Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
File:                     lf6-k6M6M5S9H2Dcu925_eByt_M.mft (raw, json)
Hash identifier:          BZYRpEssx5fWnyc65SLgkrnLe8Mr3vkvQzpDfuXAoTI=
Subject key identifier:   5D:20:7D:79:48:BC:47:11:6B:CF:52:40:F1:C0:B1:CF:CF:07:85:FC
Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
Certificate issuer:       /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Certificate serial:       0845
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
Manifest number:          07BA
Signing time:             Tue 24 Mar 2026 21:35:32 +0000
Manifest this update:     Tue 24 Mar 2026 21:35:32 +0000
Manifest next update:     Tue 31 Mar 2026 21:35:32 +0000
Files and hashes:         1: lf6-k6M6M5S9H2Dcu925_eByt_M.crl (hash: Azo3Q3e7bSdNYT9vbfx4iMwefZCCvgcJZOi26Rlo+Js=)
                          2: 505CFB7465D211EFB4348E63C4F9AE02.roa (hash: cd6DQhMr0DKnGYuNxc7IhMqZVQK0SntWSeiPqohUc+Y=)
                          3: 18D6D6AAB84F11EFA5BB3E78C4F9AE02.roa (hash: RVgiyepKl902Bn3M72KnxtU92z/jQYODXWMLMbV+2zg=)
                          4: 8353BEA4F88211EEA770C016C4F9AE02.roa (hash: DeOg1+xoYDUkAWfjRHY3bgB+e63XrSZC94dKT/SU52M=)
                          5: B32F80267BD111EBBB223C84C4F9AE02.roa (hash: whKOU9wMBVhAXIGEfDVrauGFxBhYQd1yWxEXLCBruMM=)
                          6: 15F254A8090211EEA1C06509C4F9AE02.roa (hash: I/a3fxw/xnNebSv9Uo7B0A6DjmrZz7zmfH8nOiEwMdE=)
                          7: A45471ACC4ED11EE8A67C739C4F9AE02.roa (hash: erd/byvZQbud2olu7o9OIZ0H+fhYsFHIOFSRXbecrlg=)
                          8: 584506BE6AFA11F0B55F3536C4F9AE02.roa (hash: x9U/FNhD8zZb+3b9larzovs/oo5vOjChKwd8wNBXpVU=)
                          9: A95180F2D7DA11ECB3D1AF67C4F9AE02.roa (hash: IuZs9cBuodHJUbBn26tMDBdFhK8V7rtB1oDVHJpZbwY=)
                          10: FD6881C4438111ECBC63AC7BC4F9AE02.roa (hash: hx35jyyp1hLI/8+v9mtESWTe3NrKWza9qfhoh3XL0rk=)
                          11: 15434774090211EEA1C06509C4F9AE02.roa (hash: TJTe6tgUzGyLs9qs0NOqJwafzleo9nZn+ooC3NLooxI=)
                          12: 168FD534090211EEA1C06509C4F9AE02.roa (hash: nMWB/DllOnZzjZfTlqtdAYQIcLE3kT837Y0NymlixsY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
                          rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2117 (0x845)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDB37, serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
        Validity
            Not Before: Mar 24 21:35:32 2026 GMT
            Not After : Mar 31 21:35:32 2026 GMT
        Subject: CN=69c303a4-4f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e9:3c:1b:82:54:b9:c8:ce:4a:2a:eb:7a:25:
                    32:b8:e6:2d:df:58:76:0e:c1:45:3b:c8:e7:e7:c3:
                    0e:a1:95:8a:63:c0:6c:ad:18:a3:bb:d4:87:ab:a4:
                    6d:f7:e0:af:d4:f4:c9:28:d3:68:a8:f4:c9:ad:aa:
                    55:a1:6a:c2:45:42:23:4d:e3:a9:51:67:27:4c:04:
                    1b:f2:13:35:86:f8:5d:cb:aa:0a:81:93:98:7e:b1:
                    61:a4:f4:4d:0b:cd:33:34:5a:b6:dc:4c:be:d8:fb:
                    1a:5a:85:d4:fa:8f:99:be:34:ff:c5:05:b9:70:67:
                    ac:a2:19:56:70:22:cc:3e:1f:f4:5f:47:64:84:88:
                    4f:fc:37:5c:5a:c9:ea:3e:0a:56:d0:fe:e7:47:db:
                    9a:a2:d1:f8:11:0f:34:77:f9:e6:df:02:27:0b:85:
                    fa:81:b9:58:bf:b7:ae:d3:ff:55:cc:b3:a4:1f:24:
                    18:ef:b4:6b:fd:a7:5f:0e:ae:c9:c2:fb:45:ba:ad:
                    e9:e0:8b:71:f4:7b:1e:8e:5b:a4:95:d0:76:20:fb:
                    61:d6:5a:33:91:ec:cb:4f:51:17:3b:cb:6d:ba:4c:
                    3f:cf:74:e1:f9:5b:32:f1:da:77:be:e2:04:ea:df:
                    0c:15:b7:28:3c:60:35:5d:dd:e6:6c:e2:b0:85:57:
                    a7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:20:7D:79:48:BC:47:11:6B:CF:52:40:F1:C0:B1:CF:CF:07:85:FC
            X509v3 Authority Key Identifier:
                keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:20:1e:3b:bb:f7:3e:1e:16:94:b1:45:50:df:80:0a:f6:b5:
         d7:2b:b3:1b:60:11:8d:6e:58:38:77:60:eb:9d:c5:b9:ac:42:
         d9:a1:e9:5b:5e:e4:0c:2d:6c:24:e7:d5:25:a0:93:00:d1:3d:
         2b:15:17:83:42:b0:e5:7c:28:45:a9:a9:a6:87:c1:18:41:8e:
         e8:2e:a2:5b:86:41:74:bc:0d:6a:12:03:c8:ba:c1:13:3b:41:
         57:14:df:df:64:77:07:88:16:b1:21:62:3f:92:92:69:81:27:
         16:44:fc:36:b1:d1:f4:76:ef:ea:f2:6b:4f:aa:91:ef:a6:04:
         df:3c:9a:38:76:7a:02:4a:29:dd:2a:91:63:86:79:12:6d:0f:
         ef:96:3a:a1:bf:d9:c9:d0:51:80:e7:d6:51:c6:1c:17:5a:a6:
         4d:63:17:75:e7:b8:e6:04:eb:7c:28:1f:1c:2c:b3:ab:2c:39:
         f3:4a:87:4c:ad:f1:c2:ff:28:7e:38:1d:f1:de:6d:66:e2:bf:
         29:48:3c:c3:da:f3:ad:8b:f3:8b:22:c5:30:f8:c1:7f:0e:b0:
         1c:d6:e3:54:b2:d1:ae:08:da:df:28:d9:0c:f2:db:c2:65:25:
         84:c5:d1:3c:2d:ff:4f:9d:bf:b1:ea:00:0f:2c:42:d7:c6:09:
         45:a5:d2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:32:55 2026 by rpki-client