Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
File:                     lf6-k6M6M5S9H2Dcu925_eByt_M.mft (raw, json)
Hash identifier:          mUMm9DIiBpBiBChJOFw7IfTEVuvUKafbimNxSR5VzFU=
Subject key identifier:   75:BA:A4:00:A2:30:B1:38:D3:A7:C6:62:38:0D:88:C1:21:2F:E5:D5
Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
Certificate issuer:       /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Certificate serial:       0919
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
Manifest number:          0853
Signing time:             Tue 20 Oct 2026 21:41:23 +0000
Manifest this update:     Tue 20 Oct 2026 21:41:22 +0000
Manifest next update:     Tue 27 Oct 2026 21:41:22 +0000
Files and hashes:         1: lf6-k6M6M5S9H2Dcu925_eByt_M.crl (hash: S5DUVZ/pmy9Vz1weg8o+FujduHoN96ilABLqhbduqTQ=)
                          2: 584506BE6AFA11F0B55F3536C4F9AE02.roa (hash: A/ZQCN98JGjqrAJqbFcdfQNx0O/EyAIhfhuR/Vi+Eek=)
                          3: 15434774090211EEA1C06509C4F9AE02.roa (hash: G1gWA3NuGTjrmLqdnFErd8lUrHVOe6ufs6NL/Fz9CCQ=)
                          4: 4613ED02B1A811F1864819613311F970.roa (hash: Qi67hhd2KLWALT0a4/YoY8sTeNWRN6XpgNkmzCdA/gI=)
                          5: 168FD534090211EEA1C06509C4F9AE02.roa (hash: LsnwlK7DefLtSS/BzYkBKwSgqLJRLWbsRQykrYnBnjc=)
                          6: 15F254A8090211EEA1C06509C4F9AE02.roa (hash: 2dRH1heWGZxLVoIO8zkSyXq9W7ErIe/9NZrS1CFvfAY=)
                          7: BB9AC51E2F0D11F1B2108CA79A833773.roa (hash: DP8kDTUMN4+HAKR5F1Sgupmc2C+oCdAych6ub1rDRic=)
                          8: A95180F2D7DA11ECB3D1AF67C4F9AE02.roa (hash: x3Bxd199NyMBzZt+S2sLMvE4AnW2cXpkE7Eo7KPejFc=)
                          9: FD6881C4438111ECBC63AC7BC4F9AE02.roa (hash: TWsM9G6XxnlHCDYwIZCl9HTZV+PcXLylk9RL4UYA+lA=)
                          10: 10B39A4C5A0D11F1B23D20139E833773.roa (hash: n+j8X5mKHq33mOy0BUrrjDKmCiUitRunltE9wYaMAlA=)
                          11: 505CFB7465D211EFB4348E63C4F9AE02.roa (hash: AAXHRkLrHoJyCDkbsgHI2KwqLCN7VUz7VH0M3ar0Syw=)
                          12: EFE5FA02874911F19D47B5943C11F970.roa (hash: npNKJh7GOd+6qQMS4kaV5IRo8CP6tiJAJQN228+C93E=)
                          13: 8353BEA4F88211EEA770C016C4F9AE02.roa (hash: 6rVQYGE9FtTxthEXFFTnZpLswiGRrW3Dat44Dq0+0cQ=)
                          14: A45471ACC4ED11EE8A67C739C4F9AE02.roa (hash: MwL9VhO+S81wefft4Xd8rE2oCPjYVHoN/919rrhVfRc=)
                          15: 0BB5ECE8697611F18B2B119D7D47A888.roa (hash: iQetfnz6InHziFl5Z9+u5XxODkHj81C1yZ+104MIdBI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
                          rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Oct 2026 21:41:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2329 (0x919)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDB37, serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
        Validity
            Not Before: Oct 20 21:41:22 2026 GMT
            Not After : Oct 27 21:41:22 2026 GMT
        Subject: CN=6ad7e003-07e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a7:50:52:bc:75:cb:11:e7:bd:38:ec:5e:8c:
                    d1:e0:35:0d:30:91:7f:cc:26:92:7d:08:a4:49:6f:
                    b9:5e:61:ce:97:55:ba:e9:8b:b7:76:56:cf:88:3f:
                    b1:16:f1:7a:5a:f0:6a:01:43:5e:be:39:28:b6:09:
                    18:55:c3:a2:a0:fa:a2:9a:a0:7a:37:d4:b5:f1:eb:
                    12:65:f3:58:0d:d3:e6:60:cf:b3:ad:9c:98:b2:ef:
                    e8:7b:b6:ea:04:89:05:06:f2:6e:09:d7:ad:16:92:
