Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
File:                     ntkFUQfHD4W7kajaAnC1ynYK61Q.mft (raw, json)
Hash identifier:          TMbfbGh0Pg2on2Ae327VP3UFWLmyvwys9KhPDKHHb7s=
Subject key identifier:   0A:8F:25:62:DA:39:8F:93:B9:04:C5:52:46:70:E7:69:19:A1:DA:D9
Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
Certificate issuer:       /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Certificate serial:       3858
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
Manifest number:          3698
Signing time:             Wed 04 Nov 2026 14:48:38 +0000
Manifest this update:     Wed 04 Nov 2026 14:48:38 +0000
Manifest next update:     Wed 11 Nov 2026 14:48:38 +0000
Files and hashes:         1: ntkFUQfHD4W7kajaAnC1ynYK61Q.crl (hash: 6Vc+3JV5wlek5eEp5DZf9DAkSRgm/Ewc9llUuNw+/1E=)
                          2: 167FCE12844B11EA91F6956BC4F9AE02.roa (hash: PzpE7MwYfVRawzIKsbVX370mNdsLgW2Qm+aakZFWhao=)
                          3: 9604F4A6899911EBA32C6224C4F9AE02.roa (hash: V/SzYzu69tmbsxP6bWvkiUxUMh2sV1e0ifoqU8Ehrhk=)
                          4: 13C828C62D8911EBA7D22C3EC4F9AE02.roa (hash: LWvz30J7nqbhh5taPr7hBquNOGwN6yl//Q6amBLA2ko=)
                          5: D10DBCB2475C11EEBF5FB180C4F9AE02.roa (hash: BRxvYL/f6CA3SKIVGbpzXkGKWWs47DxZMHo2MAWlkko=)
                          6: 7418230A6D4B11EBB1805C0DC4F9AE02.roa (hash: DvMc+C7ydaggndrUk3IDkyvlx9FwffySugOxDXp6bws=)
                          7: 35575C68844811EAB301615FC4F9AE02.roa (hash: p84kXPlD9gr0uNcPrMPIN+YNKnf8ICmyXIZyV2BXrVg=)
                          8: D9D185C6D27A11F092DEA24AC4F9AE02.roa (hash: hAsd4MgKrzzFojSm6DEKyVq+itBFW1idmKj+K2KrQmQ=)
                          9: B34368F8BA9311EEB0A64B2AC4F9AE02.roa (hash: An3BggKdBYLbEgb3Hrkj33h4yocMp14OUbjX/d9n+NU=)
                          10: B1A0E8244BA311F19791B23AC5833773.roa (hash: A99ABypzCZ+ewAkIIkapFs2BFjyVKadz1LMqLiEqBqc=)
                          11: EF5779B09DD611F0BB1A500DC4F9AE02.roa (hash: xtJKVVrh02G9dTMpH4EO7nBEDufcmTJ1uO4G5ShnUy4=)
                          12: DF6E9324D08D11EA9010E72EC4F9AE02.roa (hash: GDlrFsOMkk+fcO+QcoEg0Xz8k+lsBwDQwOJ1oO6ZWm8=)
                          13: D9E23E4A6D4C11EB938EC44DC4F9AE02.roa (hash: zMHfwZgdZ0ZZwpzwsqGwEeST/OYG6+IfNinxg8TADiQ=)
                          14: 32CF326ECA2E11EA80305F0DC4F9AE02.roa (hash: 72prmaxV5I+nRCKgiCmBCuBxHjAnd2zDB9Kx7IAuER8=)
                          15: BB7CEA8CEF3B11ECABCC5E3EC4F9AE02.roa (hash: 4+fNNlvJO8/zUbQ29LqDl04P63xI45pAflNJ0VsGVsA=)
                          16: 9D67280A844911EAA528AD63C4F9AE02.roa (hash: 1Gd0ADieLGVXYOgTjle7Xb85lx7mYyYRHSn9/35nibo=)
                          17: 35E95924844811EAB301615FC4F9AE02.roa (hash: +xVk+rs8Sk3ot4BG/sDDsstuP19HaQF04qYw2FT/AjU=)
                          18: 7D745B8C800411EB9398C63EC4F9AE02.roa (hash: E1QXwlpofWnOF885wZs0H95ShVhWhWqMPlBNA/xt/8E=)
                          19: D6672BEE0BD111ECB2E9C868C4F9AE02.roa (hash: VroGJygKLBjQNkDiUE3DzWiyxIeS84Ur+QvbCD7WMn0=)
                          20: 9F2B1EB0892C11EBB29AFF50C4F9AE02.roa (hash: TsQLO8q3V0PEg/QW2TxOwdlP9q86F7sKiMzK79eK+rc=)
                          21: B89BA72097D711EBA8B8BA2AC4F9AE02.roa (hash: 48+6uM5fDnTMnACjVi51hR8ImGiaIPMtb2QsEfmcA9U=)
                          22: 0F3F5C24FF0E11EFB7B9A13CC4F9AE02.roa (hash: hiI9+9J/yDrdCo+Dium7Ql5PFxHRer5mP0Zz0ZVaF88=)
                          23: DED04A561D4111EB89535E1EC4F9AE02.roa (hash: gjmCrERX6bDJqRAovORADO2jmeMnvAozOWLBNvCikGQ=)
                          24: FAF25932427711EEBEA02D22C4F9AE02.roa (hash: 8hMby2QMc40C7Gl3ib11u7r8k7MSe+ayZqt3WE3eTlM=)
