Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft
File:                     LDTzNZTMO-PAfo54N2v8QzJjFUg.mft (raw, json)
Hash identifier:          pQsRJCo9rslI7mw0KLaGD3li2X2M6ibYvmXc/TQ0/Cs=
Subject key identifier:   AE:01:4B:96:F9:D0:92:09:29:AA:57:11:91:10:97:32:EB:22:85:95
Authority key identifier: 2C:34:F3:35:94:CC:3B:E3:C0:7E:8E:78:37:6B:FC:43:32:63:15:48
Certificate issuer:       /CN=A914ADD8/serialNumber=2C34F33594CC3BE3C07E8E78376BFC4332631548
Certificate serial:       3515
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft
Manifest number:          3514
Signing time:             Sat 28 Feb 2026 14:30:13 +0000
Manifest this update:     Sat 28 Feb 2026 14:30:12 +0000
Manifest next update:     Sat 07 Mar 2026 14:30:12 +0000
Files and hashes:         1: LDTzNZTMO-PAfo54N2v8QzJjFUg.crl (hash: Ufoxs0g6Rsr64bCJkcVLTmE0IA20Fr9+PjOrIkZqqq4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.crl
                          rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 14:30:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13589 (0x3515)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914ADD8, serialNumber=2C34F33594CC3BE3C07E8E78376BFC4332631548
        Validity
            Not Before: Feb 28 14:30:12 2026 GMT
            Not After : Mar  7 14:30:12 2026 GMT
        Subject: CN=69a2fbf4-f3a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d6:04:89:dc:e2:b0:f1:fe:3b:36:5a:3d:19:
                    8c:8c:8a:92:0f:a7:35:37:82:74:b9:e1:a3:4b:59:
                    40:eb:a1:b7:66:46:71:d4:1d:f4:2e:a7:2f:b7:a0:
                    d6:57:82:86:62:cb:c5:b1:04:0a:aa:b2:7b:d7:cb:
                    60:f4:ce:60:ca:93:92:1f:c6:dd:d5:49:f4:d6:50:
                    45:2f:4f:26:33:9b:74:c2:df:2b:13:07:bc:4f:46:
                    a4:15:a8:78:72:40:ec:5b:32:56:ee:28:59:1d:df:
                    26:ce:f8:37:c3:73:23:76:47:21:bf:9d:52:37:15:
                    f2:e1:8d:85:a7:45:f6:77:88:66:2b:01:a6:4f:db:
                    07:dc:10:3a:51:f4:1d:32:43:95:b7:cc:b5:92:3e:
                    5b:2c:20:f9:de:e3:89:22:55:db:8b:71:6d:53:44:
                    19:a6:8b:6a:30:ef:48:72:d2:9f:ad:4f:b0:26:a1:
                    76:2e:75:c8:72:b2:19:d7:14:a7:4e:13:ea:5f:d4:
                    03:2a:84:e6:a4:7f:bd:f7:a3:2f:b6:79:d8:bb:1f:
                    df:f3:11:d9:54:78:c8:c9:0c:af:10:27:5a:85:77:
                    a3:6c:01:5b:bc:a7:8b:8e:41:df:b1:dc:31:72:11:
                    d3:1e:eb:1e:6e:ee:5e:9a:4c:bd:cf:fc:ea:81:d2:
                    e6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:01:4B:96:F9:D0:92:09:29:AA:57:11:91:10:97:32:EB:22:85:95
            X509v3 Authority Key Identifier:
                keyid:2C:34:F3:35:94:CC:3B:E3:C0:7E:8E:78:37:6B:FC:43:32:63:15:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:cb:f1:68:f9:8d:4b:da:49:64:ca:04:c6:84:9e:55:23:6e:
         90:58:a5:3a:cf:d3:58:6d:4f:9b:94:f4:ea:60:9e:d9:00:91:
         7a:8d:97:d4:4c:b4:0e:2e:1f:67:ac:c9:74:7c:bd:a4:22:b8:
         d4:48:ed:6e:a3:c7:3e:84:8e:39:1c:4c:95:49:92:c9:51:4c:
         c8:dc:87:ba:66:93:e7:ea:81:e1:49:9e:5e:39:14:82:5c:c1:
         a7:05:d4:a1:7f:f6:f9:62:4e:b6:aa:51:05:ff:49:ec:ff:05:
         61:eb:9b:77:d7:4b:30:5f:d0:c8:12:5c:08:2d:bc:54:c6:0d:
         70:92:a7:06:5b:0d:a0:58:86:ea:34:04:ca:00:e1:5d:4f:0c:
         98:61:b1:8e:f0:0c:c6:0b:a3:d2:58:48:3b:bd:db:0e:bb:25:
         22:93:1d:8c:30:f1:19:a7:3d:d7:c4:0c:b1:80:a6:01:f2:de:
         5a:8d:5e:fb:75:77:57:ab:bc:7c:a2:72:bb:b3:68:b7:88:9e:
         8d:be:8b:84:a3:b8:8b:32:33:a7:b5:f3:0d:86:48:27:ba:8d:
         02:3d:1b:8d:ff:6f:a8:5d:f8:9a:15:33:3f:09:27:31:46:02:
         b3:e0:e5:b6:5b:cc:64:a8:12:40:39:93:95:59:4d:cd:59:be:
         0e:4f:7d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:30:44 2026 by rpki-client