Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
File:                     Ntd-kkOrui_VSWopGDC304sLy8Q.mft (raw, json)
Hash identifier:          S2CW3/06Cc/c06BV5Vq2QHws7/PCKO2MGMMT8oQjoVs=
Subject key identifier:   3E:68:0A:28:66:DF:CD:21:B8:D1:F1:6E:24:E0:EA:56:75:D9:36:B1
Authority key identifier: 36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4
Certificate issuer:       /CN=A91452AC/serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4
Certificate serial:       0972
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
Manifest number:          094A
Signing time:             Fri 20 Mar 2026 19:52:21 +0000
Manifest this update:     Fri 20 Mar 2026 19:52:20 +0000
Manifest next update:     Fri 27 Mar 2026 19:52:20 +0000
Files and hashes:         1: Ntd-kkOrui_VSWopGDC304sLy8Q.crl (hash: jSbgg200I7sPfe72jJSafltfl64EXLLF1GQEmZTTbdQ=)
                          2: 0F91DE9EAD4C11EB903C150DC4F9AE02.roa (hash: 2MWq2gYgL8Z2r2vMKeBL4wxSZIjEodsX3g/1Rc+PbcA=)
                          3: B453EBC4BB4011EAAF70B028C4F9AE02.roa (hash: lT94xNEkm0/RuJcMLykdff4mRseMOoMW/OqsJc8kVvg=)
                          4: 72E60DEA3CC911EDA5EBD21DC4F9AE02.roa (hash: z5nXpQYggF7FtxvjRhPO50T8ACMAQ3fNgZEPR5O1d4k=)
                          5: A58B9338AD4A11EBA6B48687C4F9AE02.roa (hash: JFLo1Ja1paalAQ9cRjNBAw9+CXjqmX6hCmHw3VDuOWQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl
                          rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 19:52:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2418 (0x972)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91452AC, serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4
        Validity
            Not Before: Mar 20 19:52:20 2026 GMT
            Not After : Mar 27 19:52:20 2026 GMT
        Subject: CN=69bda574-a5a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8b:f2:a1:45:70:0e:36:10:fc:4e:fb:9c:85:
                    ef:43:a0:87:3b:5b:1a:39:3d:68:cd:a0:c3:c1:bf:
                    54:f2:2c:5a:74:be:d5:26:1e:21:26:ff:73:e7:9e:
                    13:21:86:92:db:84:67:fd:b2:29:d8:6e:40:bf:f9:
                    b6:14:ee:00:3c:4f:a6:b1:e4:53:14:b6:31:a2:34:
                    4b:76:58:50:ad:01:64:15:52:a0:6b:d2:71:de:13:
                    96:75:14:7c:6c:ca:28:14:fe:34:fb:e8:10:cb:10:
                    6c:7c:01:8d:68:6d:13:0a:2d:2e:ee:e5:b6:01:c7:
                    d0:75:82:0a:1b:83:b9:20:fb:d4:f6:f8:5c:6b:e2:
                    97:74:7d:5f:d9:c6:31:8d:f1:6a:81:dc:a8:d1:9f:
                    5f:f4:72:cb:e3:1f:53:25:65:50:bb:d8:0b:51:37:
                    8c:b1:8a:95:7c:79:5d:f4:ab:a0:7b:26:29:fe:8b:
                    18:9f:17:fc:33:cb:f3:4d:1d:02:60:4b:55:d8:2a:
                    61:a1:aa:51:a1:a3:11:d5:cf:99:51:46:d9:d7:5d:
                    f6:9a:95:2d:5d:a7:5c:29:1b:ab:ce:32:0e:9b:56:
                    af:eb:b9:63:28:83:14:82:cb:05:8f:47:a0:c5:82:
                    34:9b:e2:c1:2f:5d:bb:cd:64:e0:a9:6b:4d:93:f8:
                    f1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:68:0A:28:66:DF:CD:21:B8:D1:F1:6E:24:E0:EA:56:75:D9:36:B1
            X509v3 Authority Key Identifier:
                keyid:36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:d9:a0:6e:75:bd:7e:fa:4c:be:f5:84:88:c1:63:0e:7c:e5:
         b2:9a:2f:97:67:95:ae:8b:97:64:69:e4:35:08:07:81:3d:9f:
         15:ac:de:05:e5:b1:cd:dd:1d:90:c4:de:53:e2:52:c2:fb:bf:
         0b:32:a6:9e:0d:b7:72:f9:b0:f6:0c:9a:d7:b6:f6:77:f8:0c:
         e5:fb:2d:83:0d:0b:83:17:4d:db:57:19:29:2e:21:0e:c2:d3:
         6f:95:9d:f9:e4:6a:f6:6b:b6:33:97:3b:6c:3c:33:70:6e:a2:
         cc:26:01:92:2c:d3:7f:3b:55:52:df:df:8e:c1:dc:86:a3:1b:
         77:29:fb:a7:2d:74:36:5a:c4:26:2c:ec:f2:24:93:ab:fd:e7:
         bb:05:3e:0e:ba:e8:3a:44:53:c9:26:4f:bd:23:77:6d:56:37:
         37:11:73:7d:4b:70:b0:5e:cd:66:22:49:6d:d9:8f:73:f9:0e:
         f3:77:8c:b2:1d:d7:7d:10:75:f8:34:4d:30:25:fe:d3:a8:62:
         33:69:57:34:9a:c4:e0:2f:f9:38:2d:7d:78:96:a5:be:47:da:
         7f:3c:3f:36:16:e0:62:69:87:f4:01:d6:cc:13:5e:68:42:9d:
         31:1c:47:fa:02:18:eb:87:e3:36:ba:3b:94:aa:5a:5f:7b:7b:
         1d:99:13:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 00:12:35 2026 by rpki-client