Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft
File:                     LWNAd8yEe1nUBI1D4EszCWmP5jg.mft (raw, json)
Hash identifier:          uaVcWf+DzP7UcRVChGuU/vOCD3ZAIvkMBZ6snFxjTAg=
Subject key identifier:   1C:67:B1:6D:48:42:8E:36:90:89:77:F1:1A:EE:16:F1:AB:72:EF:9E
Authority key identifier: 2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38
Certificate issuer:       /CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
Certificate serial:       0457
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft
Manifest number:          0398
Signing time:             Mon 27 Jul 2026 03:03:08 +0000
Manifest this update:     Mon 27 Jul 2026 03:03:08 +0000
Manifest next update:     Mon 03 Aug 2026 03:03:08 +0000
Files and hashes:         1: LWNAd8yEe1nUBI1D4EszCWmP5jg.crl (hash: mqejje8sDOBKccHek/6f3fs7nVJaHQ6E77uZay5wpIQ=)
                          2: 90647F2EA14A11ED8FFBA684C4F9AE02.roa (hash: P6k6ZFgyd5A01gmUt+7pAxzOrjslbaS8z1K2UjgCjog=)
                          3: 430E4E387CC311F0A55B2081C4F9AE02.roa (hash: b357DS6un3095ihmJG/1qzltik8hgTz2G2EsqlSGWDw=)
                          4: FDC6A888AEB111EE9A78E132C4F9AE02.roa (hash: HJTu/QaBBUaGGzi25rXbR60EpAJ8f6RdGFNR0tCCt90=)
                          5: 0B7CEEB07CC911F08411627BC4F9AE02.roa (hash: 6jds39GpIYDWTUvVrxm863ItczOC5PjSQTRWLznhaMU=)
                          6: FD124A14CC5811EDBE5D203FC4F9AE02.roa (hash: neeN01r5VZ4YRUPHtpZwodLJIVHlwzKgdZUXHbEsINA=)
                          7: CA1A46101A5B11EE89B07267C4F9AE02.roa (hash: 2rNOWeXpsmPPeo00gkw3XFog2FCfRkn+qinn6OJcsSU=)
                          8: 94C13908C4AF11EDBCC55111C4F9AE02.roa (hash: m+YMSjzVUuc73W6hTfDFbMi0+yUuBUpgBYQofvaW6Ow=)
                          9: E879EE7C144111EFB247B936C4F9AE02.roa (hash: ZeAGLGAA4h+CcuwE4PZxgCpOScaMQUl6R6qDfBF+VLY=)
                          10: FFCFFCFC756411F1BE4724178AA30FBC.roa (hash: UKyM2NDw4Dv9pt31Uytgy4jJBdfqpHkrySg9AeufDvE=)
                          11: F9A864386AAB11EF8FEBE576C4F9AE02.roa (hash: YySN/OEFOesvLCn2GkCFn3w0IA8S3T8IMu+C8KUfxLg=)
                          12: FECE3C3C855711EF8E79C52BC4F9AE02.roa (hash: NNYpj3betzAmhzyg69sOsd+IkKaVWYtVMEooK8d8Jhg=)
                          13: 2DA3F18A7AF911F18AE672997DA30FBC.roa (hash: AgwFvLtZoYWdmQU4R/em0WdJptUJUnWElCr04Q2ck8Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl
                          rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:03:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1111 (0x457)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6587, serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
        Validity
            Not Before: Jul 27 03:03:08 2026 GMT
            Not After : Aug  3 03:03:08 2026 GMT
        Subject: CN=6a66ca6c-1c46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:40:a0:f1:ed:20:c9:54:30:88:d7:3f:f6:7e:
                    13:a5:1f:f2:c2:4d:5d:c6:f9:ff:fa:ec:27:f4:75:
                    25:c5:6e:b8:27:d8:a3:38:1a:07:40:c4:0f:2d:ee:
                    36:cf:33:cc:69:47:e4:0b:2b:21:ef:69:0f:6d:d4:
                    5d:ca:bf:f1:ec:2f:4b:20:8b:ff:89:49:7a:5f:f5:
                    0b:00:02:53:3b:89:02:40:2c:ee:3b:d9:ed:d2:f4:
                    1a:5b:2b:84:c9:5c:1a:df:67:4b:30:b7:d7:f4:e5:
                    dc:7f:44:71:61:f3:57:f8:29:47:72:ec:0c:b2:2a:
                    46:ae:d4:6e:d0:01:be:7d:76:9e:4f:e2:7b:7e:f9:
                    0f:1c:ce:c5:28:97:16:37:98:ec:a0:2e:51:c3:23:
                    6d:87:dd:25:16:ca:27:a3:a5:85:ea:e1:0d:75:1c:
                    d0:c7:70:63:92:5f:6b:10:4a:56:c3:00:f0:00:a6:
                    32:63:05:37:04:1e:31:0a:10:4f:83:52:fa:3e:d5:
                    03:3c:82:9e:02:81:de:5c:a4:35:c6:88:9c:95:f8:
                    74:1b:eb:bb:9e:e3:04:e8:be:1b:47:c0:85:4b:2f:
                    e9:e5:2e:17:32:c6:b6:e6:8d:e1:d7:13:28:7c:fb:
                    ea:ed:5d:d7:ab:34:b0:13:18:0e:e3:d5:87:e5:4a:
                    2d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:67:B1:6D:48:42:8E:36:90:89:77:F1:1A:EE:16:F1:AB:72:EF:9E
            X509v3 Authority Key Identifier:
                keyid:2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:be:41:16:75:ed:94:d0:90:d9:3f:7d:d3:cc:87:48:dc:ed:
         6c:60:59:a5:cf:e3:7e:f0:c0:bd:8c:08:09:47:8b:f4:87:83:
         b6:0c:f8:31:a9:cc:73:95:d9:fa:b6:38:f2:af:e6:46:cf:87:
         62:19:3f:bc:39:75:29:23:0e:f5:d7:0c:25:8a:4c:64:cf:c7:
         fd:51:d8:71:d6:c5:b0:da:26:f4:85:e0:98:d0:3b:ce:db:f6:
         22:6a:c6:90:4c:38:06:0a:ca:20:ed:36:8a:7e:69:a6:40:2a:
         b8:c6:fe:89:4e:2f:f8:2f:db:00:5e:f3:e2:d1:03:cc:6e:51:
         74:7b:4b:71:4e:78:97:b2:03:3e:43:12:a9:db:b5:45:08:a2:
         d7:99:8b:c7:dd:f2:42:eb:4c:a1:d0:6d:e4:dc:4b:79:93:c7:
         ed:36:00:77:91:0a:2e:12:42:3a:77:ee:bd:80:62:2f:c8:2e:
         0e:7e:4f:04:f3:f6:23:38:d1:d4:e2:64:a1:84:20:65:5d:3b:
         4b:c0:e5:9d:76:7d:1e:ff:29:4d:2a:f5:92:3d:5a:a2:ca:21:
         45:fa:42:f0:68:0f:30:0c:81:41:e1:2d:cd:78:04:35:d1:4a:
         49:99:d3:fd:28:18:52:9a:c6:87:ae:38:dc:cc:01:b3:c4:63:
         01:62:ab:c1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjY1ODcxMTAvBgNVBAUTKDJENjM0MDc3Q0M4NDdCNTlENDA0OEQ0M0UwNEIzMzA5
Njk4RkU2MzgwHhcNMjYwNzI3MDMwMzA4WhcNMjYwODAzMDMwMzA4WjAYMRYwFAYD
VQQDEw02YTY2Y2E2Yy0xYzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6UCg8e0gyVQwiNc/9n4TpR/ywk1dxvn/+uwn9HUlxW64J9ijOBoHQMQPLe42
zzPMaUfkCysh72kPbdRdyr/x7C9LIIv/iUl6X/ULAAJTO4kCQCzuO9nt0vQaWyuE
yVwa32dLMLfX9OXcf0RxYfNX+ClHcuwMsipGrtRu0AG+fXaeT+J7fvkPHM7FKJcW
N5jsoC5RwyNth90lFsono6WF6uENdRzQx3Bjkl9rEEpWwwDwAKYyYwU3BB4xChBP
g1L6PtUDPIKeAoHeXKQ1xoiclfh0G+u7nuME6L4bR8CFSy/p5S4XMsa25o3h1xMo
fPvq7V3XqzSwExgO49WH5UotLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBxnsW1I
Qo42kIl38RruFvGrcu+eMB8GA1UdIwQYMBaAFC1jQHfMhHtZ1ASNQ+BLMwlpj+Y4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjU4Ny80MTdENzFCNDkx
ODYxMUVEQTg0QTEyNERDNEY5QUUwMi9MV05BZDh5RWUxblVCSTFENEVzekNXbVA1
amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xXTkFkOHlFZTFuVUJJMUQ0RXN6Q1dtUDVqZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NjU4Ny80MTdENzFCNDkxODYxMUVEQTg0QTEyNERDNEY5QUUwMi9MV05BZDh5RWUx
blVCSTFENEVzekNXbVA1amcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjb5BFnXtlNCQ2T9908yHSNztbGBZpc/jfvDAvYwICUeL9IeDtgz4ManMc5XZ
+rY48q/mRs+HYhk/vDl1KSMO9dcMJYpMZM/H/VHYcdbFsNom9IXgmNA7ztv2ImrG
kEw4BgrKIO02in5ppkAquMb+iU4v+C/bAF7z4tEDzG5RdHtLcU54l7IDPkMSqdu1
RQii15mLx93yQutModBt5NxLeZPH7TYAd5EKLhJCOnfuvYBiL8guDn5PBPP2IzjR
1OJkoYQgZV07S8DlnXZ9Hv8pTSr1kj1aosohRfpC8GgPMAyBQeEtzXgENdFKSZnT
/SgYUprGh6443MwBs8RjAWKrwQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:38:50 2026 by rpki-client