Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft
File:                     LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft (raw, json)
Hash identifier:          v4hI30MFKl3MBUzSeTayByuM09VqKWhdXkTuLPG7ajk=
Subject key identifier:   1B:B8:06:84:34:25:B4:E2:B8:C4:76:82:4B:68:5B:2C:65:C5:45:07
Authority key identifier: 2D:64:FA:34:78:C9:94:91:76:8E:66:E6:E9:97:E9:FA:A9:5C:A2:D3
Certificate issuer:       /CN=A91B9EBB/serialNumber=2D64FA3478C99491768E66E6E997E9FAA95CA2D3
Certificate serial:       0C49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft
Manifest number:          0C3D
Signing time:             Tue 12 May 2026 18:48:51 +0000
Manifest this update:     Tue 12 May 2026 18:48:51 +0000
Manifest next update:     Tue 19 May 2026 18:48:51 +0000
Files and hashes:         1: LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl (hash: 3UMMrvz9m8qHJ6S8xHHbR/zohBGy9G8SnrFfg+vGb5s=)
                          2: E40A00021F9311ECAF64925DC4F9AE02.roa (hash: HwE2Q0NQdpDz1uIc7O5V43S4b46xyejHY0vWphKjiw0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl
                          rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:48:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3145 (0xc49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9EBB, serialNumber=2D64FA3478C99491768E66E6E997E9FAA95CA2D3
        Validity
            Not Before: May 12 18:48:51 2026 GMT
            Not After : May 19 18:48:51 2026 GMT
        Subject: CN=6a037613-786f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:48:54:56:9d:43:a3:c4:fd:84:9d:4d:5a:ea:
                    42:97:53:04:7b:a8:09:03:d5:85:2b:67:77:58:2e:
                    09:ad:fe:9e:af:c1:ad:0a:77:18:e1:d2:93:88:f8:
                    79:b4:7c:ee:c3:e4:2d:ee:06:66:94:aa:a2:d0:ae:
                    5c:74:95:91:b0:7d:d0:b0:88:2a:82:a4:d5:2d:82:
                    44:1d:d0:8f:d0:47:86:5e:36:9f:6f:8e:21:92:49:
                    59:0c:02:22:dc:32:01:67:42:a6:bc:aa:2e:95:ea:
                    f3:13:cd:9f:25:db:49:89:77:30:90:32:1a:a8:07:
                    f7:b4:f1:97:ad:b5:f1:ce:41:06:3b:24:86:f2:46:
                    92:af:38:06:e2:0b:83:1b:34:16:cd:1d:67:f2:a2:
                    38:fa:1e:2d:cc:0b:4c:d8:1f:c1:53:e3:80:19:cb:
                    12:7f:80:9d:e0:98:24:ba:4e:7a:26:2e:64:dd:42:
                    2a:19:6e:f2:8b:64:d7:98:51:f5:3f:d4:d8:cb:6a:
                    27:35:15:22:3d:95:79:72:35:38:0d:cf:b4:3d:f0:
                    10:2e:81:2c:75:d1:97:f6:1d:07:a2:55:5e:1a:87:
                    02:4a:d0:79:2f:da:38:51:48:c6:61:33:0a:8b:91:
                    91:3f:af:47:b3:4b:2c:6e:05:fe:1c:a8:ab:60:93:
                    dc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B8:06:84:34:25:B4:E2:B8:C4:76:82:4B:68:5B:2C:65:C5:45:07
