Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft
File:                     LhWWOMt5D3lFFyLlKs602oBfi5c.mft (raw, json)
Hash identifier:          jBPshTCIGPSEnen/hfaLWAn/8mU6lBHDh3lSGm7gKiQ=
Subject key identifier:   FF:9D:9C:80:77:A7:47:F5:75:FF:A7:E9:5F:DD:8F:A8:A1:A6:3E:3A
Authority key identifier: 2E:15:96:38:CB:79:0F:79:45:17:22:E5:2A:CE:B4:DA:80:5F:8B:97
Certificate issuer:       /CN=A91A1E13/serialNumber=2E159638CB790F79451722E52ACEB4DA805F8B97
Certificate serial:       06E9
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft
Manifest number:          06E5
Signing time:             Fri 06 Mar 2026 21:48:27 +0000
Manifest this update:     Fri 06 Mar 2026 21:48:27 +0000
Manifest next update:     Fri 13 Mar 2026 21:48:27 +0000
Files and hashes:         1: LhWWOMt5D3lFFyLlKs602oBfi5c.crl (hash: TQQWbYFzrOnc83mKGjHojreXKgSWHX5kx76N7trc+9Q=)
                          2: 6981A2B8879A11F0A06BE519C4F9AE02.roa (hash: OSyNy6yrXARat2n5akNd+2J6LgAr7BjhgFaIdVAJXcY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.crl
                          rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 21:48:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1769 (0x6e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1E13, serialNumber=2E159638CB790F79451722E52ACEB4DA805F8B97
        Validity
            Not Before: Mar  6 21:48:27 2026 GMT
            Not After : Mar 13 21:48:27 2026 GMT
        Subject: CN=69ab4bab-5a80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bd:11:5c:dc:56:fe:df:c5:9e:4f:77:f2:38:
                    45:6c:a2:5b:72:e8:be:2e:40:38:59:18:bd:4f:e4:
                    89:a4:23:5e:89:8d:fd:d1:ed:e6:f4:d8:75:48:25:
                    48:f4:85:53:8e:fb:52:8c:87:57:16:0f:5d:da:6a:
                    bd:0b:8a:b5:06:67:18:a2:9d:46:53:cf:cb:78:18:
                    52:97:f4:79:64:b3:75:91:61:b6:98:97:b0:c5:88:
                    14:74:30:01:98:a1:2f:07:f1:63:0c:0b:34:7b:29:
                    4a:d1:bb:06:c9:08:31:8b:89:cc:0f:6d:cd:c0:13:
                    70:8d:36:45:5e:bb:92:d6:29:72:14:55:9e:93:9f:
                    d3:72:80:7f:43:99:bb:62:36:39:01:47:8f:d0:66:
                    08:ee:32:c2:30:a9:34:3f:a8:6c:8b:15:fe:29:52:
                    fa:97:21:68:4c:2c:0e:96:a9:20:db:55:8c:86:d6:
                    4e:73:be:7d:ca:cb:1d:f5:97:d3:6e:01:7a:fe:80:
                    13:6f:9b:e2:1e:9c:25:cb:2f:0a:2a:c3:80:69:0a:
                    bd:cf:42:ec:63:20:13:cf:05:dc:38:24:7e:8e:17:
                    60:68:19:25:a1:47:8e:d9:c3:49:db:5b:cf:49:62:
                    d9:42:66:e6:fd:95:c1:88:38:e0:71:d5:e0:59:71:
                    03:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9D:9C:80:77:A7:47:F5:75:FF:A7:E9:5F:DD:8F:A8:A1:A6:3E:3A
            X509v3 Authority Key Identifier:
                keyid:2E:15:96:38:CB:79:0F:79:45:17:22:E5:2A:CE:B4:DA:80:5F:8B:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:58:89:0d:08:50:43:5e:da:35:0d:d4:ae:22:27:5e:28:9b:
         e6:7f:43:73:a3:22:95:09:97:ee:94:cb:b6:f1:36:b8:9c:b0:
         a2:8f:c3:2d:06:78:7a:4f:48:9a:1f:ec:41:6d:01:9a:b8:db:
         69:ad:57:56:a1:d5:52:0c:af:52:78:91:f5:1e:b9:78:21:ce:
         09:2d:83:98:87:f3:a4:10:2c:b6:d8:79:20:64:ae:64:a6:69:
         87:84:7c:e9:42:33:22:31:ec:c4:f4:14:03:a3:8d:03:45:0b:
         5e:a1:c0:a6:a7:38:63:43:a2:f5:9a:e1:84:cb:21:94:a8:52:
         92:f8:38:f1:86:ad:20:fd:5e:b9:aa:83:36:cc:a2:b2:49:e9:
         7f:7a:43:b0:e1:f8:91:d7:9e:45:48:5f:49:1f:15:2e:0e:f1:
         12:fc:b5:89:95:b2:ab:eb:74:19:97:55:e3:26:9d:69:12:19:
         45:50:69:c7:6f:b8:d3:1a:6e:0b:66:6d:5e:65:40:6c:fe:7a:
         75:3f:d7:30:2f:20:34:e2:77:8c:69:4f:cd:83:27:86:92:9d:
         f6:95:b9:51:7b:af:f9:ea:01:fa:fd:ab:28:84:6c:32:23:04:
         8b:fc:9b:56:a1:98:a3:40:05:69:59:69:ca:59:52:42:d0:79:
         29:b1:b2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 14:34:55 2026 by rpki-client