Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.mft
File:                     LYC7UpVYC-No2mj7jQPqtI16xss.mft (raw, json)
Hash identifier:          5B+JPt4KIZl9ZWlagl5+Vk6b2J/ZrTa12+1nSDuE8gw=
Subject key identifier:   7C:AE:A5:D9:E3:BA:EA:99:28:6F:99:77:36:0F:FA:E5:F6:3B:E8:40
Authority key identifier: 2D:80:BB:52:95:58:0B:E3:68:DA:68:FB:8D:03:EA:B4:8D:7A:C6:CB
Certificate issuer:       /CN=A91B7948/serialNumber=2D80BB5295580BE368DA68FB8D03EAB48D7AC6CB
Certificate serial:       01AA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LYC7UpVYC-No2mj7jQPqtI16xss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.mft
Manifest number:          01A1
Signing time:             Sat 19 Sep 2026 04:16:56 +0000
Manifest this update:     Sat 19 Sep 2026 04:16:55 +0000
Manifest next update:     Sat 26 Sep 2026 04:16:55 +0000
Files and hashes:         1: LYC7UpVYC-No2mj7jQPqtI16xss.crl (hash: yc4EMvlWQpNpS0PBoQvKf1z/W5ZY2g7heVsqYwp0y8w=)
                          2: 70ED9D2837D111EF99A8011CC4F9AE02.roa (hash: FAxnQBc3ut1xOAAP0lVz2GuEsUZQVko/q3fQ7UeXms8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.crl
                          rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LYC7UpVYC-No2mj7jQPqtI16xss.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 426 (0x1aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7948, serialNumber=2D80BB5295580BE368DA68FB8D03EAB48D7AC6CB
        Validity
            Not Before: Sep 19 04:16:55 2026 GMT
            Not After : Sep 26 04:16:55 2026 GMT
        Subject: CN=6aae0cb8-3c23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a3:31:e6:9b:da:55:a4:89:04:a1:73:76:c6:
                    23:e3:a2:24:d0:81:20:f1:d5:df:f7:c3:7b:c2:3e:
                    71:7e:14:19:8e:10:6d:7b:3b:ca:5b:71:6b:56:e7:
                    64:9b:27:af:4c:91:1c:9e:20:42:1e:3b:10:96:cf:
                    47:79:c0:b4:b3:b0:d9:d8:66:bd:32:b2:bd:d5:22:
                    80:a7:2e:34:5e:db:96:9c:a2:18:30:77:53:61:08:
                    2c:a0:46:e9:c1:21:17:19:d0:3c:04:fc:d6:d0:85:
                    de:13:4e:3f:25:c2:95:0a:0a:68:18:a8:7b:dc:19:
                    1f:02:a9:81:21:9a:71:23:fe:8e:1d:08:e0:3e:80:
                    2d:f4:8e:3f:7e:b0:7f:39:83:55:a7:0c:ea:0d:e0:
                    dc:69:b3:0f:5a:25:c3:1c:a7:22:dc:0e:4e:fd:50:
                    4e:3e:b5:02:6b:30:7d:76:3c:b3:bb:c9:3b:f2:77:
                    34:30:5f:f4:ac:62:ad:4b:fa:51:be:c0:9f:5b:2f:
                    e3:64:cc:44:40:b1:6a:af:8e:1e:bc:05:6e:f4:fc:
                    a0:4e:16:d6:28:02:23:f9:3c:17:a6:5a:d8:8d:25:
                    35:a2:0f:63:4f:6c:78:e7:00:50:de:08:65:7c:49:
                    5f:4e:b9:cd:8f:ca:8b:a9:d4:55:c8:27:2e:75:7e:
                    7f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:AE:A5:D9:E3:BA:EA:99:28:6F:99:77:36:0F:FA:E5:F6:3B:E8:40
            X509v3 Authority Key Identifier:
                keyid:2D:80:BB:52:95:58:0B:E3:68:DA:68:FB:8D:03:EA:B4:8D:7A:C6:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LYC7UpVYC-No2mj7jQPqtI16xss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:c2:67:0c:2a:af:e5:cb:bf:b4:72:b0:62:14:28:82:fa:7e:
         c7:4c:d3:40:e1:e9:d9:2b:7c:9d:61:5b:58:ef:0f:9f:e3:26:
         08:d1:94:5e:63:4a:c2:99:55:b0:fa:c9:f3:8f:35:9c:64:d5:
         a5:1e:a4:83:a0:31:11:0d:ce:fd:fe:cd:a1:82:1c:17:ab:e1:
         17:a9:8a:70:36:fd:f1:21:dd:2a:62:d1:1a:ff:b1:38:eb:cf:
         ee:9b:b0:a6:53:3a:ee:9d:80:87:59:96:ea:20:9b:93:e9:5a:
         6a:24:29:31:0e:b4:29:49:fb:13:ef:68:e1:45:b4:7f:fa:c5:
         ec:bb:4d:ce:49:18:03:49:cc:ab:7f:e3:19:70:5e:91:b9:2c:
         a7:62:2e:7c:20:79:46:51:73:43:af:e9:78:d7:ca:32:90:0a:
         cc:2d:e1:ba:3d:be:ff:4a:a7:4c:38:12:2b:79:93:2d:48:77:
         6e:23:df:f0:ee:53:84:3b:d0:b9:32:7f:50:c7:1c:ca:9b:50:
         cd:b2:35:19:78:24:2f:32:9f:6b:d4:6e:58:6d:40:0d:34:ff:
         42:8e:32:2c:66:08:51:d8:ce:99:69:34:e6:fc:99:64:a0:5d:
         f6:fe:a3:3c:0d:c5:44:b8:1c:7e:44:8c:4d:f5:d6:65:dd:b6:
         2d:b1:05:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:06:08 2026 by rpki-client