Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B65F5/A5596C2C265E11F1AD6F1E02A7833773/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.mft
File:                     DDU_NVDt4T6n5fKNI6NBYU5p2Mc.mft (raw, json)
Hash identifier:          6Y0G4oiAGSvFFymQox6yJUi/Et/kdl3BPCXlBmaHwqY=
Subject key identifier:   9A:6A:55:21:E2:16:AD:C0:A0:00:AF:3D:A5:4D:82:24:83:4D:B8:E5
Authority key identifier: 0C:35:3F:35:50:ED:E1:3E:A7:E5:F2:8D:23:A3:41:61:4E:69:D8:C7
Certificate issuer:       /CN=A91B65F5/serialNumber=0C353F3550EDE13EA7E5F28D23A341614E69D8C7
Certificate serial:       1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B65F5/A5596C2C265E11F1AD6F1E02A7833773/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.mft
Manifest number:          1C
Signing time:             Mon 11 May 2026 09:09:00 +0000
Manifest this update:     Mon 11 May 2026 09:08:59 +0000
Manifest next update:     Mon 18 May 2026 09:08:59 +0000
Files and hashes:         1: DDU_NVDt4T6n5fKNI6NBYU5p2Mc.crl (hash: gRM2bJ8WnIkQ8oVRvEK2vO3NOrTxUBOirnaBe1KmMLc=)
                          2: A5F4101E265F11F1B94C1E8FA7833773.roa (hash: NdD/6yvqSj682GK/GjA29aCmHzw6OXoNpRKURJCciB4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B65F5/A5596C2C265E11F1AD6F1E02A7833773/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.crl
                          rsync://rpki.apnic.net/member_repository/A91B65F5/A5596C2C265E11F1AD6F1E02A7833773/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:08:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B65F5, serialNumber=0C353F3550EDE13EA7E5F28D23A341614E69D8C7
        Validity
            Not Before: May 11 09:08:59 2026 GMT
            Not After : May 18 09:08:59 2026 GMT
        Subject: CN=6a019cac-3a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ce:03:63:23:11:17:94:ba:26:d3:93:81:81:
                    d5:c4:48:54:76:e1:2a:e6:2e:00:05:89:9a:39:90:
                    d3:27:dd:84:81:62:61:ae:b6:0a:9f:12:87:57:70:
                    fe:7b:fd:8d:88:b1:ca:1a:2d:01:b3:ee:39:3c:21:
                    aa:36:4a:2f:84:c3:8e:11:bd:6d:7a:31:90:21:5f:
                    67:02:94:3c:90:60:eb:e3:b7:62:2a:a3:e5:6c:a1:
                    3c:77:f7:0e:6f:6d:e2:62:65:70:02:36:52:14:65:
                    6c:f9:d5:a0:d6:4d:d7:bb:87:cc:5a:6a:97:c5:fd:
                    86:18:2c:88:07:9c:4b:18:ab:be:5e:ab:b4:54:9e:
                    17:ba:7c:9c:77:cd:d4:ab:71:9b:b8:71:e4:91:41:
                    15:ac:c2:94:96:1d:76:ec:03:7f:d6:92:ea:9a:28:
                    98:c5:70:c0:14:10:ad:65:22:71:cb:1c:d9:ad:20:
                    db:a3:4d:a5:fe:ac:ae:ce:18:83:12:63:b1:0c:38:
                    a2:43:c8:81:27:36:e9:72:72:91:32:1a:e8:33:d5:
                    39:39:b9:97:ee:42:11:73:15:21:73:e4:4e:37:ea:
                    5f:53:d3:d1:72:4b:2d:eb:e2:17:a1:11:ed:b5:9f:
                    df:67:ef:c2:87:1d:98:a1:f7:3d:87:f6:7e:1b:2e:
                    19:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:6A:55:21:E2:16:AD:C0:A0:00:AF:3D:A5:4D:82:24:83:4D:B8:E5
            X509v3 Authority Key Identifier:
                keyid:0C:35:3F:35:50:ED:E1:3E:A7:E5:F2:8D:23:A3:41:61:4E:69:D8:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B65F5/A5596C2C265E11F1AD6F1E02A7833773/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65F5/A5596C2C265E11F1AD6F1E02A7833773/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:bc:b0:02:f6:be:35:41:ae:40:a3:59:6b:00:da:ee:64:dc:
         cb:97:8e:b5:15:43:96:de:d7:65:7e:ed:8b:45:e4:ca:ec:57:
         d0:a4:78:b6:cc:53:a7:8e:45:3a:b3:82:5e:68:b6:87:65:54:
         3b:65:44:bc:a5:d9:e4:f8:f0:04:3e:f4:50:e5:89:2a:64:35:
         2c:cd:6f:5d:5e:46:a6:f0:c7:fc:ce:a7:0c:8c:a1:3b:01:73:
         c3:ac:40:6e:7d:da:fe:00:20:c1:5c:3e:42:e1:bd:26:a4:1a:
         94:f6:04:e3:d5:2e:b3:36:c2:7e:6c:8a:8c:85:a9:6e:be:39:
         70:c0:eb:9e:50:81:ae:9d:8f:27:34:05:ee:ad:99:5a:88:b7:
         33:e9:4b:3d:cf:e5:82:47:99:08:45:e3:d8:92:d7:b1:7b:6a:
         c5:c2:c2:b7:f9:cc:4d:c0:bf:52:54:e7:70:ff:b9:92:13:2c:
         fc:07:11:97:e4:08:fa:3c:4e:11:c6:56:37:06:61:d5:17:ac:
         86:62:58:1f:7d:ad:b7:81:51:d2:a3:6b:7b:f2:14:ce:d4:98:
         fe:3f:67:91:3c:af:89:9c:cd:df:4a:b9:0e:88:f3:81:c0:6b:
         9f:a8:da:5d:51:1d:20:25:96:41:cf:17:b6:ef:25:38:04:18:
         a7:27:fd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:57:33 2026 by rpki-client