Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
File:                     Ntd-kkOrui_VSWopGDC304sLy8Q.mft (raw, json)
Hash identifier:          XRs9CjAoWA5xbliaSc+OSNqokVsTzp85D4TLPUkRvHw=
Subject key identifier:   2A:22:67:D1:91:D7:2D:82:EF:E0:A4:03:B5:64:3A:D6:28:A6:92:90
Authority key identifier: 36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4
Certificate issuer:       /CN=A91452AC/serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4
Certificate serial:       08E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
Manifest number:          08C7
Signing time:             Fri 18 Jul 2025 20:43:31 +0000
Manifest this update:     Fri 18 Jul 2025 20:43:31 +0000
Manifest next update:     Fri 25 Jul 2025 20:43:31 +0000
Files and hashes:         1: Ntd-kkOrui_VSWopGDC304sLy8Q.crl (hash: oZh1JtmMmJxuliqqAohmMzgd1owz2L6IG7sm7W6Aa9A=)
                          2: B453EBC4BB4011EAAF70B028C4F9AE02.roa (hash: Nz/7xCUgKfmqkXApuxeo5myCUO+mgajFtNE4r7Ggzao=)
                          3: A58B9338AD4A11EBA6B48687C4F9AE02.roa (hash: 9S3WJERMTtwQwqkFdyQh2FAfBQXuWIoDgdAQjyhftzk=)
                          4: 72E60DEA3CC911EDA5EBD21DC4F9AE02.roa (hash: zq2Qkn/Tk6HTf9mmAUUEV4eovm/AM6TvEoGB/VFCywQ=)
                          5: 0F91DE9EAD4C11EB903C150DC4F9AE02.roa (hash: KYXdBuY8eVoROAmSDw7JnT54RB6WWf5lcCmMUouYwzY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl
                          rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 20:43:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2275 (0x8e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91452AC, serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4
        Validity
            Not Before: Jul 18 20:43:31 2025 GMT
            Not After : Jul 25 20:43:31 2025 GMT
        Subject: CN=687ab1f3-f87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:07:2b:78:9c:49:62:45:b8:53:df:07:9b:3d:
                    87:92:8b:d3:0a:59:ca:1c:14:e0:43:2b:93:b7:2e:
                    6d:72:79:bc:fa:09:16:96:e2:b6:fb:17:fa:1f:cf:
                    15:94:70:df:34:4e:f2:75:f7:00:17:bb:e7:f9:3c:
                    10:9e:56:c9:76:d5:00:79:51:87:6f:62:26:ab:ca:
                    93:2d:b9:f7:38:39:2d:f5:14:69:90:37:1b:f0:16:
                    26:9d:3c:2c:11:5b:17:de:66:cf:69:b4:cb:37:f7:
                    82:9e:0d:23:ce:35:d6:1c:de:56:a5:81:d8:6d:d5:
                    e9:4f:47:00:a0:87:da:7d:4f:23:49:54:2e:28:7e:
                    ac:cf:26:d3:a5:13:6e:aa:c9:39:62:07:10:7a:2f:
                    a2:ec:9f:ae:52:15:26:c3:66:3d:0f:9e:6b:34:fc:
                    79:8d:49:e2:ec:31:78:71:ef:4b:8b:1b:78:d6:7e:
                    24:93:fd:bd:de:d3:44:f8:ed:bf:c1:8c:19:07:a8:
                    6e:d2:93:4e:d6:a2:0a:42:ce:24:99:a3:e4:ac:a7:
                    25:f7:6f:86:f2:63:70:68:f3:cb:aa:72:55:4a:2a:
                    a1:66:4c:88:b7:df:09:18:71:14:13:b1:ff:2c:da:
                    d1:8b:93:25:0f:f6:18:5a:4a:13:03:2e:54:af:37:
                    37:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:22:67:D1:91:D7:2D:82:EF:E0:A4:03:B5:64:3A:D6:28:A6:92:90
            X509v3 Authority Key Identifier:
                keyid:36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:fe:83:74:46:63:df:73:47:e7:95:28:f0:e1:f1:a9:d5:94:
         1e:e9:50:de:8c:43:33:62:da:da:5c:50:27:ce:06:bc:c7:d9:
         93:3a:22:d3:37:47:a5:f9:88:7a:b9:6e:c6:92:43:52:fb:47:
         fb:39:41:99:47:45:bc:2c:a8:c5:25:66:94:b1:5f:c9:c3:bf:
         cf:23:29:82:31:f5:67:64:52:7b:2d:0e:f1:1d:3f:58:a4:53:
         88:fe:d5:5e:f7:a3:ea:4e:05:62:b7:4d:9a:0f:74:b9:b0:a2:
         a7:52:51:6b:d6:19:ae:2a:88:f3:27:08:e7:69:38:9f:10:40:
         f7:c9:ca:b4:5e:75:3a:4b:89:40:64:76:8b:5c:3e:47:83:4b:
         06:fe:d5:92:d5:99:c8:06:25:13:dc:03:54:e5:35:ec:2a:92:
         fe:8d:93:3e:b1:88:e8:5d:ec:f8:04:32:84:e0:43:83:70:70:
         32:5d:22:ae:04:95:3c:82:fb:75:a2:29:ee:b9:e2:d0:61:9e:
         47:1c:b6:02:97:7c:19:24:a3:c2:2b:dd:9c:99:62:6a:03:3a:
         4a:70:1b:de:b6:45:c9:dc:0c:c4:6f:41:dd:1b:6e:4f:e3:87:
         b3:aa:47:ed:92:c3:5d:8b:72:d8:0e:54:cd:55:75:2e:b3:5f:
         26:70:39:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 07:43:58 2025 by rpki-client