Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9ADA/0E9C7C72DAC511EC919A4C5AC4F9AE02/LLYWECl31MkLI_OvA7iR6JuAXMM.mft
File:                     LLYWECl31MkLI_OvA7iR6JuAXMM.mft (raw, json)
Hash identifier:          5n64F1wHZ6IH52kFji+XjmRQG6Ecm2kM7lQnFzNkjSE=
Subject key identifier:   EF:85:D9:8D:6C:06:AF:E4:36:41:8B:84:F3:9A:6C:88:5A:F0:2F:ED
Authority key identifier: 2C:B6:16:10:29:77:D4:C9:0B:23:F3:AF:03:B8:91:E8:9B:80:5C:C3
Certificate issuer:       /CN=A91F9ADA/serialNumber=2CB616102977D4C90B23F3AF03B891E89B805CC3
Certificate serial:       040E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLYWECl31MkLI_OvA7iR6JuAXMM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9ADA/0E9C7C72DAC511EC919A4C5AC4F9AE02/LLYWECl31MkLI_OvA7iR6JuAXMM.mft
Manifest number:          0408
Signing time:             Mon 09 Nov 2026 00:09:24 +0000
Manifest this update:     Mon 09 Nov 2026 00:09:24 +0000
Manifest next update:     Mon 16 Nov 2026 00:09:24 +0000
Files and hashes:         1: LLYWECl31MkLI_OvA7iR6JuAXMM.crl (hash: tI6zsrL/Tkc2tAN6KfHyjLCgh4jHFse9CKqk+Ax+8jA=)
                          2: A6389578DAD111ECA6DEA174C4F9AE02.roa (hash: Nd5LJWLEKqPkMF+QYE0DT1Y009jS1C4c/uC9UR1i2Fo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9ADA/0E9C7C72DAC511EC919A4C5AC4F9AE02/LLYWECl31MkLI_OvA7iR6JuAXMM.crl
                          rsync://rpki.apnic.net/member_repository/A91F9ADA/0E9C7C72DAC511EC919A4C5AC4F9AE02/LLYWECl31MkLI_OvA7iR6JuAXMM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLYWECl31MkLI_OvA7iR6JuAXMM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Nov 2026 00:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1038 (0x40e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9ADA, serialNumber=2CB616102977D4C90B23F3AF03B891E89B805CC3
        Validity
            Not Before: Nov  9 00:09:24 2026 GMT
            Not After : Nov 16 00:09:24 2026 GMT
        Subject: CN=6af10f34-50c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:63:79:c1:47:6a:79:07:a6:38:7c:25:7a:43:
                    e1:d0:74:e1:71:8a:0a:bd:30:c0:a9:c4:98:48:79:
                    9b:c1:59:d0:53:91:79:ba:0e:b3:9e:67:8a:8a:8c:
                    92:d2:29:14:c9:3b:f1:72:03:5f:5e:9c:40:eb:08:
                    5f:5d:7e:65:2b:10:21:fc:a2:75:e8:7d:72:18:a0:
                    7a:5a:0f:b1:5c:b1:a2:f5:ee:84:84:c8:cb:55:59:
                    ee:93:45:f2:eb:fe:dd:ec:1d:92:d4:e1:e9:ad:c3:
                    e1:c2:31:01:b9:7d:6d:b1:4a:62:fe:82:7b:7d:12:
                    74:2b:d6:b4:be:52:50:c2:04:4d:cf:f6:6f:03:a1:
                    7c:c4:9d:a3:3a:60:bc:9a:80:5a:50:4a:7a:bb:7a:
                    f2:87:04:74:07:2d:17:06:c5:9d:28:59:36:1f:ce:
                    d5:12:33:46:f9:f6:3c:34:63:d1:e1:67:ca:f7:57:
                    d9:04:bf:17:7d:19:1d:14:bf:27:eb:d0:95:87:7f:
                    13:e6:db:50:e8:84:93:92:8a:17:ec:e5:53:80:09:
                    4a:bb:d9:88:ec:58:7a:19:ee:88:eb:60:f0:d1:38:
                    e3:9d:14:e0:2c:6b:eb:63:f0:1f:2b:14:70:86:6c:
                    d6:38:bf:a9:f9:d0:81:3b:82:21:f1:ae:d2:82:60:
                    bf:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:85:D9:8D:6C:06:AF:E4:36:41:8B:84:F3:9A:6C:88:5A:F0:2F:ED
            X509v3 Authority Key Identifier:
                keyid:2C:B6:16:10:29:77:D4:C9:0B:23:F3:AF:03:B8:91:E8:9B:80:5C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9ADA/0E9C7C72DAC511EC919A4C5AC4F9AE02/LLYWECl31MkLI_OvA7iR6JuAXMM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLYWECl31MkLI_OvA7iR6JuAXMM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9ADA/0E9C7C72DAC511EC919A4C5AC4F9AE02/LLYWECl31MkLI_OvA7iR6JuAXMM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:ed:5c:13:34:74:88:ca:34:40:31:7d:a2:2a:0f:35:81:fe:
         34:5e:99:a3:e1:0c:e3:db:50:1e:b6:b5:5e:6d:e4:51:3b:98:
         31:c3:1a:ab:58:ed:cd:f1:07:5e:48:28:84:9b:ee:67:3a:40:
         02:c2:82:7b:51:67:26:1c:95:74:77:6a:b0:aa:c1:28:9d:1b:
         be:96:77:0d:80:f0:97:19:80:53:f1:02:c6:4b:6a:c9:bb:93:
         64:8f:77:a5:d8:89:6c:ca:40:0f:35:f4:ed:a9:1e:75:95:38:
         c7:6f:bb:0a:02:dd:36:5d:60:75:c9:c4:d3:3a:93:ed:a7:84:
         5b:c9:58:f1:e2:94:89:84:54:71:6b:e8:36:6b:96:73:c7:c0:
         96:02:e6:0c:8a:43:70:6f:f9:c1:e5:55:fe:7c:4b:89:cd:36:
         b2:c9:5f:61:02:43:90:cc:fb:2b:a3:d1:dc:00:85:94:be:0b:
         ab:42:48:1d:3b:5d:b1:67:c7:12:6d:cf:02:c5:6b:df:5a:93:
         90:df:a4:e8:53:0e:a7:83:8f:e1:a5:0f:80:5a:47:b2:fa:22:
         29:97:d8:df:36:0e:07:63:74:eb:61:51:bc:e1:da:91:4b:1e:
         52:17:99:cd:a1:25:fb:1e:86:0a:b2:62:12:ef:ad:cd:c9:37:
         80:a9:cb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 05:33:05 2026 by rpki-client