Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.mft
File:                     NDVM_NoimFFhtetii1ST_dLpbDs.mft (raw, json)
Hash identifier:          zSGFVUNSZeovqyMWO/hRIPOAQexGp96dUAdH7u8VpNc=
Subject key identifier:   DB:0B:15:BE:9F:B2:E6:55:1B:5D:0E:58:A6:24:9A:0A:DB:B8:60:60
Authority key identifier: 34:35:4C:FC:DA:22:98:51:61:B5:EB:62:8B:54:93:FD:D2:E9:6C:3B
Certificate issuer:       /CN=A915CB36/serialNumber=34354CFCDA22985161B5EB628B5493FDD2E96C3B
Certificate serial:       A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDVM_NoimFFhtetii1ST_dLpbDs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.mft
Manifest number:          A3
Signing time:             Fri 05 Jun 2026 07:45:21 +0000
Manifest this update:     Fri 05 Jun 2026 07:45:21 +0000
Manifest next update:     Fri 12 Jun 2026 07:45:21 +0000
Files and hashes:         1: NDVM_NoimFFhtetii1ST_dLpbDs.crl (hash: cvF6+FlQWU1GXvQLsxcx601wohq72lnfOfnBxMrybSw=)
                          2: A34995A0733611F08B36357EC4F9AE02.roa (hash: IAF+eAwSvKLEFvuiZsq0SmxC9MVbOCqPMOhLPg7uubY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.crl
                          rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDVM_NoimFFhtetii1ST_dLpbDs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 07:45:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CB36, serialNumber=34354CFCDA22985161B5EB628B5493FDD2E96C3B
        Validity
            Not Before: Jun  5 07:45:21 2026 GMT
            Not After : Jun 12 07:45:21 2026 GMT
        Subject: CN=6a227e91-fed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:63:c6:8d:3e:08:a1:31:ed:c8:9d:72:c1:fe:
                    c7:6a:b9:32:68:61:d6:c8:58:e9:84:be:f7:03:79:
                    28:ad:d7:1d:0d:2a:ef:cf:3c:58:fc:69:fc:4c:cf:
                    51:02:33:a3:ed:b5:fe:0c:21:a2:eb:9d:73:56:01:
                    6e:5f:e4:24:49:52:8a:d1:b1:71:6b:cc:3d:8c:0e:
                    e7:a8:88:0d:5a:71:ac:f0:ab:7b:c6:17:c1:69:42:
                    7f:82:21:4f:61:0f:1b:57:33:27:9d:0a:4d:f6:9a:
                    8e:80:84:02:2d:b7:6b:1a:03:d0:e8:c4:c5:2d:92:
                    18:42:42:55:99:71:50:3b:d2:f7:f0:4b:aa:79:6e:
                    9e:f6:8e:50:60:a7:34:3e:db:c3:74:65:03:e0:28:
                    64:9f:8b:e3:98:06:13:92:3a:5f:ff:f1:bc:b4:6e:
                    44:a2:9d:37:0f:48:aa:e5:42:c9:b2:3e:22:f5:fd:
                    41:03:f2:3c:bc:d4:e1:aa:79:a1:f9:3c:15:d9:2a:
                    59:a6:5d:12:d0:f8:43:cf:30:5e:7e:80:80:cc:62:
                    2c:4c:31:c1:25:58:e2:c9:1d:11:92:8a:0c:b7:91:
                    3b:7a:7e:a5:40:57:73:55:29:18:0a:73:46:f2:c9:
                    85:c8:55:c4:58:b9:88:ef:07:9e:94:6c:2b:c8:5d:
                    1b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:0B:15:BE:9F:B2:E6:55:1B:5D:0E:58:A6:24:9A:0A:DB:B8:60:60
