Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft
File:                     lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft (raw, json)
Hash identifier:          t7idNkGlyBXIKm53jw4xNyBL9FHVjIEOGVm00xhkSsI=
Subject key identifier:   44:FC:A6:F5:29:19:2B:EF:BD:E3:2F:9F:F1:ED:8C:77:81:07:4C:B4
Authority key identifier: 97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12
Certificate issuer:       /CN=A9133BB0/serialNumber=9706BF1219354D018C15858CE97679FE43E6B312
Certificate serial:       01A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft
Manifest number:          019A
Signing time:             Wed 07 Oct 2026 04:47:15 +0000
Manifest this update:     Wed 07 Oct 2026 04:47:15 +0000
Manifest next update:     Wed 14 Oct 2026 04:47:15 +0000
Files and hashes:         1: lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl (hash: fSE1mFT9ysfhAk+VX59PpP0Qe9cvjmcQe0F9w9XEX/Q=)
                          2: 87FEDB446B9B11F1A0F959156D47A888.roa (hash: AYMk45b6CL8KReePrtbWEzoQNuf96ZiI29X04jKh5iY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl
                          rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 04:47:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 416 (0x1a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133BB0, serialNumber=9706BF1219354D018C15858CE97679FE43E6B312
        Validity
            Not Before: Oct  7 04:47:15 2026 GMT
            Not After : Oct 14 04:47:15 2026 GMT
        Subject: CN=6ac5ced3-b2aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f4:69:b0:bf:b0:2d:a1:61:7a:3b:69:8b:e7:
                    77:be:4b:08:3d:8e:98:42:3b:42:ab:4d:77:b4:2b:
                    e0:bb:51:85:7e:fc:4f:fd:da:73:6c:95:85:a0:31:
                    97:bf:52:a0:f2:52:0c:cf:12:a5:09:89:e0:41:96:
                    2f:a3:0c:eb:a3:c9:e5:a9:71:6a:37:54:8b:58:ca:
                    d3:21:8c:2c:44:ce:80:8b:3b:32:8d:e4:3a:7e:44:
                    a4:85:b7:1d:61:9d:51:90:fb:20:75:17:75:1e:2c:
                    82:02:2e:8e:4b:0b:4b:08:3b:8f:3c:b1:6d:c3:9d:
                    0b:f6:f6:42:ff:1c:e4:3c:3d:bf:7e:e7:20:54:22:
                    84:4c:5c:e4:52:29:e8:6c:3b:9b:c3:67:e8:ad:16:
                    9e:e6:9d:43:db:ea:cf:42:4e:6f:28:e2:18:a6:aa:
                    7c:8d:b7:69:64:23:8a:6e:ad:ea:62:b5:e7:fc:60:
                    b7:1c:12:06:c1:a6:2c:0e:37:45:14:15:6f:87:e7:
                    a7:48:3e:14:43:6b:8d:c6:98:3a:cf:58:9d:33:aa:
                    4d:b8:49:61:7b:2c:17:6a:f9:ae:41:18:6c:9b:6d:
                    3f:9e:ba:d3:0b:4e:31:d6:12:63:ff:1f:cb:9b:2c:
                    21:5c:84:55:2c:07:df:52:62:ea:55:c6:1b:65:8e:
                    e1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:FC:A6:F5:29:19:2B:EF:BD:E3:2F:9F:F1:ED:8C:77:81:07:4C:B4
            X509v3 Authority Key Identifier:
                keyid:97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:74:f1:1c:93:49:58:44:d6:b8:8e:9f:b7:33:7d:f5:72:4e:
         e8:90:ef:16:78:fc:99:fa:70:95:84:4c:ae:62:6d:d3:1a:bd:
         86:d4:42:65:9f:48:4d:1f:91:49:ac:7f:db:fd:6a:e4:68:cf:
         54:f2:41:c6:66:24:db:62:b1:ce:f7:11:d6:38:69:08:d4:29:
         18:f0:40:ed:18:10:98:1d:76:c0:77:3b:59:a6:88:76:46:c7:
         d5:7a:c8:f6:b8:91:63:28:12:72:6d:9e:e6:d9:7a:d4:45:e3:
         dc:0d:cf:a2:a1:e1:0c:93:f5:23:23:6f:38:e6:3a:bc:ed:6a:
         aa:d4:9b:24:d8:7a:53:65:73:91:95:cc:a9:98:9b:db:3a:c5:
         63:62:c7:90:7a:d3:59:cd:11:b2:c2:78:e8:94:55:9b:61:50:
         88:4b:80:4d:53:70:60:59:f4:53:37:a3:74:e3:a2:d2:ce:8b:
         09:60:ed:50:b2:a9:4d:a5:b1:b1:71:14:9c:30:58:99:87:3c:
         6f:e0:03:e8:c9:f8:d5:0c:43:ca:30:15:06:e2:b1:f9:0e:64:
         e5:c8:70:19:a5:de:91:fd:f0:7d:1e:05:77:74:67:40:2f:e4:
         3d:7c:26:ff:d8:03:8e:4c:f4:09:8c:27:61:da:bb:45:56:9e:
         51:f1:29:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 17:05:54 2026 by rpki-client