Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft
File:                     LDTzNZTMO-PAfo54N2v8QzJjFUg.mft (raw, json)
Hash identifier:          d59pkLgAR1cBhImjdTqsIwrDkRPgS/lwkXEuF/1poq4=
Subject key identifier:   EA:0D:3E:0C:23:BC:24:57:C2:D1:DF:F4:45:30:83:8C:E8:02:2C:12
Authority key identifier: 2C:34:F3:35:94:CC:3B:E3:C0:7E:8E:78:37:6B:FC:43:32:63:15:48
Certificate issuer:       /CN=A914ADD8/serialNumber=2C34F33594CC3BE3C07E8E78376BFC4332631548
Certificate serial:       3589
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft
Manifest number:          3588
Signing time:             Mon 12 Oct 2026 14:29:38 +0000
Manifest this update:     Mon 12 Oct 2026 14:29:37 +0000
Manifest next update:     Mon 19 Oct 2026 14:29:37 +0000
Files and hashes:         1: LDTzNZTMO-PAfo54N2v8QzJjFUg.crl (hash: I1Ub2cjoe+muY6z4vxi0sGvwuUfkeedv8vLmFZZ3C7s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.crl
                          rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 14:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13705 (0x3589)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914ADD8, serialNumber=2C34F33594CC3BE3C07E8E78376BFC4332631548
        Validity
            Not Before: Oct 12 14:29:37 2026 GMT
            Not After : Oct 19 14:29:37 2026 GMT
        Subject: CN=6acceed2-ba09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d3:15:67:0b:6b:41:62:a0:e4:cd:94:7b:8e:
                    94:8c:26:ee:88:36:34:eb:62:4c:d9:d9:f3:b0:88:
                    04:ab:0e:a0:99:c6:dc:ef:8a:d8:2b:16:a0:90:36:
                    3c:e3:09:1d:dc:04:df:3d:ab:7f:c8:e0:ce:ec:24:
                    1b:36:ff:02:69:f0:3d:77:74:b0:51:16:16:a0:a5:
                    41:eb:3f:aa:13:52:e6:eb:62:b2:fe:4e:ac:ad:26:
                    4e:01:61:54:cc:b7:72:0a:27:01:cc:4d:fe:4d:65:
                    26:42:d1:83:be:24:2a:aa:79:5d:4f:ef:f8:fb:86:
                    e4:57:82:a3:ad:95:07:ed:94:8c:8c:bb:17:c0:e7:
                    95:82:76:a5:6d:67:75:8a:a0:91:58:ef:c0:8f:dc:
                    52:eb:c5:7b:ce:6d:0a:83:be:2b:09:31:63:99:48:
                    de:dc:b3:c1:ac:a6:ca:28:d7:2b:49:90:d2:89:33:
                    1f:5e:b7:e1:d4:34:2a:f2:f4:99:fa:f3:c8:92:53:
                    79:1d:dd:75:d5:74:30:49:ab:bc:2f:6c:e5:8e:aa:
                    7a:40:36:46:7a:ef:44:77:2b:b6:29:20:cb:36:24:
                    db:0d:93:01:c2:d1:6f:dd:7c:c0:ba:36:24:6d:f4:
                    33:dd:64:bf:54:db:28:e2:f4:ea:29:88:c0:bd:eb:
                    de:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:0D:3E:0C:23:BC:24:57:C2:D1:DF:F4:45:30:83:8C:E8:02:2C:12
            X509v3 Authority Key Identifier:
                keyid:2C:34:F3:35:94:CC:3B:E3:C0:7E:8E:78:37:6B:FC:43:32:63:15:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:68:1d:f7:00:7a:69:6c:97:e9:ae:5f:85:db:38:c6:08:15:
         c0:7b:e2:23:e9:a3:ad:15:58:e6:4a:1a:27:e8:95:71:9b:16:
         db:6a:15:9e:6f:88:64:ee:41:14:08:94:b4:0b:28:b6:54:0c:
         8d:cc:dc:cd:7d:ca:17:dd:38:22:73:7b:e9:c4:32:ea:40:ad:
         9d:7c:eb:80:50:d1:4f:e5:5f:cf:84:62:c7:c6:a6:f6:d7:bd:
         34:86:2e:06:0d:9f:f2:2f:01:85:33:34:13:69:3c:91:42:a3:
         16:1a:74:13:38:74:72:d4:22:e4:15:1c:85:cf:98:2a:7f:b4:
         74:cd:d7:2c:11:a9:5b:3a:a0:e6:f9:54:d3:07:19:fa:42:38:
         81:51:72:c6:c5:91:e0:ce:7f:1e:d1:81:93:c1:fe:e3:68:7a:
         2f:a0:cb:75:53:fa:74:12:6f:ce:68:9f:5d:1e:e1:37:1e:d0:
         c5:eb:0f:b7:ee:4f:2b:4a:73:49:28:00:be:bf:f0:b0:70:6a:
         6b:25:f3:a7:a3:9b:6b:7f:bf:b8:72:42:31:b6:cc:15:8c:6b:
         45:c5:a7:a1:63:1d:15:60:4f:04:6a:cb:82:c1:1b:e9:b4:af:
         ef:db:84:02:9f:b6:db:0f:67:d3:8f:f9:ca:35:e9:ca:0c:cb:
         4b:b9:bf:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 00:41:37 2026 by rpki-client