            X509v3 Authority Key Identifier:
                keyid:34:35:4C:FC:DA:22:98:51:61:B5:EB:62:8B:54:93:FD:D2:E9:6C:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDVM_NoimFFhtetii1ST_dLpbDs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:0c:8e:dc:4a:b0:84:ef:db:4a:2b:05:44:f3:ee:e1:ae:68:
         89:93:ef:4f:fa:80:8c:d4:34:80:56:00:ea:62:9d:15:ad:e5:
         42:0c:3c:b7:6f:54:2f:26:f0:c6:47:dd:6e:5c:98:da:95:be:
         f1:46:8b:8f:71:ce:34:41:e5:5b:14:74:04:9c:0b:d5:fe:34:
         56:c0:84:8f:bb:7d:02:de:e8:08:13:97:ee:cd:6f:0f:b6:1d:
         8b:cc:9a:a7:19:e1:a7:be:22:3d:f1:7d:03:68:85:6e:ad:7c:
         9d:7c:5b:48:ab:61:3b:eb:84:7c:84:35:7b:60:0b:fc:17:7b:
         6a:c2:4b:4d:bb:c9:32:c9:9b:9d:6b:d6:fb:f3:04:4d:26:58:
         1f:97:9d:f1:1b:a2:79:3d:c6:46:6b:88:63:f0:86:40:f6:fd:
         a8:0b:8f:dc:9b:c9:1a:8a:1f:22:76:03:81:f7:b2:5f:03:85:
         74:ba:46:5f:b8:4e:b3:1b:7d:a5:3b:41:3f:3e:c0:46:bb:68:
         91:99:3e:01:1c:ff:5e:69:d4:9f:7b:9f:a9:f5:fb:0f:a9:6f:
         50:b4:c8:3e:37:6f:8d:6b:95:e7:ce:7a:45:2e:ef:8a:b2:ff:
         12:88:69:7d:e2:9c:c3:79:94:7e:19:39:10:b5:16:a9:cc:c4:
         a1:ac:06:ee
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUNCMzYxMTAvBgNVBAUTKDM0MzU0Q0ZDREEyMjk4NTE2MUI1RUI2MjhCNTQ5M0ZE
RDJFOTZDM0IwHhcNMjYwNjA1MDc0NTIxWhcNMjYwNjEyMDc0NTIxWjAYMRYwFAYD
VQQDEw02YTIyN2U5MS1mZWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkWPGjT4IoTHtyJ1ywf7HarkyaGHWyFjphL73A3kordcdDSrvzzxY/Gn8TM9R
AjOj7bX+DCGi651zVgFuX+QkSVKK0bFxa8w9jA7nqIgNWnGs8Kt7xhfBaUJ/giFP
YQ8bVzMnnQpN9pqOgIQCLbdrGgPQ6MTFLZIYQkJVmXFQO9L38EuqeW6e9o5QYKc0
PtvDdGUD4Chkn4vjmAYTkjpf//G8tG5Eop03D0iq5ULJsj4i9f1BA/I8vNThqnmh
+TwV2SpZpl0S0PhDzzBefoCAzGIsTDHBJVjiyR0RkooMt5E7en6lQFdzVSkYCnNG
8smFyFXEWLmI7weelGwryF0baQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNsLFb6f
suZVG10OWKYkmgrbuGBgMB8GA1UdIwQYMBaAFDQ1TPzaIphRYbXrYotUk/3S6Ww7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0IzNi9DNkQ0RDBCQzcz
MzUxMUYwOUNDNTk0NTFDNEY5QUUwMi9ORFZNX05vaW1GRmh0ZXRpaTFTVF9kTHBi
RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05EVk1fTm9pbUZGaHRldGlpMVNUX2RMcGJEcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
Q0IzNi9DNkQ0RDBCQzczMzUxMUYwOUNDNTk0NTFDNEY5QUUwMi9ORFZNX05vaW1G
Rmh0ZXRpaTFTVF9kTHBiRHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuQyO3EqwhO/bSisFRPPu4a5oiZPvT/qAjNQ0gFYA6mKdFa3lQgw8t29ULybw
xkfdblyY2pW+8UaLj3HONEHlWxR0BJwL1f40VsCEj7t9At7oCBOX7s1vD7Ydi8ya
pxnhp74iPfF9A2iFbq18nXxbSKthO+uEfIQ1e2AL/Bd7asJLTbvJMsmbnWvW+/ME
TSZYH5ed8RuieT3GRmuIY/CGQPb9qAuP3JvJGoofInYDgfeyXwOFdLpGX7hOsxt9
pTtBPz7ARrtokZk+ARz/XmnUn3ufqfX7D6lvULTIPjdvjWuV5856RS7virL/Eohp
feKcw3mUfhk5ELUWqczEoawG7g==
-----END CERTIFICATE-----
Generated at Sat Jun 6 12:07:59 2026 by rpki-client