Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
File:                     ntkFUQfHD4W7kajaAnC1ynYK61Q.mft (raw, json)
Hash identifier:          VTweDvug0NHYoWZ9x5svRStN664v+GadgYw+cK4tAJA=
Subject key identifier:   C3:A4:BC:90:03:86:69:F2:50:40:16:59:C0:AF:C9:A2:04:66:56:73
Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
Certificate issuer:       /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Certificate serial:       37A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
Manifest number:          360E
Signing time:             Mon 02 Mar 2026 00:45:37 +0000
Manifest this update:     Mon 02 Mar 2026 00:45:36 +0000
Manifest next update:     Mon 09 Mar 2026 00:45:36 +0000
Files and hashes:         1: ntkFUQfHD4W7kajaAnC1ynYK61Q.crl (hash: dzrg4DuXerbbAdQht3gQqPa7qW/WJXWTJwZ73GACKw4=)
                          2: 9E1F70A4844911EAA528AD63C4F9AE02.roa (hash: kt+Cf9mIPbIRu1m1WYJwv/k0U/X/kht8lidnJLAx9zo=)
                          3: EF5779B09DD611F0BB1A500DC4F9AE02.roa (hash: B0KLjXcyuPh+vtTk13liw0yksiJoFrvye88u4YCuvwY=)
                          4: FBCDF210490B11EC8E4D1136C4F9AE02.roa (hash: 3T33Cvu4feUgUnrvI1l8FABrQ1FL9sQBWMbRXq9uBuU=)
                          5: 7D745B8C800411EB9398C63EC4F9AE02.roa (hash: RXizLgbeQx66F3KEgqGb3YclpFNAztOvxV6H3stthrE=)
                          6: D9D185C6D27A11F092DEA24AC4F9AE02.roa (hash: q8O+NOZn42b6KJJb4RwUe455TZClKV7v5qr2WMXs3A8=)
                          7: BB7CEA8CEF3B11ECABCC5E3EC4F9AE02.roa (hash: 9Vskvqmdmvz+Aot+UciMJyoJ7hB1RWrR9/LyiS2Awus=)
                          8: 7A58C8D6BBEA11EA8DF46778C4F9AE02.roa (hash: qNcLRbE6Ajqm/JUInyygs4YSZMtzHSHAM4P3L8vI2Wk=)
                          9: B89BA72097D711EBA8B8BA2AC4F9AE02.roa (hash: K6mpYvGc1dNzqDYK7t7bO8YJTKrANw24vNvUXER9d0Q=)
                          10: 9604F4A6899911EBA32C6224C4F9AE02.roa (hash: WeWsQU1h5/t2J6NLAq7qNH73gvEEAuPM26uqGwNlbi4=)
                          11: 9F2B1EB0892C11EBB29AFF50C4F9AE02.roa (hash: bKh+sb5O3yQCx6tJj3cHSMqLFD7C1LY5yIPMgxrcb4c=)
                          12: 32CF326ECA2E11EA80305F0DC4F9AE02.roa (hash: klgeFY7ErjFWvAIaclUOm4/e0ueZC4LdCGe3/lnFjTI=)
                          13: 167FCE12844B11EA91F6956BC4F9AE02.roa (hash: DKaRWb4HqD7WcaW5EDSzWhkJLODkBMCYiSZPO6Xa9Ro=)
                          14: 0F3F5C24FF0E11EFB7B9A13CC4F9AE02.roa (hash: nXxKQeupAHWu0+rQi+prWqYe1pxneEGIFehlt67geeM=)
                          15: D6672BEE0BD111ECB2E9C868C4F9AE02.roa (hash: lEh9L7iyp5I84rP98tz9XY5hEAb4pddo1gVVYE+BqlM=)
                          16: 13C828C62D8911EBA7D22C3EC4F9AE02.roa (hash: vlgUqqYMtxXOpx1btvYX2OKVBTB12NLfhpS9FBdQ9GQ=)
                          17: 691D0462E6FD11F09102F531686F56BC.roa (hash: s3XOtREdrtdcjsTSgClE3hP0s/54bsxcZ0HZsg7SLQ4=)
                          18: F33CEFA6FF0C11EFAFAF7D3AC4F9AE02.roa (hash: rJiHsJP15y6s27tpWy8/q+1Q2pwCJ8WjfCbETDXELI0=)
                          19: DF6E9324D08D11EA9010E72EC4F9AE02.roa (hash: 4gRjk/a+y32MBxnxBhlAFSY+5fr6B9/EENrjDEtX9bo=)
                          20: B34368F8BA9311EEB0A64B2AC4F9AE02.roa (hash: vjbE3n1R2cxCR3lweyv7XV93L3Fooo3SLoUGoIPh4Ak=)
                          21: 7418230A6D4B11EBB1805C0DC4F9AE02.roa (hash: 6T58SHnRQWimfl2Rj2N+WBpo5imULsKQ9l4of58PKEs=)
                          22: D10DBCB2475C11EEBF5FB180C4F9AE02.roa (hash: w+dWahSYH/nwFg8ywBlpCH/uzBzau9TppkYVuitg46M=)
                          23: D9E23E4A6D4C11EB938EC44DC4F9AE02.roa (hash: b2y2J6/z/gcRK/gveV1KQ00j/ViZLyk3FJICkyKEFNo=)
                          24: 35E95924844811EAB301615FC4F9AE02.roa (hash: 5YpQ56ePmOcQkHTGfajO3xIG86lH7CFGouAYwZN0jk4=)
