Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
File:                     lf6-k6M6M5S9H2Dcu925_eByt_M.mft (raw, json)
Hash identifier:          20sD1mZj7VFBZQcAdX2aAfgeAud6n/rYUw5ZEJCLQ6Q=
Subject key identifier:   79:FC:47:DD:D2:E6:A0:BD:34:3B:B0:E6:7E:BD:15:B2:D3:75:0C:00
Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
Certificate issuer:       /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Certificate serial:       0834
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
Manifest number:          07AD
Signing time:             Fri 06 Mar 2026 21:36:37 +0000
Manifest this update:     Fri 06 Mar 2026 21:36:37 +0000
Manifest next update:     Fri 13 Mar 2026 21:36:37 +0000
Files and hashes:         1: lf6-k6M6M5S9H2Dcu925_eByt_M.crl (hash: hC2GdfJ/LSNxfIzGDtJeMn5tEMgt+Phd+zakhxoNPJs=)
                          2: 168FD534090211EEA1C06509C4F9AE02.roa (hash: nMWB/DllOnZzjZfTlqtdAYQIcLE3kT837Y0NymlixsY=)
                          3: 584506BE6AFA11F0B55F3536C4F9AE02.roa (hash: x9U/FNhD8zZb+3b9larzovs/oo5vOjChKwd8wNBXpVU=)
                          4: 8353BEA4F88211EEA770C016C4F9AE02.roa (hash: DeOg1+xoYDUkAWfjRHY3bgB+e63XrSZC94dKT/SU52M=)
                          5: 15434774090211EEA1C06509C4F9AE02.roa (hash: TJTe6tgUzGyLs9qs0NOqJwafzleo9nZn+ooC3NLooxI=)
                          6: A45471ACC4ED11EE8A67C739C4F9AE02.roa (hash: erd/byvZQbud2olu7o9OIZ0H+fhYsFHIOFSRXbecrlg=)
                          7: B32F80267BD111EBBB223C84C4F9AE02.roa (hash: op2P3thNNAj6+oyo9M9v77DynFbpzl8nay8/bCXhRcY=)
                          8: 18D6D6AAB84F11EFA5BB3E78C4F9AE02.roa (hash: RVgiyepKl902Bn3M72KnxtU92z/jQYODXWMLMbV+2zg=)
                          9: 505CFB7465D211EFB4348E63C4F9AE02.roa (hash: cd6DQhMr0DKnGYuNxc7IhMqZVQK0SntWSeiPqohUc+Y=)
                          10: FD6881C4438111ECBC63AC7BC4F9AE02.roa (hash: Rbl2KzlFG4HRgcL2yyd8dnS5ncuLP5I8W/FqPOTuByw=)
                          11: 15F254A8090211EEA1C06509C4F9AE02.roa (hash: I/a3fxw/xnNebSv9Uo7B0A6DjmrZz7zmfH8nOiEwMdE=)
                          12: A95180F2D7DA11ECB3D1AF67C4F9AE02.roa (hash: IuZs9cBuodHJUbBn26tMDBdFhK8V7rtB1oDVHJpZbwY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
                          rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 21:36:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2100 (0x834)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDB37, serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
        Validity
            Not Before: Mar  6 21:36:37 2026 GMT
            Not After : Mar 13 21:36:37 2026 GMT
        Subject: CN=69ab48e5-f235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:88:a5:02:81:bb:bc:c3:5d:7d:e5:ad:1d:ce:
                    de:30:c2:63:bd:01:b8:85:58:68:89:b8:f9:21:e7:
                    da:d0:53:fb:80:20:77:51:42:13:4d:8d:c5:60:fd:
                    e4:df:b2:d8:fd:34:dd:5b:4a:bf:da:43:a8:0f:f4:
                    65:d1:53:f7:e2:50:5b:cb:04:49:c3:4c:b1:50:2f:
                    e4:e3:82:36:7f:86:65:00:fa:4b:9e:1b:16:3c:69:
                    2b:aa:98:46:4a:b4:22:b2:d3:ca:87:81:d7:a3:7f:
                    4d:49:6b:43:c6:88:48:8f:21:13:7e:ce:26:29:c3:
                    66:3f:76:ee:23:3e:51:71:cd:83:2d:7d:39:9d:5c:
                    ca:25:23:bc:ab:6d:13:42:3a:a1:64:b4:45:63:11:
