Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft
File:                     LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft (raw, json)
Hash identifier:          fEa++raQadyluHgA6BBqrbtntnyvuNPESOxlPnHI40Q=
Subject key identifier:   BE:96:A2:1C:59:0D:AC:92:76:B7:73:68:59:EF:EB:0F:4F:26:5A:79
Authority key identifier: 2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25
Certificate issuer:       /CN=A913EC3B/serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325
Certificate serial:       0279
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft
Manifest number:          026D
Signing time:             Sun 05 Apr 2026 01:38:36 +0000
Manifest this update:     Sun 05 Apr 2026 01:38:35 +0000
Manifest next update:     Sun 12 Apr 2026 01:38:35 +0000
Files and hashes:         1: LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl (hash: kLYImsqlDeLrnvuVYORv3Nd0epTPCCmvcsAY30qUuZA=)
                          2: E8B7423A7DE911EDBCFD3082C4F9AE02.roa (hash: GFXgxmEoBQzCrsm/fS7lTOgYerzl4oJDvOwjqKvAb0Y=)
                          3: F40EE60A9B5C11EFAF221C2AC4F9AE02.roa (hash: wMJcy9/RZ84DRy4ocrFd613aXU3WIp1EJ/+o6ekr43M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl
                          rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:38:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 633 (0x279)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EC3B, serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325
        Validity
            Not Before: Apr  5 01:38:35 2026 GMT
            Not After : Apr 12 01:38:35 2026 GMT
        Subject: CN=69d1bd1c-75f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:db:55:7f:33:a7:fd:f9:64:a5:6f:c7:96:79:
                    71:c9:dd:45:fe:04:75:0d:a1:fc:9b:ce:86:ce:fa:
                    ea:65:c8:05:f8:71:91:14:2b:dc:98:62:96:00:ce:
                    6a:1c:5a:1f:88:72:78:6d:88:01:af:c5:be:73:e9:
                    8e:2f:0d:a4:59:4d:fc:e3:40:a0:13:c5:80:c5:cc:
                    91:97:66:f1:5b:de:c1:2f:61:d7:aa:72:ab:a2:78:
                    23:99:90:1d:3e:bc:eb:0a:25:c2:c6:76:0c:ce:5e:
                    15:7a:b7:56:ff:1f:74:d3:4f:42:ea:dc:3c:38:6e:
                    2c:80:8d:df:3e:c3:4b:4f:8a:34:1b:98:2f:58:ce:
                    6c:38:a0:aa:0f:a3:1b:08:91:f2:36:6d:c2:ee:8f:
                    e1:60:d5:f0:e6:7e:e2:4d:b5:51:54:29:05:ea:2a:
                    85:ab:16:69:56:c9:a8:c2:77:7c:9f:8f:ce:3b:ea:
                    fc:1d:e5:89:f5:2c:9c:c6:25:08:8b:8b:49:71:f6:
                    37:57:52:13:59:3d:f0:30:71:fc:2d:b1:a4:eb:a7:
                    4a:2d:3d:f6:55:39:f2:f8:13:c7:ee:45:2b:e9:8d:
                    d0:1d:b6:54:00:65:bd:fb:21:0c:cb:5a:d1:d3:80:
                    9a:f0:71:a5:a6:d7:4e:b4:75:29:e8:90:d4:8c:70:
                    5c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:96:A2:1C:59:0D:AC:92:76:B7:73:68:59:EF:EB:0F:4F:26:5A:79
            X509v3 Authority Key Identifier:
                keyid:2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:43:b2:64:aa:92:cd:e2:d5:4e:b0:09:7d:3b:d6:52:7f:16:
         4b:1c:69:e9:54:3b:5d:4f:94:62:b4:2e:bc:a0:67:89:3d:83:
         79:4a:1e:66:a4:b5:31:1b:92:50:33:ca:a2:eb:85:73:9f:d7:
         0d:f0:9e:3e:5f:6d:08:b0:85:b1:ab:1a:d9:83:f5:fc:dc:78:
         3d:14:d8:09:db:03:9f:46:c9:c4:63:06:70:d3:25:f9:e7:87:
         c1:58:0a:e1:a5:81:c0:28:8e:d0:83:35:ea:96:d2:b2:94:8d:
         ec:5a:4e:d3:8e:ee:fd:9c:5c:f4:4e:ea:3f:94:a2:78:6b:17:
         ca:0f:5e:91:6f:09:58:1b:ec:0d:d1:87:4c:4a:f7:43:2c:4e:
         92:f8:a9:bd:0e:c5:53:eb:f3:85:54:dc:d1:36:a9:ce:d7:e5:
         f3:70:ec:f7:f3:cf:ea:85:6f:82:36:6b:70:a7:a0:68:77:0b:
         e5:f5:d6:cc:95:b7:89:43:3d:e7:ff:b5:55:1c:cf:41:d7:37:
         65:b7:79:cd:ab:2e:82:2d:36:0c:c5:4a:8f:8c:df:dd:f8:65:
         0b:2f:fa:00:6a:ce:42:00:1f:df:9d:1d:49:48:91:77:a5:3d:
         e9:ab:f5:d0:3e:8b:ca:65:3d:19:af:f7:fe:21:4a:65:e3:5d:
         03:e0:ff:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:58:45 2026 by rpki-client