Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
File:                     LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft (raw, json)
Hash identifier:          ztKjTMUNEoQ0h1+eBJodBSaZpoCzTzRvb1d79nfbQ4I=
Subject key identifier:   49:23:1B:E8:CF:23:AC:D2:52:A8:6C:D1:DE:A8:1C:30:E8:66:58:49
Authority key identifier: 2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77
Certificate issuer:       /CN=A91356BB/serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677
Certificate serial:       05A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
Manifest number:          058C
Signing time:             Sat 28 Feb 2026 23:52:38 +0000
Manifest this update:     Sat 28 Feb 2026 23:52:38 +0000
Manifest next update:     Sat 07 Mar 2026 23:52:38 +0000
Files and hashes:         1: LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl (hash: 90THExPxr0f6nnz7PWNdwNhD5BmfyUmAky7pJUj7XkY=)
                          2: F0F715D8D91811EFAD9B2462C4F9AE02.roa (hash: 0eC5c42+O3/zR7ToxD38Dr0t546Zok3PpDvZy47K3EU=)
                          3: D8CA5BF0D91811EFA4F02F4EC4F9AE02.roa (hash: 0EFgLjyojEn+oExrioyWCuc3c6/85UK37c3kRT/1o4k=)
                          4: 1347AA9019FE11ECB459B141C4F9AE02.roa (hash: fCn+m1Y3s4qDIZUNYo4x+QJzX9KNTkFwagXKOoylYkw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl
                          rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 23:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1449 (0x5a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91356BB, serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677
        Validity
            Not Before: Feb 28 23:52:38 2026 GMT
            Not After : Mar  7 23:52:38 2026 GMT
        Subject: CN=69a37fc6-b626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e4:81:4e:05:6e:44:93:02:b3:4d:63:16:3e:
                    91:8b:9d:79:7e:ab:1d:d9:6a:f1:e4:5e:32:ee:ec:
                    aa:e1:91:94:68:9b:91:35:7c:af:03:de:31:06:f7:
                    9c:a7:da:47:19:0d:83:fd:d3:29:c9:b4:bb:b6:90:
                    25:12:3e:03:b3:0a:26:6e:de:8d:c1:17:7b:50:6f:
                    2c:86:2e:d5:eb:a9:20:20:d6:41:4a:dc:4f:27:19:
                    f1:15:b1:85:9e:e5:5b:da:61:ba:ba:e3:b4:86:9b:
                    6f:1b:5a:e6:98:a5:8c:e4:a0:52:18:7e:1a:59:54:
                    96:79:0c:a9:9f:be:ce:9b:cf:d9:a8:66:f0:00:33:
                    92:36:51:59:8e:c5:65:4c:64:c3:1f:56:14:e1:be:
                    15:81:b1:2f:6c:8f:63:7b:29:0e:eb:12:12:1f:15:
                    83:11:e0:9b:69:da:14:57:5e:46:a6:4a:bd:1a:b4:
                    23:ce:7f:01:ae:91:14:f1:ab:6b:29:a6:eb:06:fb:
                    4c:10:97:43:2e:3a:1b:f3:18:19:33:cb:5b:6b:fb:
                    95:c9:c7:4e:cd:a1:62:60:71:79:3a:c1:90:8f:04:
                    7f:9b:45:c7:b5:12:c6:03:a7:9a:6e:a4:77:54:16:
                    f5:a6:7e:51:a3:d4:49:d0:bb:2e:30:ec:27:e7:a6:
                    84:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:23:1B:E8:CF:23:AC:D2:52:A8:6C:D1:DE:A8:1C:30:E8:66:58:49
            X509v3 Authority Key Identifier:
                keyid:2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:e9:bb:33:b9:b1:f8:74:8b:2d:e1:97:22:f6:b7:52:ff:12:
         9e:e0:31:29:9d:a8:0e:25:10:63:7b:ee:87:e3:3b:df:20:b1:
         3c:17:a9:1f:c5:65:35:65:19:3a:13:57:5e:f3:7d:a6:04:4b:
         9b:58:9c:33:af:14:b7:03:d7:c4:cd:1f:32:3c:ed:5c:b1:be:
         8c:0d:e5:28:6f:e6:b0:ce:8f:a1:07:6b:6d:fc:5a:60:85:b7:
         87:ff:79:26:e4:35:35:65:8e:a1:f3:a1:40:91:f0:9e:69:b2:
         d2:f8:3c:37:b7:58:a6:6c:be:c0:2f:12:b3:f1:c0:91:82:6b:
         2f:7a:89:a8:af:4c:c7:55:96:dc:25:b4:9c:65:73:10:e7:4b:
         3c:84:fd:4e:e7:c5:4a:43:8b:8b:13:3d:bf:57:46:b7:12:65:
         74:6d:b1:11:9c:66:c6:0d:15:20:75:d2:59:3d:0c:cf:12:90:
         fd:c8:e6:5d:a6:53:81:ad:a7:b0:58:83:5e:ca:a6:e6:f1:99:
         cb:c2:99:5f:6c:58:85:df:64:47:ce:d2:89:4d:c5:ad:af:a3:
         f5:97:eb:4e:9e:55:f0:fd:98:af:0b:5d:4d:28:c4:58:9c:06:
         6a:a4:7e:f0:b4:d6:3f:a9:eb:28:ce:74:93:9d:2d:69:47:2e:
         28:f1:8d:7e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzU2QkIxMTAvBgNVBAUTKDJDQ0ExMzU0MEYwMTNCOTNCMjNDOURGMTREOTYxN0RB
NDBDQjI2NzcwHhcNMjYwMjI4MjM1MjM4WhcNMjYwMzA3MjM1MjM4WjAYMRYwFAYD
VQQDDA02OWEzN2ZjNi1iNjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx+SBTgVuRJMCs01jFj6Ri515fqsd2Wrx5F4y7uyq4ZGUaJuRNXyvA94xBvec
p9pHGQ2D/dMpybS7tpAlEj4Dswombt6NwRd7UG8shi7V66kgINZBStxPJxnxFbGF
nuVb2mG6uuO0hptvG1rmmKWM5KBSGH4aWVSWeQypn77Om8/ZqGbwADOSNlFZjsVl
TGTDH1YU4b4VgbEvbI9jeykO6xISHxWDEeCbadoUV15Gpkq9GrQjzn8BrpEU8atr
KabrBvtMEJdDLjob8xgZM8tba/uVycdOzaFiYHF5OsGQjwR/m0XHtRLGA6eabqR3
VBb1pn5Ro9RJ0LsuMOwn56aEdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEkjG+jP
I6zSUqhs0d6oHDDoZlhJMB8GA1UdIwQYMBaAFCzKE1QPATuTsjyd8U2WF9pAyyZ3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTZCQi81Q0VBNTQ5NDE2
RDUxMUVDQTdGM0Y0NkFDNEY5QUUwMi9MTW9UVkE4Qk81T3lQSjN4VFpZWDJrRExK
bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xNb1RWQThCTzVPeVBKM3hUWllYMmtETEpuYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NTZCQi81Q0VBNTQ5NDE2RDUxMUVDQTdGM0Y0NkFDNEY5QUUwMi9MTW9UVkE4Qk81
T3lQSjN4VFpZWDJrRExKbmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAu+m7M7mx+HSLLeGXIva3Uv8SnuAxKZ2oDiUQY3vuh+M73yCxPBepH8VlNWUZ
OhNXXvN9pgRLm1icM68UtwPXxM0fMjztXLG+jA3lKG/msM6PoQdrbfxaYIW3h/95
JuQ1NWWOofOhQJHwnmmy0vg8N7dYpmy+wC8Ss/HAkYJrL3qJqK9Mx1WW3CW0nGVz
EOdLPIT9TufFSkOLixM9v1dGtxJldG2xEZxmxg0VIHXSWT0MzxKQ/cjmXaZTga2n
sFiDXsqm5vGZy8KZX2xYhd9kR87SiU3Fra+j9ZfrTp5V8P2YrwtdTSjEWJwGaqR+
8LTWP6nrKM50k50taUcuKPGNfg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:25:35 2026 by rpki-client