            X509v3 Authority Key Identifier:
                keyid:2D:64:FA:34:78:C9:94:91:76:8E:66:E6:E9:97:E9:FA:A9:5C:A2:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:d3:73:07:36:61:f0:4d:1b:07:7c:11:25:e7:d1:8f:5d:ee:
         ee:da:c1:2c:ec:1e:a9:ea:0b:70:e9:fc:35:51:03:82:a4:da:
         74:c3:3b:c8:aa:f4:cf:9e:1e:60:fb:76:2c:a9:fd:0f:90:08:
         80:70:00:45:02:8f:a8:93:48:f9:2b:45:0c:43:f5:e4:cc:df:
         87:ca:5e:29:1c:06:52:26:6e:f9:e8:7f:35:f2:33:a2:10:4c:
         fb:0a:fe:49:61:30:06:3c:01:a5:dd:50:9e:b2:e8:d3:46:24:
         3c:82:6b:41:92:9f:c3:36:7a:d7:7d:fd:dd:67:17:f0:61:23:
         ca:6e:40:11:37:91:02:e7:0e:58:7e:64:3b:a1:7d:21:3c:f5:
         55:d7:0b:04:31:92:a9:09:1e:80:1c:b2:a9:cb:26:1c:bf:e5:
         70:cb:ae:11:7b:31:1c:b4:42:80:8e:e1:98:ba:ce:73:84:45:
         65:69:f0:5f:09:9c:71:61:7d:7c:ec:4d:3d:9b:bc:78:b0:38:
         b2:03:3b:de:fa:bc:a2:d0:0e:5e:23:2e:40:08:cd:e3:e0:7c:
         00:50:94:68:ba:71:9f:4a:fc:42:86:ce:bf:54:2a:ae:1e:ce:
         56:75:f7:33:42:90:1c:fa:d3:64:30:f7:d2:12:01:27:db:a4:
         b4:81:dc:11
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjlFQkIxMTAvBgNVBAUTKDJENjRGQTM0NzhDOTk0OTE3NjhFNjZFNkU5OTdFOUZB
QTk1Q0EyRDMwHhcNMjYwNTEyMTg0ODUxWhcNMjYwNTE5MTg0ODUxWjAYMRYwFAYD
VQQDEw02YTAzNzYxMy03ODZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvUhUVp1Do8T9hJ1NWupCl1MEe6gJA9WFK2d3WC4Jrf6er8GtCncY4dKTiPh5
tHzuw+Qt7gZmlKqi0K5cdJWRsH3QsIgqgqTVLYJEHdCP0EeGXjafb44hkklZDAIi
3DIBZ0KmvKoulerzE82fJdtJiXcwkDIaqAf3tPGXrbXxzkEGOySG8kaSrzgG4guD
GzQWzR1n8qI4+h4tzAtM2B/BU+OAGcsSf4Cd4Jgkuk56Ji5k3UIqGW7yi2TXmFH1
P9TYy2onNRUiPZV5cjU4Dc+0PfAQLoEsddGX9h0HolVeGocCStB5L9o4UUjGYTMK
i5GRP69Hs0ssbgX+HKirYJPcpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBu4BoQ0
JbTiuMR2gktoWyxlxUUHMB8GA1UdIwQYMBaAFC1k+jR4yZSRdo5m5umX6fqpXKLT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUVCQi9GOTI2M0QxNjJC
MDcxMUVBQjg1QkI4N0NDNEY5QUUwMi9MV1Q2TkhqSmxKRjJqbWJtNlpmcC1xbGNv
dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xXVDZOSGpKbEpGMmptYm02WmZwLXFsY290TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OUVCQi9GOTI2M0QxNjJCMDcxMUVBQjg1QkI4N0NDNEY5QUUwMi9MV1Q2TkhqSmxK
RjJqbWJtNlpmcC1xbGNvdE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADNNzBzZh8E0bB3wRJefRj13u7trBLOweqeoLcOn8NVEDgqTadMM7yKr0z54e
YPt2LKn9D5AIgHAARQKPqJNI+StFDEP15Mzfh8peKRwGUiZu+eh/NfIzohBM+wr+
SWEwBjwBpd1QnrLo00YkPIJrQZKfwzZ613393WcX8GEjym5AETeRAucOWH5kO6F9
ITz1VdcLBDGSqQkegByyqcsmHL/lcMuuEXsxHLRCgI7hmLrOc4RFZWnwXwmccWF9
fOxNPZu8eLA4sgM73vq8otAOXiMuQAjN4+B8AFCUaLpxn0r8QobOv1Qqrh7OVnX3
M0KQHPrTZDD30hIBJ9uktIHcEQ==
-----END CERTIFICATE-----
Generated at Wed May 13 01:26:42 2026 by rpki-client