Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft
File:                     lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft (raw, json)
Hash identifier:          mKwdr1NWiSVrNYBpTQ/QLLdVwgSqL90xAH+QFs8CyHI=
Subject key identifier:   D1:83:52:36:03:6E:9C:4C:A1:8A:90:5C:F5:88:05:DF:F6:4F:B0:C5
Authority key identifier: 97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12
Certificate issuer:       /CN=A9133BB0/serialNumber=9706BF1219354D018C15858CE97679FE43E6B312
Certificate serial:       0176
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft
Manifest number:          0171
Signing time:             Thu 23 Jul 2026 06:16:20 +0000
Manifest this update:     Thu 23 Jul 2026 06:16:20 +0000
Manifest next update:     Thu 30 Jul 2026 06:16:20 +0000
Files and hashes:         1: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl (hash: jDMNbaYvFk+6pZmp+LNDTWga4a9heYUqsEZro4HmVJk=)
                          2: 87FEDB446B9B11F1A0F959156D47A888.roa (hash: puaYmraHKaDMLjz2a7HMedJgxaZ/2MzUtX95c64CBvw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl
                          rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:16:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133BB0, serialNumber=9706BF1219354D018C15858CE97679FE43E6B312
        Validity
            Not Before: Jul 23 06:16:20 2026 GMT
            Not After : Jul 30 06:16:20 2026 GMT
        Subject: CN=6a61b1b4-1e86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:97:4a:44:af:32:ca:91:a8:79:96:fd:8d:7b:
                    81:5d:28:c5:18:ae:19:7d:f9:b3:14:eb:2e:d3:04:
                    c1:07:85:cf:ab:f9:db:72:94:a3:e5:96:ef:53:5c:
                    99:c5:3d:1b:80:a7:20:ec:07:0c:43:be:c7:fb:c1:
                    22:6b:96:ae:1e:f9:22:43:b8:45:bd:93:f6:97:d4:
                    04:da:f2:36:bf:d1:70:a5:e4:4d:c6:10:40:6c:db:
                    c4:e9:2c:c2:44:16:c0:67:6b:49:35:fd:9f:85:d6:
                    99:72:e9:a1:c8:50:c1:f6:4e:65:94:a9:1c:fe:e9:
                    2b:44:00:5d:d4:ed:f1:70:0c:5e:aa:ff:7f:88:a5:
                    8e:06:a3:06:3a:e3:fe:2b:20:0b:58:96:17:b6:01:
                    6c:85:40:33:aa:f2:6f:79:7f:b8:00:04:e5:8e:00:
                    b4:c1:e9:62:09:ce:13:ce:a8:b6:23:fd:ea:5e:30:
                    0c:08:f4:ec:8a:34:ee:36:54:cb:4b:23:23:59:24:
                    02:c7:e3:08:6c:a0:37:29:a8:d0:28:6a:48:6d:66:
                    7c:d8:90:90:61:e8:a2:a8:62:14:dd:49:3d:ae:a5:
                    7d:de:b0:1a:8f:51:d1:0f:0e:5e:a7:3f:96:71:1e:
                    5f:54:bc:76:af:6f:fe:a0:31:1e:e6:43:c3:e3:f8:
                    78:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:83:52:36:03:6E:9C:4C:A1:8A:90:5C:F5:88:05:DF:F6:4F:B0:C5
            X509v3 Authority Key Identifier:
                keyid:97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:89:57:97:62:fe:88:b5:69:af:d0:c6:c0:f8:8b:0a:06:55:
         af:a2:32:4b:5a:f9:2d:6c:09:1a:68:e9:3e:6f:1f:a1:40:10:
         32:23:a3:ab:b6:11:9a:02:c3:97:c8:eb:d0:d7:93:c8:cb:53:
         b0:e2:da:25:6c:60:a9:ec:97:21:87:fa:dd:3a:70:c3:b4:82:
         2d:52:a9:b9:12:64:b1:79:21:2c:17:81:c0:1f:ff:37:c0:19:
         cf:f1:04:17:80:35:80:2e:3f:7d:09:f0:65:01:7f:9b:2c:9f:
         23:d9:ae:bf:12:de:64:09:82:92:d5:4e:a3:37:a8:5e:62:70:
         de:62:49:ed:03:60:f8:c4:53:a4:cf:92:6b:f8:fc:34:b9:5e:
         b0:de:88:e3:fc:91:8a:2a:24:a7:94:95:23:37:0c:7c:70:eb:
         3f:8b:8d:ca:3a:cf:68:89:50:87:0a:1e:35:43:bf:15:42:78:
         78:c8:60:60:d5:4f:c4:9f:f6:a6:7a:fa:f5:b6:62:b8:b0:e6:
         de:6d:16:45:36:21:00:eb:3d:4d:d5:b2:31:20:08:fc:df:45:
         3f:13:d2:33:f3:ab:38:da:0c:8d:e3:12:1c:7b:46:a5:0b:bb:
         78:fe:1b:7c:c0:2f:08:02:4e:96:43:be:ab:68:4f:ef:e2:65:
         f3:3d:87:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 05:18:55 2026 by rpki-client