Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft
File:                     LyR3675WsNegrUTCcX21_ggNyug.mft (raw, json)
Hash identifier:          U9fzMLjlIiSbjoOdwWezurxYL6R06BLQdlPNBz6mG1k=
Subject key identifier:   70:5E:C0:6E:6E:C0:62:FB:A5:D3:66:88:48:6B:3F:C3:A2:70:1E:4F
Authority key identifier: 2F:24:77:EB:BE:56:B0:D7:A0:AD:44:C2:71:7D:B5:FE:08:0D:CA:E8
Certificate issuer:       /CN=A91479A7/serialNumber=2F2477EBBE56B0D7A0AD44C2717DB5FE080DCAE8
Certificate serial:       0282
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft
Manifest number:          0267
Signing time:             Wed 23 Sep 2026 02:18:47 +0000
Manifest this update:     Wed 23 Sep 2026 02:18:47 +0000
Manifest next update:     Wed 30 Sep 2026 02:18:47 +0000
Files and hashes:         1: LyR3675WsNegrUTCcX21_ggNyug.crl (hash: lKpYPXHunQBM91B9FOMTKHpVjqFgvY2JVEwB57zN34Y=)
                          2: 7EF0B0AC4D9B11EEB019A31FC4F9AE02.roa (hash: 83mEH4MdqJa2Mi54QCe87Hcel+LeamfIiaKQ+N8+vvA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.crl
                          rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 02:18:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 642 (0x282)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91479A7, serialNumber=2F2477EBBE56B0D7A0AD44C2717DB5FE080DCAE8
        Validity
            Not Before: Sep 23 02:18:47 2026 GMT
            Not After : Sep 30 02:18:47 2026 GMT
        Subject: CN=6ab33707-eeae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f7:66:1b:91:f0:10:d0:5a:f7:e9:53:7c:fa:
                    e7:c3:ae:27:96:57:55:57:81:43:89:48:68:b7:01:
                    4d:eb:f5:5e:7f:b7:ff:13:64:c0:c1:fe:13:88:c6:
                    1e:2f:05:f0:47:32:bc:aa:11:b6:be:98:18:50:8e:
                    39:a4:34:97:37:5b:74:23:a6:5a:14:44:94:b8:29:
                    07:4c:f6:14:19:0e:35:d7:65:13:03:c2:6a:81:f5:
                    ea:80:22:cd:02:26:29:3c:00:5d:8a:aa:f4:0a:b1:
                    69:7d:b1:2d:ac:a3:38:dd:4d:7d:84:42:9b:1a:5f:
                    ca:f9:c8:98:f8:a7:80:1c:0b:ed:94:d8:7f:1b:36:
                    df:6f:e2:4c:2f:01:e8:75:02:33:0c:70:22:c8:bf:
                    5d:16:12:fd:de:bf:31:36:ed:5d:e8:be:c9:e5:2e:
                    76:dd:ad:1a:b9:0c:70:72:2d:a2:f3:4b:08:97:e9:
                    ec:46:ad:74:a4:85:b8:58:02:b0:89:f8:f3:43:31:
                    b9:7d:ad:d0:a9:2b:48:0f:5f:3d:15:50:0c:b0:c8:
                    06:dc:73:35:85:69:8f:40:f5:a9:22:c1:27:37:b3:
                    2a:ed:2c:19:b0:97:ba:be:86:00:34:c5:3a:2e:f0:
                    0c:4d:07:74:ad:7f:51:96:2c:6d:99:3b:0a:11:ef:
                    f9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:5E:C0:6E:6E:C0:62:FB:A5:D3:66:88:48:6B:3F:C3:A2:70:1E:4F
            X509v3 Authority Key Identifier:
                keyid:2F:24:77:EB:BE:56:B0:D7:A0:AD:44:C2:71:7D:B5:FE:08:0D:CA:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:7b:a7:63:15:6e:a3:3f:64:72:81:40:53:d4:11:73:6a:3a:
         f6:b4:79:92:e0:d9:72:6f:7d:42:09:02:3f:ac:f4:1c:8e:44:
         f0:9a:a9:7b:21:24:c7:ca:01:a7:e0:dd:17:04:d7:2b:5e:4c:
         9f:df:49:0f:f9:ef:d2:7c:76:1a:26:0a:7b:17:a2:bc:18:92:
         9c:d9:e7:9c:90:11:02:b2:e9:15:79:b8:a1:b7:77:f3:6d:8d:
         c8:85:f4:68:65:6d:fb:c4:33:d9:c9:0b:fd:93:3f:c7:52:59:
         c1:2b:2e:ae:ce:fa:ef:96:c5:a1:8e:31:dd:23:93:54:7c:13:
         eb:6d:30:50:90:c5:25:6f:76:aa:83:be:a0:91:8e:cf:53:cd:
         e9:b4:0d:0f:be:d6:b1:4d:c0:04:98:22:14:5d:e1:ad:47:56:
         4f:a1:93:ad:e5:ed:a8:be:2b:02:f6:cd:ea:0e:33:ac:25:9e:
         f1:15:55:63:b9:33:fb:6b:89:d8:68:74:d8:21:eb:b8:63:3b:
         e8:6b:b3:23:11:dc:b7:94:de:f2:63:11:10:27:31:42:92:d8:
         72:ad:a3:0f:25:b0:e8:68:27:fd:ba:12:ca:73:f8:7c:b0:ec:
         3a:26:51:43:41:3e:83:d4:48:f4:eb:55:f1:6e:e9:79:24:d9:
         12:bc:5a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:02:52 2026 by rpki-client