Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft
File:                     lddEZYkqyDm6JHn6BHVqXjBfJjw.mft (raw, json)
Hash identifier:          wL4UOe5E6cCk448sd22cxL2SFr2QQ8nk/MbBFFpIqI8=
Subject key identifier:   B0:EC:87:40:99:B8:90:C2:0F:11:1C:A8:42:92:43:3D:11:79:8F:52
Authority key identifier: 95:D7:44:65:89:2A:C8:39:BA:24:79:FA:04:75:6A:5E:30:5F:26:3C
Certificate issuer:       /CN=A91557F2/serialNumber=95D74465892AC839BA2479FA04756A5E305F263C
Certificate serial:       025B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lddEZYkqyDm6JHn6BHVqXjBfJjw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft
Manifest number:          025B
Signing time:             Sun 18 Oct 2026 21:25:21 +0000
Manifest this update:     Sun 18 Oct 2026 21:25:20 +0000
Manifest next update:     Sun 25 Oct 2026 21:25:20 +0000
Files and hashes:         1: lddEZYkqyDm6JHn6BHVqXjBfJjw.crl (hash: nvf2HXkVsM++YXQWi74tQn5m6HOojK+owyYaVhTwwWM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.crl
                          rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lddEZYkqyDm6JHn6BHVqXjBfJjw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Oct 2026 21:25:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 603 (0x25b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91557F2, serialNumber=95D74465892AC839BA2479FA04756A5E305F263C
        Validity
            Not Before: Oct 18 21:25:20 2026 GMT
            Not After : Oct 25 21:25:20 2026 GMT
        Subject: CN=6ad53941-2dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:10:50:ff:62:01:40:d9:8e:41:03:45:d5:c8:
                    f8:de:a8:ac:db:c7:6c:61:13:c0:09:02:a6:aa:6b:
                    b7:57:89:0f:b5:a8:0a:1d:eb:02:64:f0:38:0e:25:
                    47:92:96:09:40:3d:67:da:b2:c2:2b:c2:21:e5:98:
                    51:eb:ea:92:f2:41:74:c0:52:18:78:57:d6:c2:43:
                    35:bb:14:a7:df:36:64:c2:85:20:e9:5c:b3:4f:95:
                    4c:87:6b:ce:ab:6b:d2:8d:b1:66:5a:61:1f:e7:db:
                    7a:0d:34:7a:43:1b:91:f0:55:4a:48:40:d1:99:cf:
                    f2:f0:6f:f7:69:a5:a5:8e:bf:4a:74:ea:0e:e4:06:
                    98:b4:a6:25:7f:4b:8e:b2:24:b1:d2:2a:0b:f5:08:
                    93:a0:02:35:5a:25:52:bb:4e:af:d6:c7:a7:34:13:
                    7d:bc:97:71:cd:a0:af:2c:f1:8f:1e:78:9f:3f:25:
                    3f:e4:de:d2:bb:14:05:a1:87:71:17:11:35:d3:6d:
                    90:fa:94:1a:40:e1:b9:66:f1:d0:6d:48:d2:1d:9e:
                    13:23:22:aa:06:45:4c:6b:c9:51:70:8c:7a:3c:7b:
                    b0:d5:91:e0:22:e7:1e:c1:c1:d9:ef:41:16:a0:87:
                    f8:66:87:50:9f:59:48:3c:b6:8f:9f:65:8f:5f:be:
                    b1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:EC:87:40:99:B8:90:C2:0F:11:1C:A8:42:92:43:3D:11:79:8F:52
            X509v3 Authority Key Identifier:
                keyid:95:D7:44:65:89:2A:C8:39:BA:24:79:FA:04:75:6A:5E:30:5F:26:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lddEZYkqyDm6JHn6BHVqXjBfJjw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:6c:24:1a:c8:8a:62:ad:ef:ca:d9:7e:b6:c7:b2:cf:78:98:
         46:94:fa:da:30:5c:88:2f:ec:ca:e2:55:74:0c:04:c4:51:49:
         ed:42:ff:b2:2f:d9:f9:f6:17:48:d8:82:21:32:67:b0:b1:6d:
         62:51:bf:82:23:3f:2f:de:f1:b5:7d:94:e6:ca:04:ee:1b:21:
         62:94:60:f2:39:45:fe:91:3a:d2:76:71:0c:a0:42:dd:66:b3:
         c5:47:bd:79:b8:ef:1d:25:16:07:c4:84:ca:ee:f6:61:8f:f4:
         51:d8:2f:d3:8a:24:aa:c8:ce:f9:55:3b:5b:b5:8a:d8:b8:ba:
         58:49:d0:4f:89:2d:23:ba:2d:56:81:63:e1:8c:b5:44:39:29:
         0a:b7:7b:72:8b:20:df:e1:c8:7b:c4:b6:2c:f9:1a:77:40:2f:
         c8:f2:37:c3:73:e7:8a:fc:18:b1:ad:b1:38:34:66:50:80:f6:
         41:4c:c7:f3:0b:df:8a:13:4b:05:d7:62:c7:3f:9f:67:4d:f4:
         ad:a8:49:af:7a:2f:eb:85:95:de:1a:15:f6:ae:ec:5b:10:6b:
         e4:72:3c:ed:72:27:de:77:d3:06:06:31:89:24:17:49:92:1f:
         04:28:40:78:0d:cb:c3:38:68:79:ee:cd:1e:5e:da:d2:53:e8:
         07:5d:d7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:50:45 2026 by rpki-client