Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.mft
File:                     NDVM_NoimFFhtetii1ST_dLpbDs.mft (raw, json)
Hash identifier:          sQfeTwkPhvurtScx0wGOOgLpU27sKfSDFE4iINUCwWk=
Subject key identifier:   7C:34:32:6B:D7:C1:93:61:7A:22:C9:66:E4:E9:EB:CF:D6:BD:4F:8E
Authority key identifier: 34:35:4C:FC:DA:22:98:51:61:B5:EB:62:8B:54:93:FD:D2:E9:6C:3B
Certificate issuer:       /CN=A915CB36/serialNumber=34354CFCDA22985161B5EB628B5493FDD2E96C3B
Certificate serial:       0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDVM_NoimFFhtetii1ST_dLpbDs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.mft
Manifest number:          0C
Signing time:             Sun 24 Aug 2025 05:13:18 +0000
Manifest this update:     Sun 24 Aug 2025 05:13:18 +0000
Manifest next update:     Sun 31 Aug 2025 05:13:18 +0000
Files and hashes:         1: NDVM_NoimFFhtetii1ST_dLpbDs.crl (hash: t1dtsEJJml9ukGm2fqi/7QSfgAMTI3vT7yTDqvlSUbE=)
                          2: A34995A0733611F08B36357EC4F9AE02.roa (hash: zck5BNWsw++G06RxjthWiHbW/n5Q35kFhBX2xhGrjyc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.crl
                          rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDVM_NoimFFhtetii1ST_dLpbDs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 31 Aug 2025 05:13:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CB36, serialNumber=34354CFCDA22985161B5EB628B5493FDD2E96C3B
        Validity
            Not Before: Aug 24 05:13:18 2025 GMT
            Not After : Aug 31 05:13:18 2025 GMT
        Subject: CN=68aa9f6e-e375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8d:41:47:11:06:cf:cb:2a:62:30:1c:c1:1a:
                    6d:24:aa:0e:bf:40:0a:a5:9c:c3:7c:bd:77:c2:d4:
                    80:b6:aa:b7:4a:46:f3:ac:db:cd:ba:86:a4:a6:72:
                    54:ca:76:72:df:20:b9:08:bf:2b:7d:cb:8e:4f:35:
                    05:5b:a6:86:32:61:bf:82:4b:ee:7f:0e:91:7d:94:
                    be:a9:22:c0:54:6c:3d:cd:8e:77:ab:b9:e1:d4:8a:
                    3e:c0:e1:ac:cd:3b:75:95:d9:ff:17:8c:cf:88:98:
                    20:1e:41:77:77:00:a7:ed:c8:09:a4:cd:5e:40:a7:
                    50:d5:ce:0d:13:67:d0:24:6e:26:c4:b6:8a:3d:ba:
                    af:57:07:a2:d8:ad:08:d1:d4:cd:75:14:b6:0b:7e:
                    17:de:59:c3:31:13:02:fe:2b:72:0b:ae:ce:59:b3:
                    2e:5c:59:4c:15:c9:7a:17:82:63:1a:0e:f2:d2:56:
                    5e:81:11:3d:f5:5c:9d:64:95:16:93:39:91:82:21:
                    7c:04:33:c0:ff:9e:65:78:49:e7:0e:3c:6a:d1:07:
                    b4:db:0e:2c:42:ea:07:6c:06:f8:d4:18:bb:b3:93:
                    ad:8b:13:4a:0e:3a:3a:b1:2c:d8:74:50:f6:ac:09:
                    fb:72:3e:4d:e1:b5:ed:91:20:e7:f0:24:c5:89:a7:
                    dc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:34:32:6B:D7:C1:93:61:7A:22:C9:66:E4:E9:EB:CF:D6:BD:4F:8E