                          25: 9D67280A844911EAA528AD63C4F9AE02.roa (hash: 3NMq9Cr2N9nMNrvvAHlrq09B0wLLBOON5QqPWSCtmhE=)
                          26: 160E2D60FF0D11EF8B23C73AC4F9AE02.roa (hash: R/yGbB08sL7OdNkO4qOx253IAsUrvFP+E6N74t2tCCw=)
                          27: 443470FC7C1511EBB779C03EC4F9AE02.roa (hash: vYN7/c1B8Ga9EWk1RUAg/0I5t4XRYaLcx/7jkQAcJVE=)
                          28: 9B4B6C82904911EABE5F0C63C4F9AE02.roa (hash: VLAT/M2ruyTEQUd6hodWbMw2Jqr6BHFT+yCvjnUWSAs=)
                          29: 35575C68844811EAB301615FC4F9AE02.roa (hash: PAjH5BWsYwwbYulURdBY/i0TWE0981n0aqp1DU7p2L8=)
                          30: FAF25932427711EEBEA02D22C4F9AE02.roa (hash: XW6xQ4m33bll1QQo6ExM0djcwBQb4VCBIwadzzbBLqg=)
                          31: DED04A561D4111EB89535E1EC4F9AE02.roa (hash: yPYSk8I2lF3QjSmBxC3i1zDfO/sGC0NjaZGGjHen8ew=)
                          32: 150DA58AFF0D11EF8B23C73AC4F9AE02.roa (hash: DJPSeQ1mdqr75sC1KYYLFzh6OvMDyMyQNXCMF7yveZo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14249 (0x37a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0832, serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
        Validity
            Not Before: Mar  2 00:45:36 2026 GMT
            Not After : Mar  9 00:45:36 2026 GMT
        Subject: CN=69a4ddb1-cd1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:84:44:d2:43:d3:5e:37:75:ce:cf:a2:76:95:
                    57:15:b5:35:5a:03:c7:4c:d4:ce:16:7c:fc:73:08:
                    f7:96:b6:42:ad:19:16:a6:d7:4b:c8:9e:d6:e2:70:
                    37:1e:ad:9f:40:3d:9e:1e:1e:8f:22:41:aa:6a:60:
                    bc:af:ed:89:34:03:5a:1f:9e:5f:d7:68:5a:fb:96:
                    4e:d5:37:1c:01:11:b9:e3:98:2c:fd:18:c6:fc:1b:
                    a1:a6:cc:38:e0:60:66:c4:bc:9e:81:e3:bd:41:99:
                    68:d4:02:71:55:6e:89:45:a4:5d:4b:ac:ff:4f:21:
                    0d:32:02:7c:ef:d6:a9:3f:d2:be:be:b1:ec:38:c4:
                    af:ec:9a:a7:6e:53:6d:51:8d:74:5f:be:eb:c3:ad:
                    00:bb:a8:03:34:4e:61:30:1a:89:fd:14:98:60:8b:
                    af:0f:96:6c:53:2a:f2:cc:6d:d1:58:aa:f0:56:ef:
                    51:2c:da:30:1a:07:c2:56:db:a3:53:79:83:38:c0:
                    ac:df:3b:31:88:ef:d8:c1:dd:d9:57:68:93:b7:4b:
                    25:4f:ad:4d:94:50:e9:eb:39:9d:9d:94:31:fd:f8:
                    27:a7:06:54:a8:14:76:ee:b7:b1:e0:23:92:79:98:
                    fa:7a:6b:23:4d:43:56:13:a3:a9:33:0b:dd:02:92:
                    e5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A4:BC:90:03:86:69:F2:50:40:16:59:C0:AF:C9:A2:04:66:56:73
            X509v3 Authority Key Identifier:
                keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:db:d5:15:ec:32:0d:a0:13:27:5e:ea:ff:69:b0:af:ec:64:
         54:98:cc:cc:e8:9f:06:87:c0:61:22:10:80:95:a3:cf:19:cc:
         5e:c5:9d:5b:34:69:e1:28:e4:10:22:42:cc:5b:ad:90:0d:5f:
         e5:3a:b6:7e:a3:28:18:13:46:6c:9f:23:a9:5d:89:9f:c9:b1:
         9b:6c:2b:ec:49:2b:3f:12:a9:36:5b:1c:51:27:57:de:18:53:
         44:6e:4d:b9:b0:ed:f7:37:24:e4:21:50:45:9b:3c:b4:fb:e1:
         41:a5:e7:fd:e1:95:1e:32:1c:6c:75:7d:12:52:ca:e1:58:97:
         9a:17:f5:aa:28:29:c4:18:c3:89:99:2d:c6:f0:47:f3:4e:e5:
         d1:86:07:d1:00:c2:fe:01:14:62:7d:35:a7:0b:8b:70:17:5e:
         1c:26:34:b4:8e:23:cf:66:85:b0:18:5c:a7:6b:c4:fb:36:fd:
         c0:d7:e0:28:06:ba:9c:34:fd:dd:f6:55:b7:3c:9d:51:f8:2d:
         50:4b:bd:95:4c:9f:c2:bf:26:d0:80:b6:22:fa:53:5f:4e:27:
         8c:4a:db:12:43:23:8e:13:b1:2b:31:39:ed:ef:23:5f:bf:a6:
         30:f4:08:00:f8:68:cf:75:0f:2d:11:a3:c1:c2:b1:51:4b:e2:
         93:04:ed:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:34:40 2026 by rpki-client