Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft
File:                     LDTzNZTMO-PAfo54N2v8QzJjFUg.mft (raw, json)
Hash identifier:          gCWr+IEbQiF0Xy2IOCiKQ4cDJl1J3lk3UBxz0UZs1ZQ=
Subject key identifier:   E5:57:E6:7D:87:81:22:A6:90:A9:BB:7B:61:DE:1B:A7:82:AE:63:01
Authority key identifier: 2C:34:F3:35:94:CC:3B:E3:C0:7E:8E:78:37:6B:FC:43:32:63:15:48
Certificate issuer:       /CN=A914ADD8/serialNumber=2C34F33594CC3BE3C07E8E78376BFC4332631548
Certificate serial:       353B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft
Manifest number:          353A
Signing time:             Tue 12 May 2026 14:29:22 +0000
Manifest this update:     Tue 12 May 2026 14:29:21 +0000
Manifest next update:     Tue 19 May 2026 14:29:21 +0000
Files and hashes:         1: LDTzNZTMO-PAfo54N2v8QzJjFUg.crl (hash: 36t0jrlNas+Jtf6bOvSN34i7xXnotOffcMbno1yQkqw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.crl
                          rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:29:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13627 (0x353b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914ADD8, serialNumber=2C34F33594CC3BE3C07E8E78376BFC4332631548
        Validity
            Not Before: May 12 14:29:21 2026 GMT
            Not After : May 19 14:29:21 2026 GMT
        Subject: CN=6a033942-78ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cc:8e:af:21:1a:82:5d:50:da:bb:e4:1e:34:
                    98:83:d3:93:31:fb:68:48:fe:ba:6e:95:28:b7:69:
                    84:0d:5f:09:11:0d:65:3d:05:4c:15:63:53:71:55:
                    87:13:b2:b8:ae:2b:85:cf:f9:22:cc:7d:49:4f:51:
                    c5:0a:6f:74:6f:a4:fd:92:c7:c8:e7:62:1d:2c:9b:
                    a6:7c:84:7e:55:74:f2:0b:ba:cc:93:9b:5b:91:7f:
                    d1:8a:53:72:e6:a8:fb:c3:7b:a4:59:7f:24:cb:55:
                    b4:06:32:b1:22:72:36:80:0c:69:d0:d1:1c:98:cd:
                    27:27:3f:42:4f:fb:27:10:98:7d:43:2b:41:c2:51:
                    14:a6:a0:6d:64:08:93:40:07:7a:5b:38:27:10:aa:
                    83:6e:73:f5:86:fd:9f:82:6c:44:28:fd:95:d7:7f:
                    81:a9:66:fe:7a:2e:17:0b:27:4b:e8:52:15:28:27:
                    74:28:6b:69:af:23:9e:a9:4a:60:90:80:36:c2:9c:
                    cd:f2:a8:3f:78:df:44:68:a1:aa:01:b1:d9:c6:3a:
                    a4:6b:07:6e:9c:aa:f6:24:91:71:e8:29:eb:3c:ac:
                    93:34:10:69:51:bf:fe:4b:db:d2:a4:af:2b:b4:13:
                    19:0c:3a:b2:e6:36:31:32:0d:54:10:a9:f3:71:24:
                    91:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:57:E6:7D:87:81:22:A6:90:A9:BB:7B:61:DE:1B:A7:82:AE:63:01
            X509v3 Authority Key Identifier:
                keyid:2C:34:F3:35:94:CC:3B:E3:C0:7E:8E:78:37:6B:FC:43:32:63:15:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:a6:64:a5:b2:ef:0f:1e:91:70:47:44:0e:41:72:1f:9b:7e:
         59:dd:fe:72:76:75:b2:96:f3:36:79:3f:7a:e4:95:79:7a:ca:
         d1:fe:4e:1d:8e:06:77:46:25:f5:f9:aa:2e:cb:5b:42:99:df:
         bd:f2:6a:02:ff:43:4e:c2:d4:b4:20:4a:a1:03:cc:5a:55:85:
         46:25:3e:90:0d:a2:5b:f9:2e:71:41:01:32:c4:30:e7:4d:53:
         20:26:84:34:76:bb:5a:6b:98:07:34:16:19:95:59:eb:cd:05:
         fa:38:07:03:e5:22:d7:a1:fa:97:e9:f1:49:94:96:23:bd:2b:
         23:5e:ec:a1:24:9a:88:4b:99:d4:4b:85:4d:42:2f:8c:66:c8:
         d9:c4:90:de:34:cb:f6:f3:2c:3b:2b:13:75:0c:04:93:0d:0b:
         55:f0:51:c6:b7:51:3c:14:f5:48:e5:b3:6d:ec:9e:30:ae:e6:
         d7:09:fc:e5:a8:b8:16:f7:16:5f:dd:93:72:cb:c1:a4:76:c9:
         76:27:ce:15:21:d8:eb:83:99:c3:79:2f:ed:81:b2:72:b5:30:
         d3:79:23:f5:ea:db:4d:0b:a3:a3:01:53:15:95:1c:e8:c2:e1:
         53:e2:aa:93:50:32:6b:21:ec:7b:28:91:5e:2e:b5:92:0f:9f:
         41:98:ab:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:50:17 2026 by rpki-client