Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft
File:                     LYDKYjgbJHmcBConufMnPeEiLO4.mft (raw, json)
Hash identifier:          +AckVTxK+PG1P12uT6tQj+rB+hkcYB+Yi19jt8EneoU=
Subject key identifier:   9C:48:10:23:2E:13:CB:EA:A2:51:62:40:74:49:EC:A5:5C:D7:49:BB
Authority key identifier: 2D:80:CA:62:38:1B:24:79:9C:04:2A:27:B9:F3:27:3D:E1:22:2C:EE
Certificate issuer:       /CN=A9163272/serialNumber=2D80CA62381B24799C042A27B9F3273DE1222CEE
Certificate serial:       024A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LYDKYjgbJHmcBConufMnPeEiLO4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft
Manifest number:          024A
Signing time:             Fri 17 Apr 2026 02:05:54 +0000
Manifest this update:     Fri 17 Apr 2026 02:05:53 +0000
Manifest next update:     Fri 24 Apr 2026 02:05:53 +0000
Files and hashes:         1: LYDKYjgbJHmcBConufMnPeEiLO4.crl (hash: q44UP1+DZzA9TaR6fEvmDtnMjPwcnSpRhOE7HqJHZXc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.crl
                          rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LYDKYjgbJHmcBConufMnPeEiLO4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:05:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 586 (0x24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163272, serialNumber=2D80CA62381B24799C042A27B9F3273DE1222CEE
        Validity
            Not Before: Apr 17 02:05:53 2026 GMT
            Not After : Apr 24 02:05:53 2026 GMT
        Subject: CN=69e19582-10a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5e:01:29:d6:6c:93:fd:dc:24:f7:2f:51:f1:
                    ac:40:e7:25:ca:c6:1e:35:34:5f:4f:85:72:52:26:
                    1c:47:ce:13:2a:b9:0d:00:b4:a7:a4:26:30:21:98:
                    8e:47:b8:30:8d:3b:dd:1b:9e:9d:41:33:58:42:3d:
                    dc:84:ed:5d:1a:b8:f3:17:81:17:73:56:55:48:a8:
                    6a:cb:0b:07:9a:5c:53:82:9f:da:c9:79:6d:3c:b6:
                    8c:92:d3:98:0d:27:65:48:8b:f6:b8:ef:84:96:2e:
                    d4:15:10:37:1b:f3:16:a4:12:8c:3f:49:c6:b5:e4:
                    15:d7:c5:ab:d7:34:7f:4a:09:0a:f4:46:7c:a8:a5:
                    05:c2:bb:d7:f1:71:77:de:77:c4:89:05:42:93:03:
                    94:53:6a:94:50:48:2c:ab:31:5f:df:a0:13:37:ab:
                    6d:aa:57:97:f0:dc:6c:ff:fd:77:55:eb:c3:61:f0:
                    98:89:59:43:4e:f6:79:14:9d:19:20:8a:6a:27:b3:
                    3d:41:37:51:84:1e:63:eb:91:6c:98:4c:cb:49:a4:
                    19:d9:88:29:29:b1:b0:f7:37:ce:4e:7c:f6:55:dc:
                    26:d0:05:19:b8:f9:06:a5:e8:7e:88:31:e0:c3:ae:
                    ca:60:e4:53:d2:7a:f1:d2:ab:70:82:0a:7a:f1:58:
                    12:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:48:10:23:2E:13:CB:EA:A2:51:62:40:74:49:EC:A5:5C:D7:49:BB
            X509v3 Authority Key Identifier:
                keyid:2D:80:CA:62:38:1B:24:79:9C:04:2A:27:B9:F3:27:3D:E1:22:2C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LYDKYjgbJHmcBConufMnPeEiLO4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:3d:b7:e1:db:b4:41:cc:c6:e1:6d:69:e7:c6:1e:0d:17:0a:
         84:a5:a2:4e:74:a0:10:52:67:77:2e:07:45:ed:2f:d5:a1:f7:
         b1:1f:a0:9a:0c:e0:fa:ed:0a:8e:8f:20:01:8a:06:ad:7f:49:
         5c:4a:39:9a:6a:fa:5a:96:e8:23:99:00:80:98:20:d7:34:74:
         c1:6d:d1:64:b6:5e:da:2f:0b:9f:2e:7c:c5:6e:1e:8e:1e:50:
         57:d9:10:2d:e4:e5:d6:a2:e6:0b:4c:9d:d7:2f:d2:1e:6d:f0:
         7c:98:75:80:34:f4:eb:f1:0d:25:0c:0d:05:cb:89:45:80:78:
         b5:06:4b:92:09:82:ee:25:7a:52:af:d5:18:9f:8c:ef:88:d4:
         ae:3e:cf:6c:26:6e:b5:35:24:fe:a5:66:68:c4:61:44:ad:9a:
         fa:ea:d3:4e:03:88:8d:8b:74:b2:70:2f:be:7c:ba:54:51:cd:
         0d:9a:53:ed:b7:ee:58:48:f7:fa:f2:0b:b2:32:d0:5b:ba:ce:
         df:54:ed:fd:87:37:4e:1c:57:f5:be:8d:15:c6:40:f4:1b:c1:
         f4:ac:50:26:ac:d8:f7:98:9b:08:ab:c0:13:47:b0:b2:54:ca:
         a0:ba:f5:83:01:ae:b9:32:bb:96:d3:9a:c9:88:58:18:46:d5:
         d6:55:3a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:46:06 2026 by rpki-client