Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft
File:                     LYDKYjgbJHmcBConufMnPeEiLO4.mft (raw, json)
Hash identifier:          E9orbvNS2+GGaVOY4xHUt/EmuHaWQTpulOwhfdOGFto=
Subject key identifier:   29:1B:47:FD:8E:C8:4B:57:B9:8F:3B:5F:2D:1C:E0:99:38:B2:21:0B
Authority key identifier: 2D:80:CA:62:38:1B:24:79:9C:04:2A:27:B9:F3:27:3D:E1:22:2C:EE
Certificate issuer:       /CN=A9163272/serialNumber=2D80CA62381B24799C042A27B9F3273DE1222CEE
Certificate serial:       0231
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LYDKYjgbJHmcBConufMnPeEiLO4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft
Manifest number:          0231
Signing time:             Sun 01 Mar 2026 03:19:05 +0000
Manifest this update:     Sun 01 Mar 2026 03:19:05 +0000
Manifest next update:     Sun 08 Mar 2026 03:19:05 +0000
Files and hashes:         1: LYDKYjgbJHmcBConufMnPeEiLO4.crl (hash: BsfbkINWQWGM5zDF2lDyldSHjTrZGR3UXM4TI6iZ1oI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.crl
                          rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LYDKYjgbJHmcBConufMnPeEiLO4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 03:19:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 561 (0x231)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163272, serialNumber=2D80CA62381B24799C042A27B9F3273DE1222CEE
        Validity
            Not Before: Mar  1 03:19:05 2026 GMT
            Not After : Mar  8 03:19:05 2026 GMT
        Subject: CN=69a3b029-e767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b0:c9:f4:4b:36:33:e6:84:fd:49:2e:19:d6:
                    77:00:9c:68:d7:28:5d:22:44:80:6f:e9:c4:7f:0b:
                    b2:dd:26:29:2a:72:aa:60:9d:c2:af:34:b4:ff:f2:
                    d7:e8:71:06:e6:c8:5f:69:57:09:08:3d:c0:c1:1f:
                    dc:75:6c:8e:ab:34:27:b1:78:d3:8f:78:73:a5:0d:
                    2b:9d:5f:1a:ae:12:eb:c0:ea:4f:5a:be:30:90:87:
                    fc:91:f4:8f:a4:4b:46:82:cc:67:50:7c:c3:3a:6a:
                    0c:8e:6d:48:c9:ca:c1:80:76:75:9a:de:5b:49:24:
                    0e:66:1e:be:5b:0a:d6:33:4e:a9:55:1a:74:47:2e:
                    e7:27:6e:27:77:dd:26:40:2c:65:d7:11:fe:a4:c1:
                    e4:bb:03:29:26:8f:ac:7f:52:cd:9c:c7:57:50:9a:
                    da:5f:87:c9:b1:49:85:78:7c:6d:62:ee:41:d0:50:
                    36:ee:ab:b3:e6:7c:3e:f1:5d:07:c4:e5:d5:a1:1e:
                    14:d9:ca:b9:93:1b:c7:7f:26:8e:bd:aa:31:cc:4f:
                    3f:3e:d9:2e:38:21:73:07:96:bc:bc:bd:58:8e:3b:
                    24:6e:70:e0:fa:67:16:fb:5f:25:a2:69:8d:29:b0:
                    3a:72:8e:31:9a:a9:56:79:0b:45:a6:5a:95:64:2e:
                    1d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:1B:47:FD:8E:C8:4B:57:B9:8F:3B:5F:2D:1C:E0:99:38:B2:21:0B
