Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft
File:                     LDTzNZTMO-PAfo54N2v8QzJjFUg.mft (raw, json)
Hash identifier:          jqdxFmmGZo516209E3kQLjgwsoVmMvcno86D86twEjw=
Subject key identifier:   FD:D2:92:C7:AB:AA:A8:EA:90:59:04:5D:51:37:C8:20:23:40:DE:A2
Authority key identifier: 2C:34:F3:35:94:CC:3B:E3:C0:7E:8E:78:37:6B:FC:43:32:63:15:48
Certificate issuer:       /CN=A914ADD8/serialNumber=2C34F33594CC3BE3C07E8E78376BFC4332631548
Certificate serial:       3562
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft
Manifest number:          3561
Signing time:             Tue 28 Jul 2026 14:29:35 +0000
Manifest this update:     Tue 28 Jul 2026 14:29:35 +0000
Manifest next update:     Tue 04 Aug 2026 14:29:35 +0000
Files and hashes:         1: LDTzNZTMO-PAfo54N2v8QzJjFUg.crl (hash: S1Q+ilfoouRbucPujt0RfM6BxF2eBWI/AfhUXDFTYPU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.crl
                          rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 14:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13666 (0x3562)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914ADD8, serialNumber=2C34F33594CC3BE3C07E8E78376BFC4332631548
        Validity
            Not Before: Jul 28 14:29:35 2026 GMT
            Not After : Aug  4 14:29:35 2026 GMT
        Subject: CN=6a68bccf-01e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:db:47:8c:1f:e0:e4:22:b4:77:8f:8b:6c:88:
                    2d:17:96:b2:79:78:59:11:0b:be:5a:4f:63:b1:d1:
                    c7:55:41:f5:5b:77:4a:f0:f7:62:f2:4f:99:32:6d:
                    1f:7a:f5:17:0b:f8:cd:b2:b2:04:a5:a6:c7:e9:88:
                    45:df:d8:e4:ba:e6:db:fc:79:03:f3:a8:39:93:a7:
                    27:b8:18:b8:20:29:99:1e:cd:18:02:2a:05:80:4b:
                    33:50:0e:8e:9b:5f:2d:f6:b3:34:87:96:80:8f:08:
                    5c:e4:d0:e2:1e:a5:ae:71:9a:4f:23:71:a6:aa:d7:
                    d0:3b:8c:08:56:7f:07:48:de:78:0d:5f:b9:bd:20:
                    fe:c0:85:86:4d:cc:a4:e8:81:7c:92:81:63:ac:34:
                    e8:8f:a6:38:f8:5b:11:a3:7a:31:a5:2f:49:70:2b:
                    61:9c:6d:b1:0d:41:5b:1c:2d:3a:71:98:59:8f:56:
                    23:22:a5:41:54:11:f6:f8:0c:90:31:97:0c:59:1b:
                    38:f7:2b:1b:28:97:cc:d5:4f:fe:db:86:1d:82:22:
                    1f:a0:58:9b:94:20:ee:1d:ee:3a:2a:36:d9:5f:fb:
                    61:71:8a:67:b5:4b:b5:7c:b3:76:76:1b:2a:65:0b:
                    6d:b1:2f:09:3e:e4:6b:ec:60:a3:a4:15:62:71:9a:
                    8f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D2:92:C7:AB:AA:A8:EA:90:59:04:5D:51:37:C8:20:23:40:DE:A2
            X509v3 Authority Key Identifier:
                keyid:2C:34:F3:35:94:CC:3B:E3:C0:7E:8E:78:37:6B:FC:43:32:63:15:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:b5:63:bc:31:a8:90:87:74:81:3f:1f:65:1e:f8:c7:77:69:
         bf:0b:f9:d3:82:df:14:bb:73:e3:3d:bc:48:16:be:5c:5f:68:
         6d:8f:5c:44:42:52:e5:f3:3f:14:18:7d:93:74:43:ae:c5:3f:
         de:ca:bc:bb:ba:38:3b:e0:87:52:d0:cb:d1:9e:37:93:41:17:
         32:e3:aa:35:a2:b4:a1:ea:23:81:fa:b9:ba:47:0c:0e:af:dd:
         20:a8:7d:7d:47:48:09:ba:31:cf:3b:9b:51:50:46:1a:3f:c9:
         82:9d:f6:6a:ac:09:05:34:4c:7b:77:1a:68:1c:b1:cc:20:9f:
         fa:a6:73:66:cc:98:ad:7a:07:46:40:81:f5:49:15:58:50:fc:
         13:5e:52:e0:8e:46:be:ad:3d:ac:e2:70:4b:75:03:32:ee:8e:
         aa:96:ae:13:02:ec:90:07:55:58:ac:91:44:a5:f3:32:c4:c4:
         c5:63:7f:f4:a4:13:50:87:a5:38:24:9f:16:68:30:4f:52:66:
         6e:b1:4f:61:24:cb:0d:44:1e:dc:27:4a:3d:15:92:e9:0d:5a:
         b7:bd:c8:b6:01:8c:fa:59:13:a6:1b:60:3c:29:49:d2:ee:34:
         9d:39:ff:f3:e2:8c:de:cc:ec:cf:74:d5:61:83:10:cb:fa:8d:
         5d:df:9b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:15:12 2026 by rpki-client