Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft
File:                     LDTzNZTMO-PAfo54N2v8QzJjFUg.mft (raw, json)
Hash identifier:          Iktr98PjEtlqfsnMK9rxwYUJrstMyaY61Az8Z9exqA8=
Subject key identifier:   27:D1:CC:DD:8F:92:77:BE:67:11:B1:39:E4:D3:DF:55:40:90:C7:90
Authority key identifier: 2C:34:F3:35:94:CC:3B:E3:C0:7E:8E:78:37:6B:FC:43:32:63:15:48
Certificate issuer:       /CN=A914ADD8/serialNumber=2C34F33594CC3BE3C07E8E78376BFC4332631548
Certificate serial:       34AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft
Manifest number:          34AA
Signing time:             Tue 12 Aug 2025 14:29:09 +0000
Manifest this update:     Tue 12 Aug 2025 14:29:08 +0000
Manifest next update:     Tue 19 Aug 2025 14:29:08 +0000
Files and hashes:         1: LDTzNZTMO-PAfo54N2v8QzJjFUg.crl (hash: SpOUtjXCvZ4SgAKp08JyEq1Z8bG7wAV8sRT3yKPDQnU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.crl
                          rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 14:29:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13483 (0x34ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914ADD8, serialNumber=2C34F33594CC3BE3C07E8E78376BFC4332631548
        Validity
            Not Before: Aug 12 14:29:08 2025 GMT
            Not After : Aug 19 14:29:08 2025 GMT
        Subject: CN=689b4fb4-b75e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b0:75:78:4b:5d:ae:7d:09:3f:7f:c5:6a:7c:
                    be:93:d2:10:0f:ca:bf:12:07:16:c0:b0:df:03:e1:
                    d6:d0:2b:bb:a4:cb:4b:c3:d9:87:ae:a0:91:81:c9:
                    fc:7e:5b:eb:0d:36:c9:e3:ce:4a:3b:88:b1:83:09:
                    7a:d7:32:81:ec:a1:0a:49:ef:30:46:9a:54:99:1c:
                    d9:8b:90:c7:c3:8a:0f:b3:e2:1d:ed:8e:e9:c4:43:
                    06:72:ea:49:f3:f0:6c:0b:71:c8:86:28:ec:67:52:
                    1a:18:cc:f9:80:92:e0:75:d5:55:e4:c9:c7:53:8c:
                    f8:4b:d2:97:10:90:b5:b7:b9:df:4c:cc:ec:01:2c:
                    d4:df:a2:4b:65:c0:ac:c0:a9:ca:22:69:b8:02:8e:
                    6d:74:8b:48:5a:49:15:95:1a:38:42:38:b0:3e:e0:
                    82:45:0f:23:0f:d1:b4:98:96:72:7d:95:25:43:ce:
                    55:21:4a:f0:3d:f9:ff:9e:c5:ba:03:18:54:1c:dd:
                    01:a2:7a:3f:36:f2:30:b0:8b:bf:0c:4a:19:9b:3d:
                    61:68:3e:a6:ec:a2:c0:03:eb:9e:38:03:f4:9b:c6:
                    8b:8a:ea:df:fd:ea:e3:ea:ba:6a:ad:74:69:bf:f7:
                    be:38:d6:c0:16:ae:aa:df:0e:9c:66:e7:d0:d0:86:
                    5b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D1:CC:DD:8F:92:77:BE:67:11:B1:39:E4:D3:DF:55:40:90:C7:90
            X509v3 Authority Key Identifier:
                keyid:2C:34:F3:35:94:CC:3B:E3:C0:7E:8E:78:37:6B:FC:43:32:63:15:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:94:c6:44:f1:46:c3:e1:9e:9d:63:02:10:5b:f6:4e:b6:78:
         02:51:fd:24:69:2e:2e:00:2f:a7:30:a4:fb:da:ca:b1:d7:10:
         07:34:d3:69:d3:6f:63:ad:7d:7f:a1:00:43:bd:68:cf:f2:0b:
         a4:28:29:68:0a:ab:9b:51:86:6d:3d:06:fc:c5:b7:63:82:c2:
         09:e5:a2:5f:b6:65:43:01:7f:eb:1f:ce:8f:ab:20:f6:de:60:
         91:96:fe:81:5c:c4:ed:10:17:60:42:33:2a:f3:2f:a1:c0:6c:
         e1:16:c4:2b:c9:a6:c2:1e:60:56:78:2c:f2:5f:c6:45:9c:6b:
         93:9b:75:6a:a8:ad:44:30:67:da:17:7f:d8:c4:85:37:f2:a4:
         1f:8d:01:b4:e4:94:bd:c1:a1:64:63:71:83:71:33:43:0a:ec:
         a3:b2:f5:2c:a6:e3:a3:2b:db:45:27:f1:f3:19:26:49:b0:aa:
         bc:4b:01:b4:ff:ac:a4:fa:bd:a5:6f:a6:52:0e:7c:73:cf:89:
         14:0e:71:f7:2d:f5:b8:de:29:0a:f2:fb:51:bb:f6:37:0d:98:
         6b:71:8e:b3:c0:42:3a:49:9d:33:3f:a4:21:37:e4:6e:4d:7e:
         3d:f0:08:49:da:8c:63:5e:48:ca:be:d0:cc:42:38:a3:ed:c8:
         f9:8c:37:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 08:53:44 2025 by rpki-client