Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.mft
File:                     yizBAkNd6FHdppmDFZEvBvQQTrE.mft (raw, json)
Hash identifier:          n41sTXWBfsPqq/IME4rVA7G8CJ0q3arly4+l1BfdDNk=
Subject key identifier:   40:FD:1B:EF:4A:A9:01:A2:32:58:35:57:FC:2A:28:0B:8B:D1:FE:03
Authority key identifier: CA:2C:C1:02:43:5D:E8:51:DD:A6:99:83:15:91:2F:06:F4:10:4E:B1
Certificate issuer:       /CN=A9177562/serialNumber=CA2CC102435DE851DDA6998315912F06F4104EB1
Certificate serial:       05B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yizBAkNd6FHdppmDFZEvBvQQTrE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.mft
Manifest number:          05AD
Signing time:             Tue 24 Mar 2026 22:51:14 +0000
Manifest this update:     Tue 24 Mar 2026 22:51:13 +0000
Manifest next update:     Tue 31 Mar 2026 22:51:13 +0000
Files and hashes:         1: yizBAkNd6FHdppmDFZEvBvQQTrE.crl (hash: m205d27NMZJishyeYdjHcsEOygWJ621cVyTPJWf4VCQ=)
                          2: 973E6B76107C11ECB1F7DE5DC4F9AE02.roa (hash: r5zlFh3TMrG1QMoTivd+GdY+mvtJvwJD9ncb6BRPRlI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.crl
                          rsync://rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yizBAkNd6FHdppmDFZEvBvQQTrE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:51:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1461 (0x5b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177562, serialNumber=CA2CC102435DE851DDA6998315912F06F4104EB1
        Validity
            Not Before: Mar 24 22:51:13 2026 GMT
            Not After : Mar 31 22:51:13 2026 GMT
        Subject: CN=69c31562-5ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:dc:38:43:a3:89:c8:df:89:b4:86:88:62:09:
                    c5:88:be:20:7b:e7:02:ae:f4:e7:b1:f1:80:d2:40:
                    da:eb:b6:69:07:ff:e4:c6:07:e8:b0:d2:7c:cc:fc:
                    9f:73:a5:29:70:50:db:bb:8b:f4:66:24:b2:2e:99:
                    d0:e9:ce:f3:d7:0e:d7:0f:85:32:1a:0f:e1:a3:9d:
                    53:1b:b6:af:fd:bb:2f:e2:75:20:ab:3d:1a:4c:13:
                    d3:4e:5f:f7:21:8f:3c:b6:ac:62:3b:a1:e3:f7:ea:
                    99:a3:c7:6f:e9:2b:33:d0:a6:dd:6e:99:93:f9:b0:
                    f2:c9:ea:11:7a:2f:b6:1e:c0:44:65:ea:b1:4f:4b:
                    74:a0:f3:3a:81:5e:69:f0:8f:ef:9b:69:1a:b8:31:
                    55:3d:40:6a:e7:f2:43:a4:57:d0:45:51:44:e6:71:
                    48:ee:b7:e6:b9:d8:53:4d:0b:b9:68:1b:2c:52:e7:
                    bd:b5:af:4b:86:5c:40:56:e8:87:c9:12:52:72:2e:
                    08:97:b0:03:46:fc:44:e8:2d:b9:5f:e1:49:19:14:
                    a9:c6:88:df:c0:5a:f5:15:12:9f:07:44:0a:2b:7c:
                    c8:29:0e:5b:3a:64:eb:7b:c6:f3:70:13:06:d4:97:
                    9e:de:fb:40:29:6e:f1:6c:83:dd:11:74:20:2e:67:
                    9c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:FD:1B:EF:4A:A9:01:A2:32:58:35:57:FC:2A:28:0B:8B:D1:FE:03
            X509v3 Authority Key Identifier:
                keyid:CA:2C:C1:02:43:5D:E8:51:DD:A6:99:83:15:91:2F:06:F4:10:4E:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yizBAkNd6FHdppmDFZEvBvQQTrE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:cc:5a:fa:a7:70:b4:12:bb:2d:b5:94:0d:1c:10:f9:0e:48:
         39:3b:36:84:b5:86:bb:36:21:03:f2:30:02:ef:c0:ee:33:e9:
         49:11:f2:b3:03:2d:0f:4e:00:6c:dc:e9:19:05:23:ad:22:1d:
         73:04:8f:b1:7d:44:ef:b4:3d:db:bd:a5:43:38:b8:8d:db:2d:
         45:8b:0c:29:d8:75:1a:ee:6f:e5:97:04:65:5f:b1:13:e5:3b:
         4a:9c:71:2a:e6:6d:b0:a6:e9:e2:3d:5a:36:7d:fb:8e:98:36:
         ac:ad:88:74:f3:1a:dd:44:58:b9:0e:d8:54:03:b9:e2:59:30:
         90:9f:ba:4e:bd:7d:e8:5d:30:85:2e:25:c8:cf:d4:5c:0c:b6:
         2f:eb:3a:fb:8a:c9:c6:be:8a:c0:e6:f1:47:0d:9c:93:5c:cc:
         c4:6a:a6:88:e3:c6:b1:4c:84:7f:d0:f6:5b:88:82:8f:a0:57:
         42:dc:66:7d:48:fc:32:40:b8:c4:bf:c3:3a:1a:fe:9a:0f:0c:
         17:a7:4f:41:75:73:93:26:86:51:db:e2:36:1a:17:9b:ba:9c:
         d0:61:4e:ff:87:8b:fe:9a:69:76:21:bf:cb:51:ca:0e:26:5e:
         ba:b4:c1:69:a5:11:17:1f:61:ac:94:c9:fa:7a:f0:ff:45:bd:
         2b:a2:79:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:15:46 2026 by rpki-client