Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
File:                     Ntd-kkOrui_VSWopGDC304sLy8Q.mft (raw, json)
Hash identifier:          OpjbsXllg7E/p/Y3PdOvrf4xIbC+Bn9WV1eqspsgV28=
Subject key identifier:   D1:B3:0B:1B:32:4B:47:C6:D2:8B:4A:19:00:FA:55:4E:0F:EC:CE:98
Authority key identifier: 36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4
Certificate issuer:       /CN=A91452AC/serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4
Certificate serial:       08DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
Manifest number:          08BF
Signing time:             Wed 02 Jul 2025 20:46:58 +0000
Manifest this update:     Wed 02 Jul 2025 20:46:57 +0000
Manifest next update:     Wed 09 Jul 2025 20:46:57 +0000
Files and hashes:         1: Ntd-kkOrui_VSWopGDC304sLy8Q.crl (hash: 0xN4QDw3E0ZRRGBS1I5/Q+lly9wkCWpCEm2ull3ntks=)
                          2: B453EBC4BB4011EAAF70B028C4F9AE02.roa (hash: Nz/7xCUgKfmqkXApuxeo5myCUO+mgajFtNE4r7Ggzao=)
                          3: A58B9338AD4A11EBA6B48687C4F9AE02.roa (hash: 9S3WJERMTtwQwqkFdyQh2FAfBQXuWIoDgdAQjyhftzk=)
                          4: 72E60DEA3CC911EDA5EBD21DC4F9AE02.roa (hash: zq2Qkn/Tk6HTf9mmAUUEV4eovm/AM6TvEoGB/VFCywQ=)
                          5: 0F91DE9EAD4C11EB903C150DC4F9AE02.roa (hash: KYXdBuY8eVoROAmSDw7JnT54RB6WWf5lcCmMUouYwzY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl
                          rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 20:46:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2267 (0x8db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91452AC, serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4
        Validity
            Not Before: Jul  2 20:46:57 2025 GMT
            Not After : Jul  9 20:46:57 2025 GMT
        Subject: CN=68659ac2-2958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3c:e4:d9:71:cd:2c:c1:e8:ae:91:3f:f5:3a:
                    2c:36:ba:6c:c9:d8:21:62:49:7b:5a:41:49:f5:b8:
                    e7:4d:f1:2c:21:d6:b9:34:df:b5:d4:cc:1a:f9:d3:
                    8e:9a:43:e3:cd:a0:8a:18:1a:d0:2e:6e:e3:ca:f4:
                    f1:7e:37:55:a1:9c:a5:98:78:9a:96:c0:3f:15:fd:
                    f1:8d:11:7d:b6:7f:6a:ea:87:0c:bf:c0:cc:06:18:
                    4a:5b:97:d4:79:28:47:1e:f2:63:53:f9:bb:f4:e3:
                    8e:91:99:b0:e8:f1:cb:ee:ed:e0:59:76:32:08:fd:
                    62:bc:b5:7d:bb:c4:43:19:d9:80:f9:25:e5:d6:f6:
                    cb:ad:50:a9:f6:e5:b9:c4:13:f7:06:81:93:4b:ba:
                    97:e9:86:31:36:d2:17:9d:4a:ed:b0:1f:1b:98:45:
                    7b:3f:fe:18:f4:01:af:ed:88:04:97:91:cb:32:bf:
                    b2:86:26:92:20:55:d7:c8:19:6e:23:6f:de:25:56:
                    34:d9:3c:82:94:81:28:5d:f3:a0:ee:23:ee:e1:17:
                    cb:f2:e4:1b:41:7e:55:99:e2:b8:df:d9:8f:9d:b4:
                    cd:cc:b4:2c:0e:1f:6a:97:66:90:22:10:9b:c4:98:
                    68:16:fd:8a:88:3f:2a:1d:62:2d:86:a2:b3:39:e2:
                    a8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B3:0B:1B:32:4B:47:C6:D2:8B:4A:19:00:FA:55:4E:0F:EC:CE:98
            X509v3 Authority Key Identifier:
                keyid:36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:b1:4e:f4:09:b2:6e:30:f2:00:20:d0:fa:a9:80:a5:79:44:
         bd:3a:b5:5c:dc:16:ab:24:d0:2a:a7:ab:3a:d8:7b:66:24:50:
         da:fa:d6:82:13:c7:7e:0c:8c:46:38:e8:d2:be:04:2b:cf:ef:
         65:66:fc:6b:70:46:9c:d4:49:55:07:19:74:39:4d:9e:6e:30:
         7a:cf:f6:e7:35:79:59:c7:f0:51:d5:17:83:e9:a0:85:bb:54:
         60:23:c0:8d:e9:64:21:53:1f:f4:30:68:8c:cc:e4:14:f7:6a:
         e6:63:59:6b:fd:df:91:c3:dd:fd:7c:2e:12:91:e5:7f:2e:fe:
         55:b3:b4:5f:cd:6d:dc:bf:a2:ce:d7:e5:7b:df:7f:a7:64:18:
         fe:5f:57:88:ee:73:de:90:bd:b1:e4:bf:4e:cb:56:2f:ae:0c:
         96:25:8e:87:63:c2:0e:ac:29:07:52:89:ab:d4:2b:84:54:57:
         ee:50:f3:94:49:64:83:14:1d:f6:fa:1d:00:7f:62:45:9e:17:
         42:59:9a:71:13:7b:e6:8f:ac:c2:4f:43:e9:4e:42:e1:ee:02:
         be:f9:f9:fb:e5:1a:01:55:a9:88:c0:d7:04:4a:15:28:f2:87:
         83:3d:6d:b3:7b:a6:12:d0:60:1d:74:6d:c4:8a:c0:6f:14:16:
         fa:46:94:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 08:06:14 2025 by rpki-client