Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft
File:                     LHtdhHIAPPNDas_lth6J7Isa2Ks.mft (raw, json)
Hash identifier:          h5oG51MQPagRqEqg0YV92Wf51t1W9nmgdSe0BK/83ms=
Subject key identifier:   DD:E2:A2:51:56:73:B4:52:AA:12:29:FB:12:06:E2:D2:29:9C:B1:69
Authority key identifier: 2C:7B:5D:84:72:00:3C:F3:43:6A:CF:E5:B6:1E:89:EC:8B:1A:D8:AB
Certificate issuer:       /CN=A91E0CA1/serialNumber=2C7B5D8472003CF3436ACFE5B61E89EC8B1AD8AB
Certificate serial:       012E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LHtdhHIAPPNDas_lth6J7Isa2Ks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft
Manifest number:          012E
Signing time:             Thu 16 Apr 2026 19:06:39 +0000
Manifest this update:     Thu 16 Apr 2026 19:06:38 +0000
Manifest next update:     Thu 23 Apr 2026 19:06:38 +0000
Files and hashes:         1: LHtdhHIAPPNDas_lth6J7Isa2Ks.crl (hash: OyWM0EJEaAM5hfv1yEET7RjdB1stZQ8VafkuwHvpPbc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.crl
                          rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LHtdhHIAPPNDas_lth6J7Isa2Ks.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:06:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 302 (0x12e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0CA1, serialNumber=2C7B5D8472003CF3436ACFE5B61E89EC8B1AD8AB
        Validity
            Not Before: Apr 16 19:06:38 2026 GMT
            Not After : Apr 23 19:06:38 2026 GMT
        Subject: CN=69e1333f-2a0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:00:86:68:c3:fd:47:9e:b5:c5:29:2d:6d:f7:
                    e6:23:79:67:c3:ec:23:d9:f2:24:d5:57:35:f7:fe:
                    0c:bd:b5:5c:be:9c:51:d0:36:5c:fc:d6:9a:fb:34:
                    27:28:df:84:42:b6:6e:23:e2:29:58:6d:1d:fc:f9:
                    1b:3a:1b:ea:d9:69:c1:36:62:57:7f:02:a0:52:fa:
                    1c:92:f9:bf:ed:f9:6e:26:de:c3:63:b5:e3:ed:56:
                    5f:23:6c:04:27:49:7d:a9:b3:9b:19:fd:3e:9a:78:
                    de:c4:60:af:66:5e:aa:ab:2d:34:67:9e:b5:a2:5a:
                    7a:ce:d8:ba:df:7b:7f:8b:aa:c3:f5:30:00:e8:ab:
                    ff:54:4e:9b:37:d6:c7:d1:4c:99:f4:a2:11:3b:f9:
                    7e:9c:a5:0f:5c:cc:c1:fa:87:73:a9:aa:19:c1:a5:
                    68:e2:d2:86:15:f1:c4:57:79:e1:84:03:11:67:29:
                    2e:d6:db:8f:a6:51:44:2f:16:70:e8:3f:d6:31:a2:
                    72:71:7e:27:22:f8:a6:d4:3e:95:75:d6:a4:ef:c9:
                    4f:79:52:be:64:94:b6:5e:3c:01:81:3c:c3:73:23:
                    c8:c6:7f:89:3a:44:90:11:a3:06:6d:4c:2d:ad:e2:
                    84:42:68:51:92:98:ec:e0:ca:37:1e:cd:e3:3e:73:
                    e8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E2:A2:51:56:73:B4:52:AA:12:29:FB:12:06:E2:D2:29:9C:B1:69
            X509v3 Authority Key Identifier:
                keyid:2C:7B:5D:84:72:00:3C:F3:43:6A:CF:E5:B6:1E:89:EC:8B:1A:D8:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LHtdhHIAPPNDas_lth6J7Isa2Ks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/4E11F4D6719011EF83C4BF7AC4F9AE02/LHtdhHIAPPNDas_lth6J7Isa2Ks.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:6c:01:51:81:b7:31:32:f6:91:66:6a:a1:19:36:e6:92:52:
         da:ab:9a:29:ce:57:fe:56:02:43:a9:b5:11:8d:b6:9d:57:65:
         0c:ed:95:7b:3b:7b:f5:91:15:73:84:ba:11:3b:5d:b2:6d:65:
         a1:fa:57:2c:8e:95:4c:44:bb:2f:09:b5:41:ae:ab:85:34:ac:
         a7:de:01:6e:30:5f:78:8a:e3:cf:7d:4e:23:95:33:83:9a:5f:
         3c:04:5c:62:bf:ea:10:7a:49:1e:fb:69:d4:17:33:ef:82:c5:
         85:37:38:a6:19:39:22:d3:95:aa:71:db:ce:40:15:e7:46:88:
         1a:bf:c6:73:01:6d:ea:61:72:3c:26:3a:de:e5:cf:d0:67:b7:
         ed:4b:f6:66:ef:b7:b2:85:48:6e:0c:0f:87:ae:4f:29:17:59:
         9d:d5:32:5a:d8:b3:84:05:d0:56:07:09:7b:07:ae:a0:af:44:
         f9:63:e1:7f:ca:04:6d:45:e6:56:74:74:65:02:34:58:e6:cf:
         50:26:58:5d:0c:13:6e:98:09:ce:31:ba:c5:e7:b5:71:61:b0:
         1d:9a:c3:be:fe:93:cf:3b:5b:5d:97:31:f6:90:65:1c:ec:d1:
         90:00:c0:0a:90:52:ee:36:e1:a7:e9:19:52:9a:44:94:14:e2:
         c2:29:cc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:37:57 2026 by rpki-client