Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
File:                     ntkFUQfHD4W7kajaAnC1ynYK61Q.mft (raw, json)
Hash identifier:          +6pRdv2Ipvho080lENAZWxakdAYzO7mH/XTWtvrx/YA=
Subject key identifier:   7B:95:92:6A:91:98:CB:15:44:9F:1E:6B:15:98:53:D7:D4:CA:F4:11
Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
Certificate issuer:       /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Certificate serial:       37AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
Manifest number:          3611
Signing time:             Fri 06 Mar 2026 14:46:11 +0000
Manifest this update:     Fri 06 Mar 2026 14:46:11 +0000
Manifest next update:     Fri 13 Mar 2026 14:46:11 +0000
Files and hashes:         1: ntkFUQfHD4W7kajaAnC1ynYK61Q.crl (hash: UwGFJTx4/9S1NOHcKOzLlStEhhQG/1clipf/o7+A/LM=)
                          2: EF5779B09DD611F0BB1A500DC4F9AE02.roa (hash: B0KLjXcyuPh+vtTk13liw0yksiJoFrvye88u4YCuvwY=)
                          3: 9B4B6C82904911EABE5F0C63C4F9AE02.roa (hash: VLAT/M2ruyTEQUd6hodWbMw2Jqr6BHFT+yCvjnUWSAs=)
                          4: FAF25932427711EEBEA02D22C4F9AE02.roa (hash: XW6xQ4m33bll1QQo6ExM0djcwBQb4VCBIwadzzbBLqg=)
                          5: 0F3F5C24FF0E11EFB7B9A13CC4F9AE02.roa (hash: nXxKQeupAHWu0+rQi+prWqYe1pxneEGIFehlt67geeM=)
                          6: D9E23E4A6D4C11EB938EC44DC4F9AE02.roa (hash: b2y2J6/z/gcRK/gveV1KQ00j/ViZLyk3FJICkyKEFNo=)
                          7: BB7CEA8CEF3B11ECABCC5E3EC4F9AE02.roa (hash: 9Vskvqmdmvz+Aot+UciMJyoJ7hB1RWrR9/LyiS2Awus=)
                          8: 691D0462E6FD11F09102F531686F56BC.roa (hash: s3XOtREdrtdcjsTSgClE3hP0s/54bsxcZ0HZsg7SLQ4=)
                          9: D6672BEE0BD111ECB2E9C868C4F9AE02.roa (hash: lEh9L7iyp5I84rP98tz9XY5hEAb4pddo1gVVYE+BqlM=)
                          10: 35E95924844811EAB301615FC4F9AE02.roa (hash: 5YpQ56ePmOcQkHTGfajO3xIG86lH7CFGouAYwZN0jk4=)
                          11: DED04A561D4111EB89535E1EC4F9AE02.roa (hash: yPYSk8I2lF3QjSmBxC3i1zDfO/sGC0NjaZGGjHen8ew=)
                          12: 7418230A6D4B11EBB1805C0DC4F9AE02.roa (hash: 6T58SHnRQWimfl2Rj2N+WBpo5imULsKQ9l4of58PKEs=)
                          13: D10DBCB2475C11EEBF5FB180C4F9AE02.roa (hash: w+dWahSYH/nwFg8ywBlpCH/uzBzau9TppkYVuitg46M=)
                          14: B34368F8BA9311EEB0A64B2AC4F9AE02.roa (hash: vjbE3n1R2cxCR3lweyv7XV93L3Fooo3SLoUGoIPh4Ak=)
                          15: 13C828C62D8911EBA7D22C3EC4F9AE02.roa (hash: vlgUqqYMtxXOpx1btvYX2OKVBTB12NLfhpS9FBdQ9GQ=)
                          16: 9E1F70A4844911EAA528AD63C4F9AE02.roa (hash: kt+Cf9mIPbIRu1m1WYJwv/k0U/X/kht8lidnJLAx9zo=)
                          17: FBCDF210490B11EC8E4D1136C4F9AE02.roa (hash: 3T33Cvu4feUgUnrvI1l8FABrQ1FL9sQBWMbRXq9uBuU=)
                          18: B89BA72097D711EBA8B8BA2AC4F9AE02.roa (hash: K6mpYvGc1dNzqDYK7t7bO8YJTKrANw24vNvUXER9d0Q=)
                          19: 150DA58AFF0D11EF8B23C73AC4F9AE02.roa (hash: DJPSeQ1mdqr75sC1KYYLFzh6OvMDyMyQNXCMF7yveZo=)
                          20: 32CF326ECA2E11EA80305F0DC4F9AE02.roa (hash: klgeFY7ErjFWvAIaclUOm4/e0ueZC4LdCGe3/lnFjTI=)
                          21: 7A58C8D6BBEA11EA8DF46778C4F9AE02.roa (hash: qNcLRbE6Ajqm/JUInyygs4YSZMtzHSHAM4P3L8vI2Wk=)
                          22: 9F2B1EB0892C11EBB29AFF50C4F9AE02.roa (hash: bKh+sb5O3yQCx6tJj3cHSMqLFD7C1LY5yIPMgxrcb4c=)
                          23: D9D185C6D27A11F092DEA24AC4F9AE02.roa (hash: q8O+NOZn42b6KJJb4RwUe455TZClKV7v5qr2WMXs3A8=)
                          24: 35575C68844811EAB301615FC4F9AE02.roa (hash: PAjH5BWsYwwbYulURdBY/i0TWE0981n0aqp1DU7p2L8=)
                          25: 9604F4A6899911EBA32C6224C4F9AE02.roa (hash: WeWsQU1h5/t2J6NLAq7qNH73gvEEAuPM26uqGwNlbi4=)
