Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft
File:                     LYDKYjgbJHmcBConufMnPeEiLO4.mft (raw, json)
Hash identifier:          zDullAPHr/0tEyQTjxiP1lUrCWc2W6J1ga2/sP4LOCk=
Subject key identifier:   AA:07:B8:5F:DD:42:CB:33:39:6B:CD:6F:BA:97:FA:E3:4D:21:00:86
Authority key identifier: 2D:80:CA:62:38:1B:24:79:9C:04:2A:27:B9:F3:27:3D:E1:22:2C:EE
Certificate issuer:       /CN=A9163272/serialNumber=2D80CA62381B24799C042A27B9F3273DE1222CEE
Certificate serial:       02B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LYDKYjgbJHmcBConufMnPeEiLO4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft
Manifest number:          02B1
Signing time:             Thu 05 Nov 2026 02:06:10 +0000
Manifest this update:     Thu 05 Nov 2026 02:06:09 +0000
Manifest next update:     Thu 12 Nov 2026 02:06:09 +0000
Files and hashes:         1: LYDKYjgbJHmcBConufMnPeEiLO4.crl (hash: 9rcHFIupaAqERrzssTv9D11f7nTd/RlQ+FMGlL39Big=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.crl
                          rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LYDKYjgbJHmcBConufMnPeEiLO4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Nov 2026 02:06:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 689 (0x2b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163272, serialNumber=2D80CA62381B24799C042A27B9F3273DE1222CEE
        Validity
            Not Before: Nov  5 02:06:09 2026 GMT
            Not After : Nov 12 02:06:09 2026 GMT
        Subject: CN=6aebe492-9b84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:66:2d:9b:e5:c8:2e:5a:eb:a4:a2:6a:99:a9:
                    49:12:a5:80:c1:60:13:9e:26:79:2e:39:21:2c:2c:
                    4a:b1:a1:b3:1a:9f:d0:3b:1a:47:a1:d5:cc:1f:6f:
                    6a:44:3f:28:d3:8d:2f:cc:8e:61:8d:d9:da:08:67:
                    32:6c:76:d8:81:55:d7:f7:f8:94:94:29:a1:65:8c:
                    24:c5:89:92:bc:73:91:b6:14:1c:b4:ad:ce:24:08:
                    01:2f:f7:83:4d:58:31:25:4a:2e:c5:45:47:48:fe:
                    cb:71:12:f9:28:e9:a3:46:e6:1a:b0:f0:d9:aa:b9:
                    ea:a5:4a:ad:05:b4:c3:21:d3:c2:a0:a4:22:a1:40:
                    7d:80:03:b7:1a:27:64:82:d7:49:08:ed:b3:0a:dd:
                    91:7b:4c:5a:87:d5:c3:03:5d:ce:86:fb:67:f8:b4:
                    f6:fd:52:24:ba:ef:e5:51:8e:1b:b8:1a:22:56:a5:
                    54:29:22:bd:cf:ff:eb:a3:77:8d:ff:f9:64:24:25:
                    ad:15:91:fd:b4:8f:83:c4:08:76:b1:f0:3d:28:91:
                    77:57:dc:51:55:93:f8:8e:af:16:dd:e9:5a:1c:f7:
                    c6:79:78:9a:3a:ec:98:57:93:b2:a4:82:0b:ee:ac:
                    ed:dd:ab:0a:4d:c0:b0:72:7d:f3:0b:16:6d:4f:0a:
                    72:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:07:B8:5F:DD:42:CB:33:39:6B:CD:6F:BA:97:FA:E3:4D:21:00:86
            X509v3 Authority Key Identifier:
                keyid:2D:80:CA:62:38:1B:24:79:9C:04:2A:27:B9:F3:27:3D:E1:22:2C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LYDKYjgbJHmcBConufMnPeEiLO4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:00:7f:14:7c:fd:94:37:f9:81:e7:7a:6d:d2:86:b8:b4:8d:
         c0:25:03:2e:0b:df:d3:03:44:a3:24:f8:32:03:bf:6b:cd:1a:
         49:3e:d8:39:11:01:4c:db:81:38:f9:47:e2:f5:8e:4c:b2:ee:
         a4:a9:f8:35:6d:22:a9:fd:d8:b1:49:97:2d:0a:dd:8d:de:b9:
         6d:fc:89:3b:3c:f1:ae:ca:99:b8:12:c9:99:39:38:84:7a:fa:
         4d:2c:db:17:00:56:ee:2e:03:81:53:d1:0b:25:df:db:3d:0f:
         ce:1b:e6:7e:bb:e4:2f:1d:d1:0a:04:f5:79:58:00:c5:d6:e6:
         7a:e9:ef:19:b0:b6:0e:62:e5:1d:86:9c:f5:05:40:44:e9:0d:
         f7:ce:ac:89:13:c1:77:fa:d1:8a:e6:20:9a:fb:38:65:8f:41:
         d0:57:25:aa:ef:f7:63:63:f3:2c:e3:b7:e5:5e:3b:19:e7:f9:
         18:4f:3f:7e:19:29:77:d1:59:e1:65:b5:06:34:c5:8b:20:cc:
         c4:fc:73:3a:a4:74:e2:1a:5b:ef:b4:21:99:fa:90:8e:61:0f:
         e3:ac:be:f7:e5:50:67:c9:c8:8b:a3:03:ee:c3:57:36:c4:00:
         fd:89:2a:de:71:2b:44:46:f9:eb:18:d4:33:31:8c:0a:66:b1:
         15:8e:4f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:30:26 2026 by rpki-client