Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
File:                     Ntd-kkOrui_VSWopGDC304sLy8Q.mft (raw, json)
Hash identifier:          +2ayIj2q+tq83PnAwQPUKJga7GjqYbsum0dY4C3ShAY=
Subject key identifier:   4F:07:AD:3A:CA:66:6C:59:8F:02:A9:4F:B9:E6:AA:AA:FB:77:C5:3A
Authority key identifier: 36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4
Certificate issuer:       /CN=A91452AC/serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4
Certificate serial:       0912
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
Manifest number:          08F6
Signing time:             Sat 18 Oct 2025 21:29:15 +0000
Manifest this update:     Sat 18 Oct 2025 21:29:14 +0000
Manifest next update:     Sat 25 Oct 2025 21:29:14 +0000
Files and hashes:         1: Ntd-kkOrui_VSWopGDC304sLy8Q.crl (hash: KL5lN4rSmrgnJUcGRJHdtNKeh9xOX73ilxFwRymCJrc=)
                          2: B453EBC4BB4011EAAF70B028C4F9AE02.roa (hash: Nz/7xCUgKfmqkXApuxeo5myCUO+mgajFtNE4r7Ggzao=)
                          3: A58B9338AD4A11EBA6B48687C4F9AE02.roa (hash: 9S3WJERMTtwQwqkFdyQh2FAfBQXuWIoDgdAQjyhftzk=)
                          4: 72E60DEA3CC911EDA5EBD21DC4F9AE02.roa (hash: zq2Qkn/Tk6HTf9mmAUUEV4eovm/AM6TvEoGB/VFCywQ=)
                          5: 0F91DE9EAD4C11EB903C150DC4F9AE02.roa (hash: KYXdBuY8eVoROAmSDw7JnT54RB6WWf5lcCmMUouYwzY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl
                          rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 21:29:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2322 (0x912)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91452AC, serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4
        Validity
            Not Before: Oct 18 21:29:14 2025 GMT
            Not After : Oct 25 21:29:14 2025 GMT
        Subject: CN=68f406ab-9f67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:39:13:12:b6:27:c5:70:fc:da:10:7d:c5:83:
                    e5:27:74:05:85:68:37:a2:9e:97:8a:b6:e3:6f:76:
                    19:be:16:14:6a:42:9f:37:8f:8b:0a:1e:c6:6d:df:
                    3f:2f:6b:d8:00:5e:c2:ae:09:2f:7a:ae:42:b7:25:
                    f1:5a:b4:b9:71:b4:13:89:b4:8b:29:08:ae:bb:a6:
                    03:48:fa:d0:84:f2:e4:55:77:02:d7:0b:50:52:29:
                    b3:f6:1c:0a:96:24:cc:92:35:e5:fe:77:69:6d:f5:
                    11:1b:bb:37:45:cf:8f:61:00:20:07:01:85:3d:f7:
                    36:aa:fd:d8:b9:57:ff:6d:4f:66:19:5d:a4:d6:3e:
                    bf:8f:89:b1:a8:11:e7:a9:8d:c7:70:48:a2:d1:7c:
                    b5:5f:6c:92:f5:14:07:fe:8a:94:6b:31:40:df:0d:
                    f4:2e:9c:0e:c3:ed:af:a1:14:22:77:b6:85:6b:29:
                    a2:fc:c8:39:9f:49:68:dc:61:b2:f1:33:33:58:da:
                    8b:b0:0b:54:03:46:58:ff:26:75:d9:3d:3a:c7:b4:
                    44:e3:2f:ad:f3:fc:67:78:09:7b:78:eb:61:cf:c3:
                    c7:de:64:9f:cf:84:a6:f5:50:5f:4f:07:c0:3a:c5:
                    d0:5b:09:3a:a5:5a:77:94:ae:f0:3a:e5:ae:b1:3e:
                    f9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:07:AD:3A:CA:66:6C:59:8F:02:A9:4F:B9:E6:AA:AA:FB:77:C5:3A
            X509v3 Authority Key Identifier:
                keyid:36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:5c:97:a9:6f:ee:4e:48:36:79:13:2e:f2:49:22:75:46:87:
         91:0d:be:a7:1d:f8:98:60:4d:dd:67:ab:f5:c1:eb:ab:3f:7e:
         cf:f4:a2:e8:cd:61:a5:3f:53:5a:5a:aa:68:e9:9f:39:0f:3c:
         4c:06:22:f1:02:4f:4f:72:85:0c:90:ce:f7:e6:bd:36:4d:fd:
         3f:f7:46:99:19:ad:ce:7d:a3:0e:94:8e:d4:2c:ee:39:73:99:
         a3:e0:07:e5:9d:10:4c:ce:06:bf:f1:85:61:3a:07:30:06:2e:
         f7:a1:43:13:1d:55:f6:3f:bf:5e:9c:55:cf:a3:77:40:47:f0:
         70:e2:06:79:9d:eb:a3:69:1a:d6:32:2f:a9:13:8f:66:f4:6b:
         55:cf:d1:10:1e:98:4d:bb:ee:c9:66:9a:7e:03:e8:1d:d3:4b:
         c1:63:63:a8:f5:ff:31:8a:9a:20:d9:5e:a6:91:45:7f:dd:af:
         0c:25:d1:18:ab:9d:7c:75:10:1a:c9:83:18:74:fd:fb:76:18:
         8f:cb:be:71:b0:23:bd:5f:0f:4f:5b:f2:7b:8c:c4:43:40:d0:
         e1:e8:33:8a:10:12:39:20:59:7c:c9:2a:90:ec:79:ca:bf:40:
         a4:be:a2:03:5c:86:d5:2d:15:a0:79:54:d0:91:9b:f9:09:ee:
         a3:77:56:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:44:46 2025 by rpki-client