Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft
File:                     LHMz280_ygeHgDg3tsuuMawMS2U.mft (raw, json)
Hash identifier:          I/LHZUUsz/YnnH38SGmSvV2+4cbyqqM5F8ArDp6KGps=
Subject key identifier:   36:9F:F4:6B:81:C2:8A:72:8E:BB:4D:BD:23:B9:B7:2F:97:3A:E5:AB
Authority key identifier: 2C:73:33:DB:CD:3F:CA:07:87:80:38:37:B6:CB:AE:31:AC:0C:4B:65
Certificate issuer:       /CN=A91E3FD3/serialNumber=2C7333DBCD3FCA0787803837B6CBAE31AC0C4B65
Certificate serial:       0E50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft
Manifest number:          0E3E
Signing time:             Tue 22 Sep 2026 17:41:17 +0000
Manifest this update:     Tue 22 Sep 2026 17:41:16 +0000
Manifest next update:     Tue 29 Sep 2026 17:41:16 +0000
Files and hashes:         1: LHMz280_ygeHgDg3tsuuMawMS2U.crl (hash: 6YlnqnZbrNuuNubt+zh9j8t3nfBuE0ejlkBStn/Smk4=)
                          2: 62BA539C48ED11EDBC251337C4F9AE02.roa (hash: 6dBwoytRH7N2p3z59t26vsmmZ8suypwfNSdSsbkrs/U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.crl
                          rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 17:41:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3664 (0xe50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3FD3, serialNumber=2C7333DBCD3FCA0787803837B6CBAE31AC0C4B65
        Validity
            Not Before: Sep 22 17:41:16 2026 GMT
            Not After : Sep 29 17:41:16 2026 GMT
        Subject: CN=6ab2bdbd-042f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:98:8d:1f:31:92:2b:02:c1:14:39:d6:ee:c1:
                    69:37:bc:f0:82:fa:d9:c7:a5:93:5d:a7:a0:71:78:
                    2b:5c:2a:31:2d:69:ab:30:cf:53:3c:d8:cd:b7:83:
                    e2:7f:cc:44:20:7f:0f:d4:49:20:6f:f4:ea:49:bb:
                    ea:09:57:7d:65:3e:e7:70:dc:13:87:fa:36:91:33:
                    b6:ba:72:a9:61:63:f3:13:0f:9f:78:ea:a0:33:62:
                    e3:3c:aa:67:2e:76:0c:48:0a:09:96:9c:bc:72:b6:
                    eb:e2:7a:a0:2f:d2:c6:f4:7c:2f:5c:1c:f2:36:c7:
                    44:0c:10:00:e1:ab:a6:dd:f7:ed:49:92:68:c6:e3:
                    19:3a:e9:e5:5d:91:e6:b4:c2:ca:81:dd:40:77:ef:
                    96:61:96:12:15:6c:f1:c7:24:b6:69:25:9d:80:1c:
                    b1:bf:66:8a:e1:a2:f0:97:8d:8c:6e:d7:90:28:7a:
                    8b:ee:53:bd:fa:9a:03:15:90:7f:70:d8:f6:41:d0:
                    28:77:b9:69:1b:50:51:2c:18:ca:e7:43:b7:cb:7a:
                    44:47:85:28:6f:d4:c1:0d:d8:4c:59:f9:2a:b2:7f:
                    be:cf:a6:74:3f:99:9c:27:b3:e8:90:01:60:cd:37:
                    68:f9:c6:71:13:4c:33:eb:f9:ce:c8:37:90:a0:1f:
                    0f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:9F:F4:6B:81:C2:8A:72:8E:BB:4D:BD:23:B9:B7:2F:97:3A:E5:AB
            X509v3 Authority Key Identifier:
                keyid:2C:73:33:DB:CD:3F:CA:07:87:80:38:37:B6:CB:AE:31:AC:0C:4B:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:e5:9a:87:f2:fd:b1:e7:e2:21:6d:21:0a:6d:58:ff:12:be:
         b1:19:75:3b:ca:7d:5c:40:01:c9:15:7a:ef:f0:6b:9f:1b:33:
         fb:20:f1:36:40:cc:a6:37:f1:61:88:85:65:4b:92:26:48:08:
         e8:eb:8f:ec:b6:03:04:21:b1:2b:06:1d:17:5b:b4:26:63:69:
         51:a4:89:4e:62:9c:12:80:1e:22:89:18:42:ef:d4:3b:d5:e8:
         1a:56:8a:a8:4f:50:21:1e:98:1e:8e:25:53:da:12:b1:4a:a5:
         65:f0:b4:0c:ad:eb:1c:f3:e0:90:b6:95:b6:24:92:4d:d3:f5:
         26:ac:dd:ee:28:43:de:8b:86:68:56:06:9b:18:8b:c4:fe:f6:
         a9:5a:9a:be:c4:c6:c1:cd:28:fb:25:29:7a:f4:fe:67:af:f1:
         9d:13:f8:2c:2f:cd:11:70:76:cd:2d:06:b9:b4:a7:fa:9e:87:
         3d:56:4e:ef:af:f7:b8:55:a7:a6:f5:41:27:fe:22:60:76:bd:
         29:3c:d3:6b:aa:5e:3d:43:78:84:1d:8e:8e:04:0d:39:cc:43:
         72:24:59:c3:fe:e8:19:75:00:c4:ce:f4:f5:6c:d3:8f:2b:a9:
         67:e5:54:d6:01:e4:31:e7:91:8e:6e:22:f4:bf:34:a4:58:69:
         8a:1a:89:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:34:48 2026 by rpki-client