAkyi1inOqPNBVAlZxtG0k9FkRDpM=)
                          13: DED04A561D4111EB89535E1EC4F9AE02.roa (hash: YIkgFm4YlQ3B4lEIbOf0SksB4/x97E+3vlPXwWTeW9Y=)
                          14: 443470FC7C1511EBB779C03EC4F9AE02.roa (hash: GJ+Ts94sVlUdI4E9xrQTvfVMrj+KCnN2xtF35+3yCvE=)
                          15: 167FCE12844B11EA91F6956BC4F9AE02.roa (hash: 89eEUpRQHSJ8X1lImXGmURAImfIF1FtpfbrbpBLEmDo=)
                          16: 9E1F70A4844911EAA528AD63C4F9AE02.roa (hash: ukv1HUDNVDJbCJlkSDyGbdgGzyB74+5Ji2qFWgrv0gw=)
                          17: 150DA58AFF0D11EF8B23C73AC4F9AE02.roa (hash: idSl8lJvkqdSo60nq2wum68o9p4rKFmDbGlEVDUP4DE=)
                          18: D10DBCB2475C11EEBF5FB180C4F9AE02.roa (hash: UStQZ3E5ENhOJAnKZAoPf8pnLHZK3+vt2+bwJ7bo508=)
                          19: D9E23E4A6D4C11EB938EC44DC4F9AE02.roa (hash: jV1pO0tJQkm8tDF//+xAb/Vr8QQlVyReb+p4WbFsB4g=)
                          20: B34368F8BA9311EEB0A64B2AC4F9AE02.roa (hash: vzBcTdf96+UTQqQZlkeYwtQci7kemGbUS01k0jfvWtI=)
                          21: DF6E9324D08D11EA9010E72EC4F9AE02.roa (hash: hFXanv2FdjB0oerr/Ni9RmWLKXd7bj75bYHKTp5JZ4U=)
                          22: 160E2D60FF0D11EF8B23C73AC4F9AE02.roa (hash: DUYEU2WPRgGRjSa+GBl8Qamn18toiw7tspgbnam3lYo=)
                          23: FBCDF210490B11EC8E4D1136C4F9AE02.roa (hash: Qoz5g9368HMZWctAVVNXY9CZ9LyOlyI2/eGHTTT7kQw=)
                          24: FAF25932427711EEBEA02D22C4F9AE02.roa (hash: va72E7xgUhipybtVeUXFFu66WOtMudWBDnK3BZLcOzk=)
                          25: EF5779B09DD611F0BB1A500DC4F9AE02.roa (hash: 74RIIXCsVyk2LOqxXGG8myKMnT9xwaL2IEwmBulTtc4=)
                          26: 0F3F5C24FF0E11EFB7B9A13CC4F9AE02.roa (hash: /p/aYFDXmU+p5r2x/x59lnZ8e1gVGwdb3q9zI0rbkwk=)
                          27: 9B4B6C82904911EABE5F0C63C4F9AE02.roa (hash: EUm4AnmfuJxU75sTZEUXibkajEE5FVqoIFPKGh69ArU=)
                          28: D6672BEE0BD111ECB2E9C868C4F9AE02.roa (hash: jlbUlIXnT9veJGusBLS+x09R8IWreW5sDY2cRLkBosA=)
                          29: F33CEFA6FF0C11EFAFAF7D3AC4F9AE02.roa (hash: hCAJoif7R0PdtafhhCqVg3AWh/fUgT/PZ22s2qQ33mA=)
                          30: 13C828C62D8911EBA7D22C3EC4F9AE02.roa (hash: twGH4Ti0Hxo3XFvPXLG4LeJ5bIvmDJLFNJkw3EGUZio=)
                          31: 7D745B8C800411EB9398C63EC4F9AE02.roa (hash: JRI97yoxRtupHfmn7kbQDCY5sz6BBIJOh/q9HLp8tPI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 14:51:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14150 (0x3746)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0832, serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
