Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft
File:                     LWNAd8yEe1nUBI1D4EszCWmP5jg.mft (raw, json)
Hash identifier:          aPiT6HMBseISs3faYlssVU4/kVgy+jFikyi1CoNJmHs=
Subject key identifier:   6F:A2:03:42:40:D6:0A:9B:AD:28:25:3E:70:6A:0A:E9:5F:4D:8F:68
Authority key identifier: 2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38
Certificate issuer:       /CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
Certificate serial:       049C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft
Manifest number:          03CC
Signing time:             Fri 23 Oct 2026 01:42:46 +0000
Manifest this update:     Fri 23 Oct 2026 01:42:46 +0000
Manifest next update:     Fri 30 Oct 2026 01:42:46 +0000
Files and hashes:         1: LWNAd8yEe1nUBI1D4EszCWmP5jg.crl (hash: hIiIM+retG2ycGTlY+MGZWVCTqwsjijI+Fr9x4to36o=)
                          2: 430E4E387CC311F0A55B2081C4F9AE02.roa (hash: Lr5oonGaOp/1JBezgStkgVrxPphf7c1k8rUXUUlH1HQ=)
                          3: E879EE7C144111EFB247B936C4F9AE02.roa (hash: PJy1pOjFWbAmsotvikHiiGWZOz13/Q1Q3kqdzHzWoW8=)
                          4: 0B7CEEB07CC911F08411627BC4F9AE02.roa (hash: QTmsziZ7YuKyB/X779TJ7KjXLuy10OdNIOUyt6IJmDA=)
                          5: FD124A14CC5811EDBE5D203FC4F9AE02.roa (hash: aGUm8omo4ZFJXDjr4Xz+Jx5SdszNlZSFCVVvYUaDDDE=)
                          6: FFCFFCFC756411F1BE4724178AA30FBC.roa (hash: K+M/GXpCv3Nhy9zZfN36sc5I9tx9qAwRUjDeflaFZJU=)
                          7: CA1A46101A5B11EE89B07267C4F9AE02.roa (hash: tqHiB6MdNj5867Z3RrIXxNvtsP/WHrWgARnyhJP6ZUQ=)
                          8: F9A864386AAB11EF8FEBE576C4F9AE02.roa (hash: EhpTUDDHzY+fvrYZYj/pFiggKyojVq9obYmKAT1n3A0=)
                          9: 90647F2EA14A11ED8FFBA684C4F9AE02.roa (hash: 4beFvb4hxPowcDYshVeExpQg/8txXAvZVZ0I7WzOu3o=)
                          10: 94C13908C4AF11EDBCC55111C4F9AE02.roa (hash: +tqSxdBf9cs4OFgeQ2ZLbEvYIKIcLRjjRyzUUxp3EEQ=)
                          11: FDC6A888AEB111EE9A78E132C4F9AE02.roa (hash: aTh/szGkbByCO+bl8x7ZpvLQYMqSV+pbAIP3Duch7WM=)
                          12: 4D938428C89811F19CE5E2A15611F970.roa (hash: 8Qq7pWdqod9SxRoueNQlpUVfdd+i3HWyhCQkQ7d95NU=)
                          13: 6CD1CCC2936511F1BD100F9E4D11F970.roa (hash: TCfovgmfhV4JubGfoFfkBMtA3nN7dXUsM6EMCQAL8Ts=)
                          14: FECE3C3C855711EF8E79C52BC4F9AE02.roa (hash: mH9aDJls4Z4vdRc3n6JwAhEgaMfwmf9djBOACp2CztQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl
                          rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 01:42:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1180 (0x49c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6587, serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
        Validity
            Not Before: Oct 23 01:42:46 2026 GMT
            Not After : Oct 30 01:42:46 2026 GMT
        Subject: CN=6adabb96-f945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:37:37:68:cb:fb:2f:23:03:b9:ec:cf:ec:e3:
                    a2:dd:c5:99:ad:ef:ba:f0:dd:1b:10:6f:38:f7:98:
                    e2:b8:ac:43:04:15:c0:f7:f3:e0:ec:8d:87:ca:f8:
                    6a:54:32:04:3d:de:2c:e3:d2:6c:26:ed:6d:be:ad:
                    a1:b9:47:67:6c:eb:e6:8a:f8:7a:ee:93:53:2a:99:
                    42:81:02:8e:d0:34:16:1f:40:b0:74:5a:32:a3:24:
                    71:42:7f:6f:9a:55:83:8b:ce:80:a9:87:e3:f5:f8:
                    96:32:0a:73:e7:2b:df:81:32:f1:40:dc:cc:6b:f3:
                    c3:d9:e7:97:ae:9b:10:9e:eb:83:97:ad:53:1d:d5:
                    7c:59:b2:60:dc:6e:bc:79:70:6c:3d:9a:bc:cd:a0:
                    9c:26:6c:75:1b:6c:e8:11:72:20:eb:48:2a:68:72:
                    d4:6c:7e:a8:39:00:19:57:6f:53:0f:34:be:80:52:
                    8b:6c:c5:b3:bd:43:1b:3c:f0:c7:97:96:8f:69:db:
                    fb:88:f3:07:24:43:5b:70:83:0a:32:7d:90:a6:3e:
                    a6:81:80:50:9c:23:1f:77:98:49:73:3a:0e:a7:db:
                    bf:42:1b:52:3c:4c:00:f3:cf:5d:ba:8d:54:ae:5f:
                    86:08:af:d4:30:82:04:c2:11:5e:f8:ce:91:88:e1:
                    ca:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A2:03:42:40:D6:0A:9B:AD:28:25:3E:70:6A:0A:E9:5F:4D:8F:68
            X509v3 Authority Key Identifier:
                keyid:2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:18:67:71:4b:5a:9f:68:d7:15:3b:11:ac:42:bc:7b:e1:ea:
         ac:b2:c1:66:05:2f:87:b2:f3:38:5e:61:6b:fa:e8:f9:7b:be:
         a9:85:63:64:6a:b1:6e:b7:eb:dc:52:29:32:29:cc:11:17:00:
         33:e1:b5:7c:38:39:cc:12:66:3d:49:86:26:f8:b2:31:8d:c1:
         e4:2c:20:71:46:54:06:19:18:93:f7:e3:ee:35:34:46:9b:9e:
         da:6c:21:c3:74:b3:34:f0:97:58:5a:59:9c:f4:f9:e8:85:4d:
         ac:b1:59:76:b0:bd:97:77:c3:9a:4e:3a:00:1c:03:67:e7:ef:
         ed:7b:17:61:da:8b:2e:08:7d:ea:60:03:61:a1:14:76:ae:ec:
         46:e3:19:fb:63:00:99:46:3c:f8:d1:a4:be:f6:d6:9b:5b:fa:
         e3:00:f9:df:10:1a:d8:21:95:2d:b2:3f:5d:a7:8b:aa:34:17:
         c8:bf:0f:63:c3:3f:af:50:18:3c:41:29:0d:2f:99:18:2a:00:
         ce:12:c7:44:49:8b:69:4d:db:f3:24:bb:89:03:17:ef:42:fb:
         f3:ae:ec:86:0b:68:7c:5e:50:ba:8e:69:56:e5:54:60:80:e3:
         fc:d4:f0:57:90:36:cd:fc:66:6d:45:87:e7:4d:2a:0f:5f:68:
         19:59:b6:be
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjY1ODcxMTAvBgNVBAUTKDJENjM0MDc3Q0M4NDdCNTlENDA0OEQ0M0UwNEIzMzA5
Njk4RkU2MzgwHhcNMjYxMDIzMDE0MjQ2WhcNMjYxMDMwMDE0MjQ2WjAYMRYwFAYD
VQQDEw02YWRhYmI5Ni1mOTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1jc3aMv7LyMDuezP7OOi3cWZre+68N0bEG8495jiuKxDBBXA9/Pg7I2Hyvhq
VDIEPd4s49JsJu1tvq2huUdnbOvmivh67pNTKplCgQKO0DQWH0CwdFoyoyRxQn9v
mlWDi86AqYfj9fiWMgpz5yvfgTLxQNzMa/PD2eeXrpsQnuuDl61THdV8WbJg3G68
eXBsPZq8zaCcJmx1G2zoEXIg60gqaHLUbH6oOQAZV29TDzS+gFKLbMWzvUMbPPDH
l5aPadv7iPMHJENbcIMKMn2Qpj6mgYBQnCMfd5hJczoOp9u/QhtSPEwA889duo1U
rl+GCK/UMIIEwhFe+M6RiOHK+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG+iA0JA
1gqbrSglPnBqCulfTY9oMB8GA1UdIwQYMBaAFC1jQHfMhHtZ1ASNQ+BLMwlpj+Y4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjU4Ny80MTdENzFCNDkx
ODYxMUVEQTg0QTEyNERDNEY5QUUwMi9MV05BZDh5RWUxblVCSTFENEVzekNXbVA1
amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xXTkFkOHlFZTFuVUJJMUQ0RXN6Q1dtUDVqZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NjU4Ny80MTdENzFCNDkxODYxMUVEQTg0QTEyNERDNEY5QUUwMi9MV05BZDh5RWUx
blVCSTFENEVzekNXbVA1amcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAChhncUtan2jXFTsRrEK8e+HqrLLBZgUvh7LzOF5ha/ro+Xu+qYVjZGqxbrfr
3FIpMinMERcAM+G1fDg5zBJmPUmGJviyMY3B5CwgcUZUBhkYk/fj7jU0Rpue2mwh
w3SzNPCXWFpZnPT56IVNrLFZdrC9l3fDmk46ABwDZ+fv7XsXYdqLLgh96mADYaEU
dq7sRuMZ+2MAmUY8+NGkvvbWm1v64wD53xAa2CGVLbI/XaeLqjQXyL8PY8M/r1AY
PEEpDS+ZGCoAzhLHREmLaU3b8yS7iQMX70L7867shgtofF5Quo5pVuVUYIDj/NTw
V5A2zfxmbUWH500qD19oGVm2vg==
-----END CERTIFICATE-----
Generated at Sat Oct 24 02:10:24 2026 by rpki-client