Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.mft
File:                     yizBAkNd6FHdppmDFZEvBvQQTrE.mft (raw, json)
Hash identifier:          z39TjwVX2A80ishDlOcmEizNDaPfimtNJCQDNp265Go=
Subject key identifier:   56:79:60:26:EB:91:DE:BE:FB:C7:42:C0:B9:A2:16:BD:1C:26:25:F5
Authority key identifier: CA:2C:C1:02:43:5D:E8:51:DD:A6:99:83:15:91:2F:06:F4:10:4E:B1
Certificate issuer:       /CN=A9177562/serialNumber=CA2CC102435DE851DDA6998315912F06F4104EB1
Certificate serial:       0565
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yizBAkNd6FHdppmDFZEvBvQQTrE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.mft
Manifest number:          0560
Signing time:             Sun 02 Nov 2025 23:21:47 +0000
Manifest this update:     Sun 02 Nov 2025 23:21:46 +0000
Manifest next update:     Sun 09 Nov 2025 23:21:46 +0000
Files and hashes:         1: yizBAkNd6FHdppmDFZEvBvQQTrE.crl (hash: fWGD+XbI2PdZiQnWXOp+3MUpI+e07LUy+ai9kpwTGa8=)
                          2: 973E6B76107C11ECB1F7DE5DC4F9AE02.roa (hash: SQGdKb1vFGjNIUOuBUka92JYyHUgvE8twdlpTLjrdUo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.crl
                          rsync://rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yizBAkNd6FHdppmDFZEvBvQQTrE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 23:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1381 (0x565)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177562, serialNumber=CA2CC102435DE851DDA6998315912F06F4104EB1
        Validity
            Not Before: Nov  2 23:21:46 2025 GMT
            Not After : Nov  9 23:21:46 2025 GMT
        Subject: CN=6907e78b-29e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:eb:8b:f5:80:c9:68:9b:6c:af:16:ca:be:76:
                    87:12:74:08:b3:c6:0b:28:ba:17:f0:c8:bf:5c:6d:
                    4e:17:65:71:53:b9:a5:87:60:4e:eb:b3:f8:1c:97:
                    ab:b6:bf:f3:42:ac:f8:3c:0d:6e:35:12:b4:ee:0e:
                    78:b4:e2:66:c7:c1:32:9e:f7:7a:7d:56:db:87:0f:
                    ae:d6:43:b4:b2:df:00:8d:93:ce:61:58:86:fd:25:
                    ff:7d:02:38:9a:27:51:9c:00:a1:69:d2:ff:1f:d5:
                    c2:36:27:72:55:c2:23:c0:8f:96:ce:8b:15:2f:4b:
                    9d:3c:a6:17:8f:76:55:a3:b6:47:91:65:c4:79:82:
                    39:ad:6f:5f:4d:aa:b6:4e:96:58:ac:b4:00:34:43:
                    b2:59:70:c7:20:5f:fe:2f:7b:d0:38:d5:46:88:1f:
                    74:53:48:48:7f:b2:dc:ef:43:56:80:17:da:22:04:
                    0c:28:7e:76:71:e0:da:51:b6:11:42:f7:de:c6:88:
                    e0:9d:e5:f3:da:8d:60:92:f2:62:f2:a0:73:7c:fe:
                    1f:59:0f:11:8f:81:6e:d0:23:30:be:e2:5a:7d:f1:
                    74:df:ed:7c:dc:22:76:08:5a:07:2f:d5:03:09:09:
                    bd:3e:c4:3f:7f:ae:de:6a:5e:d5:4e:81:ad:bc:a4:
