Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft
File:                     LYDKYjgbJHmcBConufMnPeEiLO4.mft (raw, json)
Hash identifier:          bhxnbObg0xcd+zRnNWFSDkSsLCDpL4bI+HpvB2FfZ1w=
Subject key identifier:   2A:E1:D0:FE:1A:7D:0F:94:C6:0A:EA:14:04:7D:E5:9C:51:AD:B8:C8
Authority key identifier: 2D:80:CA:62:38:1B:24:79:9C:04:2A:27:B9:F3:27:3D:E1:22:2C:EE
Certificate issuer:       /CN=A9163272/serialNumber=2D80CA62381B24799C042A27B9F3273DE1222CEE
Certificate serial:       0244
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LYDKYjgbJHmcBConufMnPeEiLO4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft
Manifest number:          0244
Signing time:             Sun 05 Apr 2026 01:57:47 +0000
Manifest this update:     Sun 05 Apr 2026 01:57:47 +0000
Manifest next update:     Sun 12 Apr 2026 01:57:47 +0000
Files and hashes:         1: LYDKYjgbJHmcBConufMnPeEiLO4.crl (hash: J2+WGMkQYS9RPKLH2j0jQjQp1fkQfO/rKvyIkfIWE2g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.crl
                          rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LYDKYjgbJHmcBConufMnPeEiLO4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:57:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 580 (0x244)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163272, serialNumber=2D80CA62381B24799C042A27B9F3273DE1222CEE
        Validity
            Not Before: Apr  5 01:57:47 2026 GMT
            Not After : Apr 12 01:57:47 2026 GMT
        Subject: CN=69d1c19b-9ede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3e:8a:a0:5b:99:70:55:a8:be:9d:3e:a2:0d:
                    f9:c8:b2:52:a0:71:34:03:0d:73:49:22:9e:5b:ca:
                    05:3a:43:f4:70:e2:da:24:22:d1:d0:89:39:65:e0:
                    c2:c8:e0:78:8e:59:ae:ae:6f:da:30:0e:3a:8b:aa:
                    14:00:a6:41:da:ca:e5:33:d2:37:25:5d:d3:1f:af:
                    74:34:2e:29:8d:96:22:3e:f5:31:dc:58:48:6c:4c:
                    b8:53:86:68:d3:f5:39:c0:45:c4:d9:d8:38:25:b5:
                    b0:98:e8:49:b5:de:35:38:63:85:5b:71:8f:16:c9:
                    b5:a6:64:43:6b:ac:cc:de:62:42:4d:1b:3a:d7:c2:
                    96:ad:94:95:f9:2d:69:6e:ff:97:31:b0:76:34:1e:
                    30:3f:bc:6c:69:67:ac:13:cf:d3:52:e6:62:ff:da:
                    c9:eb:4a:23:c0:3c:21:d9:06:15:c8:9e:88:02:60:
                    c6:2d:e8:59:18:ee:74:e7:90:8f:43:f1:fa:a3:fc:
                    2e:20:19:e1:7e:a2:b6:ec:24:40:3e:11:cf:0e:38:
                    7b:1e:fd:5b:6b:67:b1:d8:58:54:1a:8b:4d:9c:61:
                    24:a6:4f:01:e2:98:72:ab:c3:a1:c6:cb:f3:43:47:
                    11:21:dd:a5:39:ad:7a:e1:aa:58:4c:85:1d:9b:94:
                    54:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E1:D0:FE:1A:7D:0F:94:C6:0A:EA:14:04:7D:E5:9C:51:AD:B8:C8
            X509v3 Authority Key Identifier:
                keyid:2D:80:CA:62:38:1B:24:79:9C:04:2A:27:B9:F3:27:3D:E1:22:2C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LYDKYjgbJHmcBConufMnPeEiLO4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:79:4d:08:36:32:69:74:21:c1:92:33:29:2b:ed:38:7f:46:
         b8:87:c6:6f:59:8f:12:8d:25:80:3a:85:e6:1c:ab:6a:e1:74:
         4b:d7:15:f2:76:f3:61:48:c0:cf:1c:32:48:d4:d4:b0:1b:b2:
         44:6e:04:ef:ab:9c:fc:21:05:cf:f0:bb:21:c8:71:ab:c8:05:
         5f:80:79:1b:56:35:cf:23:1c:ce:89:57:62:6a:ec:1c:7d:83:
         c6:6e:a4:d6:58:41:68:8d:21:44:32:22:1c:af:a9:3e:df:8b:
         b0:35:e1:29:90:18:c4:3b:21:0c:21:a0:97:ba:11:8b:44:fe:
         e5:5b:bf:98:27:50:6d:48:0a:6d:34:34:1d:70:38:19:9d:6b:
         f5:53:85:9f:e2:8b:cc:bb:3e:9c:df:27:e6:31:83:a5:6b:cd:
         6c:84:24:ef:4d:af:5a:72:58:6a:b9:3c:ba:dd:37:8b:15:3e:
         50:e2:11:98:c2:8e:cb:e6:ad:90:63:5e:63:71:95:96:02:79:
         5d:12:69:1f:35:aa:7d:ea:49:5a:cf:72:ed:09:85:ab:e7:d9:
         df:95:0f:70:96:4a:b2:e7:0c:23:e6:02:f9:7f:18:49:d0:4b:
         d1:0d:89:3c:9c:62:ca:f8:60:10:19:fb:2a:83:07:e1:e7:06:
         e9:12:ba:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:38:49 2026 by rpki-client