Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.mft
File:                     NDVM_NoimFFhtetii1ST_dLpbDs.mft (raw, json)
Hash identifier:          pZNG5eMmqOwfNz/SViShYTYY55CBVWyldJtyZrcXEdE=
Subject key identifier:   27:82:CA:52:FE:84:E5:66:B7:1B:DA:96:61:03:D3:0C:24:33:D1:77
Authority key identifier: 34:35:4C:FC:DA:22:98:51:61:B5:EB:62:8B:54:93:FD:D2:E9:6C:3B
Certificate issuer:       /CN=A915CB36/serialNumber=34354CFCDA22985161B5EB628B5493FDD2E96C3B
Certificate serial:       0107
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDVM_NoimFFhtetii1ST_dLpbDs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.mft
Manifest number:          F8
Signing time:             Sun 01 Nov 2026 07:33:50 +0000
Manifest this update:     Sun 01 Nov 2026 07:33:49 +0000
Manifest next update:     Sun 08 Nov 2026 07:33:49 +0000
Files and hashes:         1: NDVM_NoimFFhtetii1ST_dLpbDs.crl (hash: YxvCl19dsxt5TQhAUHxeI4EpG+C/DJR7K9o7mebEhdc=)
                          2: A34995A0733611F08B36357EC4F9AE02.roa (hash: e8FwqrUJ0CcE03Vob/NBG48LYJ8BLnaot23sBZlIyEE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.crl
                          rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDVM_NoimFFhtetii1ST_dLpbDs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Nov 2026 07:33:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CB36, serialNumber=34354CFCDA22985161B5EB628B5493FDD2E96C3B
        Validity
            Not Before: Nov  1 07:33:49 2026 GMT
            Not After : Nov  8 07:33:49 2026 GMT
        Subject: CN=6ae6eb5d-82f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ca:3a:54:14:80:a9:0b:58:3a:14:45:a6:8d:
                    33:ad:cb:77:bc:ba:8c:3a:8a:cf:aa:0b:74:15:b4:
                    dd:78:2b:18:4a:4a:b7:1b:39:d3:0a:32:41:19:75:
                    06:61:ec:e0:93:73:5d:47:28:92:33:ea:68:3c:41:
                    10:2b:0f:45:74:11:bf:a5:63:ba:9b:20:c7:92:f2:
                    01:6c:8a:bc:f1:d6:eb:24:ce:c2:d1:99:8f:5c:53:
                    cb:4f:f8:21:74:22:45:bc:e3:65:b2:f7:71:c9:a5:
                    36:14:ac:f0:70:c3:f6:9e:66:36:9e:85:e1:85:41:
                    55:ec:d0:7d:19:3e:6b:4c:5f:70:4e:df:bf:d9:ed:
                    30:22:62:e0:53:4c:19:3e:26:8b:a6:a4:3e:b3:6e:
                    d0:2a:dd:e9:9f:bd:dd:64:16:f8:7f:52:8c:62:7d:
                    90:03:5c:6f:13:93:b0:f4:3b:06:27:50:d2:aa:0f:
                    05:b8:1b:8d:14:2f:92:56:e0:41:76:83:ba:f3:d8:
                    e3:96:7d:2f:1e:75:8c:57:0e:b0:f3:c2:ea:38:3d:
                    29:ab:a8:30:64:17:82:12:09:fa:c8:d4:95:8a:ce:
                    47:76:45:9d:44:84:7a:75:8b:38:2b:e7:5d:dc:d9:
                    7e:97:e0:9e:2e:48:13:81:04:4e:05:2d:3f:1a:17:
                    7f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:82:CA:52:FE:84:E5:66:B7:1B:DA:96:61:03:D3:0C:24:33:D1:77
            X509v3 Authority Key Identifier:
                keyid:34:35:4C:FC:DA:22:98:51:61:B5:EB:62:8B:54:93:FD:D2:E9:6C:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDVM_NoimFFhtetii1ST_dLpbDs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:b5:de:5f:c6:7d:22:02:70:4e:30:d5:62:d2:f2:88:64:93:
         96:e5:c7:26:cd:16:41:81:d4:da:08:ae:cc:80:65:5f:20:df:
         51:fc:b1:a3:af:d8:17:78:50:fc:a4:3d:5d:c2:0c:14:fd:7a:
         45:94:f0:df:ec:15:0f:aa:24:79:df:3d:80:41:f2:45:78:0c:
         c0:20:f7:a9:4e:9a:f2:1a:1e:28:44:cd:26:56:2f:c7:da:c2:
         fa:7d:02:e6:2a:12:21:55:f7:87:b4:24:0b:88:08:37:8a:24:
         cc:9e:29:aa:61:79:7d:ea:f5:83:f1:8a:77:24:48:fa:1c:04:
         3f:46:12:04:80:e8:9b:92:d0:49:ae:dc:6a:06:ca:cf:75:bb:
         ff:e2:32:51:b7:2f:3f:6f:3d:60:5c:ca:d8:32:66:8b:ce:6d:
         35:9d:77:c4:20:d0:5b:9e:64:32:e0:7c:23:e7:80:5f:09:64:
         42:77:51:09:86:cd:84:eb:43:bb:a4:99:d7:bf:72:ae:01:9e:
         1a:e2:f6:9b:00:09:1a:3c:d9:7b:d0:5c:04:c7:8c:23:dd:f7:
         fa:24:6b:a2:fc:58:1a:d9:01:e1:e5:63:95:87:79:74:66:c3:
         29:79:3b:1a:8c:fb:b4:ba:88:54:d8:d6:c2:83:06:97:1f:40:
         2a:ec:53:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 21:07:38 2026 by rpki-client