            X509v3 Authority Key Identifier:
                keyid:2D:80:CA:62:38:1B:24:79:9C:04:2A:27:B9:F3:27:3D:E1:22:2C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LYDKYjgbJHmcBConufMnPeEiLO4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:68:5d:b0:d3:58:82:14:d3:b6:a0:dd:94:0a:f1:f0:9e:d3:
         67:33:97:37:a6:17:f7:8a:5b:dc:2c:93:9f:5f:88:63:cd:09:
         b2:35:0a:c7:6e:a6:4b:d2:b8:4b:4f:35:87:32:67:05:80:7c:
         aa:d1:60:7a:06:5f:f3:3d:f3:5b:c3:58:63:4b:3c:63:4b:63:
         c5:16:dd:dd:92:a0:7e:60:23:0d:ee:77:12:7c:1e:53:79:04:
         ce:bd:a6:7d:7c:68:91:68:e7:8c:ae:bb:4f:a8:12:60:13:f3:
         c3:9d:b9:28:ad:69:3a:74:ad:36:aa:10:2b:67:55:9c:05:c0:
         15:9d:98:38:42:b4:d1:53:b7:97:7b:c5:56:e7:6f:f7:f5:e5:
         27:88:3f:eb:5a:d8:12:8b:20:0e:8e:5c:14:5c:ff:98:9b:b3:
         bd:55:e6:42:54:e8:1c:ff:64:ce:31:b8:52:45:c6:5e:f0:c9:
         03:d5:bc:db:ee:f2:ba:01:93:cf:fe:cb:6f:11:e7:85:a8:3e:
         71:37:54:d2:23:1b:b4:fe:89:67:47:c3:a9:4f:ed:ff:d0:aa:
         f7:e0:c6:3e:3f:a3:3d:89:5f:db:c1:d0:d2:fb:09:b6:b0:cb:
         9d:0d:93:87:8f:42:41:7b:ac:b2:c3:b7:70:bd:b7:67:5b:6b:
         54:04:7c:d7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjMyNzIxMTAvBgNVBAUTKDJEODBDQTYyMzgxQjI0Nzk5QzA0MkEyN0I5RjMyNzNE
RTEyMjJDRUUwHhcNMjYwMzAxMDMxOTA1WhcNMjYwMzA4MDMxOTA1WjAYMRYwFAYD
VQQDEw02OWEzYjAyOS1lNzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkbDJ9Es2M+aE/UkuGdZ3AJxo1yhdIkSAb+nEfwuy3SYpKnKqYJ3CrzS0//LX
6HEG5shfaVcJCD3AwR/cdWyOqzQnsXjTj3hzpQ0rnV8arhLrwOpPWr4wkIf8kfSP
pEtGgsxnUHzDOmoMjm1IycrBgHZ1mt5bSSQOZh6+WwrWM06pVRp0Ry7nJ24nd90m
QCxl1xH+pMHkuwMpJo+sf1LNnMdXUJraX4fJsUmFeHxtYu5B0FA27quz5nw+8V0H
xOXVoR4U2cq5kxvHfyaOvaoxzE8/PtkuOCFzB5a8vL1YjjskbnDg+mcW+18lommN
KbA6co4xmqlWeQtFplqVZC4ddwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCkbR/2O
yEtXuY87Xy0c4Jk4siELMB8GA1UdIwQYMBaAFC2AymI4GyR5nAQqJ7nzJz3hIizu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzI3Mi9ERjI2NjlENkI2
ODIxMUVEQTBBQjk5MUJDNEY5QUUwMi9MWURLWWpnYkpIbWNCQ29udWZNblBlRWlM
TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xZREtZamdiSkhtY0JDb251Zk1uUGVFaUxPNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MzI3Mi9ERjI2NjlENkI2ODIxMUVEQTBBQjk5MUJDNEY5QUUwMi9MWURLWWpnYkpI
bWNCQ29udWZNblBlRWlMTzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAimhdsNNYghTTtqDdlArx8J7TZzOXN6YX94pb3CyTn1+IY80JsjUKx26mS9K4
S081hzJnBYB8qtFgegZf8z3zW8NYY0s8Y0tjxRbd3ZKgfmAjDe53EnweU3kEzr2m
fXxokWjnjK67T6gSYBPzw525KK1pOnStNqoQK2dVnAXAFZ2YOEK00VO3l3vFVudv
9/XlJ4g/61rYEosgDo5cFFz/mJuzvVXmQlToHP9kzjG4UkXGXvDJA9W82+7yugGT
z/7LbxHnhag+cTdU0iMbtP6JZ0fDqU/t/9Cq9+DGPj+jPYlf28HQ0vsJtrDLnQ2T
h49CQXusssO3cL23Z1trVAR81w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:31:05 2026 by rpki-client