Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft
File:                     lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft (raw, json)
Hash identifier:          NoG0N/e+e7M3i4gS/KgquWBSs6GZx63eBcmpeoRJK9M=
Subject key identifier:   20:C6:5D:20:5E:10:D3:F1:EF:2F:C1:66:1E:C4:D7:82:9A:32:43:9A
Authority key identifier: 97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12
Certificate issuer:       /CN=A9133BB0/serialNumber=9706BF1219354D018C15858CE97679FE43E6B312
Certificate serial:       015E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft
Manifest number:          015A
Signing time:             Sat 13 Jun 2026 04:57:37 +0000
Manifest this update:     Sat 13 Jun 2026 04:57:37 +0000
Manifest next update:     Sat 20 Jun 2026 04:57:37 +0000
Files and hashes:         1: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl (hash: cHb82jOoznLAP38vzQcGai4lnib/dypBf7lzlFJ/XXk=)
                          2: 11763FC8648D11F0950AB94BC4F9AE02.roa (hash: 0dP1OIbJ9ltHMxlXRrdizYENWvjK08rixOVOC5IipOk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl
                          rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:57:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350 (0x15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133BB0, serialNumber=9706BF1219354D018C15858CE97679FE43E6B312
        Validity
            Not Before: Jun 13 04:57:37 2026 GMT
            Not After : Jun 20 04:57:37 2026 GMT
        Subject: CN=6a2ce341-4bc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:02:57:fe:12:4c:a7:37:c6:ef:0c:6c:7b:fb:
                    1d:c2:bd:18:af:0e:13:83:bd:97:69:97:56:73:66:
                    7d:b5:f3:eb:b7:16:73:60:63:7e:fe:5d:01:f7:f7:
                    64:a9:34:9c:5e:a3:60:0f:9d:03:26:e2:6b:77:b3:
                    15:6e:67:30:7c:f6:bd:b1:fb:c1:d1:b8:83:f0:1b:
                    4a:4d:fd:c1:2e:af:cd:cc:ff:9b:09:35:cc:a9:0a:
                    3f:33:cc:e3:2d:bb:09:2d:53:1b:d4:79:81:f0:50:
                    cd:99:64:d2:bd:1a:00:8f:e7:50:fb:89:41:16:cf:
                    5e:18:79:54:41:63:00:de:9c:da:75:57:83:07:9a:
                    f6:af:2e:a8:f8:41:f7:ac:15:6b:fb:28:cb:3c:51:
                    1c:32:13:a1:68:0b:5f:8c:b1:ea:bc:95:74:91:40:
                    44:4d:2b:4c:22:36:96:32:8c:e7:c6:98:ba:2d:20:
                    a3:53:31:2b:c5:62:26:f3:94:c7:0c:e1:b2:f1:c0:
                    02:37:42:d8:7c:e7:24:61:52:23:44:b2:aa:ea:e7:
                    d6:9a:57:5a:79:c0:3f:f6:42:e1:08:9b:fb:0f:2f:
                    a3:86:b8:16:35:91:9e:4b:6b:53:70:04:ec:d8:b3:
                    35:b2:10:7e:fb:4e:8a:e1:00:30:5e:bf:d6:e8:50:
                    e1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C6:5D:20:5E:10:D3:F1:EF:2F:C1:66:1E:C4:D7:82:9A:32:43:9A
            X509v3 Authority Key Identifier:
                keyid:97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:43:46:0c:c7:f5:49:b9:52:cd:eb:05:34:97:be:c5:f9:fd:
         4d:86:f8:a8:c3:f1:e6:4e:0b:f6:19:84:db:66:1e:2e:ec:f6:
         b6:c3:b4:cd:3a:fc:81:ad:51:57:7d:74:d7:63:a8:72:76:f9:
         b8:9d:09:ef:e6:84:77:25:2d:b6:78:cc:13:1c:56:01:ad:84:
         99:00:05:18:d3:cd:8c:41:67:69:0f:e3:3e:95:64:36:c0:bb:
         be:82:82:ff:e9:df:a9:6f:b8:c0:fc:43:7b:cd:d6:32:b6:73:
         b6:24:27:12:67:74:6a:01:6a:bd:b2:f3:bc:61:5b:5b:26:53:
         b5:20:61:85:2b:91:0e:53:8c:c2:a1:76:01:10:a6:4f:9f:36:
         83:c5:69:5d:d5:38:63:77:92:b0:1a:c4:10:e2:55:53:c9:96:
         13:32:43:fc:20:16:32:41:1a:98:ee:83:3a:2d:42:81:b1:85:
         16:81:0d:43:29:a1:8a:cd:39:26:2a:22:7e:41:eb:22:4d:d0:
         37:78:d8:dd:4f:d4:3d:03:82:bf:09:2e:f5:d0:90:6b:f0:1c:
         60:c4:a9:88:b9:2d:4e:6a:fd:e2:95:38:24:72:b9:a3:41:64:
         9b:86:0a:b4:7c:4d:b6:c8:40:46:41:0c:91:93:08:7f:cf:54:
         c4:fb:b7:94
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzNCQjAxMTAvBgNVBAUTKDk3MDZCRjEyMTkzNTREMDE4QzE1ODU4Q0U5NzY3OUZF
NDNFNkIzMTIwHhcNMjYwNjEzMDQ1NzM3WhcNMjYwNjIwMDQ1NzM3WjAYMRYwFAYD
VQQDEw02YTJjZTM0MS00YmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuQJX/hJMpzfG7wxse/sdwr0Yrw4Tg72XaZdWc2Z9tfPrtxZzYGN+/l0B9/dk
qTScXqNgD50DJuJrd7MVbmcwfPa9sfvB0biD8BtKTf3BLq/NzP+bCTXMqQo/M8zj
LbsJLVMb1HmB8FDNmWTSvRoAj+dQ+4lBFs9eGHlUQWMA3pzadVeDB5r2ry6o+EH3
rBVr+yjLPFEcMhOhaAtfjLHqvJV0kUBETStMIjaWMoznxpi6LSCjUzErxWIm85TH
DOGy8cACN0LYfOckYVIjRLKq6ufWmldaecA/9kLhCJv7Dy+jhrgWNZGeS2tTcATs
2LM1shB++06K4QAwXr/W6FDhSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCDGXSBe
ENPx7y/BZh7E14KaMkOaMB8GA1UdIwQYMBaAFJcGvxIZNU0BjBWFjOl2ef5D5rMS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0JCMC9DMTJFODQyQzU2
NjgxMUVGOEU2QTc3NURDNEY5QUUwMi9sd2FfRWhrMVRRR01GWVdNNlhaNV9rUG1z
eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2x3YV9FaGsxVFFHTUZZV002WFo1X2tQbXN4SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
M0JCMC9DMTJFODQyQzU2NjgxMUVGOEU2QTc3NURDNEY5QUUwMi9sd2FfRWhrMVRR
R01GWVdNNlhaNV9rUG1zeEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxUNGDMf1SblSzesFNJe+xfn9TYb4qMPx5k4L9hmE22YeLuz2tsO0zTr8ga1R
V31012Oocnb5uJ0J7+aEdyUttnjMExxWAa2EmQAFGNPNjEFnaQ/jPpVkNsC7voKC
/+nfqW+4wPxDe83WMrZztiQnEmd0agFqvbLzvGFbWyZTtSBhhSuRDlOMwqF2ARCm
T582g8VpXdU4Y3eSsBrEEOJVU8mWEzJD/CAWMkEamO6DOi1CgbGFFoENQymhis05
JioifkHrIk3QN3jY3U/UPQOCvwku9dCQa/AcYMSpiLktTmr94pU4JHK5o0Fkm4YK
tHxNtshARkEMkZMIf89UxPu3lA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:11:36 2026 by rpki-client