Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft
File:                     Lb_HsoYVsf94189GiGr5ITn_loo.mft (raw, json)
Hash identifier:          wvqGXNdX3rPIGYuNmNpRYR8Ng/yvqnXUETPTfZT9EUw=
Subject key identifier:   CE:13:2E:9C:8D:96:86:EF:2F:A5:0B:18:F1:E2:20:69:0A:1D:88:53
Authority key identifier: 2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A
Certificate issuer:       /CN=A91CCDAE/serialNumber=2DBFC7B28615B1FF78D7CF46886AF92139FF968A
Certificate serial:       76
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft
Manifest number:          6D
Signing time:             Mon 01 Jun 2026 08:46:24 +0000
Manifest this update:     Mon 01 Jun 2026 08:46:24 +0000
Manifest next update:     Mon 08 Jun 2026 08:46:24 +0000
Files and hashes:         1: Lb_HsoYVsf94189GiGr5ITn_loo.crl (hash: KSThzgqC9TXQG3I5ilTkmDX6uSFrwFtvReKFCI3D0Zo=)
                          2: B97B11B2C84211F0A053E068C4F9AE02.roa (hash: h69/lB6IB2C2a9XDqwm1K+HvA2A6PhRI/W5WdSklT2M=)
                          3: B90F319AC84211F09A0BE068C4F9AE02.roa (hash: t6tf7t7PXwI1PGJJUw46zgqbxdiKttRmBRpdi4RrNL8=)
                          4: B9FD184CC84211F0BF44E068C4F9AE02.roa (hash: Dpwj2Qu/QGjMr3LLgKtKZSMo+Zdwrsw/mVNkFjzmGJQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.crl
                          rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 08:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCDAE, serialNumber=2DBFC7B28615B1FF78D7CF46886AF92139FF968A
        Validity
            Not Before: Jun  1 08:46:24 2026 GMT
            Not After : Jun  8 08:46:24 2026 GMT
        Subject: CN=6a1d46e0-f4f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:1b:68:02:9c:dc:8d:5b:9c:4d:d9:05:9d:75:
                    20:c3:ae:cc:2b:2c:b8:01:d2:6e:cc:66:ba:9c:8f:
                    53:ed:05:1a:c8:1e:da:32:3f:c9:60:3e:ee:53:b3:
                    fb:64:31:49:91:a6:de:33:c9:e0:d3:e1:b5:93:dd:
                    b5:51:17:18:5c:e2:b7:f8:02:84:57:3a:f7:dc:e6:
                    ab:66:61:07:00:99:cc:a6:ab:6d:69:1d:1b:d6:7c:
                    f3:02:a3:24:f6:38:b6:68:9a:be:b7:21:52:99:05:
                    3e:af:16:cf:92:bd:59:6a:ee:f9:4c:09:d9:ef:7c:
                    78:d5:52:11:bf:77:ed:84:da:c6:52:c9:c0:f8:4c:
                    07:13:0e:ff:57:84:7d:10:09:9a:b5:0a:01:ba:5a:
                    97:16:f5:26:de:a4:ee:9c:87:f7:eb:78:68:b2:b7:
                    86:5e:33:b9:c2:d0:5a:d9:2a:8c:cb:c0:1d:e6:6d:
                    69:dd:75:a4:81:e2:d8:d1:68:a8:c7:d7:23:f7:c1:
                    4c:8f:f3:41:fa:31:2b:69:49:eb:4c:88:8b:f9:27:
                    95:62:23:f6:36:6c:d4:eb:8c:69:fb:f9:cf:17:0f:
                    d1:ed:b5:c2:7f:4e:ee:d4:5a:e2:d1:95:e2:58:fb:
                    b6:90:db:0f:2a:f4:89:1a:43:39:5b:8d:16:70:de:
                    48:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:13:2E:9C:8D:96:86:EF:2F:A5:0B:18:F1:E2:20:69:0A:1D:88:53
            X509v3 Authority Key Identifier:
                keyid:2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:2b:bd:0e:5c:9a:f8:60:20:37:d0:02:7c:28:7d:12:19:b4:
         89:48:99:cb:2c:aa:66:40:61:83:5d:55:80:28:c0:0a:c4:a0:
         49:6f:34:16:99:df:58:3b:6d:4f:bc:a5:44:17:86:42:98:60:
         6b:b4:60:dc:3e:da:db:1e:c9:7c:c2:e5:a8:27:31:a4:a0:92:
         eb:5b:ba:6f:29:5a:c9:50:0f:c3:20:68:f8:61:c6:12:bf:68:
         d0:5a:92:4d:ea:53:f8:a3:68:24:4c:7b:bd:2f:0f:c8:54:b2:
         97:a8:0e:5a:5f:48:4a:c0:2d:44:30:d0:63:e9:3e:bb:fd:8b:
         44:7d:5c:4f:9b:b7:2d:57:3a:f5:4f:f3:fd:ff:82:5a:c8:9c:
         81:eb:aa:9c:f0:55:51:50:94:8f:ff:73:37:8b:e7:e6:78:14:
         1b:67:14:7d:ff:6d:9a:86:8e:2e:1b:82:1d:e3:20:ea:8e:61:
         61:4e:f8:4f:e9:b8:f1:e0:27:92:c9:5b:8b:86:7d:72:20:52:
         0d:82:a3:92:de:21:4c:77:65:85:38:58:92:71:2a:d5:a5:e8:
         19:b4:65:22:6b:ee:5f:57:81:66:2a:72:ef:d5:35:73:c3:aa:
         f9:f8:12:8f:62:ed:f5:39:8d:65:a3:24:32:18:6d:50:d4:88:
         8f:18:fa:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:29:43 2026 by rpki-client