Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B65F5/A5596C2C265E11F1AD6F1E02A7833773/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.mft
File:                     DDU_NVDt4T6n5fKNI6NBYU5p2Mc.mft (raw, json)
Hash identifier:          Kn1rntiiqZgMgYPYyt/Z0vOb8gTDbl7P84+f4e4bZHY=
Subject key identifier:   ED:32:FD:AB:3C:6F:8D:F1:D4:B1:1E:02:80:1B:AE:6F:83:BE:D6:EB
Authority key identifier: 0C:35:3F:35:50:ED:E1:3E:A7:E5:F2:8D:23:A3:41:61:4E:69:D8:C7
Certificate issuer:       /CN=A91B65F5/serialNumber=0C353F3550EDE13EA7E5F28D23A341614E69D8C7
Certificate serial:       66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B65F5/A5596C2C265E11F1AD6F1E02A7833773/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.mft
Manifest number:          63
Signing time:             Fri 25 Sep 2026 08:13:51 +0000
Manifest this update:     Fri 25 Sep 2026 08:13:51 +0000
Manifest next update:     Fri 02 Oct 2026 08:13:51 +0000
Files and hashes:         1: DDU_NVDt4T6n5fKNI6NBYU5p2Mc.crl (hash: h7XIYRck3W2OuGIQNojs6pDeytu5x+0ntbUk0OtWPb0=)
                          2: A5F4101E265F11F1B94C1E8FA7833773.roa (hash: 6wNq+k1j2pl/PUmuttDlxrYQRBm/XnR1x2JHzgOX+9k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B65F5/A5596C2C265E11F1AD6F1E02A7833773/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.crl
                          rsync://rpki.apnic.net/member_repository/A91B65F5/A5596C2C265E11F1AD6F1E02A7833773/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 08:13:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B65F5, serialNumber=0C353F3550EDE13EA7E5F28D23A341614E69D8C7
        Validity
            Not Before: Sep 25 08:13:51 2026 GMT
            Not After : Oct  2 08:13:51 2026 GMT
        Subject: CN=6ab62d3f-63d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:66:f4:66:82:e2:17:5e:12:0c:7e:50:6b:93:
                    d7:8d:2f:26:f1:af:78:f4:0f:38:92:14:19:a3:f5:
                    ec:03:bd:c3:45:0c:53:18:c2:b1:bd:d7:63:ca:73:
                    5e:af:10:a9:67:2c:72:31:24:78:7c:a7:cb:23:21:
                    0d:e2:3b:60:11:b5:6e:81:ec:07:46:d5:ee:3c:f0:
                    ad:da:20:4d:8c:7b:43:03:79:26:dd:bc:b0:0c:fe:
                    f1:b4:08:31:88:a1:dc:c8:86:4f:17:1e:31:f2:34:
                    90:33:e5:74:c6:87:4d:f5:cb:92:c1:e9:d6:51:73:
                    f0:f9:1c:20:ab:98:69:99:ef:f9:ca:4d:c1:ad:63:
                    38:db:0d:e7:95:eb:0e:a6:a4:87:54:f4:62:20:7a:
                    0e:58:ba:9e:80:c5:9c:c5:2c:38:89:17:42:3f:ad:
                    db:79:ec:5b:d1:c4:0e:ce:67:36:ed:c0:62:fa:76:
                    79:0f:61:d5:99:16:89:3b:49:df:ad:6a:88:68:b9:
                    1b:2f:ee:a9:a7:78:4c:c9:ef:54:21:47:6e:e8:dd:
                    5a:04:63:08:11:76:cd:48:8c:27:0d:d5:a1:31:b2:
                    15:10:0b:47:a8:16:db:80:86:89:e2:bf:ab:91:d4:
                    4d:d3:3e:56:07:ff:df:9f:ba:4a:5e:07:ab:b6:0e:
                    83:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:32:FD:AB:3C:6F:8D:F1:D4:B1:1E:02:80:1B:AE:6F:83:BE:D6:EB
            X509v3 Authority Key Identifier:
                keyid:0C:35:3F:35:50:ED:E1:3E:A7:E5:F2:8D:23:A3:41:61:4E:69:D8:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B65F5/A5596C2C265E11F1AD6F1E02A7833773/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65F5/A5596C2C265E11F1AD6F1E02A7833773/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:60:f7:23:2b:04:74:90:d0:9c:e5:c0:8c:65:de:3e:2a:bb:
         bd:c5:5b:b9:cd:63:41:72:ea:b9:23:db:88:b2:32:fb:cb:a6:
         d1:d3:7b:5d:c0:1e:b3:8e:f6:ec:82:4b:0b:70:4c:f5:ef:96:
         8b:2f:c2:3e:a7:ea:78:1c:ab:73:42:41:d1:35:17:2b:67:0b:
         07:b2:0d:7f:b1:93:ab:27:ef:dd:e5:36:36:8a:3d:05:4a:8c:
         ce:e1:07:0e:a2:cb:e9:15:e0:63:23:e6:bf:1b:96:40:43:47:
         a6:0a:ce:14:f7:fa:03:13:ba:98:7d:4e:01:1e:b2:56:82:d2:
         8b:32:b0:aa:dd:85:86:81:5c:21:89:b1:96:ae:d3:72:18:8c:
         ab:8b:cc:20:a5:15:46:f5:43:9c:6f:49:61:78:1b:db:98:2c:
         fe:16:02:68:ff:11:f0:fb:79:6a:73:ca:19:ba:e2:cc:f1:09:
         72:72:f3:56:85:cf:69:a8:bf:da:13:70:3a:1b:7c:11:99:c7:
         6a:16:85:6e:65:9d:c6:93:a5:10:95:54:38:54:4a:f4:d4:27:
         a1:bd:1d:12:98:25:24:26:6c:91:5e:d8:81:e2:f4:95:1a:ee:
         1b:ee:f6:21:d6:8f:59:fa:f4:17:39:a6:49:f7:6d:d2:04:ca:
         76:24:cc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:38:48 2026 by rpki-client