Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft
File:                     LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft (raw, json)
Hash identifier:          HDeutxyxP91fwgV8hvTcKCXGJeNWbCqE/wAZIijRAtU=
Subject key identifier:   EF:03:DA:16:3F:A8:77:6B:16:67:D2:A9:5E:B5:34:D7:DA:86:2E:0D
Authority key identifier: 2D:64:FA:34:78:C9:94:91:76:8E:66:E6:E9:97:E9:FA:A9:5C:A2:D3
Certificate issuer:       /CN=A91B9EBB/serialNumber=2D64FA3478C99491768E66E6E997E9FAA95CA2D3
Certificate serial:       0C8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft
Manifest number:          0C81
Signing time:             Tue 22 Sep 2026 18:32:12 +0000
Manifest this update:     Tue 22 Sep 2026 18:32:11 +0000
Manifest next update:     Tue 29 Sep 2026 18:32:11 +0000
Files and hashes:         1: LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl (hash: IFcd3opw9wmlUQxcU1wQsR3tGf1z7n2R8flQi3NiYig=)
                          2: E40A00021F9311ECAF64925DC4F9AE02.roa (hash: HwE2Q0NQdpDz1uIc7O5V43S4b46xyejHY0vWphKjiw0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl
                          rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 18:32:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3213 (0xc8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9EBB, serialNumber=2D64FA3478C99491768E66E6E997E9FAA95CA2D3
        Validity
            Not Before: Sep 22 18:32:11 2026 GMT
            Not After : Sep 29 18:32:11 2026 GMT
        Subject: CN=6ab2c9ac-4ae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:33:0e:ae:38:f4:0a:02:0b:06:b1:65:f9:d4:
                    7f:0f:91:05:cd:d5:f4:ed:52:0c:a6:a0:18:6d:98:
                    3e:b6:85:58:5d:2b:73:a4:37:c4:b9:a4:df:f3:0c:
                    46:b5:46:f1:22:86:3e:2e:e3:ae:5c:d9:39:07:0c:
                    70:90:4d:c6:6b:e4:84:58:7d:11:44:75:c8:33:db:
                    47:e2:05:28:84:50:ad:9e:71:2e:5e:eb:f1:b1:41:
                    b1:da:b1:e1:8b:c1:0e:20:01:dc:3c:b6:ba:93:cc:
                    54:ca:a4:f0:f6:bb:27:f1:59:5a:50:57:a0:d3:9a:
                    a5:20:62:61:08:ba:3e:75:98:b4:2a:d4:04:22:12:
                    c5:d5:a4:fe:1a:a1:1c:12:73:84:e0:75:d2:7f:cf:
                    1f:ee:b2:92:41:93:ea:2b:af:0b:f1:26:17:ad:fb:
                    72:f4:35:e3:e9:a2:2f:ea:9e:db:ac:46:91:b8:c8:
                    57:c0:ee:7b:e3:36:4c:76:58:2d:2c:0c:be:72:f7:
                    86:a5:d0:36:65:2c:39:a5:86:e2:cf:39:1c:cd:d0:
                    6f:84:17:17:0c:8b:dd:6d:80:91:6e:03:a3:a1:dc:
                    76:b5:e7:57:ca:95:db:6c:e0:ce:15:35:36:f4:b6:
                    fc:86:57:85:9d:26:b6:ab:f1:17:95:95:98:f2:a5:
                    fa:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:03:DA:16:3F:A8:77:6B:16:67:D2:A9:5E:B5:34:D7:DA:86:2E:0D
