Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9ADA/0E9C7C72DAC511EC919A4C5AC4F9AE02/LLYWECl31MkLI_OvA7iR6JuAXMM.mft
File:                     LLYWECl31MkLI_OvA7iR6JuAXMM.mft (raw, json)
Hash identifier:          pTVBZNPhwKIWExZu4QV9HvUDI+ptAWQevpZS5vNyF4c=
Subject key identifier:   B8:EC:D4:10:81:81:9A:D7:78:7E:A3:68:68:5F:1F:20:4D:CA:34:AF
Authority key identifier: 2C:B6:16:10:29:77:D4:C9:0B:23:F3:AF:03:B8:91:E8:9B:80:5C:C3
Certificate issuer:       /CN=A91F9ADA/serialNumber=2CB616102977D4C90B23F3AF03B891E89B805CC3
Certificate serial:       0396
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLYWECl31MkLI_OvA7iR6JuAXMM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9ADA/0E9C7C72DAC511EC919A4C5AC4F9AE02/LLYWECl31MkLI_OvA7iR6JuAXMM.mft
Manifest number:          0391
Signing time:             Wed 25 Mar 2026 00:25:33 +0000
Manifest this update:     Wed 25 Mar 2026 00:25:33 +0000
Manifest next update:     Wed 01 Apr 2026 00:25:33 +0000
Files and hashes:         1: LLYWECl31MkLI_OvA7iR6JuAXMM.crl (hash: mUElN1l5wNWZn/njrYjsXTzwToxxeL9s7PAF9LICqJQ=)
                          2: A6389578DAD111ECA6DEA174C4F9AE02.roa (hash: bFHn+kTn1XJ0WyqqZFPPk6fqGg2GkmoHj8XsEzMPWkI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9ADA/0E9C7C72DAC511EC919A4C5AC4F9AE02/LLYWECl31MkLI_OvA7iR6JuAXMM.crl
                          rsync://rpki.apnic.net/member_repository/A91F9ADA/0E9C7C72DAC511EC919A4C5AC4F9AE02/LLYWECl31MkLI_OvA7iR6JuAXMM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLYWECl31MkLI_OvA7iR6JuAXMM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:25:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 918 (0x396)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9ADA, serialNumber=2CB616102977D4C90B23F3AF03B891E89B805CC3
        Validity
            Not Before: Mar 25 00:25:33 2026 GMT
            Not After : Apr  1 00:25:33 2026 GMT
        Subject: CN=69c32b7d-b239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bd:c0:7b:52:38:0d:f9:31:0b:81:cb:c3:46:
                    48:1e:5e:fe:66:af:1f:11:a1:7e:8e:ea:97:13:9b:
                    2e:2a:5d:08:1c:a1:4c:57:9b:f0:04:6b:1c:c0:03:
                    66:88:cf:7a:2e:b1:4c:9e:4c:86:bc:15:4c:e4:71:
                    04:5d:b3:f6:e5:ae:42:41:d9:1a:28:63:26:b3:39:
                    28:0c:4b:cb:88:95:7d:02:c6:dc:9b:31:53:77:a4:
                    1c:19:50:84:d4:e7:a0:6a:d4:19:2a:59:c1:73:b0:
                    55:42:fe:ec:34:44:6c:6e:29:26:29:4d:33:28:e9:
                    a5:f3:20:54:30:19:ee:45:64:98:0a:59:bc:e5:25:
                    b0:b1:39:93:a0:4c:75:25:30:bb:b6:c1:60:e6:60:
                    65:27:8a:13:a6:5c:3c:4d:72:78:3f:c2:b9:98:4b:
                    a9:72:c1:b6:5e:86:14:3e:a0:cf:88:23:3b:a7:a0:
                    2f:6a:99:08:17:0f:e0:12:f6:48:40:5a:a7:51:70:
                    52:10:96:3b:eb:d6:64:a3:8e:f2:4a:f9:4c:75:76:
                    25:1d:6f:1a:16:a2:77:4b:b3:97:90:c5:ef:7f:ec:
                    bc:c7:42:a2:f9:83:aa:2f:0e:b6:99:5e:9b:69:76:
                    cf:64:f6:06:42:13:d7:a8:9d:f7:09:75:ae:09:d9:
                    75:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:EC:D4:10:81:81:9A:D7:78:7E:A3:68:68:5F:1F:20:4D:CA:34:AF
            X509v3 Authority Key Identifier:
                keyid:2C:B6:16:10:29:77:D4:C9:0B:23:F3:AF:03:B8:91:E8:9B:80:5C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9ADA/0E9C7C72DAC511EC919A4C5AC4F9AE02/LLYWECl31MkLI_OvA7iR6JuAXMM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLYWECl31MkLI_OvA7iR6JuAXMM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9ADA/0E9C7C72DAC511EC919A4C5AC4F9AE02/LLYWECl31MkLI_OvA7iR6JuAXMM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:50:09:34:c5:ab:96:6b:7b:9f:9c:80:18:0f:87:db:e3:fd:
         41:c5:c4:49:07:9e:f2:43:11:6c:71:46:60:39:9b:2a:34:bb:
         85:23:be:45:c9:a9:96:8e:cd:7f:5a:e1:91:26:44:99:6a:4b:
         dc:f6:53:d5:9c:c8:c9:32:0e:42:72:42:d8:2f:c1:0c:ac:35:
         57:ab:b8:19:77:33:97:4e:c6:ba:eb:a9:42:38:75:ce:ab:06:
         6e:1b:b4:29:6b:76:68:c1:e1:1a:81:fb:9c:d4:77:40:6e:aa:
         0b:df:69:c3:c1:22:ef:49:08:fa:ee:87:a6:6b:fb:f8:fc:f6:
         70:d6:8c:ed:60:ee:8e:b8:fb:29:2a:4e:f8:1f:fc:a4:c1:c4:
         1a:49:65:a2:38:7a:71:18:8a:1d:19:0e:2a:df:48:35:40:37:
         b5:97:cb:7c:64:76:12:bc:a6:25:3a:67:17:21:8f:02:e5:20:
         6e:a6:e7:aa:1b:dd:a3:25:9e:13:2b:65:2d:f9:ae:a4:25:4e:
         19:e0:be:98:9a:f3:f7:48:80:08:ab:00:39:11:24:ab:7d:c6:
         12:32:40:97:82:d3:27:bb:5e:0f:91:76:c9:4e:db:dd:e3:be:
         8c:3f:02:42:75:61:66:fe:b1:f9:d3:d2:e6:21:a3:9c:1a:b7:
         63:2f:50:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:49:25 2026 by rpki-client