Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9ADA/0E9C7C72DAC511EC919A4C5AC4F9AE02/LLYWECl31MkLI_OvA7iR6JuAXMM.mft
File:                     LLYWECl31MkLI_OvA7iR6JuAXMM.mft (raw, json)
Hash identifier:          s2exPcvGWr/mf8isX0Ii+cjEF/QOW75OLLA7JJQZbH0=
Subject key identifier:   8D:41:7A:6C:09:90:0B:1C:07:32:E2:53:EA:F6:E6:05:DE:91:E5:15
Authority key identifier: 2C:B6:16:10:29:77:D4:C9:0B:23:F3:AF:03:B8:91:E8:9B:80:5C:C3
Certificate issuer:       /CN=A91F9ADA/serialNumber=2CB616102977D4C90B23F3AF03B891E89B805CC3
Certificate serial:       039F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLYWECl31MkLI_OvA7iR6JuAXMM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9ADA/0E9C7C72DAC511EC919A4C5AC4F9AE02/LLYWECl31MkLI_OvA7iR6JuAXMM.mft
Manifest number:          0399
Signing time:             Sun 05 Apr 2026 00:31:21 +0000
Manifest this update:     Sun 05 Apr 2026 00:31:21 +0000
Manifest next update:     Sun 12 Apr 2026 00:31:21 +0000
Files and hashes:         1: LLYWECl31MkLI_OvA7iR6JuAXMM.crl (hash: 5edRauPDcB0K5PnHX6JZOLquF4xzQTblGhdqR4J6hIc=)
                          2: A6389578DAD111ECA6DEA174C4F9AE02.roa (hash: Nd5LJWLEKqPkMF+QYE0DT1Y009jS1C4c/uC9UR1i2Fo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9ADA/0E9C7C72DAC511EC919A4C5AC4F9AE02/LLYWECl31MkLI_OvA7iR6JuAXMM.crl
                          rsync://rpki.apnic.net/member_repository/A91F9ADA/0E9C7C72DAC511EC919A4C5AC4F9AE02/LLYWECl31MkLI_OvA7iR6JuAXMM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLYWECl31MkLI_OvA7iR6JuAXMM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 00:31:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 927 (0x39f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9ADA, serialNumber=2CB616102977D4C90B23F3AF03B891E89B805CC3
        Validity
            Not Before: Apr  5 00:31:21 2026 GMT
            Not After : Apr 12 00:31:21 2026 GMT
        Subject: CN=69d1ad59-7b66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3f:97:1d:1d:0e:a2:e3:51:97:09:c9:ab:73:
                    c5:e5:bf:8d:8e:74:24:39:49:81:1b:35:2f:2e:ea:
                    79:d7:ad:ed:da:ea:d0:d2:a5:46:a1:71:9f:a0:30:
                    69:45:b0:61:9e:a4:64:27:53:7d:4b:14:27:e6:b6:
                    d3:50:a6:c2:31:b4:65:34:3b:c9:96:56:91:ab:cd:
                    48:a5:f1:de:76:e0:18:49:1b:68:bf:2d:1d:ee:3e:
                    75:7a:33:2e:c5:74:f8:c9:07:a9:c8:29:54:26:c8:
                    ff:49:3e:fd:41:98:5a:9d:87:15:11:65:47:1a:3a:
                    94:cd:9b:24:02:0a:9f:36:e9:ad:e5:1e:c6:b6:e4:
                    6f:1e:e1:a0:e8:60:78:7d:62:d1:2f:05:53:8b:73:
                    46:58:b0:65:42:cf:4d:00:2f:26:fe:2b:1c:42:dd:
                    c4:b7:6d:a6:be:c9:27:a7:e7:ff:fa:3a:6b:58:0d:
                    96:d0:6f:97:09:94:87:aa:39:57:b5:e2:61:91:62:
                    1b:10:97:f0:0d:ff:71:be:95:1a:22:a0:17:c9:96:
                    7a:83:fb:54:7d:8c:13:f1:5b:0c:50:62:a3:45:a2:
                    e5:2d:da:20:65:9d:56:c9:97:f2:5d:f3:66:64:b0:
                    6f:1d:f7:9f:0a:af:39:fa:68:a6:f9:3d:55:3d:4c:
                    62:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:41:7A:6C:09:90:0B:1C:07:32:E2:53:EA:F6:E6:05:DE:91:E5:15
            X509v3 Authority Key Identifier:
                keyid:2C:B6:16:10:29:77:D4:C9:0B:23:F3:AF:03:B8:91:E8:9B:80:5C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9ADA/0E9C7C72DAC511EC919A4C5AC4F9AE02/LLYWECl31MkLI_OvA7iR6JuAXMM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLYWECl31MkLI_OvA7iR6JuAXMM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9ADA/0E9C7C72DAC511EC919A4C5AC4F9AE02/LLYWECl31MkLI_OvA7iR6JuAXMM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:4c:f8:d2:c8:09:ee:fa:dd:4b:f5:d9:3b:80:0b:4a:83:11:
         57:fd:41:4f:b7:d2:9c:51:29:46:5a:2f:44:e7:c0:73:84:f4:
         df:d4:ea:19:04:ac:4c:77:1b:00:c3:be:e5:3f:3d:80:b0:da:
         36:8b:aa:a3:37:ae:09:60:07:a1:d4:0e:ee:55:46:f1:d5:0a:
         01:58:56:a8:5d:61:12:3c:6b:84:f7:8b:85:1b:2a:2f:c2:f3:
         a5:7e:9f:04:2f:ec:a3:01:6d:31:34:74:37:ea:b1:55:e1:95:
         27:a0:ee:8a:8b:3a:6f:2c:d1:55:21:6c:30:ea:f3:6e:bf:0d:
         34:1f:b5:ae:98:e2:85:5d:02:0d:d0:0e:e7:98:65:cb:68:5b:
         95:fa:95:78:48:bb:4a:ab:4e:a5:3c:39:90:80:bd:4c:f1:87:
         9c:b4:29:88:5b:02:ca:65:ff:1d:6a:e2:47:4d:52:b4:74:ac:
         b3:33:f9:9a:4c:99:ef:60:06:bf:48:40:11:4a:e4:3d:54:a0:
         9b:d8:f7:69:be:81:1f:85:2d:e8:69:3d:67:7e:57:84:85:3a:
         95:87:1d:f3:d9:f9:33:cf:ce:66:f0:41:78:c7:49:19:ab:08:
         05:cf:3a:30:6e:8f:b8:0e:1d:36:b8:5d:f9:fd:6a:29:03:6a:
         d8:13:07:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:38:29 2026 by rpki-client