Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft
File:                     LyR3675WsNegrUTCcX21_ggNyug.mft (raw, json)
Hash identifier:          nOuYKnow2ON19I8RMNNVF5MUjBudwbRPEXP4B/zkrpQ=
Subject key identifier:   12:9C:97:38:1E:BE:19:4E:EE:89:28:3D:02:39:2C:A2:8D:29:AD:4C
Authority key identifier: 2F:24:77:EB:BE:56:B0:D7:A0:AD:44:C2:71:7D:B5:FE:08:0D:CA:E8
Certificate issuer:       /CN=A91479A7/serialNumber=2F2477EBBE56B0D7A0AD44C2717DB5FE080DCAE8
Certificate serial:       023B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft
Manifest number:          0221
Signing time:             Mon 11 May 2026 03:09:01 +0000
Manifest this update:     Mon 11 May 2026 03:09:00 +0000
Manifest next update:     Mon 18 May 2026 03:09:00 +0000
Files and hashes:         1: LyR3675WsNegrUTCcX21_ggNyug.crl (hash: 52rQdTfg4jyiyHfO+ljnX+7thTDC3wXiVh7snx7JguE=)
                          2: 7EF0B0AC4D9B11EEB019A31FC4F9AE02.roa (hash: 85ndJ25GkWksXdD2wkzQ2/smQ3lSHNtoozH+Avdk67k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.crl
                          rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 03:08:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 571 (0x23b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91479A7, serialNumber=2F2477EBBE56B0D7A0AD44C2717DB5FE080DCAE8
        Validity
            Not Before: May 11 03:09:00 2026 GMT
            Not After : May 18 03:09:00 2026 GMT
        Subject: CN=6a01484d-1322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ba:8f:eb:39:6a:83:17:9e:c2:27:55:94:74:
                    64:72:ad:d2:53:0c:4c:32:09:0b:78:56:0b:aa:80:
                    e0:c8:bf:fc:04:af:c8:d3:4b:a9:9f:76:5a:b8:85:
                    92:cf:6f:5d:ef:f9:43:fe:d8:74:11:3a:47:2a:13:
                    a0:28:f8:2a:6c:e5:17:94:09:27:b4:2f:af:9e:26:
                    9d:27:8e:a0:de:a4:d2:42:d8:be:b2:0a:cd:82:07:
                    72:24:14:e4:af:8f:80:00:4e:a2:28:57:f1:a6:8f:
                    4a:20:2e:6a:af:41:47:c9:3d:2a:a6:64:04:3b:6a:
                    99:b5:d1:fc:ad:e1:2f:d5:7f:1a:65:35:18:56:91:
                    e8:a4:87:94:bf:03:56:56:ae:14:13:4e:93:9c:eb:
                    ca:d3:32:5d:a7:d3:2c:b2:1e:be:d6:0a:04:a5:58:
                    a4:c3:1b:71:4d:59:7a:7f:17:9f:62:12:1f:bd:f0:
                    dd:62:a7:1e:fe:45:81:ac:d6:d3:8d:23:b8:fd:0d:
                    55:74:ef:86:fa:d6:b7:6b:fd:3b:44:75:06:23:f0:
                    66:95:70:62:3f:14:48:40:b6:e1:e7:b3:da:89:18:
                    31:aa:b2:11:32:f4:9a:77:f4:92:8d:52:1e:6b:0c:
                    88:0e:5f:e1:d2:95:25:1b:7d:e3:a4:92:3e:5e:9b:
                    af:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:9C:97:38:1E:BE:19:4E:EE:89:28:3D:02:39:2C:A2:8D:29:AD:4C
            X509v3 Authority Key Identifier:
                keyid:2F:24:77:EB:BE:56:B0:D7:A0:AD:44:C2:71:7D:B5:FE:08:0D:CA:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:3e:90:4e:3f:75:9a:8f:28:67:1e:d0:29:36:e4:2f:21:90:
         cb:b5:fd:be:2a:31:9b:94:3e:38:eb:f9:47:b1:71:09:ed:3d:
         a1:19:d1:b7:1e:66:86:4a:90:33:c5:1c:85:ce:8b:df:02:21:
         0f:65:7c:e0:5e:26:f3:01:14:10:c4:54:39:57:a1:ca:b3:e3:
         b9:0c:74:10:d1:b8:65:00:4c:34:d0:d6:26:91:bf:33:fe:ee:
         91:4d:2d:3b:b5:fe:af:69:94:6b:46:2e:e8:04:bf:19:9b:a2:
         ab:3c:14:b8:7a:41:ad:55:9d:87:b8:82:eb:f7:71:96:06:7a:
         d1:8d:5d:a1:f8:24:cf:04:81:ac:b3:7e:ab:78:47:bf:c1:16:
         a1:56:a2:ed:56:67:f3:6b:ed:0c:14:ad:6c:3a:80:21:27:a3:
         e5:80:5c:f8:03:b1:01:6a:75:47:87:54:70:48:8c:46:68:53:
         ef:8d:e2:70:cb:8f:04:29:df:ee:30:72:46:e6:71:63:fa:ae:
         b6:e9:44:b7:fe:ce:8c:4e:10:2c:8d:81:53:89:05:24:b9:60:
         85:e0:9c:c0:85:d2:4a:39:40:2e:23:f7:f5:bf:45:e8:45:16:
         c3:e6:a9:8a:e5:12:35:a2:43:de:15:8f:b6:fd:d3:2d:0a:27:
         7d:39:b8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:22:41 2026 by rpki-client