Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
File:                     ntkFUQfHD4W7kajaAnC1ynYK61Q.mft (raw, json)
Hash identifier:          toJtuqCuZ/Qt3fM0U9YdPaB0oIMhNGsulXaINIUGMcE=
Subject key identifier:   25:77:C2:03:CE:FD:3A:C9:4A:75:2B:75:6C:6E:4A:EF:B1:F5:27:29
Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
Certificate issuer:       /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Certificate serial:       37BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
Manifest number:          361E
Signing time:             Tue 24 Mar 2026 14:47:02 +0000
Manifest this update:     Tue 24 Mar 2026 14:47:02 +0000
Manifest next update:     Tue 31 Mar 2026 14:47:02 +0000
Files and hashes:         1: ntkFUQfHD4W7kajaAnC1ynYK61Q.crl (hash: 6Flp7iIL6LRFN45SnOcNR9AD46Vc7n28outnRBIN4wQ=)
                          2: B89BA72097D711EBA8B8BA2AC4F9AE02.roa (hash: K6mpYvGc1dNzqDYK7t7bO8YJTKrANw24vNvUXER9d0Q=)
                          3: D10DBCB2475C11EEBF5FB180C4F9AE02.roa (hash: w+dWahSYH/nwFg8ywBlpCH/uzBzau9TppkYVuitg46M=)
                          4: F33CEFA6FF0C11EFAFAF7D3AC4F9AE02.roa (hash: rJiHsJP15y6s27tpWy8/q+1Q2pwCJ8WjfCbETDXELI0=)
                          5: 0F3F5C24FF0E11EFB7B9A13CC4F9AE02.roa (hash: nXxKQeupAHWu0+rQi+prWqYe1pxneEGIFehlt67geeM=)
                          6: BB7CEA8CEF3B11ECABCC5E3EC4F9AE02.roa (hash: 9Vskvqmdmvz+Aot+UciMJyoJ7hB1RWrR9/LyiS2Awus=)
                          7: 167FCE12844B11EA91F6956BC4F9AE02.roa (hash: DKaRWb4HqD7WcaW5EDSzWhkJLODkBMCYiSZPO6Xa9Ro=)
                          8: D6672BEE0BD111ECB2E9C868C4F9AE02.roa (hash: lEh9L7iyp5I84rP98tz9XY5hEAb4pddo1gVVYE+BqlM=)
                          9: 35575C68844811EAB301615FC4F9AE02.roa (hash: PAjH5BWsYwwbYulURdBY/i0TWE0981n0aqp1DU7p2L8=)
                          10: 150DA58AFF0D11EF8B23C73AC4F9AE02.roa (hash: DJPSeQ1mdqr75sC1KYYLFzh6OvMDyMyQNXCMF7yveZo=)
                          11: FAF25932427711EEBEA02D22C4F9AE02.roa (hash: XW6xQ4m33bll1QQo6ExM0djcwBQb4VCBIwadzzbBLqg=)
                          12: FBCDF210490B11EC8E4D1136C4F9AE02.roa (hash: 3T33Cvu4feUgUnrvI1l8FABrQ1FL9sQBWMbRXq9uBuU=)
                          13: 32CF326ECA2E11EA80305F0DC4F9AE02.roa (hash: klgeFY7ErjFWvAIaclUOm4/e0ueZC4LdCGe3/lnFjTI=)
                          14: 7A58C8D6BBEA11EA8DF46778C4F9AE02.roa (hash: ozYdcypfMCZyOHk5qYBu5zAL7TAlhpoz1aafR9o/eV8=)
                          15: 7D745B8C800411EB9398C63EC4F9AE02.roa (hash: RXizLgbeQx66F3KEgqGb3YclpFNAztOvxV6H3stthrE=)
                          16: 160E2D60FF0D11EF8B23C73AC4F9AE02.roa (hash: R/yGbB08sL7OdNkO4qOx253IAsUrvFP+E6N74t2tCCw=)
                          17: 13C828C62D8911EBA7D22C3EC4F9AE02.roa (hash: uf6ELmqop0XBEWprB9YO59fuCd/oyOYwWcsuivGImQg=)
                          18: 443470FC7C1511EBB779C03EC4F9AE02.roa (hash: vYN7/c1B8Ga9EWk1RUAg/0I5t4XRYaLcx/7jkQAcJVE=)
                          19: B34368F8BA9311EEB0A64B2AC4F9AE02.roa (hash: vjbE3n1R2cxCR3lweyv7XV93L3Fooo3SLoUGoIPh4Ak=)
                          20: 9D67280A844911EAA528AD63C4F9AE02.roa (hash: 3NMq9Cr2N9nMNrvvAHlrq09B0wLLBOON5QqPWSCtmhE=)
                          21: DED04A561D4111EB89535E1EC4F9AE02.roa (hash: yPYSk8I2lF3QjSmBxC3i1zDfO/sGC0NjaZGGjHen8ew=)
                          22: DF6E9324D08D11EA9010E72EC4F9AE02.roa (hash: 4gRjk/a+y32MBxnxBhlAFSY+5fr6B9/EENrjDEtX9bo=)
                          23: D9D185C6D27A11F092DEA24AC4F9AE02.roa (hash: q8O+NOZn42b6KJJb4RwUe455TZClKV7v5qr2WMXs3A8=)
                          24: 9604F4A6899911EBA32C6224C4F9AE02.roa (hash: WeWsQU1h5/t2J6NLAq7qNH73gvEEAuPM26uqGwNlbi4=)
                          25: 7418230A6D4B11EBB1805C0DC4F9AE02.roa (hash: 6T58SHnRQWimfl2Rj2N+WBpo5imULsKQ9l4of58PKEs=)
