Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
File:                     Ntd-kkOrui_VSWopGDC304sLy8Q.mft (raw, json)
Hash identifier:          96YsU6vYCF6MJJRj2697xsxJFSgt4U0JwSQMSBs1HmM=
Subject key identifier:   C6:51:DA:A1:14:7A:10:82:36:57:12:91:E2:06:47:27:BE:F5:E1:4E
Authority key identifier: 36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4
Certificate issuer:       /CN=A91452AC/serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4
Certificate serial:       098D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
Manifest number:          0965
Signing time:             Tue 12 May 2026 20:11:21 +0000
Manifest this update:     Tue 12 May 2026 20:11:21 +0000
Manifest next update:     Tue 19 May 2026 20:11:21 +0000
Files and hashes:         1: Ntd-kkOrui_VSWopGDC304sLy8Q.crl (hash: Bx2eLJxL59ptBL89z4MzKicC9jymy+bhYLAvZ5zlmL4=)
                          2: 72E60DEA3CC911EDA5EBD21DC4F9AE02.roa (hash: z5nXpQYggF7FtxvjRhPO50T8ACMAQ3fNgZEPR5O1d4k=)
                          3: B453EBC4BB4011EAAF70B028C4F9AE02.roa (hash: lT94xNEkm0/RuJcMLykdff4mRseMOoMW/OqsJc8kVvg=)
                          4: A58B9338AD4A11EBA6B48687C4F9AE02.roa (hash: JFLo1Ja1paalAQ9cRjNBAw9+CXjqmX6hCmHw3VDuOWQ=)
                          5: 0F91DE9EAD4C11EB903C150DC4F9AE02.roa (hash: 2MWq2gYgL8Z2r2vMKeBL4wxSZIjEodsX3g/1Rc+PbcA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl
                          rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:11:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2445 (0x98d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91452AC, serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4
        Validity
            Not Before: May 12 20:11:21 2026 GMT
            Not After : May 19 20:11:21 2026 GMT
        Subject: CN=6a038969-f40e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:53:8e:54:87:15:22:f6:2a:cc:ef:cb:ad:db:
                    9f:8a:5d:2b:86:99:37:c2:8e:a0:9b:74:ce:98:d1:
                    92:2c:c0:39:c1:ba:12:92:42:e3:89:81:29:c8:7f:
                    9c:1c:b9:cb:af:63:e0:3f:02:c3:66:70:8f:0a:35:
                    2e:d3:29:e8:1f:26:9c:28:31:81:fd:49:32:ea:e9:
                    24:bb:69:b9:3e:bf:1d:a2:03:40:3b:97:98:2b:b3:
                    2a:50:94:9a:f9:4e:12:c3:53:7f:65:dd:61:ca:8a:
                    9d:99:26:16:35:a1:ba:3b:8b:21:b1:91:66:d3:30:
                    39:84:53:ab:0a:37:c6:84:7c:0b:61:57:74:7b:2d:
                    7d:fa:c9:f5:f3:ab:d4:c9:3b:11:1e:fd:a9:42:e1:
                    0e:9c:93:49:3f:16:e4:a0:06:72:83:97:0e:d7:28:
                    77:78:e9:ce:85:11:4e:01:63:40:12:5a:5a:69:d5:
                    f3:6d:43:d6:76:e7:af:f0:46:e7:8c:d1:b7:97:89:
                    bb:a1:8c:5b:fc:d6:33:1f:5b:4a:37:1f:a2:23:a9:
                    db:af:98:5e:98:6a:aa:8f:81:ea:91:3f:9a:37:d4:
                    07:62:05:af:cf:ae:d8:55:82:60:ec:1c:f8:d7:75:
                    0d:42:e6:85:33:aa:95:d0:d5:c1:43:5c:ec:af:af:
                    95:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:51:DA:A1:14:7A:10:82:36:57:12:91:E2:06:47:27:BE:F5:E1:4E
            X509v3 Authority Key Identifier:
                keyid:36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:82:a4:57:ac:13:ee:eb:ee:a7:8c:a5:ad:54:ba:d2:e9:d4:
         24:2e:f8:aa:a2:83:d4:17:e6:da:f4:38:ec:d7:0e:57:64:e8:
         6d:2e:f3:40:0a:80:a1:a4:01:d2:25:d1:8c:cc:c3:e7:ad:cf:
         34:9f:62:0b:5c:4e:00:28:9b:56:7f:c3:67:a5:4a:f8:7d:81:
         8f:ad:e5:22:02:54:f0:bd:12:50:66:1d:f6:de:b8:de:2b:80:
         dd:87:c3:9b:4d:22:4b:d2:b9:b9:81:76:6d:71:2a:f3:45:34:
         a7:ca:dd:fd:04:f9:58:55:8a:1f:13:ba:f0:3f:f6:b7:e1:37:
         68:8e:44:91:ca:04:f6:fd:ad:32:59:df:48:80:30:eb:79:3b:
         ff:a1:44:6c:d3:11:36:12:a7:7a:13:a8:e6:0b:ec:76:52:b6:
         e5:62:30:fe:69:da:36:4e:a9:36:58:0b:f2:7d:a4:5a:fd:dc:
         e4:10:6b:5d:48:c1:e9:e9:84:8c:31:ff:a3:89:5c:a1:85:21:
         fc:c5:0f:46:a5:1e:1a:90:56:07:e6:2a:c5:ba:32:81:37:3c:
         6f:62:cc:22:1d:6a:86:9b:be:37:a1:3c:64:30:84:46:3a:40:
         73:72:c2:ef:b4:78:99:70:88:9e:3f:e0:a4:b5:41:cb:76:62:
         33:5e:0d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:47:21 2026 by rpki-client