Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.mft
File:                     LYC7UpVYC-No2mj7jQPqtI16xss.mft (raw, json)
Hash identifier:          A+KRJIS/vKWNybTd6bt5z3zb+s78CbRmDdRNN7i5U48=
Subject key identifier:   18:62:F6:A2:77:DC:18:BB:47:07:7B:F4:05:AD:EF:A0:69:DD:C8:B7
Authority key identifier: 2D:80:BB:52:95:58:0B:E3:68:DA:68:FB:8D:03:EA:B4:8D:7A:C6:CB
Certificate issuer:       /CN=A91B7948/serialNumber=2D80BB5295580BE368DA68FB8D03EAB48D7AC6CB
Certificate serial:       01B3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LYC7UpVYC-No2mj7jQPqtI16xss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.mft
Manifest number:          01AA
Signing time:             Wed 07 Oct 2026 04:34:19 +0000
Manifest this update:     Wed 07 Oct 2026 04:34:19 +0000
Manifest next update:     Wed 14 Oct 2026 04:34:19 +0000
Files and hashes:         1: LYC7UpVYC-No2mj7jQPqtI16xss.crl (hash: tbx5iPJCqzsEm6FEs+M9iVmqXtzDZEwXjuMgeiox31A=)
                          2: 70ED9D2837D111EF99A8011CC4F9AE02.roa (hash: FAxnQBc3ut1xOAAP0lVz2GuEsUZQVko/q3fQ7UeXms8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.crl
                          rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LYC7UpVYC-No2mj7jQPqtI16xss.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 04:34:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 435 (0x1b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7948, serialNumber=2D80BB5295580BE368DA68FB8D03EAB48D7AC6CB
        Validity
            Not Before: Oct  7 04:34:19 2026 GMT
            Not After : Oct 14 04:34:19 2026 GMT
        Subject: CN=6ac5cbcb-a03e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d2:d3:79:fe:61:9a:47:94:bd:5f:bb:67:41:
                    52:61:3a:5a:05:70:4e:94:05:00:32:e6:54:d3:81:
                    a1:f3:4e:48:08:f1:0f:6e:1a:09:43:3b:7c:2d:7c:
                    07:41:87:99:32:48:6d:31:3c:c2:72:33:fe:d4:4d:
                    f1:4d:a4:cc:b2:88:de:08:e7:cc:4a:de:ac:a4:51:
                    ee:d6:16:3d:bc:cd:04:89:3c:4d:03:33:97:f1:19:
                    1d:1f:89:4e:5c:6a:89:e5:a1:0c:ad:7a:e8:9b:e4:
                    f0:fd:43:44:0f:7a:96:3d:46:b1:89:49:14:e8:4f:
                    f0:90:d1:65:7b:34:1d:d4:63:33:2a:67:ed:a2:04:
                    bf:35:dc:dd:a4:2c:3c:a1:7f:cd:60:e0:ff:c5:8f:
                    52:63:7a:2c:7b:aa:3a:cc:5b:f4:c0:da:b7:3c:b4:
                    28:8e:f8:f5:ff:92:1a:7e:55:b8:2f:92:6e:00:43:
                    c5:b3:48:ee:db:d4:89:1a:ac:33:6c:12:f3:5a:d5:
                    3b:56:15:fb:54:ef:5b:cb:6c:c2:44:90:87:f8:94:
                    aa:e1:30:ce:2c:1d:2b:57:18:32:21:95:5c:e7:4c:
                    20:fa:c8:45:ca:98:04:55:b0:22:6b:5d:22:72:c6:
                    de:4a:d8:e4:54:c1:47:8a:f6:f7:e9:24:5c:92:e8:
                    9e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:62:F6:A2:77:DC:18:BB:47:07:7B:F4:05:AD:EF:A0:69:DD:C8:B7
            X509v3 Authority Key Identifier:
                keyid:2D:80:BB:52:95:58:0B:E3:68:DA:68:FB:8D:03:EA:B4:8D:7A:C6:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LYC7UpVYC-No2mj7jQPqtI16xss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:0e:98:3d:71:3a:55:81:4e:57:ad:8d:9d:4a:e5:f1:56:27:
         f8:d0:1c:dc:72:51:d6:dd:7b:79:c0:c2:0f:d0:9f:da:7f:37:
         b3:b4:41:f7:e4:24:ec:02:97:a5:fc:5e:bc:d6:31:45:2b:84:
         28:a8:2e:45:bb:1b:4d:b5:8a:d4:2b:81:c1:2b:88:6b:c1:e4:
         8e:39:c0:c9:47:1e:ce:8f:4c:c3:f2:8d:c9:67:4f:ec:f1:33:
         6d:7e:37:2a:a7:d4:47:e6:69:d3:28:cc:36:4c:b0:99:ad:76:
         a8:5b:17:1f:a5:99:79:e9:25:6f:a0:b4:fd:fe:54:1e:82:23:
         fc:d4:e4:f7:9b:da:50:e5:2a:d2:38:d4:d9:d6:53:17:79:2a:
         f1:ca:ec:8b:05:6e:9e:d5:33:7f:f5:cc:bf:16:dc:f3:65:05:
         68:b5:bb:c7:68:53:80:10:e9:98:b2:bc:d5:f0:7f:9b:f4:3b:
         4e:3c:5c:7f:e6:04:dd:d2:db:c8:3b:52:b6:95:1a:81:87:38:
         10:ff:6e:2a:b7:be:1a:c6:d4:b9:57:f8:dd:b1:dd:3b:78:5f:
         1e:be:0d:e0:e1:b3:0a:33:fb:a6:65:08:d6:73:c9:cf:d9:5b:
         b9:c3:54:c3:22:24:7e:62:87:87:7b:25:22:a7:30:97:0a:f6:
         a1:05:cd:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 19:21:31 2026 by rpki-client