Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.mft
File:                     yizBAkNd6FHdppmDFZEvBvQQTrE.mft (raw, json)
Hash identifier:          wYZ11Ohcxkd/Dlnk5OP4S7WvwGBP47hHxB2u9gbcpZs=
Subject key identifier:   EB:FD:0A:57:A0:9A:6D:C6:64:D5:86:A0:9F:2A:07:00:73:13:2E:F1
Authority key identifier: CA:2C:C1:02:43:5D:E8:51:DD:A6:99:83:15:91:2F:06:F4:10:4E:B1
Certificate issuer:       /CN=A9177562/serialNumber=CA2CC102435DE851DDA6998315912F06F4104EB1
Certificate serial:       05BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yizBAkNd6FHdppmDFZEvBvQQTrE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.mft
Manifest number:          05B3
Signing time:             Sat 04 Apr 2026 22:55:35 +0000
Manifest this update:     Sat 04 Apr 2026 22:55:35 +0000
Manifest next update:     Sat 11 Apr 2026 22:55:35 +0000
Files and hashes:         1: yizBAkNd6FHdppmDFZEvBvQQTrE.crl (hash: SXVQq9Wa6gZtPom8LVa3RfJv3tIrtVkatbgTNDpNKMM=)
                          2: 973E6B76107C11ECB1F7DE5DC4F9AE02.roa (hash: r5zlFh3TMrG1QMoTivd+GdY+mvtJvwJD9ncb6BRPRlI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.crl
                          rsync://rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yizBAkNd6FHdppmDFZEvBvQQTrE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:55:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1467 (0x5bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177562, serialNumber=CA2CC102435DE851DDA6998315912F06F4104EB1
        Validity
            Not Before: Apr  4 22:55:35 2026 GMT
            Not After : Apr 11 22:55:35 2026 GMT
        Subject: CN=69d196e7-20a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:77:00:b1:b1:bb:91:82:bc:9f:62:88:93:48:
                    c0:26:16:84:8c:07:3e:33:56:40:53:c4:8f:4e:c9:
                    40:5d:81:23:47:7a:6a:84:d6:8c:c4:1c:16:c2:1c:
                    9f:ee:b8:43:69:3f:9e:76:a0:20:c8:00:8e:ba:01:
                    08:90:1f:eb:8b:15:d8:00:f9:1d:3b:fb:97:2c:66:
                    5c:74:14:58:3d:26:e3:c3:5b:c2:8c:d8:64:4c:aa:
                    e8:d0:d6:03:03:75:1e:03:0a:85:b1:c2:8f:10:85:
                    b5:df:83:f4:82:a2:9b:49:70:be:63:23:28:1c:c6:
                    d7:2a:2f:11:f7:15:39:ae:86:12:fd:30:d0:ad:f4:
                    31:2e:f8:59:62:48:af:46:40:02:d0:e6:30:2c:3b:
                    e3:6b:3d:7f:6a:2e:ed:c8:f3:80:79:66:c5:61:d8:
                    59:c2:0d:93:5c:09:93:d4:62:af:65:9c:4b:60:03:
                    6e:30:5e:4e:79:eb:05:1b:ef:ac:96:ab:61:79:5d:
                    52:e4:ad:d1:8d:81:71:18:8f:b4:8e:4a:e2:40:99:
                    a1:2d:f2:94:77:86:0a:58:4e:05:1d:be:3f:c5:d5:
                    a8:a2:f0:59:e9:8d:1b:1c:16:9f:11:f3:7b:99:1f:
                    13:5e:16:58:16:a6:7c:64:4f:ee:3c:cd:f2:3b:06:
                    60:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FD:0A:57:A0:9A:6D:C6:64:D5:86:A0:9F:2A:07:00:73:13:2E:F1
            X509v3 Authority Key Identifier:
                keyid:CA:2C:C1:02:43:5D:E8:51:DD:A6:99:83:15:91:2F:06:F4:10:4E:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yizBAkNd6FHdppmDFZEvBvQQTrE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:0c:23:53:fe:f4:22:b6:91:ef:4f:ea:6d:85:ad:f3:59:96:
         8e:12:4c:30:21:c6:04:40:b4:80:e1:22:ec:b7:1c:e0:18:e3:
         0e:ec:23:47:5f:d9:40:60:2a:75:54:ff:4d:09:19:41:24:e0:
         dd:14:ca:ea:f0:21:f7:6c:06:aa:c5:84:19:1d:c8:75:e7:d3:
         73:3a:18:4c:c5:0c:f1:8e:b9:07:9b:d6:16:7b:88:86:17:70:
         ec:a8:80:65:0e:ba:1f:25:5c:32:75:0c:be:08:3e:bd:74:8b:
         be:b2:d8:93:ad:8d:be:43:43:f6:03:07:b5:bf:fb:ff:00:6c:
         a0:c5:be:a1:7f:fe:74:e7:21:f4:e1:fe:d5:19:de:05:0b:78:
         b7:d4:40:ec:d3:98:8e:71:c5:1e:b1:5e:1b:b6:cd:4b:47:8b:
         09:1a:3f:38:5a:8d:a0:4c:9e:9b:8b:e1:f6:47:7f:3e:88:9d:
         77:4e:88:04:a2:b6:a1:32:52:ca:28:b1:68:12:dd:c3:d4:f5:
         e7:87:b2:4a:07:f8:96:99:ac:1b:84:4b:bb:ea:46:86:b9:a3:
         3b:87:e9:02:35:cd:dd:a5:ac:10:7d:aa:dc:68:35:fa:c7:20:
         cb:19:11:19:58:79:93:d5:b4:0e:e1:7d:28:6e:60:61:f5:89:
         68:1d:ea:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:42:39 2026 by rpki-client