Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91450E0/0A67425CA67411F1A80084976811F970/ldtWWBegNoJcU88skymtvocwqLo.mft
File:                     ldtWWBegNoJcU88skymtvocwqLo.mft (raw, json)
Hash identifier:          OzgkVasoMxVZMEDhBtZ1yQAYGbvC+qnM/5i3L90GP8o=
Subject key identifier:   1F:84:11:96:9A:D9:55:DC:55:31:97:ED:32:2E:FD:15:6B:FB:5B:97
Authority key identifier: 95:DB:56:58:17:A0:36:82:5C:53:CF:2C:93:29:AD:BE:87:30:A8:BA
Certificate issuer:       /CN=A91450E0/serialNumber=95DB565817A036825C53CF2C9329ADBE8730A8BA
Certificate serial:       14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldtWWBegNoJcU88skymtvocwqLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91450E0/0A67425CA67411F1A80084976811F970/ldtWWBegNoJcU88skymtvocwqLo.mft
Manifest number:          14
Signing time:             Wed 07 Oct 2026 09:41:37 +0000
Manifest this update:     Wed 07 Oct 2026 09:41:37 +0000
Manifest next update:     Wed 14 Oct 2026 09:41:37 +0000
Files and hashes:         1: ldtWWBegNoJcU88skymtvocwqLo.crl (hash: 1/sLI5VqFE6JAnj4ewCkHTUBdx76mGg6pz3Ih/EJBUE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91450E0/0A67425CA67411F1A80084976811F970/ldtWWBegNoJcU88skymtvocwqLo.crl
                          rsync://rpki.apnic.net/member_repository/A91450E0/0A67425CA67411F1A80084976811F970/ldtWWBegNoJcU88skymtvocwqLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldtWWBegNoJcU88skymtvocwqLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 09:41:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91450E0, serialNumber=95DB565817A036825C53CF2C9329ADBE8730A8BA
        Validity
            Not Before: Oct  7 09:41:37 2026 GMT
            Not After : Oct 14 09:41:37 2026 GMT
        Subject: CN=6ac613d1-3433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e1:e6:5f:86:21:08:d9:3c:31:1b:15:45:21:
                    66:34:83:41:9e:b2:2c:15:56:1c:15:f1:a8:24:7a:
                    f2:9e:35:af:55:2a:46:4e:8f:c5:11:c9:3e:10:fd:
                    97:e8:8b:74:d3:20:c9:82:e5:4b:3f:87:08:68:63:
                    04:70:1b:af:e7:6a:6c:04:aa:2c:a6:84:13:a2:09:
                    5a:54:75:13:ce:68:38:9c:ca:4f:d4:59:78:a1:68:
                    20:bb:06:f9:a9:5b:00:56:5a:e8:24:02:23:d5:95:
                    50:66:a3:f8:db:4a:58:7f:5b:58:36:e3:b2:ce:fd:
                    04:a5:86:0b:9e:f8:9f:59:3c:cc:3b:fd:f5:70:fe:
                    7b:af:35:f6:d7:56:9d:51:17:09:7b:aa:ef:8b:6b:
                    7d:c2:80:0b:e8:e1:0f:c6:8b:a4:e4:0b:3b:0d:a7:
                    28:8a:da:19:59:e4:38:03:17:d8:ff:44:9f:fb:9b:
                    3f:19:f1:19:d2:0d:6d:17:be:ed:e9:e7:bc:2e:a5:
                    3c:17:2f:57:d7:a1:7a:9d:eb:40:e8:15:71:56:28:
                    d1:15:7a:fb:07:19:f5:a5:c4:45:8e:1e:3e:62:83:
                    85:99:d4:5a:f7:8f:6f:5f:b2:6b:ab:a6:48:d7:8e:
                    b8:55:1c:b2:7d:40:1c:dc:fe:c8:ea:90:4a:d4:4a:
                    16:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:84:11:96:9A:D9:55:DC:55:31:97:ED:32:2E:FD:15:6B:FB:5B:97
            X509v3 Authority Key Identifier:
                keyid:95:DB:56:58:17:A0:36:82:5C:53:CF:2C:93:29:AD:BE:87:30:A8:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91450E0/0A67425CA67411F1A80084976811F970/ldtWWBegNoJcU88skymtvocwqLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldtWWBegNoJcU88skymtvocwqLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91450E0/0A67425CA67411F1A80084976811F970/ldtWWBegNoJcU88skymtvocwqLo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:07:17:8c:99:5b:3c:f7:1f:fd:40:31:76:7e:35:e4:f9:aa:
         a6:12:a3:37:9f:df:6b:3e:ca:b8:af:13:7c:69:d0:ca:b5:01:
         e3:af:52:00:ed:c2:86:fe:8d:92:12:d7:bb:dc:a9:44:c8:ac:
         93:4d:d8:80:25:55:4c:3e:a0:b4:f5:92:06:3d:a7:4c:55:8b:
         34:03:e9:cd:b9:c7:fa:e4:33:ef:87:f8:65:ad:73:b6:29:97:
         60:06:df:d3:ac:af:4c:52:ee:1d:36:bd:03:0d:96:d9:d3:f2:
         0d:85:e1:e0:03:e1:32:bc:03:60:29:b6:14:d5:65:95:3b:a5:
         be:b9:37:1d:2e:24:83:06:c0:07:6c:0d:77:3e:fd:7e:5f:c7:
         60:9b:48:47:b7:5d:bb:d0:b9:0a:3d:db:2c:7f:f5:94:a1:1c:
         08:25:53:fe:5c:69:9e:df:a2:d6:f1:4b:33:c0:17:da:0b:25:
         fa:57:3e:33:aa:8c:c5:b5:55:c2:38:34:be:ed:6e:11:68:af:
         33:eb:28:0f:9c:31:ce:c5:2e:53:71:24:f1:2a:f2:f1:ba:ef:
         c7:37:bf:02:11:de:af:f7:31:64:d4:4c:7a:bb:8a:d6:94:a4:
         53:5d:e0:98:1a:35:f3:ba:a5:34:03:62:92:4f:34:e9:b8:64:
         fc:5d:8e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:25:56 2026 by rpki-client