            X509v3 Authority Key Identifier:
                keyid:34:35:4C:FC:DA:22:98:51:61:B5:EB:62:8B:54:93:FD:D2:E9:6C:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDVM_NoimFFhtetii1ST_dLpbDs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:8b:80:fd:8b:a1:e1:9d:93:47:71:3e:6e:92:4e:60:5b:f6:
         6b:2c:b5:20:71:0c:25:25:f5:6e:ea:f2:31:9b:b9:0c:8a:ef:
         f3:8e:70:fc:d8:d8:d7:44:e8:da:4a:7a:cd:ad:7b:79:f0:34:
         fb:f4:0e:04:a1:58:96:cd:f5:01:1f:b4:11:d9:a9:77:1f:c3:
         d5:4e:86:44:a6:45:f1:b0:91:ee:4a:40:65:37:5b:95:16:c4:
         a1:38:63:af:db:8a:92:ae:75:12:e7:ee:3a:54:00:59:bf:fd:
         2b:f3:fa:f6:01:4d:4d:e2:06:0d:06:09:70:bf:8d:59:b1:a0:
         3c:94:f8:17:4a:46:9e:75:a6:8b:f8:b7:39:ee:3b:8d:12:97:
         ed:66:f7:ff:57:f3:a9:01:92:80:d4:69:a5:c1:ab:8c:2d:d9:
         a4:66:40:38:82:76:b9:9f:86:8d:eb:46:34:bc:c1:34:06:dc:
         f6:d3:23:a8:59:79:75:00:e4:a9:2f:07:be:7e:7d:8f:a0:e1:
         46:43:1d:8d:10:c0:8d:28:15:bb:71:78:7a:a5:4c:89:17:a0:
         7a:d2:3f:0b:c0:6d:1c:8f:3e:52:76:57:48:67:c4:b5:2b:fc:
         4d:21:3a:16:73:b1:ae:56:17:f8:92:8f:18:87:fc:97:55:dd:
         cd:96:59:a8
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
Q0IzNjExMC8GA1UEBRMoMzQzNTRDRkNEQTIyOTg1MTYxQjVFQjYyOEI1NDkzRkRE
MkU5NkMzQjAeFw0yNTA4MjQwNTEzMThaFw0yNTA4MzEwNTEzMThaMBgxFjAUBgNV
BAMTDTY4YWE5ZjZlLWUzNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDNjUFHEQbPyypiMBzBGm0kqg6/QAqlnMN8vXfC1IC2qrdKRvOs2826hqSmclTK
dnLfILkIvyt9y45PNQVbpoYyYb+CS+5/DpF9lL6pIsBUbD3NjnerueHUij7A4azN
O3WV2f8XjM+ImCAeQXd3AKftyAmkzV5Ap1DVzg0TZ9AkbibEtoo9uq9XB6LYrQjR
1M11FLYLfhfeWcMxEwL+K3ILrs5Zsy5cWUwVyXoXgmMaDvLSVl6BET31XJ1klRaT
OZGCIXwEM8D/nmV4SecOPGrRB7TbDixC6gdsBvjUGLuzk62LE0oOOjqxLNh0UPas
CftyPk3hte2RIOfwJMWJp9ydAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfDQya9fB
k2F6Islm5Onrz9a9T44wHwYDVR0jBBgwFoAUNDVM/NoimFFhtetii1ST/dLpbDsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVDQjM2L0M2RDREMEJDNzMz
NTExRjA5Q0M1OTQ1MUM0RjlBRTAyL05EVk1fTm9pbUZGaHRldGlpMVNUX2RMcGJE
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTkRWTV9Ob2ltRkZodGV0aWkxU1RfZExwYkRzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVD
QjM2L0M2RDREMEJDNzMzNTExRjA5Q0M1OTQ1MUM0RjlBRTAyL05EVk1fTm9pbUZG
aHRldGlpMVNUX2RMcGJEcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBABaLgP2LoeGdk0dxPm6STmBb9msstSBxDCUl9W7q8jGbuQyK7/OOcPzY
2NdE6NpKes2te3nwNPv0DgShWJbN9QEftBHZqXcfw9VOhkSmRfGwke5KQGU3W5UW
xKE4Y6/bipKudRLn7jpUAFm//Svz+vYBTU3iBg0GCXC/jVmxoDyU+BdKRp51pov4
tznuO40Sl+1m9/9X86kBkoDUaaXBq4wt2aRmQDiCdrmfho3rRjS8wTQG3PbTI6hZ
eXUA5KkvB75+fY+g4UZDHY0QwI0oFbtxeHqlTIkXoHrSPwvAbRyPPlJ2V0hnxLUr
/E0hOhZzsa5WF/iSjxiH/JdV3c2WWag=
-----END CERTIFICATE-----
Generated at Sun Aug 24 21:33:10 2025 by rpki-client