Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft
File:                     LDTzNZTMO-PAfo54N2v8QzJjFUg.mft (raw, json)
Hash identifier:          3E5KkbI7U6KKlWFU7N2c0exjWwwXFOTAJwRzgh6vVPg=
Subject key identifier:   2E:D9:9B:94:2C:CF:F5:45:46:60:C0:60:01:F2:86:04:E6:6F:C1:ED
Authority key identifier: 2C:34:F3:35:94:CC:3B:E3:C0:7E:8E:78:37:6B:FC:43:32:63:15:48
Certificate issuer:       /CN=A914ADD8/serialNumber=2C34F33594CC3BE3C07E8E78376BFC4332631548
Certificate serial:       3585
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft
Manifest number:          3584
Signing time:             Sun 04 Oct 2026 14:29:02 +0000
Manifest this update:     Sun 04 Oct 2026 14:29:02 +0000
Manifest next update:     Sun 11 Oct 2026 14:29:02 +0000
Files and hashes:         1: LDTzNZTMO-PAfo54N2v8QzJjFUg.crl (hash: WIbJylHTaVi7ctnkyElON3IWZVFB0F2H6jNu6sZSN/s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.crl
                          rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 14:29:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13701 (0x3585)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914ADD8, serialNumber=2C34F33594CC3BE3C07E8E78376BFC4332631548
        Validity
            Not Before: Oct  4 14:29:02 2026 GMT
            Not After : Oct 11 14:29:02 2026 GMT
        Subject: CN=6ac262ae-3078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e1:72:5a:75:08:cf:6d:a4:fc:37:de:d7:7a:
                    b4:2e:90:78:44:41:fd:5d:6f:39:25:00:74:d0:6f:
                    5b:82:91:47:ee:30:8a:d1:bc:52:9c:c1:78:bc:45:
                    04:29:6e:7c:51:70:e9:69:e6:8e:f0:45:32:54:08:
                    38:59:6e:52:d4:a3:22:ba:26:b9:8f:d0:d7:df:3e:
                    cf:95:29:50:09:f5:ea:7e:f1:d3:b8:2c:58:70:36:
                    67:95:15:f2:24:32:b3:76:dc:a0:5b:86:30:49:43:
                    ba:e9:24:48:60:50:7b:43:c3:0a:da:92:79:90:d6:
                    7f:82:94:86:7e:77:69:41:00:c1:9a:f1:86:69:74:
                    c0:03:34:b4:7c:e2:6b:54:65:89:65:6b:ad:f9:43:
                    df:27:68:11:4c:c2:1e:e8:1b:94:63:cd:9c:04:a8:
                    7e:4f:75:af:d0:64:6a:1d:53:21:06:4c:7c:41:a2:
                    d3:d9:5d:f6:05:9d:c2:8e:d3:98:a9:22:3a:f5:49:
                    35:df:4a:4b:69:56:e0:70:02:22:14:ee:75:5b:8f:
                    e5:2d:5c:e3:bf:b5:ad:cf:0a:d8:55:42:ea:ad:ac:
                    0c:00:c4:ae:64:6c:6d:51:d3:27:0f:4a:c9:1f:07:
                    b2:24:1c:a1:55:92:ea:cf:9e:fb:66:33:39:e2:2e:
                    29:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D9:9B:94:2C:CF:F5:45:46:60:C0:60:01:F2:86:04:E6:6F:C1:ED