            X509v3 Authority Key Identifier:
                keyid:2D:64:FA:34:78:C9:94:91:76:8E:66:E6:E9:97:E9:FA:A9:5C:A2:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:2b:7c:74:03:9b:05:39:3c:d6:2c:f9:62:1b:7c:6f:f6:b5:
         40:59:e0:7c:ed:f0:aa:86:9d:80:23:d9:ae:bb:b4:df:40:a0:
         9b:34:df:70:4d:e8:be:5d:20:2e:e8:ce:e1:a3:75:48:1c:9c:
         f9:61:c4:cb:a2:f4:36:89:bf:6b:8e:fd:99:c7:07:ff:18:7d:
         63:90:bd:91:13:79:8d:af:e2:89:29:73:66:1f:24:6a:45:7a:
         ef:3f:fc:2e:6e:1e:3b:2c:b7:6e:89:fc:f2:ac:f9:1a:b1:66:
         6c:df:6b:3d:ee:04:9d:10:51:28:85:87:d5:e3:55:42:27:a1:
         8f:d6:4b:93:58:4f:a9:a5:1d:cd:5b:62:60:0b:22:5a:c9:03:
         d2:40:30:e6:c2:05:4d:c8:fe:13:11:16:96:73:b3:40:3d:e3:
         fd:0f:d6:03:83:df:3f:78:59:50:20:21:ef:2d:ec:c1:af:aa:
         2d:fb:a5:0f:26:e7:d9:29:e9:25:58:1f:73:8d:d9:2b:4b:42:
         64:c4:c7:d6:5a:c7:63:0f:71:61:d9:a8:4e:0c:42:5e:fb:84:
         75:37:7e:1d:ea:b6:19:00:83:cc:3d:da:b9:73:06:bb:91:9e:
         79:f0:2f:7c:94:84:d3:11:ab:ee:ee:ba:45:7a:b8:bc:1e:13:
         4a:aa:e5:32
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjlFQkIxMTAvBgNVBAUTKDJENjRGQTM0NzhDOTk0OTE3NjhFNjZFNkU5OTdFOUZB
QTk1Q0EyRDMwHhcNMjYwOTIyMTgzMjExWhcNMjYwOTI5MTgzMjExWjAYMRYwFAYD
VQQDEw02YWIyYzlhYy00YWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsDMOrjj0CgILBrFl+dR/D5EFzdX07VIMpqAYbZg+toVYXStzpDfEuaTf8wxG
tUbxIoY+LuOuXNk5BwxwkE3Ga+SEWH0RRHXIM9tH4gUohFCtnnEuXuvxsUGx2rHh
i8EOIAHcPLa6k8xUyqTw9rsn8VlaUFeg05qlIGJhCLo+dZi0KtQEIhLF1aT+GqEc
EnOE4HXSf88f7rKSQZPqK68L8SYXrfty9DXj6aIv6p7brEaRuMhXwO574zZMdlgt
LAy+cveGpdA2ZSw5pYbizzkczdBvhBcXDIvdbYCRbgOjodx2tedXypXbbODOFTU2
9Lb8hleFnSa2q/EXlZWY8qX6RwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO8D2hY/
qHdrFmfSqV61NNfahi4NMB8GA1UdIwQYMBaAFC1k+jR4yZSRdo5m5umX6fqpXKLT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUVCQi9GOTI2M0QxNjJC
MDcxMUVBQjg1QkI4N0NDNEY5QUUwMi9MV1Q2TkhqSmxKRjJqbWJtNlpmcC1xbGNv
dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xXVDZOSGpKbEpGMmptYm02WmZwLXFsY290TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OUVCQi9GOTI2M0QxNjJCMDcxMUVBQjg1QkI4N0NDNEY5QUUwMi9MV1Q2TkhqSmxK
RjJqbWJtNlpmcC1xbGNvdE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhyt8dAObBTk81iz5Yht8b/a1QFngfO3wqoadgCPZrru030CgmzTfcE3ovl0g
LujO4aN1SByc+WHEy6L0Nom/a479mccH/xh9Y5C9kRN5ja/iiSlzZh8kakV67z/8
Lm4eOyy3bon88qz5GrFmbN9rPe4EnRBRKIWH1eNVQiehj9ZLk1hPqaUdzVtiYAsi
WskD0kAw5sIFTcj+ExEWlnOzQD3j/Q/WA4PfP3hZUCAh7y3swa+qLfulDybn2Snp
JVgfc43ZK0tCZMTH1lrHYw9xYdmoTgxCXvuEdTd+Heq2GQCDzD3auXMGu5GeefAv
fJSE0xGr7u66RXq4vB4TSqrlMg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:08:35 2026 by rpki-client