                          26: F33CEFA6FF0C11EFAFAF7D3AC4F9AE02.roa (hash: rJiHsJP15y6s27tpWy8/q+1Q2pwCJ8WjfCbETDXELI0=)
                          27: 160E2D60FF0D11EF8B23C73AC4F9AE02.roa (hash: R/yGbB08sL7OdNkO4qOx253IAsUrvFP+E6N74t2tCCw=)
                          28: 9D67280A844911EAA528AD63C4F9AE02.roa (hash: 3NMq9Cr2N9nMNrvvAHlrq09B0wLLBOON5QqPWSCtmhE=)
                          29: DF6E9324D08D11EA9010E72EC4F9AE02.roa (hash: 4gRjk/a+y32MBxnxBhlAFSY+5fr6B9/EENrjDEtX9bo=)
                          30: 443470FC7C1511EBB779C03EC4F9AE02.roa (hash: vYN7/c1B8Ga9EWk1RUAg/0I5t4XRYaLcx/7jkQAcJVE=)
                          31: 167FCE12844B11EA91F6956BC4F9AE02.roa (hash: DKaRWb4HqD7WcaW5EDSzWhkJLODkBMCYiSZPO6Xa9Ro=)
                          32: 7D745B8C800411EB9398C63EC4F9AE02.roa (hash: RXizLgbeQx66F3KEgqGb3YclpFNAztOvxV6H3stthrE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:46:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14252 (0x37ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0832, serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
        Validity
            Not Before: Mar  6 14:46:11 2026 GMT
            Not After : Mar 13 14:46:11 2026 GMT
        Subject: CN=69aae8b3-32a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:10:32:0e:7c:e0:28:e6:2c:e7:e0:b8:b3:12:
                    cb:99:f8:8a:23:e6:11:8f:9d:b4:55:81:41:c4:de:
                    d8:cd:6a:34:84:9d:c3:4b:9f:f3:94:a6:d5:8d:45:
                    16:6e:60:f8:60:d9:5d:f1:63:89:51:46:c3:56:3f:
                    88:44:04:31:13:1d:45:e3:6e:75:22:40:41:66:63:
                    61:da:43:cb:93:3b:1f:29:15:9f:f8:2a:31:d3:28:
                    a3:3d:9d:44:db:ae:8c:b1:02:ad:7b:05:43:8b:f2:
                    c5:1c:12:20:ac:a2:4e:51:ff:2d:e2:01:24:6f:40:
                    8b:3a:e2:9f:30:d9:66:fd:84:7e:22:4a:62:32:8d:
                    26:e9:96:39:ea:95:27:c3:2c:a5:ae:c3:59:82:66:
                    89:34:54:7d:f2:67:c4:34:e1:c2:c8:48:13:20:b2:
                    e7:48:5c:a9:12:82:b2:14:49:c0:1e:06:1b:83:e5:
                    d3:ff:ce:ab:9c:9c:23:59:08:5d:5a:79:94:1a:65:
                    c0:0f:84:1b:22:4b:64:7a:b1:df:cb:58:e3:b4:a9:
                    19:4d:e5:15:fb:e0:5a:59:f7:85:d3:f8:85:01:0e:
                    00:be:8f:12:ed:eb:8f:77:41:27:53:7f:58:03:10:
                    28:e0:8c:67:bf:b4:f8:ce:6c:79:8c:d7:e1:ec:60:
                    25:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:95:92:6A:91:98:CB:15:44:9F:1E:6B:15:98:53:D7:D4:CA:F4:11
            X509v3 Authority Key Identifier:
                keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:39:f0:a1:94:6f:e4:70:ce:7f:2c:40:74:ac:ea:c4:33:e2:
         cb:0b:6d:29:55:96:3f:05:76:4a:cd:30:bc:67:a1:8b:e2:b3:
         b1:33:56:cd:6f:cb:19:d5:55:17:00:91:90:ce:06:c7:14:a0:
         3c:c7:e9:5b:bd:05:46:5c:c3:2a:84:5d:b1:bc:f9:9d:62:05:
         57:26:77:4b:0c:2f:5b:00:57:dd:f3:ff:12:10:a4:c4:12:76:
         1c:95:fa:e6:41:ba:79:67:11:4f:0a:96:f7:43:ef:54:1a:0f:
         02:d7:01:7f:bf:c1:da:46:01:03:8d:27:5a:ae:d6:68:39:74:
         8a:b2:d3:58:6a:a8:c7:ad:80:63:36:81:b0:a9:b9:03:d0:37:
         5d:03:28:7b:44:d9:24:0c:45:32:48:af:ae:30:a3:75:10:31:
         3c:98:c3:26:2f:45:f0:97:06:b4:08:c6:3a:43:33:6f:47:fd:
         12:31:37:62:42:0a:56:21:48:31:0c:00:f7:61:e3:98:06:6d:
         29:97:b0:c3:e6:90:35:34:47:3c:ba:93:22:db:45:4b:41:1d:
         71:13:c0:33:f3:67:77:4d:dc:e3:f8:a4:42:c4:6d:a3:3d:7d:
         3f:50:0e:dd:b2:5b:38:83:0b:8f:af:52:3c:83:38:46:b5:77:
         1e:37:b3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 08:11:32 2026 by rpki-client