                    9f:88:af:c9:bc:d2:b1:35:cf:1c:b9:1a:17:bf:32:
                    69:23:b5:18:27:18:66:ae:06:b0:56:fe:6a:41:84:
                    fc:be:6e:96:48:b1:45:ec:11:5e:81:08:f0:03:fe:
                    18:ef:49:12:c4:f7:62:88:d2:83:fa:65:df:e0:76:
                    07:aa:7f:48:e5:1c:23:54:53:d7:01:d1:c0:6c:8e:
                    c2:a6:ba:19:78:e3:40:b6:f7:84:4b:2f:2a:88:8f:
                    e6:17:b3:b8:50:0b:80:be:ed:14:db:40:16:08:c7:
                    44:4d:2f:88:36:0a:46:84:11:52:5b:57:0e:d7:53:
                    7b:e6:4c:4e:a3:cd:d1:40:3d:1a:9e:0f:41:f1:c2:
                    38:10:c5:58:df:a6:5f:a9:e3:f7:57:4c:59:f8:c3:
                    57:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BA:A4:00:A2:30:B1:38:D3:A7:C6:62:38:0D:88:C1:21:2F:E5:D5
            X509v3 Authority Key Identifier:
                keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:c3:1f:c6:65:63:27:b8:e9:47:07:74:8a:60:28:3c:b4:91:
         8f:79:34:4c:c1:a4:0d:f0:91:15:a4:ba:c0:57:ad:7c:4f:d5:
         c0:c1:b1:e0:b6:37:38:67:37:dd:88:b1:0c:33:33:e2:e5:c0:
         d7:22:99:9d:f7:93:84:a3:44:35:df:59:78:3f:23:4e:85:b4:
         58:b9:ec:d9:08:37:2b:76:b9:96:23:7d:24:4e:b3:ad:9d:b6:
         4d:30:c2:fc:9c:ed:4a:3d:c0:1d:11:3b:59:b1:e2:52:dd:31:
         87:fc:cf:a7:82:d6:b8:47:2c:9c:57:31:e9:85:47:e7:a6:d1:
         32:f3:f2:81:15:d6:85:e4:70:f0:40:6d:fc:2d:ce:3d:8b:a4:
         bd:bb:72:6c:60:91:d3:8f:7c:57:e8:e2:49:76:f2:19:d6:07:
         be:59:a6:0e:55:e9:df:40:a5:99:1f:a0:e8:2c:57:24:97:62:
         ed:74:07:84:9a:22:9e:9b:f6:80:b8:b0:d2:9c:32:3a:63:e3:
         1f:c5:c9:a9:a2:a2:11:2e:e4:73:6f:6a:e4:aa:1c:1c:cb:c8:
         b9:b5:44:53:d7:a1:2c:51:97:6b:29:e6:70:5b:b6:70:cf:77:
         5f:6f:3a:e4:20:39:63:fd:c9:6e:51:a7:de:43:e6:38:12:58:
         0b:64:ad:e8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RURCMzcxMTAvBgNVBAUTKDk1RkVCRTkzQTMzQTMzOTRCRDFGNjBEQ0JCRERCOUZE
RTA3MkI3RjMwHhcNMjYxMDIwMjE0MTIyWhcNMjYxMDI3MjE0MTIyWjAYMRYwFAYD
VQQDEw02YWQ3ZTAwMy0wN2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtKdQUrx1yxHnvTjsXozR4DUNMJF/zCaSfQikSW+5XmHOl1W66Yu3dlbPiD+x
FvF6WvBqAUNevjkotgkYVcOioPqimqB6N9S18esSZfNYDdPmYM+zrZyYsu/oe7bq
BIkFBvJuCdetFpKfiK/JvNKxNc8cuRoXvzJpI7UYJxhmrgawVv5qQYT8vm6WSLFF
7BFegQjwA/4Y70kSxPdiiNKD+mXf4HYHqn9I5RwjVFPXAdHAbI7CproZeONAtveE
Sy8qiI/mF7O4UAuAvu0U20AWCMdETS+INgpGhBFSW1cO11N75kxOo83RQD0ang9B
8cI4EMVY36ZfqeP3V0xZ+MNXWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHW6pACi
MLE406fGYjgNiMEhL+XVMB8GA1UdIwQYMBaAFJX+vpOjOjOUvR9g3Lvduf3gcrfz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREIzNy80REU2MzVFMDc4
QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi9sZjYtazZNNk01UzlIMkRjdTkyNV9lQnl0
X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2xmNi1rNk02TTVTOUgyRGN1OTI1X2VCeXRfTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
REIzNy80REU2MzVFMDc4QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi9sZjYtazZNNk01
UzlIMkRjdTkyNV9lQnl0X00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKcMfxmVjJ7jpRwd0imAoPLSRj3k0TMGkDfCRFaS6wFetfE/VwMGx4LY3OGc3
3YixDDMz4uXA1yKZnfeThKNENd9ZeD8jToW0WLns2Qg3K3a5liN9JE6zrZ22TTDC
/JztSj3AHRE7WbHiUt0xh/zPp4LWuEcsnFcx6YVH56bRMvPygRXWheRw8EBt/C3O
PYukvbtybGCR0498V+jiSXbyGdYHvlmmDlXp30ClmR+g6CxXJJdi7XQHhJoinpv2
gLiw0pwyOmPjH8XJqaKiES7kc29q5KocHMvIubVEU9ehLFGXaynmcFu2cM93X286
5CA5Y/3JblGn3kPmOBJYC2St6A==
-----END CERTIFICATE-----
Generated at Thu Oct 22 08:20:20 2026 by rpki-client