        Validity
            Not Before: Nov  4 14:51:17 2025 GMT
            Not After : Nov 11 14:51:17 2025 GMT
        Subject: CN=690a12e5-6115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:74:6e:03:ef:cf:59:a6:8b:d4:d5:59:0f:81:
                    62:fb:ed:da:ac:a0:8a:fe:cf:5e:b2:33:54:bb:d7:
                    b3:2d:dd:4c:78:94:93:0c:a4:d7:50:92:38:03:13:
                    44:65:13:03:9a:b2:8c:e7:99:f9:36:16:0d:1c:2b:
                    fd:a4:05:38:0d:f5:6c:49:26:0b:17:c2:7a:24:21:
                    d5:b0:90:8b:27:8b:6a:12:da:8a:f0:ee:fd:41:0a:
                    5b:37:dd:0b:f3:78:11:ed:82:1f:24:76:5a:4a:84:
                    b5:84:24:75:48:1a:58:dc:04:f4:93:24:9d:fc:ab:
                    6c:9f:5e:12:3e:b6:14:c5:af:aa:90:17:4b:82:a7:
                    a2:da:63:e5:f6:f5:ec:df:40:9f:f3:ac:95:cb:2d:
                    db:1f:2a:f9:b6:68:9d:dd:d7:be:29:ce:fc:8b:db:
                    c5:18:0b:00:14:49:f2:b9:5f:2f:fd:ac:c6:df:33:
                    55:f9:e2:fb:1f:68:61:32:02:b3:bd:c8:87:2e:f5:
                    ef:0b:00:a1:af:a5:15:fc:f2:38:2c:96:19:69:ec:
                    17:e2:cb:ee:bc:9e:7c:16:fc:08:15:aa:ed:ce:d9:
                    31:da:20:37:b7:2b:ec:f5:e2:41:50:02:60:ec:c3:
                    13:c3:7b:51:c7:b0:89:24:16:de:d7:35:12:31:60:
                    88:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FA:68:91:24:FC:3E:2C:D8:3F:BA:14:BA:49:9C:93:72:4D:53:46
            X509v3 Authority Key Identifier:
                keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:e2:b5:7d:f2:5c:40:5c:05:62:6a:9a:28:ce:97:03:df:b9:
         25:ab:04:fe:bd:49:73:b4:a4:87:ec:1d:e9:d1:5c:58:0b:4c:
         3a:25:ec:18:ac:fe:59:48:4f:1a:1a:c8:d4:e4:5a:85:ab:92:
         30:bd:0f:4a:e3:38:4a:ed:83:3e:40:c0:2b:33:8f:fb:37:8d:
         e3:f6:ee:e2:29:92:3b:29:42:15:c8:8e:9d:19:f1:f6:05:94:
         2f:eb:2a:17:64:e9:d3:ba:bf:24:3e:ec:8e:2c:ab:bc:f9:7f:
         b4:cd:db:c6:5b:96:76:8a:f8:19:a0:10:c6:d5:6c:18:df:3c:
         24:a8:33:a6:91:4a:d1:5e:a5:36:e8:87:e3:ba:bb:c4:d5:98:
         17:5d:dd:03:dd:29:ac:a2:bb:94:4e:74:f9:13:87:90:54:85:
         c8:c0:46:96:f7:0f:93:ee:87:02:d2:ed:67:20:f1:7f:35:b4:
         40:e2:94:68:6a:d8:80:56:fe:51:e8:2f:04:a6:53:88:6b:e1:
         f1:87:f9:ee:d6:46:3e:0f:51:fc:f3:ae:09:37:f7:5b:4b:59:
         43:6a:f6:19:64:91:e0:31:be:08:95:ac:46:0d:8d:08:26:12:
         fd:0e:ba:86:b6:d6:49:94:9e:93:3f:ac:73:68:e0:76:bf:24:
         9b:2d:97:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:14:31 2025 by rpki-client