Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft
File:                     lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft (raw, json)
Hash identifier:          LB0Jws+rPW3Qh0uE/LPt+M1RHv6gTZgJNXkIbEogHD4=
Subject key identifier:   E2:28:F4:8F:F7:0E:5C:B6:73:FB:5C:F4:A9:C4:B3:C2:02:39:2F:5F
Authority key identifier: 97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12
Certificate issuer:       /CN=A9133BB0/serialNumber=9706BF1219354D018C15858CE97679FE43E6B312
Certificate serial:       01A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft
Manifest number:          019C
Signing time:             Sun 11 Oct 2026 04:51:56 +0000
Manifest this update:     Sun 11 Oct 2026 04:51:56 +0000
Manifest next update:     Sun 18 Oct 2026 04:51:56 +0000
Files and hashes:         1: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl (hash: wsK8Pnp3xY799j7AvhFYhGHm3bz3r+HBM66GSlj3POo=)
                          2: 87FEDB446B9B11F1A0F959156D47A888.roa (hash: AYMk45b6CL8KReePrtbWEzoQNuf96ZiI29X04jKh5iY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl
                          rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 04:51:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 418 (0x1a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133BB0, serialNumber=9706BF1219354D018C15858CE97679FE43E6B312
        Validity
            Not Before: Oct 11 04:51:56 2026 GMT
            Not After : Oct 18 04:51:56 2026 GMT
        Subject: CN=6acb15ec-4c85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:96:05:20:c7:70:68:5b:08:95:ec:86:d7:b1:
                    e7:1f:72:23:e7:6e:bb:49:c8:57:9b:74:b5:d0:8d:
                    31:d8:d1:63:c6:00:35:38:60:43:c2:c2:f0:63:e0:
                    09:84:f3:ee:57:0a:42:57:f0:cf:da:54:34:42:37:
                    b4:4e:29:ae:42:dc:a9:ee:c4:c7:3e:12:31:fc:96:
                    33:6f:48:f1:4a:67:fe:40:b0:bd:2e:e1:b7:51:61:
                    18:bd:82:23:5f:d6:c0:54:2a:2a:a9:b8:b7:4f:42:
                    cb:6f:4e:af:f5:66:b6:d7:61:f8:a1:5f:3f:1d:d2:
                    cb:cb:1a:a4:43:6a:8e:e4:20:5b:84:e2:66:e5:b8:
                    b5:5c:a2:0f:4b:53:4f:6f:1b:0a:e8:52:06:2e:e9:
                    4d:ac:d6:20:54:22:07:87:b7:b0:43:2f:ab:ab:91:
                    e6:c3:85:b3:78:19:ee:6e:be:b4:e2:d7:65:71:f4:
                    b7:d0:15:96:d8:20:46:70:1f:2a:01:0a:c7:42:18:
                    e3:d2:d2:14:e6:69:b8:68:12:32:f7:7c:cd:a4:f3:
                    ad:04:7e:cf:ee:7d:76:05:41:ff:04:72:3b:de:f4:
                    7a:53:96:75:0d:35:3f:13:ca:1b:74:eb:a9:66:f4:
                    a2:62:e1:dc:cd:2c:de:b6:b2:22:37:20:81:87:1d:
                    db:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:28:F4:8F:F7:0E:5C:B6:73:FB:5C:F4:A9:C4:B3:C2:02:39:2F:5F
            X509v3 Authority Key Identifier:
                keyid:97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:36:b0:ee:1e:27:44:92:da:cb:c0:00:7e:a1:f2:f8:fb:57:
         cf:35:87:fd:f5:5f:e5:6d:99:9f:07:e6:aa:1e:25:07:b4:03:
         df:7d:98:c5:af:cc:78:8d:25:7e:6a:5d:5f:98:21:fc:c1:84:
         86:5c:23:5a:fb:a6:ad:1d:66:4d:53:c3:de:27:f3:bf:0a:1f:
         c0:77:a9:b6:9e:a7:b7:d3:10:af:25:80:a9:c4:89:33:f7:c7:
         55:63:47:9f:cc:e0:d5:4b:6d:99:f2:33:d1:a5:f8:35:d8:bb:
         18:95:f5:bc:fd:80:91:54:26:74:09:c2:7b:59:80:f6:43:3a:
         49:7f:f4:ac:7a:17:cf:b4:08:48:a8:57:8c:ad:4d:3a:8a:cf:
         00:f9:4d:35:8c:71:0d:35:d1:8d:73:47:e6:47:37:04:de:c7:
         25:0a:57:0f:c4:89:5e:a8:a3:ea:5b:4f:9b:a2:df:be:ef:7a:
         48:c9:85:7b:b6:a8:e2:ba:0d:2b:9e:f1:33:c6:1f:b8:7b:4e:
         15:c3:0b:0b:83:65:7e:4f:33:f0:e2:99:20:66:4b:4a:8b:e6:
         a8:a5:4f:66:69:a5:e4:3f:db:12:3d:d7:56:e7:80:f5:5b:ab:
         86:7e:cc:c8:c8:36:c9:87:fd:f4:eb:75:d1:eb:e7:32:ac:6b:
         5d:00:df:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:21:55 2026 by rpki-client