Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft
File:                     LWNAd8yEe1nUBI1D4EszCWmP5jg.mft (raw, json)
Hash identifier:          mkP9DUzsTcARzZGtZZ6S0FUVaP/q1dKOl/Rg5fMGOtM=
Subject key identifier:   A3:77:1D:0C:7A:5B:56:A7:BA:89:B9:C1:F7:F2:BA:80:94:29:2B:63
Authority key identifier: 2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38
Certificate issuer:       /CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
Certificate serial:       03F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft
Manifest number:          0356
Signing time:             Fri 17 Apr 2026 01:55:08 +0000
Manifest this update:     Fri 17 Apr 2026 01:55:08 +0000
Manifest next update:     Fri 24 Apr 2026 01:55:08 +0000
Files and hashes:         1: LWNAd8yEe1nUBI1D4EszCWmP5jg.crl (hash: lO/IEdeC9ZaFRNfLitwztXt9Llzf+RwcdK5M/lB+has=)
                          2: 90647F2EA14A11ED8FFBA684C4F9AE02.roa (hash: P6k6ZFgyd5A01gmUt+7pAxzOrjslbaS8z1K2UjgCjog=)
                          3: E879EE7C144111EFB247B936C4F9AE02.roa (hash: ZeAGLGAA4h+CcuwE4PZxgCpOScaMQUl6R6qDfBF+VLY=)
                          4: CA1A46101A5B11EE89B07267C4F9AE02.roa (hash: 2rNOWeXpsmPPeo00gkw3XFog2FCfRkn+qinn6OJcsSU=)
                          5: 430E4E387CC311F0A55B2081C4F9AE02.roa (hash: b357DS6un3095ihmJG/1qzltik8hgTz2G2EsqlSGWDw=)
                          6: 0B7CEEB07CC911F08411627BC4F9AE02.roa (hash: 6jds39GpIYDWTUvVrxm863ItczOC5PjSQTRWLznhaMU=)
                          7: F9A864386AAB11EF8FEBE576C4F9AE02.roa (hash: YySN/OEFOesvLCn2GkCFn3w0IA8S3T8IMu+C8KUfxLg=)
                          8: FD124A14CC5811EDBE5D203FC4F9AE02.roa (hash: neeN01r5VZ4YRUPHtpZwodLJIVHlwzKgdZUXHbEsINA=)
                          9: 755E6B82D21C11EEA166891AC4F9AE02.roa (hash: lBUP0TSzebAFXmoSTqeDqtFMO8rYhPyrBUR141U167M=)
                          10: FECE3C3C855711EF8E79C52BC4F9AE02.roa (hash: NNYpj3betzAmhzyg69sOsd+IkKaVWYtVMEooK8d8Jhg=)
                          11: 94C13908C4AF11EDBCC55111C4F9AE02.roa (hash: m+YMSjzVUuc73W6hTfDFbMi0+yUuBUpgBYQofvaW6Ow=)
                          12: FDC6A888AEB111EE9A78E132C4F9AE02.roa (hash: HJTu/QaBBUaGGzi25rXbR60EpAJ8f6RdGFNR0tCCt90=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl
                          rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:55:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1015 (0x3f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6587, serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
        Validity
            Not Before: Apr 17 01:55:08 2026 GMT
            Not After : Apr 24 01:55:08 2026 GMT
        Subject: CN=69e192fc-3512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ab:4a:b4:d2:45:d5:b7:1e:d5:c8:1c:fc:9a:
                    3f:b9:01:1a:02:d1:46:46:ff:1a:2c:d1:05:c3:36:
                    83:58:21:bf:f6:44:57:63:87:65:30:98:01:14:c8:
                    21:40:b3:50:0d:f6:77:93:ba:b7:68:72:60:5f:64:
                    fe:e6:d1:1c:3f:f7:8f:68:ac:f2:0f:4e:dc:e4:fa:
                    fc:6b:29:0f:7e:42:0c:13:b3:08:3e:90:d0:c9:dc:
                    91:32:f4:cd:73:87:fe:48:e7:a1:97:62:d0:85:12:
                    a1:ed:7d:a3:28:6f:40:94:a1:09:c3:01:db:80:82:
                    34:c3:4b:76:ca:26:52:70:d7:d8:ee:a8:22:8d:db:
                    6a:68:20:45:ba:6f:ff:8f:ab:ff:a4:9f:8b:9a:bf:
                    06:a4:06:f8:5f:94:83:e7:7d:e0:1b:bd:41:fd:bf:
                    1a:bf:74:af:e4:30:ad:5a:9c:67:97:e6:11:db:3b:
                    e7:33:cc:2c:23:64:f8:74:42:ce:f9:01:7d:a2:82:
                    5a:58:e3:33:18:3c:cf:0a:64:89:b5:19:14:79:ad:
                    de:8a:50:fb:6a:9d:cd:1b:23:db:cf:74:13:0c:35:
                    6b:42:7f:5a:b3:e8:14:2d:78:3d:16:63:1e:23:fb:
                    3b:bb:69:48:aa:a4:6b:e4:cb:5f:54:f1:4c:d9:95:
                    68:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:77:1D:0C:7A:5B:56:A7:BA:89:B9:C1:F7:F2:BA:80:94:29:2B:63
            X509v3 Authority Key Identifier:
                keyid:2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:49:f5:b8:ac:cf:80:46:b1:4a:e5:fc:a3:e2:b0:a9:00:92:
         05:0d:b4:42:09:a3:ed:12:80:42:ba:36:e1:e0:1e:75:e5:37:
         11:72:97:37:c7:58:f6:7d:39:00:cd:10:f1:e9:3b:c2:48:c0:
         ad:31:ba:ad:c9:52:2a:c9:3e:c2:bc:51:6d:3c:d9:ee:59:a6:
         0e:98:0a:ec:59:b5:1a:8e:d1:c7:cd:8f:e2:d6:df:6a:cb:07:
         d2:c0:bc:4d:5b:c3:ec:a0:47:37:ee:b6:7d:f3:1d:1f:68:16:
         38:b1:dc:87:1b:f6:7c:97:45:48:42:8d:24:02:fe:13:3d:79:
         e4:f5:4f:73:53:ab:9c:75:03:12:8d:47:97:8c:46:2c:bd:0c:
         33:3d:10:8b:bd:56:92:86:d9:1d:da:ea:0c:cb:2f:0e:68:c4:
         52:04:b2:b0:44:1d:e4:52:71:4a:cb:b3:25:1e:1a:0c:78:1b:
         86:32:f6:7e:93:bc:0c:04:34:aa:c9:f6:be:d5:61:21:7a:b0:
         8b:c5:02:b9:bf:b3:1a:68:63:5f:a6:be:d8:5d:3e:23:45:a2:
         89:ea:59:d8:fc:16:14:4c:f4:4f:be:86:69:1c:99:d3:d9:8e:
         00:c7:c1:0c:50:84:00:ff:51:7e:9c:1b:2c:90:c1:91:fa:f9:
         96:c6:da:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:55:42 2026 by rpki-client