Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
File:                     lf6-k6M6M5S9H2Dcu925_eByt_M.mft (raw, json)
Hash identifier:          FRQRgmUuklwWFMOJqgDO7teXCwOojDMItSTHjHhxsd0=
Subject key identifier:   03:C2:EB:9A:A6:D2:80:EC:9A:D2:8F:09:69:C0:4F:61:60:88:61:88
Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
Certificate issuer:       /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Certificate serial:       085E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
Manifest number:          07CD
Signing time:             Thu 16 Apr 2026 21:44:56 +0000
Manifest this update:     Thu 16 Apr 2026 21:44:55 +0000
Manifest next update:     Thu 23 Apr 2026 21:44:55 +0000
Files and hashes:         1: lf6-k6M6M5S9H2Dcu925_eByt_M.crl (hash: 2kkEnfArcRpk6Xk8CSAaZQTjVDEJ1iUdSU8PhigReEI=)
                          2: B32F80267BD111EBBB223C84C4F9AE02.roa (hash: 3gzqvoyJahMiUTAGxhxWgq/nkiebEBW1ewsgydg+Lfs=)
                          3: 505CFB7465D211EFB4348E63C4F9AE02.roa (hash: cd6DQhMr0DKnGYuNxc7IhMqZVQK0SntWSeiPqohUc+Y=)
                          4: FD6881C4438111ECBC63AC7BC4F9AE02.roa (hash: /vTD507iMveUOAK08YQKX6Cvj1AQ2vYplHbXKmdAyEM=)
                          5: 15434774090211EEA1C06509C4F9AE02.roa (hash: TJTe6tgUzGyLs9qs0NOqJwafzleo9nZn+ooC3NLooxI=)
                          6: A45471ACC4ED11EE8A67C739C4F9AE02.roa (hash: erd/byvZQbud2olu7o9OIZ0H+fhYsFHIOFSRXbecrlg=)
                          7: A95180F2D7DA11ECB3D1AF67C4F9AE02.roa (hash: IuZs9cBuodHJUbBn26tMDBdFhK8V7rtB1oDVHJpZbwY=)
                          8: 584506BE6AFA11F0B55F3536C4F9AE02.roa (hash: x9U/FNhD8zZb+3b9larzovs/oo5vOjChKwd8wNBXpVU=)
                          9: 8353BEA4F88211EEA770C016C4F9AE02.roa (hash: DeOg1+xoYDUkAWfjRHY3bgB+e63XrSZC94dKT/SU52M=)
                          10: BB9AC51E2F0D11F1B2108CA79A833773.roa (hash: V/FIY6IBA9sOHywqWzg37fABITREQi7xjxyw7WXMzYE=)
                          11: 15F254A8090211EEA1C06509C4F9AE02.roa (hash: I/a3fxw/xnNebSv9Uo7B0A6DjmrZz7zmfH8nOiEwMdE=)
                          12: 168FD534090211EEA1C06509C4F9AE02.roa (hash: nMWB/DllOnZzjZfTlqtdAYQIcLE3kT837Y0NymlixsY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
                          rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:44:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2142 (0x85e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDB37, serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
        Validity
            Not Before: Apr 16 21:44:55 2026 GMT
            Not After : Apr 23 21:44:55 2026 GMT
        Subject: CN=69e15857-42b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:21:b7:e9:79:1a:c3:f2:73:df:fe:7d:61:56:
                    9c:9b:75:0e:a6:a9:ca:71:a1:53:0b:93:45:1e:38:
                    f0:2c:79:d9:8f:61:37:99:19:97:9c:8f:b5:88:b5:
                    7b:27:6d:3c:57:ed:21:d3:5b:1a:82:47:83:8c:49:
                    2e:22:5a:89:13:01:33:d0:1f:9d:71:96:76:21:94:
                    a6:ae:e8:9a:43:93:df:c5:a0:e6:97:b2:4d:15:28:
                    a5:b9:d0:83:e7:02:b7:3e:9c:33:44:59:90:ac:7a:
                    2d:01:e8:7d:d7:97:7b:d0:1c:73:0f:2f:bb:d2:27:
                    ef:81:94:fc:dd:c0:a1:91:66:7f:dd:57:72:17:13:
                    7f:6a:27:fa:55:d6:cf:24:95:c4:c0:90:aa:cc:21:
                    6c:3e:01:a0:3a:e7:3d:39:16:19:7e:92:20:5a:a9:
                    61:55:b7:84:11:5c:08:28:93:6a:66:fe:e3:04:05:
                    38:a5:7f:a4:6f:cb:d2:d1:ad:73:c1:9c:92:a3:55:
                    bd:33:8f:9c:23:e2:99:5f:df:11:cc:66:98:98:fc:
                    69:e4:be:70:fe:2a:77:40:cf:45:61:db:3a:e0:fd:
                    84:38:fb:0d:1e:e9:49:99:48:33:fe:cc:eb:83:29:
                    c0:f3:e0:51:a1:39:59:42:26:b8:e6:1e:f5:cb:7d:
                    b9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C2:EB:9A:A6:D2:80:EC:9A:D2:8F:09:69:C0:4F:61:60:88:61:88
            X509v3 Authority Key Identifier:
                keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:eb:b2:7b:c5:45:53:02:fb:08:33:3a:64:22:5e:aa:05:af:
         49:0f:d9:77:dd:a6:a9:fa:88:e1:6b:40:dc:64:d2:79:de:67:
         2c:09:7a:48:07:fc:88:08:fb:ea:8a:ef:cd:26:7c:e6:d2:2e:
         c5:f6:ce:18:ce:7f:87:bb:04:c9:8c:b3:47:13:e8:4b:5e:4b:
         bb:26:dd:e4:5d:10:5d:62:31:25:16:ea:32:27:99:1b:10:a5:
         f8:99:06:3d:38:6e:be:f7:49:5b:81:3b:e1:6e:49:21:68:c2:
         8e:95:fc:fa:96:53:ee:02:be:ff:ed:aa:47:52:8d:33:a4:a1:
         57:ba:0f:e3:63:1f:97:4e:37:8f:f3:c7:6b:9b:7d:3a:ec:38:
         50:e6:16:5f:f5:2a:8a:e1:5d:a0:70:95:83:7f:a1:ea:95:d7:
         f4:17:d5:a4:8d:4d:5a:73:24:8a:88:2d:9b:0a:34:e9:22:24:
         55:c8:27:b6:ad:ca:3d:5f:9d:3f:8d:8b:40:f1:a1:f8:2c:8b:
         67:c0:2e:a2:08:0b:fc:a3:f2:c7:9f:9f:ce:04:70:6b:32:b7:
         3f:ee:b8:97:71:9c:f5:0c:5a:d0:bc:76:89:06:04:f0:fe:82:
         1f:6f:73:51:a1:4d:16:d2:09:1b:5e:fd:04:d5:e8:4c:fd:49:
         92:32:24:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:35:31 2026 by rpki-client