Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft
File:                     ldG-85ALQWWEFku3RjF3EwIpFog.mft (raw, json)
Hash identifier:          w0yea9cVV8Xo6uQ3ZJXeaYZeiG13tjrG701ECj7V4Ec=
Subject key identifier:   95:9E:1E:22:59:C4:A1:F2:B2:D9:62:1C:FF:FB:3D:AE:F6:79:59:4E
Authority key identifier: 95:D1:BE:F3:90:0B:41:65:84:16:4B:B7:46:31:77:13:02:29:16:88
Certificate issuer:       /CN=A91577DD/serialNumber=95D1BEF3900B416584164BB74631771302291688
Certificate serial:       355D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldG-85ALQWWEFku3RjF3EwIpFog.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft
Manifest number:          354E
Signing time:             Tue 12 May 2026 14:51:32 +0000
Manifest this update:     Tue 12 May 2026 14:51:32 +0000
Manifest next update:     Tue 19 May 2026 14:51:32 +0000
Files and hashes:         1: ldG-85ALQWWEFku3RjF3EwIpFog.crl (hash: QXdvjFPElt7veByh+HWDA1IoqZN8AU05ICWvcrX+LOo=)
                          2: C2F7AE40C03111EA9777314AC4F9AE02.roa (hash: JsmcN/iHNKGrr5+UdOJwBNNsYsjaqRo1Qt07Gdc3xmM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.crl
                          rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldG-85ALQWWEFku3RjF3EwIpFog.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:51:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13661 (0x355d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91577DD, serialNumber=95D1BEF3900B416584164BB74631771302291688
        Validity
            Not Before: May 12 14:51:32 2026 GMT
            Not After : May 19 14:51:32 2026 GMT
        Subject: CN=6a033e74-2ccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9b:37:a3:25:73:43:fb:3f:85:40:76:cc:06:
                    60:3a:c6:f4:b7:71:06:fd:d5:8c:c9:9c:e3:8a:b8:
                    fb:f1:20:af:ec:61:6d:c1:fa:4b:a9:d0:ca:f3:ae:
                    f9:7e:a3:da:03:c7:fa:b6:34:e3:3b:5d:d6:34:40:
                    b5:5b:15:ae:35:ff:1c:1e:b1:a4:41:c8:9a:7c:b4:
                    c4:d0:d2:cb:c8:9d:be:92:07:a6:ef:2e:88:83:3d:
                    36:4a:a3:26:45:04:6b:05:6c:c7:75:45:a3:0a:9b:
                    0f:82:3e:be:6b:a1:0e:1f:fe:97:e6:5b:ee:5a:bb:
                    36:ff:e6:28:c4:d3:80:9e:92:52:22:73:9d:c0:6e:
                    b6:67:b3:16:2e:4c:23:5a:4f:96:b3:25:13:78:92:
                    76:43:e9:8b:9b:81:1d:57:66:01:a8:dd:71:cd:13:
                    9d:3d:7b:7b:15:bb:82:93:7b:0b:59:3e:f0:a0:d0:
                    88:73:fa:37:f9:8b:72:e8:9e:96:80:ec:5a:6a:bc:
                    7c:ef:72:0c:09:89:67:17:69:b0:aa:a3:eb:04:3d:
                    35:06:48:f7:73:3f:e3:83:86:09:eb:b4:a7:4f:08:
                    87:60:8c:34:2e:c3:79:70:e2:7d:59:87:ea:75:c6:
                    81:f6:a6:47:6f:83:24:9a:6c:b4:01:4b:63:43:46:
                    70:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9E:1E:22:59:C4:A1:F2:B2:D9:62:1C:FF:FB:3D:AE:F6:79:59:4E
            X509v3 Authority Key Identifier:
                keyid:95:D1:BE:F3:90:0B:41:65:84:16:4B:B7:46:31:77:13:02:29:16:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldG-85ALQWWEFku3RjF3EwIpFog.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:fb:cb:0e:a6:b3:79:e7:b7:bc:33:fe:f2:d9:81:cf:65:8a:
         0a:de:e6:04:58:ae:6c:eb:e4:88:c6:a0:03:13:05:22:ae:cf:
         f1:db:e7:f0:25:8d:d3:a0:88:50:08:7a:a6:23:02:9e:eb:60:
         03:62:fb:97:1d:7a:ae:5c:5c:22:e9:de:72:71:6f:cc:76:35:
         51:d5:79:ba:dd:e2:d5:55:ec:df:9b:08:65:22:29:b7:42:40:
         61:a2:c1:ea:58:ef:8e:1d:6d:0e:9b:93:a2:52:a0:ae:60:86:
         50:43:5c:43:dd:31:ac:fa:95:dc:4f:d3:de:72:a2:8b:52:05:
         7e:90:e7:63:b9:1a:29:a7:f2:1f:49:73:48:80:d3:7e:66:f3:
         8e:7c:0c:0d:1b:ab:29:2b:c6:2c:f3:2c:62:39:d8:68:d8:1e:
         3b:bb:ad:97:94:4a:6e:04:8b:31:26:ef:e9:b8:e8:2c:38:93:
         20:d7:1d:c4:3f:68:0c:b1:1b:d5:3b:f4:f0:30:8e:57:78:74:
         2b:81:5e:98:13:73:af:6b:aa:d6:98:62:30:9a:51:1b:40:81:
         1f:5e:08:89:fe:a9:38:c9:a5:9b:42:1c:cb:34:e4:78:f9:be:
         28:3d:f2:91:37:47:72:ed:dd:dd:ee:c4:94:da:6d:b6:f5:ca:
         63:ce:13:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:21:46 2026 by rpki-client