                    28:f9:95:1d:b5:76:a7:16:c0:2d:ee:21:6a:95:77:
                    aa:11:97:3a:9b:9e:fd:28:06:28:82:dd:2e:05:c8:
                    8f:9e:18:74:35:f1:61:f5:fe:a6:47:c7:9e:82:a7:
                    65:ce:1d:68:b0:57:25:57:fd:54:59:e9:8d:ee:88:
                    c9:31:5a:44:6b:31:9a:8d:c5:ce:b1:74:98:06:fb:
                    25:e8:8c:dc:8d:07:c2:26:1d:c6:3c:5a:58:5c:9f:
                    b9:ff:03:e7:7e:50:31:3d:04:a7:a0:04:c9:03:77:
                    1c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FC:47:DD:D2:E6:A0:BD:34:3B:B0:E6:7E:BD:15:B2:D3:75:0C:00
            X509v3 Authority Key Identifier:
                keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:d3:5f:ff:6e:c5:58:9d:24:9d:9a:a6:dc:1c:8a:c8:6e:5d:
         16:b4:e0:d5:85:10:aa:10:eb:a5:cf:0f:86:8d:1a:b5:0a:ea:
         f5:29:b1:c6:e2:7f:78:ff:ab:8f:c1:3a:b5:17:12:c0:99:83:
         20:f0:fd:6e:50:f0:2c:26:f8:f1:d2:34:1b:5e:93:4d:1e:63:
         c3:e8:1b:cf:08:ca:99:c9:8b:d5:94:2d:80:d3:45:37:dc:93:
         81:bc:a3:0f:2b:a9:0a:d6:6e:b7:a5:cb:14:0f:8e:bd:e9:a5:
         54:16:57:52:10:8f:8c:d3:89:67:91:db:38:a1:a4:82:5c:8d:
         86:85:ba:b2:c1:f8:6e:20:b7:66:43:17:31:58:f0:75:f8:6c:
         8c:28:4f:9c:1a:75:04:f6:f1:8f:1d:19:51:56:32:d3:10:be:
         d0:be:f9:64:f0:93:b7:fd:28:69:7f:07:cb:b8:9b:71:5a:63:
         aa:4d:df:22:05:e2:78:76:8c:e3:de:2c:ce:a0:bb:70:18:5e:
         8f:8e:c3:c1:60:9b:47:4e:bf:d1:ed:f6:03:4f:e8:40:ff:0a:
         ef:4d:d5:6b:e1:76:3f:b8:29:aa:e8:0d:47:ff:44:2d:24:43:
         07:0f:a2:9d:6a:8f:21:25:f0:37:05:23:fe:3a:40:c4:0a:cf:
         69:8d:17:eb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RURCMzcxMTAvBgNVBAUTKDk1RkVCRTkzQTMzQTMzOTRCRDFGNjBEQ0JCRERCOUZE
RTA3MkI3RjMwHhcNMjYwMzA2MjEzNjM3WhcNMjYwMzEzMjEzNjM3WjAYMRYwFAYD
VQQDEw02OWFiNDhlNS1mMjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnIilAoG7vMNdfeWtHc7eMMJjvQG4hVhoibj5Iefa0FP7gCB3UUITTY3FYP3k
37LY/TTdW0q/2kOoD/Rl0VP34lBbywRJw0yxUC/k44I2f4ZlAPpLnhsWPGkrqphG
SrQistPKh4HXo39NSWtDxohIjyETfs4mKcNmP3buIz5Rcc2DLX05nVzKJSO8q20T
QjqhZLRFYxEo+ZUdtXanFsAt7iFqlXeqEZc6m579KAYogt0uBciPnhh0NfFh9f6m
R8eegqdlzh1osFclV/1UWemN7ojJMVpEazGajcXOsXSYBvsl6IzcjQfCJh3GPFpY
XJ+5/wPnflAxPQSnoATJA3ccSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHn8R93S
5qC9NDuw5n69FbLTdQwAMB8GA1UdIwQYMBaAFJX+vpOjOjOUvR9g3Lvduf3gcrfz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREIzNy80REU2MzVFMDc4
QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi9sZjYtazZNNk01UzlIMkRjdTkyNV9lQnl0
X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2xmNi1rNk02TTVTOUgyRGN1OTI1X2VCeXRfTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
REIzNy80REU2MzVFMDc4QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi9sZjYtazZNNk01
UzlIMkRjdTkyNV9lQnl0X00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFdNf/27FWJ0knZqm3ByKyG5dFrTg1YUQqhDrpc8Pho0atQrq9SmxxuJ/eP+r
j8E6tRcSwJmDIPD9blDwLCb48dI0G16TTR5jw+gbzwjKmcmL1ZQtgNNFN9yTgbyj
DyupCtZut6XLFA+OvemlVBZXUhCPjNOJZ5HbOKGkglyNhoW6ssH4biC3ZkMXMVjw
dfhsjChPnBp1BPbxjx0ZUVYy0xC+0L75ZPCTt/0oaX8Hy7ibcVpjqk3fIgXieHaM
494szqC7cBhej47DwWCbR06/0e32A0/oQP8K703Va+F2P7gpqugNR/9ELSRDBw+i
nWqPISXwNwUj/jpAxArPaY0X6w==
-----END CERTIFICATE-----
Generated at Sat Mar 7 06:07:49 2026 by rpki-client