Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
File:                     Ntd-kkOrui_VSWopGDC304sLy8Q.mft (raw, json)
Hash identifier:          R9xjUnY0HcA9VfttHhwSqgCUhfB1rxyCQfLRJXxTswg=
Subject key identifier:   FA:9D:94:1B:E6:FE:CE:97:84:CE:7C:5D:BF:61:5E:05:3B:60:6E:4C
Authority key identifier: 36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4
Certificate issuer:       /CN=A91452AC/serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4
Certificate serial:       0975
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
Manifest number:          094D
Signing time:             Thu 26 Mar 2026 20:03:35 +0000
Manifest this update:     Thu 26 Mar 2026 20:03:35 +0000
Manifest next update:     Thu 02 Apr 2026 20:03:35 +0000
Files and hashes:         1: Ntd-kkOrui_VSWopGDC304sLy8Q.crl (hash: Rm7rDaOK8Q9TWmesFVLOg8dHiDRzEq7xqdXu+fZEpR8=)
                          2: B453EBC4BB4011EAAF70B028C4F9AE02.roa (hash: lT94xNEkm0/RuJcMLykdff4mRseMOoMW/OqsJc8kVvg=)
                          3: 0F91DE9EAD4C11EB903C150DC4F9AE02.roa (hash: 2MWq2gYgL8Z2r2vMKeBL4wxSZIjEodsX3g/1Rc+PbcA=)
                          4: 72E60DEA3CC911EDA5EBD21DC4F9AE02.roa (hash: z5nXpQYggF7FtxvjRhPO50T8ACMAQ3fNgZEPR5O1d4k=)
                          5: A58B9338AD4A11EBA6B48687C4F9AE02.roa (hash: JFLo1Ja1paalAQ9cRjNBAw9+CXjqmX6hCmHw3VDuOWQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl
                          rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 20:03:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2421 (0x975)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91452AC, serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4
        Validity
            Not Before: Mar 26 20:03:35 2026 GMT
            Not After : Apr  2 20:03:35 2026 GMT
        Subject: CN=69c59117-8270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:35:83:83:56:08:4f:59:d7:bc:b2:51:c6:7d:
                    af:09:e6:2e:9f:ed:66:c4:dc:32:fc:0a:d8:3c:ce:
                    19:cc:5e:31:a3:96:56:70:5a:65:34:a4:0d:89:8c:
                    94:18:7a:68:12:c3:26:11:87:75:6e:39:80:98:88:
                    10:9b:01:30:59:82:08:32:21:ae:20:c2:01:08:57:
                    a6:93:c9:13:8a:1c:d0:cc:29:9e:d0:96:16:e1:d6:
                    48:6c:f8:b9:cd:20:d5:51:b0:6d:f9:e4:11:9b:e7:
                    e2:0b:6a:9f:29:75:48:c7:84:25:92:3b:5d:77:b6:
                    55:f4:9d:81:e8:49:0f:c7:f5:d5:c9:f2:a3:69:6a:
                    60:d0:e0:87:8b:47:82:1c:ad:0a:d3:f5:b9:cd:e2:
                    83:00:ed:8b:90:8f:dd:29:0c:2d:7b:f3:2d:1e:b1:
                    92:68:76:4a:7b:a0:bd:2f:47:69:01:24:ce:02:26:
                    c0:4c:c6:84:f3:02:9f:30:2c:48:86:03:43:03:71:
                    35:42:32:27:7d:fc:2d:97:75:2f:60:2e:a9:32:38:
                    bb:9b:b9:90:03:df:62:84:fe:3b:1f:40:4f:07:f0:
                    c9:d1:15:55:16:2d:d8:de:ae:f6:a3:aa:33:a1:7f:
                    3f:fd:d4:cf:86:86:da:40:45:86:bd:2d:ca:ca:e0:
                    44:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:9D:94:1B:E6:FE:CE:97:84:CE:7C:5D:BF:61:5E:05:3B:60:6E:4C
            X509v3 Authority Key Identifier:
                keyid:36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:a6:b3:88:46:a9:f1:0a:3f:5f:85:3e:8c:41:d4:b7:83:2d:
         c1:09:51:08:0a:1c:eb:b3:d8:76:8a:67:79:56:01:a2:bb:19:
         d3:c1:f0:08:6c:3d:33:a6:3e:c6:9d:fb:13:ae:65:e8:b3:04:
         cb:29:82:78:15:ad:c5:32:3a:f1:78:67:3a:0f:82:7b:2a:e3:
         b1:8b:50:3f:63:6d:be:5e:5c:d9:17:fb:01:a2:ac:45:50:31:
         ec:62:e4:5e:a3:75:36:25:6d:eb:30:f7:da:f1:0d:3b:dd:24:
         34:60:58:04:de:aa:13:07:75:a5:c2:cf:e0:13:fe:d9:44:94:
         9e:5e:51:67:8b:92:ba:80:b7:97:3f:1f:db:98:d5:e9:0a:15:
         d0:fa:54:fe:c0:e7:74:24:de:8a:36:51:ea:45:8e:16:a7:fc:
         6a:08:6e:42:3c:24:9f:10:eb:2e:a6:3a:93:8b:72:28:eb:e4:
         c3:cb:92:7c:29:f0:bc:a4:4c:b0:34:5b:58:62:33:f5:1c:5a:
         c6:1b:2d:65:fa:3f:26:9b:4e:df:ea:50:f5:4d:c7:15:e8:bf:
         11:27:af:8b:f9:24:2f:a7:18:35:69:6c:bb:61:3b:c2:36:30:
         d9:2c:89:a2:c9:98:6f:dd:32:27:69:55:b2:9b:14:88:81:08:
         06:d3:26:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:05:12 2026 by rpki-client