Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914559B/0EE2B7EE859F11F1A9CFA89058A30FBC/ly_Qf9E0egKdYBcER3vzpkeDpzg.mft
File:                     ly_Qf9E0egKdYBcER3vzpkeDpzg.mft (raw, json)
Hash identifier:          zwY86SHY2v9J5si43fXzRNRufskqSpcoXaYsSSvFKpU=
Subject key identifier:   52:96:F7:93:FE:F8:E6:2F:15:3D:CF:6C:9C:92:88:6F:DB:6D:A8:F8
Authority key identifier: 97:2F:D0:7F:D1:34:7A:02:9D:60:17:04:47:7B:F3:A6:47:83:A7:38
Certificate issuer:       /CN=A914559B/serialNumber=972FD07FD1347A029D601704477BF3A64783A738
Certificate serial:       06
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ly_Qf9E0egKdYBcER3vzpkeDpzg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914559B/0EE2B7EE859F11F1A9CFA89058A30FBC/ly_Qf9E0egKdYBcER3vzpkeDpzg.mft
Manifest number:          04
Signing time:             Thu 23 Jul 2026 11:21:40 +0000
Manifest this update:     Thu 23 Jul 2026 11:21:39 +0000
Manifest next update:     Thu 30 Jul 2026 11:21:39 +0000
Files and hashes:         1: ly_Qf9E0egKdYBcER3vzpkeDpzg.crl (hash: r3VTZ9NlM1i8+3dSuBZ5dNcTrjAPkk83IR1bFMf20qQ=)
                          2: 7A696120859F11F1A3889AC758A30FBC.roa (hash: KZV7RL/SmmvJe7/WlokymWjG4PkMAKi0QPN1OTzQtos=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914559B/0EE2B7EE859F11F1A9CFA89058A30FBC/ly_Qf9E0egKdYBcER3vzpkeDpzg.crl
                          rsync://rpki.apnic.net/member_repository/A914559B/0EE2B7EE859F11F1A9CFA89058A30FBC/ly_Qf9E0egKdYBcER3vzpkeDpzg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ly_Qf9E0egKdYBcER3vzpkeDpzg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:21:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914559B, serialNumber=972FD07FD1347A029D601704477BF3A64783A738
        Validity
            Not Before: Jul 23 11:21:39 2026 GMT
            Not After : Jul 30 11:21:39 2026 GMT
        Subject: CN=6a61f944-0e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:25:eb:79:c2:57:53:fb:fe:41:fc:38:e1:ac:
                    2e:4f:5e:3d:24:a9:ad:ea:90:a1:ff:59:88:f3:d4:
                    eb:42:32:47:f7:32:d2:ae:ad:43:37:86:b1:e2:55:
                    fb:08:a5:4a:1f:8f:dc:37:08:79:5b:72:ed:68:94:
                    5b:92:d2:95:d9:fe:57:7e:8e:5d:5d:fa:c9:17:0c:
                    fb:ee:ca:f3:d2:78:11:19:be:2e:87:57:cd:93:09:
                    f7:87:03:eb:d8:62:f6:e7:55:6d:33:80:48:e4:1a:
                    b9:ce:91:a8:58:c1:00:05:a8:a7:ea:74:92:9d:7f:
                    6a:e2:e1:01:73:7b:eb:f1:c3:d3:96:32:42:f6:7d:
                    15:e3:b8:e0:ae:38:4e:7f:62:7f:6d:e6:c1:f0:b6:
                    0f:7b:0a:49:32:ac:60:b9:60:d5:db:64:3b:12:5a:
                    40:87:28:5e:48:a2:21:62:37:26:e6:61:06:c4:03:
                    b3:dc:b9:3e:95:26:83:d0:c8:6b:18:60:a9:d9:35:
                    d2:60:c5:61:2e:cc:15:ab:ea:33:81:8f:5b:f6:be:
                    4d:b5:74:15:1e:7f:29:0c:b3:a0:5d:61:2a:c2:c7:
                    79:4c:38:15:88:fd:1d:27:a7:19:b9:0e:ab:16:5d:
                    30:2c:30:19:73:74:2b:39:04:1c:06:5f:97:5e:51:
                    ab:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:96:F7:93:FE:F8:E6:2F:15:3D:CF:6C:9C:92:88:6F:DB:6D:A8:F8
            X509v3 Authority Key Identifier:
                keyid:97:2F:D0:7F:D1:34:7A:02:9D:60:17:04:47:7B:F3:A6:47:83:A7:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914559B/0EE2B7EE859F11F1A9CFA89058A30FBC/ly_Qf9E0egKdYBcER3vzpkeDpzg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ly_Qf9E0egKdYBcER3vzpkeDpzg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914559B/0EE2B7EE859F11F1A9CFA89058A30FBC/ly_Qf9E0egKdYBcER3vzpkeDpzg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:fd:2f:08:45:11:3b:d3:3f:72:fe:e1:33:b0:76:72:92:83:
         a2:50:3c:c0:a7:bf:2c:cb:7a:98:a6:2b:e1:c3:0a:67:5d:85:
         c2:4b:d2:c0:ba:46:05:18:05:e8:b7:09:54:37:aa:e2:b8:14:
         8c:83:d9:73:ea:93:60:3d:60:49:39:0b:36:5d:cd:fc:fb:f5:
         f2:32:ed:77:93:a2:ee:05:2a:5c:14:b3:67:e1:e2:53:d9:f9:
         19:af:3a:98:07:d0:8a:4e:10:ec:c2:e3:dd:34:b1:95:a1:a2:
         41:b8:ad:82:1c:4e:62:e2:ad:84:6a:e6:a8:c7:5a:31:98:7d:
         30:77:5b:19:22:09:1e:93:b5:2b:54:06:e4:02:57:ad:82:ff:
         7f:69:38:b9:ce:83:bb:8b:b8:67:10:75:80:9b:7d:7f:b5:8c:
         8e:50:33:84:7e:84:dc:14:e4:66:82:a0:41:b2:a4:5b:69:76:
         6a:b8:11:96:e0:18:72:0f:98:22:96:5c:ec:08:f0:58:c3:53:
         88:c3:ce:2e:c9:85:87:04:8d:9d:f1:ac:3e:df:90:07:ff:ff:
         f3:26:9e:9e:00:74:f3:d7:ab:e3:23:e9:00:cf:5a:df:aa:d5:
         aa:b7:86:e1:eb:69:b4:a2:4b:6d:c3:12:cc:f4:90:20:45:60:
         ba:f3:68:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:20:17 2026 by rpki-client