Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.mft
File:                     LGfSFpazocG8LOSfy-CnpTo306Y.mft (raw, json)
Hash identifier:          u6lVDfR1Tu7WjLNzsxLVhU3CN/eYgsedRiWDaRHncEQ=
Subject key identifier:   10:81:0D:AD:07:4D:4E:05:EF:5E:0F:F4:8B:10:88:0C:C3:70:F3:36
Authority key identifier: 2C:67:D2:16:96:B3:A1:C1:BC:2C:E4:9F:CB:E0:A7:A5:3A:37:D3:A6
Certificate issuer:       /CN=A9168221/serialNumber=2C67D21696B3A1C1BC2CE49FCBE0A7A53A37D3A6
Certificate serial:       C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LGfSFpazocG8LOSfy-CnpTo306Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.mft
Manifest number:          B6
Signing time:             Thu 11 Jun 2026 09:32:51 +0000
Manifest this update:     Thu 11 Jun 2026 09:32:50 +0000
Manifest next update:     Thu 18 Jun 2026 09:32:50 +0000
Files and hashes:         1: LGfSFpazocG8LOSfy-CnpTo306Y.crl (hash: oX5eHPKyl6ma0EFueHzhl+eQkk9G0/8DhZbSCZCfnJI=)
                          2: 7EB9D336E88D11F09C95F79A506F56BC.roa (hash: Ezl0n+OgzlnEpdFqgpF6c3qxbrKC+MfFQzWPPXiHzdM=)
                          3: DD2F3D28E8A311F0962A42EF556F56BC.roa (hash: kn7qtlgTYPVCEmu4KEqD1zs/ovHOIIn/wazhWoTHlJ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.crl
                          rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LGfSFpazocG8LOSfy-CnpTo306Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 09:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168221, serialNumber=2C67D21696B3A1C1BC2CE49FCBE0A7A53A37D3A6
        Validity
            Not Before: Jun 11 09:32:50 2026 GMT
            Not After : Jun 18 09:32:50 2026 GMT
        Subject: CN=6a2a80c2-130a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b6:55:52:59:54:b4:ca:7e:61:4c:a8:4a:d3:
                    2a:50:c6:85:7c:7d:dc:d3:66:bb:14:a6:fd:d1:1e:
                    d1:de:83:92:a3:6f:50:71:79:3e:cb:15:a6:aa:13:
                    90:72:b8:92:39:0b:48:52:5d:6f:b6:6f:6c:e9:a3:
                    51:b2:df:c3:54:63:87:ee:22:2a:dd:18:d0:92:0b:
                    ef:48:6c:17:5d:66:21:5d:0c:50:10:af:bf:6a:16:
                    51:6b:40:8b:a0:fa:b7:56:9e:40:7a:f3:56:fa:85:
                    60:ac:75:bd:bc:5f:d2:21:8f:7f:7d:f5:c1:40:f6:
                    0d:4c:63:67:f0:04:1f:c8:f8:ef:74:a8:7c:59:72:
                    37:ec:10:93:bc:7d:34:f9:8f:8c:4e:16:8f:54:48:
                    ab:a6:5b:6c:ea:4d:64:8e:d3:f8:0e:e7:b4:2a:92:
                    69:f2:f2:e1:d3:b4:c5:4d:59:61:54:1c:66:1b:15:
                    5e:bd:7d:18:71:ef:9c:97:83:ae:78:8d:1b:81:8f:
                    8e:77:52:75:37:81:d3:04:c4:c0:83:ac:cd:85:e7:
                    ff:a1:2b:ee:a4:69:54:67:40:7e:70:9f:9c:75:e4:
                    c3:d3:54:d7:c0:a8:23:9c:d8:bb:bc:5e:5f:46:7a:
                    8b:e2:cc:76:0e:a2:f7:b2:7b:73:19:30:de:ac:ae:
                    88:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:81:0D:AD:07:4D:4E:05:EF:5E:0F:F4:8B:10:88:0C:C3:70:F3:36
            X509v3 Authority Key Identifier:
                keyid:2C:67:D2:16:96:B3:A1:C1:BC:2C:E4:9F:CB:E0:A7:A5:3A:37:D3:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LGfSFpazocG8LOSfy-CnpTo306Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:a9:84:38:c9:55:17:6e:3b:59:37:b5:02:64:94:0a:a8:de:
         4e:0a:e7:14:1b:1f:74:71:b1:3f:12:48:f0:8b:e8:3b:ee:71:
         ae:4d:2c:53:44:04:b7:0c:ea:ba:bf:dc:c0:d1:c9:56:92:4a:
         ba:6b:0a:e4:ac:0e:df:f8:9a:74:99:1b:4a:4f:02:5c:e7:60:
         b0:42:94:c3:ea:c7:63:4c:5f:33:7a:00:3e:5c:0f:de:1e:38:
         fd:91:04:02:6e:3a:f2:cd:3e:83:3a:06:e3:a5:03:ce:b9:69:
         c0:de:3c:c0:f2:62:80:9c:3d:0e:95:2e:63:63:d3:75:52:c1:
         39:7e:10:da:83:57:c8:6c:99:5b:f3:7b:e0:8c:3a:2d:45:d3:
         cc:92:db:b9:9d:81:99:70:74:6d:6f:01:ad:30:db:29:0b:0c:
         b7:6a:c2:17:25:20:ec:11:91:4d:3e:38:cc:e5:86:24:fb:3e:
         3f:ba:bf:bc:93:2a:66:54:ee:d1:22:e2:34:b5:3b:2b:48:4a:
         2d:03:f1:2a:52:4c:a5:11:52:98:84:46:c7:b8:f6:9d:71:d4:
         7c:be:28:2f:04:e7:04:62:e1:01:c3:26:91:6e:ed:b2:a7:dc:
         51:0f:0c:91:c3:23:48:3d:f3:60:54:fa:9e:45:1e:3f:34:d6:
         d1:ca:b8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:33:29 2026 by rpki-client