                          26: 691D0462E6FD11F09102F531686F56BC.roa (hash: s3XOtREdrtdcjsTSgClE3hP0s/54bsxcZ0HZsg7SLQ4=)
                          27: 9B4B6C82904911EABE5F0C63C4F9AE02.roa (hash: VLAT/M2ruyTEQUd6hodWbMw2Jqr6BHFT+yCvjnUWSAs=)
                          28: D9E23E4A6D4C11EB938EC44DC4F9AE02.roa (hash: b2y2J6/z/gcRK/gveV1KQ00j/ViZLyk3FJICkyKEFNo=)
                          29: 35E95924844811EAB301615FC4F9AE02.roa (hash: 5YpQ56ePmOcQkHTGfajO3xIG86lH7CFGouAYwZN0jk4=)
                          30: EF5779B09DD611F0BB1A500DC4F9AE02.roa (hash: B0KLjXcyuPh+vtTk13liw0yksiJoFrvye88u4YCuvwY=)
                          31: 9F2B1EB0892C11EBB29AFF50C4F9AE02.roa (hash: bKh+sb5O3yQCx6tJj3cHSMqLFD7C1LY5yIPMgxrcb4c=)
                          32: 9E1F70A4844911EAA528AD63C4F9AE02.roa (hash: kt+Cf9mIPbIRu1m1WYJwv/k0U/X/kht8lidnJLAx9zo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 14:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14268 (0x37bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0832, serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
        Validity
            Not Before: Mar 24 14:47:02 2026 GMT
            Not After : Mar 31 14:47:02 2026 GMT
        Subject: CN=69c2a3e6-f80d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9f:d0:78:23:83:0a:05:36:64:80:c1:de:1b:
                    16:23:d5:56:2a:26:8c:60:49:a5:f6:49:9b:6e:03:
                    32:c4:a7:5e:7c:e4:1c:62:3d:eb:85:7e:b3:e7:f6:
                    bd:d9:8b:e5:78:cb:da:94:06:fc:a9:e3:32:86:fe:
                    b2:c4:f5:58:84:bb:f5:6c:53:49:28:dc:ac:0d:ab:
                    6d:3a:49:22:78:51:79:ab:b0:cb:8e:6e:cb:81:c6:
                    af:c7:d9:43:fd:41:14:90:28:54:65:1f:e6:ea:ff:
                    55:91:01:c6:a6:01:bd:a8:37:84:a9:b3:7e:62:66:
                    c5:6f:33:19:15:48:2e:5b:c2:0e:f8:be:5f:6d:93:
                    71:a4:ec:0d:bc:ab:3d:06:a6:c5:bc:f5:63:27:18:
                    d7:0c:f3:73:5d:c6:f7:4b:92:cd:cf:9a:d8:b9:6b:
                    53:7a:47:96:f6:ab:ee:2d:7c:b9:22:2c:00:a6:64:
                    67:19:b3:b9:72:31:1c:3f:5f:35:e0:17:ca:96:99:
                    53:96:ec:be:75:6e:e2:8b:67:8f:3d:a3:31:b2:bf:
                    f0:2e:58:8f:4f:3e:6f:ab:2d:db:99:bc:05:44:18:
                    05:b9:19:97:f6:79:6a:3a:1a:18:0f:ea:c9:f7:fb:
                    69:9e:5c:a3:ae:9d:49:8f:dd:f0:2d:33:b7:83:76:
                    ba:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:77:C2:03:CE:FD:3A:C9:4A:75:2B:75:6C:6E:4A:EF:B1:F5:27:29
            X509v3 Authority Key Identifier:
                keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:cc:84:76:f8:48:6f:6f:b1:c4:d5:15:96:d9:37:22:73:12:
         4f:1b:dd:92:42:9a:05:6b:37:ef:fe:41:c7:21:d5:14:ee:d9:
         47:36:d3:bf:eb:fd:dc:1a:30:a5:99:f0:62:04:93:28:a0:9f:
         42:9a:81:29:db:12:d4:e9:34:b5:61:ec:7b:41:03:81:f6:34:
         d2:25:26:96:6b:c2:d4:4d:c8:6a:88:d0:58:ec:c8:02:94:70:
         f5:b4:4a:d3:2a:56:69:90:cc:08:0d:62:7e:79:ef:c7:01:0b:
         ed:9d:d9:08:c0:b9:01:9f:19:3f:3b:14:66:3c:e3:c0:9f:02:
         c8:d5:7a:8c:5f:db:ac:d7:a0:08:14:a8:26:c5:70:51:1c:f9:
         82:dc:9e:14:c8:e3:cf:b9:40:48:f5:d0:a1:c9:8f:a0:6e:85:
         b4:39:84:c9:98:9f:99:df:52:21:9c:e2:a5:ab:af:a7:8f:be:
         3d:7f:e6:e4:20:09:a8:30:30:10:91:5d:98:01:46:a5:ad:1e:
         17:5f:84:06:d7:6e:90:9b:58:0d:19:25:5a:48:7b:0a:6a:5e:
         d4:e0:e4:72:d4:69:44:95:a0:ef:ef:7b:33:2d:d7:6f:a1:07:
         4b:34:07:66:6a:75:11:70:e6:f7:af:06:ea:91:c0:ea:ca:1d:
         2f:ae:aa:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:35:36 2026 by rpki-client