            X509v3 Authority Key Identifier:
                keyid:2C:34:F3:35:94:CC:3B:E3:C0:7E:8E:78:37:6B:FC:43:32:63:15:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:46:77:7e:c2:2c:46:21:28:95:47:65:e6:63:47:75:26:88:
         3a:dd:4c:4c:bc:9f:49:fb:84:c7:05:0d:6b:3f:55:7b:11:f4:
         b5:b8:f8:de:6b:25:11:66:f8:d0:30:e9:5b:ad:b1:1f:c6:3f:
         68:9c:af:0a:a1:4b:e3:c9:d0:24:4c:1e:1e:37:3a:9e:74:2e:
         24:17:38:68:b5:1a:8c:c8:ca:fc:8c:85:1e:cf:da:81:0d:f0:
         aa:53:7c:89:5d:8c:bf:33:f4:85:92:29:4e:ec:60:d8:12:69:
         8e:c8:2a:e6:bd:4a:b9:8f:ec:31:d2:d2:18:85:97:95:c1:82:
         17:b9:f5:f4:86:e8:71:6b:be:f0:d0:5b:80:8c:12:35:d0:9d:
         3b:44:e4:96:c1:9f:c5:8b:d9:22:a3:2b:da:ba:7a:e3:c3:a1:
         86:26:ef:da:ab:b9:0f:3d:a1:4e:86:68:70:1f:88:f9:b7:3b:
         1c:64:8a:e8:77:a0:a7:63:3e:bc:bb:cd:0b:25:61:8e:e7:32:
         df:62:69:ef:e2:52:c8:b5:14:47:c8:bf:f3:67:aa:82:3e:d2:
         a9:fa:04:70:81:72:cb:d4:49:4f:ca:d8:04:5a:14:ed:2f:78:
         55:de:1e:a4:93:39:21:3d:0a:6f:60:97:a6:31:d1:da:85:16:
         83:1c:b9:6c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEFERDgxMTAvBgNVBAUTKDJDMzRGMzM1OTRDQzNCRTNDMDdFOEU3ODM3NkJGQzQz
MzI2MzE1NDgwHhcNMjYxMDA0MTQyOTAyWhcNMjYxMDExMTQyOTAyWjAYMRYwFAYD
VQQDEw02YWMyNjJhZS0zMDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvuFyWnUIz22k/Dfe13q0LpB4REH9XW85JQB00G9bgpFH7jCK0bxSnMF4vEUE
KW58UXDpaeaO8EUyVAg4WW5S1KMiuia5j9DX3z7PlSlQCfXqfvHTuCxYcDZnlRXy
JDKzdtygW4YwSUO66SRIYFB7Q8MK2pJ5kNZ/gpSGfndpQQDBmvGGaXTAAzS0fOJr
VGWJZWut+UPfJ2gRTMIe6BuUY82cBKh+T3Wv0GRqHVMhBkx8QaLT2V32BZ3CjtOY
qSI69Uk130pLaVbgcAIiFO51W4/lLVzjv7WtzwrYVULqrawMAMSuZGxtUdMnD0rJ
HweyJByhVZLqz577ZjM54i4pdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC7Zm5Qs
z/VFRmDAYAHyhgTmb8HtMB8GA1UdIwQYMBaAFCw08zWUzDvjwH6OeDdr/EMyYxVI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QUREOC9BNEQ4MTA0RTFE
ODcxMUUyODM0Q0I5REYwOEIwMkNEMi9MRFR6TlpUTU8tUEFmbzU0TjJ2OFF6SmpG
VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xEVHpOWlRNTy1QQWZvNTROMnY4UXpKakZVZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QUREOC9BNEQ4MTA0RTFEODcxMUUyODM0Q0I5REYwOEIwMkNEMi9MRFR6TlpUTU8t
UEFmbzU0TjJ2OFF6SmpGVWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAG0Z3fsIsRiEolUdl5mNHdSaIOt1MTLyfSfuExwUNaz9VexH0tbj43mslEWb4
0DDpW62xH8Y/aJyvCqFL48nQJEweHjc6nnQuJBc4aLUajMjK/IyFHs/agQ3wqlN8
iV2MvzP0hZIpTuxg2BJpjsgq5r1KuY/sMdLSGIWXlcGCF7n19IbocWu+8NBbgIwS
NdCdO0TklsGfxYvZIqMr2rp648Ohhibv2qu5Dz2hToZocB+I+bc7HGSK6Hegp2M+
vLvNCyVhjucy32Jp7+JSyLUUR8i/82eqgj7SqfoEcIFyy9RJT8rYBFoU7S94Vd4e
pJM5IT0Kb2CXpjHR2oUWgxy5bA==
-----END CERTIFICATE-----
Generated at Mon Oct 5 05:19:50 2026 by rpki-client