                    21:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:79:60:26:EB:91:DE:BE:FB:C7:42:C0:B9:A2:16:BD:1C:26:25:F5
            X509v3 Authority Key Identifier:
                keyid:CA:2C:C1:02:43:5D:E8:51:DD:A6:99:83:15:91:2F:06:F4:10:4E:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yizBAkNd6FHdppmDFZEvBvQQTrE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:59:37:96:03:5d:d0:ce:34:da:b2:49:e1:e5:2d:54:c1:0c:
         6d:01:3a:e6:f1:75:38:b4:40:aa:b2:0b:48:94:1d:30:b8:42:
         20:aa:5a:b6:76:75:34:cf:1c:bb:b4:0d:bb:11:69:03:47:6a:
         86:28:36:dd:a4:81:9e:40:8c:f0:31:7f:7d:08:e4:cd:d1:4c:
         71:bf:61:69:07:7f:9d:0a:00:8f:88:09:90:b6:f5:ab:e4:d1:
         21:cc:32:1f:8b:f0:9f:66:3c:10:d2:9e:6d:26:22:1d:5f:bf:
         43:03:a0:bb:1f:dc:3c:a3:3d:3e:36:10:cf:ba:c2:b3:bc:d3:
         26:e6:69:00:44:53:66:f3:bb:2e:b4:1b:34:62:73:6c:5f:c5:
         e8:4f:5d:b1:ac:6f:57:74:05:d3:cd:37:5a:4f:3e:f9:5b:56:
         82:42:25:93:4f:14:49:8d:60:7a:8b:64:b7:25:92:1c:46:20:
         15:08:7d:3d:08:43:df:f9:21:05:cf:52:d5:70:b3:8f:fc:83:
         da:8b:e1:38:ef:7a:1e:cb:71:64:df:f5:40:95:3e:c6:17:b2:
         44:5b:72:e6:de:6c:ae:7f:24:5b:46:5d:23:bd:94:0d:d5:58:
         3b:de:3d:e3:6d:84:27:ec:a5:5d:73:6f:3e:4a:ad:c6:fc:98:
         2a:17:a8:87
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzc1NjIxMTAvBgNVBAUTKENBMkNDMTAyNDM1REU4NTFEREE2OTk4MzE1OTEyRjA2
RjQxMDRFQjEwHhcNMjUxMTAyMjMyMTQ2WhcNMjUxMTA5MjMyMTQ2WjAYMRYwFAYD
VQQDEw02OTA3ZTc4Yi0yOWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3OuL9YDJaJtsrxbKvnaHEnQIs8YLKLoX8Mi/XG1OF2VxU7mlh2BO67P4HJer
tr/zQqz4PA1uNRK07g54tOJmx8Eynvd6fVbbhw+u1kO0st8AjZPOYViG/SX/fQI4
midRnAChadL/H9XCNidyVcIjwI+WzosVL0udPKYXj3ZVo7ZHkWXEeYI5rW9fTaq2
TpZYrLQANEOyWXDHIF/+L3vQONVGiB90U0hIf7Lc70NWgBfaIgQMKH52ceDaUbYR
QvfexojgneXz2o1gkvJi8qBzfP4fWQ8Rj4Fu0CMwvuJaffF03+183CJ2CFoHL9UD
CQm9PsQ/f67eal7VToGtvKQhbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZ5YCbr
kd6++8dCwLmiFr0cJiX1MB8GA1UdIwQYMBaAFMoswQJDXehR3aaZgxWRLwb0EE6x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzU2Mi82QTNGOTIxQzA3
MzAxMUVDQjEyNDk4NDFDNEY5QUUwMi95aXpCQWtOZDZGSGRwcG1ERlpFdkJ2UVFU
ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lpekJBa05kNkZIZHBwbURGWkV2QnZRUVRyRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NzU2Mi82QTNGOTIxQzA3MzAxMUVDQjEyNDk4NDFDNEY5QUUwMi95aXpCQWtOZDZG
SGRwcG1ERlpFdkJ2UVFUckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAsWTeWA13QzjTasknh5S1UwQxtATrm8XU4tECqsgtIlB0wuEIgqlq2
dnU0zxy7tA27EWkDR2qGKDbdpIGeQIzwMX99COTN0Uxxv2FpB3+dCgCPiAmQtvWr
5NEhzDIfi/CfZjwQ0p5tJiIdX79DA6C7H9w8oz0+NhDPusKzvNMm5mkARFNm87su
tBs0YnNsX8XoT12xrG9XdAXTzTdaTz75W1aCQiWTTxRJjWB6i2S3JZIcRiAVCH09
CEPf+SEFz1LVcLOP/IPai+E473oey3Fk3/VAlT7GF7JEW3Lm3myufyRbRl0jvZQN
1Vg73j3jbYQn7KVdc28+Sq3G/JgqF6iH
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:07:30 2025 by rpki-client