Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
File:                     lf6-k6M6M5S9H2Dcu925_eByt_M.mft (raw, json)
Hash identifier:          wRk0ehL+bI6kASMWMt+4UQRRDNbO8C8kLxaT2iMOmQ8=
Subject key identifier:   58:74:C7:22:F8:F5:C3:62:8E:36:C9:B9:7F:8A:B8:EE:49:82:96:71
Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
Certificate issuer:       /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Certificate serial:       0860
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
Manifest number:          07CF
Signing time:             Mon 20 Apr 2026 21:44:46 +0000
Manifest this update:     Mon 20 Apr 2026 21:44:46 +0000
Manifest next update:     Mon 27 Apr 2026 21:44:46 +0000
Files and hashes:         1: lf6-k6M6M5S9H2Dcu925_eByt_M.crl (hash: P4/pH/zcuaK6pteENGw1ko6hhUYbirNPJeP4LKWXtG4=)
                          2: A45471ACC4ED11EE8A67C739C4F9AE02.roa (hash: erd/byvZQbud2olu7o9OIZ0H+fhYsFHIOFSRXbecrlg=)
                          3: B32F80267BD111EBBB223C84C4F9AE02.roa (hash: 3gzqvoyJahMiUTAGxhxWgq/nkiebEBW1ewsgydg+Lfs=)
                          4: 168FD534090211EEA1C06509C4F9AE02.roa (hash: nMWB/DllOnZzjZfTlqtdAYQIcLE3kT837Y0NymlixsY=)
                          5: BB9AC51E2F0D11F1B2108CA79A833773.roa (hash: V/FIY6IBA9sOHywqWzg37fABITREQi7xjxyw7WXMzYE=)
                          6: 584506BE6AFA11F0B55F3536C4F9AE02.roa (hash: x9U/FNhD8zZb+3b9larzovs/oo5vOjChKwd8wNBXpVU=)
                          7: 8353BEA4F88211EEA770C016C4F9AE02.roa (hash: DeOg1+xoYDUkAWfjRHY3bgB+e63XrSZC94dKT/SU52M=)
                          8: 15434774090211EEA1C06509C4F9AE02.roa (hash: TJTe6tgUzGyLs9qs0NOqJwafzleo9nZn+ooC3NLooxI=)
                          9: 505CFB7465D211EFB4348E63C4F9AE02.roa (hash: cd6DQhMr0DKnGYuNxc7IhMqZVQK0SntWSeiPqohUc+Y=)
                          10: 15F254A8090211EEA1C06509C4F9AE02.roa (hash: I/a3fxw/xnNebSv9Uo7B0A6DjmrZz7zmfH8nOiEwMdE=)
                          11: FD6881C4438111ECBC63AC7BC4F9AE02.roa (hash: /vTD507iMveUOAK08YQKX6Cvj1AQ2vYplHbXKmdAyEM=)
                          12: A95180F2D7DA11ECB3D1AF67C4F9AE02.roa (hash: IuZs9cBuodHJUbBn26tMDBdFhK8V7rtB1oDVHJpZbwY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
                          rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Apr 2026 21:44:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2144 (0x860)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDB37, serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
        Validity
            Not Before: Apr 20 21:44:46 2026 GMT
            Not After : Apr 27 21:44:46 2026 GMT
        Subject: CN=69e69e4e-430a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:76:58:11:f4:68:3d:6f:24:bb:30:69:b6:ff:
                    98:2e:eb:e5:f0:53:20:72:55:85:97:92:b4:b3:18:
                    f7:e0:9a:f4:78:48:85:74:74:0d:61:96:c7:8a:7c:
                    96:0e:71:04:4c:08:d5:54:57:78:0c:2f:6e:fb:8a:
                    c8:67:5d:42:dd:b8:aa:95:2c:10:69:bc:49:09:87:
                    7d:9c:05:1f:a9:0c:ac:41:0f:81:30:9d:bc:44:dd:
                    66:d0:f4:b8:fb:f4:b8:96:4c:e3:23:6a:65:7d:55:
                    47:27:03:8c:32:1c:b9:19:46:0a:cf:30:8e:d7:cf:
                    40:d7:5b:0b:10:d0:1d:97:41:1a:ed:2f:6c:27:24:
                    0d:6f:8f:14:12:f9:7e:4a:9a:d7:94:f3:31:f1:df:
                    5d:17:da:d3:f0:f6:c7:b4:bd:91:30:49:e3:a2:9c:
                    f6:fd:ea:03:42:21:b3:9d:b4:6e:53:8b:69:ff:e4:
                    65:98:c3:82:04:97:c1:fd:ed:90:03:5d:0f:f3:eb:
                    f8:2a:1a:4e:2e:eb:d7:e0:02:00:66:c8:cb:98:a0:
                    9b:74:62:c7:e2:32:53:66:6e:ad:7f:f2:68:69:2f:
                    9c:0d:0a:6b:a0:30:3d:57:b5:1c:9c:17:b3:c4:89:
                    bc:8c:43:f0:f1:8e:e9:93:21:5a:bd:eb:52:9c:10:
                    89:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:74:C7:22:F8:F5:C3:62:8E:36:C9:B9:7F:8A:B8:EE:49:82:96:71
            X509v3 Authority Key Identifier:
                keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:05:0d:cc:dd:e6:23:5d:05:cb:13:06:74:16:ed:f1:f1:4e:
         a2:46:b5:27:30:09:41:1f:d1:37:0b:27:06:af:81:ae:1a:6a:
         b6:2f:34:bd:d8:0d:ff:90:eb:89:71:1f:e5:d7:9f:52:2f:19:
         ed:3c:e1:93:e2:9e:53:6b:de:5f:13:ec:f6:e8:9f:20:c1:d0:
         f9:c7:1a:3c:f9:6e:ed:12:d0:03:98:93:d5:43:40:fb:8a:81:
         9e:3f:7e:8c:cc:bf:85:ee:b9:b6:c6:0a:ce:c4:bc:92:fa:bd:
         b0:29:84:5f:8b:6c:a2:86:f0:87:22:fc:f2:d3:ca:a2:08:07:
         a6:9b:23:02:b4:a2:04:60:51:f1:aa:50:85:f3:79:5f:f9:1f:
         10:ef:a3:1f:6a:65:6e:a9:6a:95:ac:30:3a:93:c2:95:00:c4:
         ba:fc:cf:19:38:b7:11:5a:98:8a:9d:9c:90:61:3b:fc:a9:74:
         91:9b:d4:9f:8e:4c:ae:f4:f8:f4:1c:0f:ef:68:87:ea:12:b1:
         1c:16:b6:87:17:38:fb:c0:87:30:4d:cc:2d:0a:be:ba:66:50:
         b6:56:48:ac:15:35:26:d0:02:4c:d4:3d:a6:4f:1f:e2:8a:3a:
         67:4d:48:a1:0c:7d:8d:56:4f:ae:f4:06:22:24:2a:b1:86:ab:
         cf:51:bf:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:04:07 2026 by rpki-client