                          25: 691D0462E6FD11F09102F531686F56BC.roa (hash: 0XyfDO8it6I75D9n0w3xE9lzsxnoVx1g4ZUiUe/hMW0=)
                          26: FBCDF210490B11EC8E4D1136C4F9AE02.roa (hash: 47wblHNUHR8QOKJUoT7iYPHs3BqPfi5JcNUXRdRFnRQ=)
                          27: 7A58C8D6BBEA11EA8DF46778C4F9AE02.roa (hash: BCO4TPbsUTXKr6VORkWLBBWoboETmiJ75sR3vzGBSvE=)
                          28: 9E1F70A4844911EAA528AD63C4F9AE02.roa (hash: Gw6eqkoI9GjMAfax+Sy6LiS1Q6bEsJsUys7tDAvsHp8=)
                          29: 9B4B6C82904911EABE5F0C63C4F9AE02.roa (hash: MLGHYtNGkC756TmJuWFDWX+q6uSK7D/1Efdl7Recbww=)
                          30: 443470FC7C1511EBB779C03EC4F9AE02.roa (hash: 59AdWYDXv0qwi7Gjxa16HkdQksWMmrXabTThvXIKiK4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Nov 2026 14:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14424 (0x3858)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0832, serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
        Validity
            Not Before: Nov  4 14:48:38 2026 GMT
            Not After : Nov 11 14:48:38 2026 GMT
        Subject: CN=6aeb45c6-3c3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ed:cf:c0:fc:7e:39:88:e7:e3:3d:50:8c:9c:
                    56:71:9b:4d:4c:fa:4a:2a:55:48:c7:07:21:fe:41:
                    43:29:1f:06:76:fd:ef:c6:50:89:57:9d:e5:25:81:
                    e4:1b:a3:51:89:7a:40:68:cc:82:7d:3e:47:a9:f7:
                    82:56:76:e3:4a:0a:0e:da:29:53:ed:3d:36:a6:28:
                    14:fc:20:c6:0f:a2:4f:15:4b:03:e0:da:83:60:b9:
                    17:20:3c:0b:26:3d:d1:ba:2d:f9:c4:84:ea:4e:c4:
                    57:15:06:8d:12:87:43:72:d9:03:ff:9d:4f:c3:97:
                    10:ab:a1:70:df:ca:e6:dc:91:c7:6e:a4:7d:46:a4:
                    0c:69:33:56:97:d1:8f:85:89:66:65:d7:a1:79:59:
                    d8:81:40:fa:1d:6c:47:9f:d2:1c:2f:c7:78:85:5c:
                    0b:c4:d9:cd:32:a7:e7:0d:20:64:66:28:27:41:06:
                    17:2b:3f:89:31:87:09:3f:f2:3d:aa:a8:de:db:d1:
                    59:79:9e:e6:e7:eb:13:31:bf:a6:5c:96:61:26:89:
                    c5:07:b7:15:61:e0:8b:81:0a:db:cd:a7:46:53:95:
                    7c:53:9b:33:0a:d5:ef:f9:86:cc:60:72:64:e5:fa:
                    8f:58:54:f4:91:40:1f:d1:d4:81:72:2d:d0:ff:5f:
                    d1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:8F:25:62:DA:39:8F:93:B9:04:C5:52:46:70:E7:69:19:A1:DA:D9
            X509v3 Authority Key Identifier:
                keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:04:10:83:ac:10:b4:2a:b4:f6:52:c1:34:49:f0:20:46:79:
         e0:c0:21:9b:50:c1:e2:2b:0f:4e:80:10:43:5a:07:f8:20:b3:
         7a:ef:cf:ed:5a:fc:0a:e6:1e:eb:9c:d5:a6:2a:71:a1:67:be:
         da:b7:30:8b:ff:cf:fe:21:e5:d8:ca:20:92:07:bf:75:92:28:
         8f:36:7c:a1:e8:fa:17:d9:62:25:27:a1:8e:9a:63:cb:2d:73:
         30:08:25:33:16:ca:6d:e6:9c:a7:54:51:ad:b4:6c:8c:da:48:
         fa:c8:c6:35:fe:86:e4:7e:e3:04:84:04:2b:2c:2b:e6:55:16:
         b1:92:f7:c0:1c:a3:f8:d0:a4:69:31:ef:2c:b8:5d:f5:0f:f2:
         46:ca:42:a2:ed:71:ba:66:70:dd:45:49:bf:41:6e:41:84:25:
         cb:7c:7c:75:7a:c5:cd:a3:76:85:a2:cc:fd:52:69:6a:62:6d:
         7c:06:cf:f5:44:79:07:b9:ff:b4:2f:b7:ac:06:43:a8:6f:58:
         30:86:85:d6:a7:4c:20:85:2b:50:10:81:05:fa:3e:2c:49:f9:
         21:ad:00:76:3a:9c:12:a9:c6:0e:d1:06:07:3c:ad:97:8d:74:
         cc:f0:53:6a:2d:c8:33:ea:d7:a3:10:9b:29:30:a7:9d:3b:12:
         b1:49:e2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:55:37 2026 by rpki-client