Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.mft
File:                     yizBAkNd6FHdppmDFZEvBvQQTrE.mft (raw, json)
Hash identifier:          6Yc92McdVgwqU2U71hy+E12sPPc4QaUM9v81ys2yyCo=
Subject key identifier:   14:2B:BC:85:FE:D2:DC:B2:D2:36:60:3D:A0:29:E1:87:1B:13:C8:47
Authority key identifier: CA:2C:C1:02:43:5D:E8:51:DD:A6:99:83:15:91:2F:06:F4:10:4E:B1
Certificate issuer:       /CN=A9177562/serialNumber=CA2CC102435DE851DDA6998315912F06F4104EB1
Certificate serial:       05C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yizBAkNd6FHdppmDFZEvBvQQTrE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.mft
Manifest number:          05B9
Signing time:             Thu 16 Apr 2026 23:02:14 +0000
Manifest this update:     Thu 16 Apr 2026 23:02:13 +0000
Manifest next update:     Thu 23 Apr 2026 23:02:13 +0000
Files and hashes:         1: yizBAkNd6FHdppmDFZEvBvQQTrE.crl (hash: Y0i4zhrD0kuNtyEwWNsh/gFSWNA0YnU74joUfR9N5bc=)
                          2: 973E6B76107C11ECB1F7DE5DC4F9AE02.roa (hash: r5zlFh3TMrG1QMoTivd+GdY+mvtJvwJD9ncb6BRPRlI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.crl
                          rsync://rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yizBAkNd6FHdppmDFZEvBvQQTrE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1473 (0x5c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177562, serialNumber=CA2CC102435DE851DDA6998315912F06F4104EB1
        Validity
            Not Before: Apr 16 23:02:13 2026 GMT
            Not After : Apr 23 23:02:13 2026 GMT
        Subject: CN=69e16a76-6a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ea:a7:77:39:12:7f:b9:76:64:f4:48:da:d4:
                    d4:01:81:f8:04:64:bf:0e:ce:8c:e2:a6:b2:31:03:
                    2f:60:59:49:61:a9:67:53:60:4b:a1:32:a7:49:82:
                    ad:bd:98:22:93:ba:81:11:6f:6f:f8:66:08:53:07:
                    c8:d0:fb:69:4b:31:94:b2:94:6c:b1:51:ad:db:d1:
                    70:2e:30:f9:81:1d:ea:8d:b6:58:16:df:4d:bc:a8:
                    f2:dc:fb:1a:d1:9c:14:95:af:07:31:bd:9a:8e:5c:
                    6c:d1:63:c8:42:f3:08:a2:29:50:67:ed:c9:6f:e6:
                    cb:fb:79:60:d5:07:33:06:69:0c:50:ea:e7:34:ab:
                    26:67:19:05:08:60:0c:4d:00:2c:65:3e:69:ae:b0:
                    04:c3:8b:42:f6:4a:46:a7:d3:be:14:bb:a1:dc:fc:
                    52:26:a9:fc:67:d5:4a:7f:b4:e2:11:47:41:66:ec:
                    c9:ac:b6:e4:03:4b:ba:82:f4:32:ee:ab:08:e4:38:
                    a5:19:a4:5c:53:ac:b3:5c:ca:8f:9b:0a:99:0d:71:
                    71:9e:8c:62:2f:40:a4:8e:52:c8:e9:e7:a1:3d:40:
                    05:65:f6:63:3e:d6:50:78:97:95:9e:d1:da:46:d7:
                    cc:55:f9:c4:53:c0:a7:1d:4c:7a:67:e8:59:71:2e:
                    70:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2B:BC:85:FE:D2:DC:B2:D2:36:60:3D:A0:29:E1:87:1B:13:C8:47
            X509v3 Authority Key Identifier:
                keyid:CA:2C:C1:02:43:5D:E8:51:DD:A6:99:83:15:91:2F:06:F4:10:4E:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yizBAkNd6FHdppmDFZEvBvQQTrE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:ab:9b:86:b1:58:56:87:a6:d1:4e:7e:2b:63:ef:08:f2:15:
         81:77:dc:c7:a7:98:ec:bb:bb:90:97:8f:98:10:35:a6:05:09:
         31:7d:76:45:aa:3a:8b:21:ab:ec:c7:de:a2:54:58:7b:b2:d4:
         c9:35:58:6d:5a:75:a4:e7:c5:13:ba:4b:99:bd:38:00:0c:8b:
         64:57:53:6b:67:a2:29:46:83:a9:25:63:48:34:7d:c9:61:eb:
         41:74:b6:8a:70:2c:76:a9:ca:9b:29:ca:74:fd:d3:9f:f4:a5:
         f0:88:93:8b:93:d1:02:f3:ca:15:24:7c:64:c5:32:6c:63:91:
         d1:40:bb:70:fc:85:e5:7a:dd:e2:93:fd:53:20:fc:52:de:d7:
         d4:67:35:1e:55:9b:b3:f0:87:45:eb:23:e2:68:7f:11:ea:6e:
         2a:af:6a:8b:5a:06:c6:43:3c:f8:68:69:94:95:a7:fe:d3:c4:
         fa:ef:5b:06:53:9e:41:62:d7:24:5c:2b:45:84:0c:dd:a7:87:
         74:66:2f:35:f1:19:70:ae:73:2a:30:4e:dd:f3:2a:67:c4:e9:
         83:67:07:ac:50:b2:35:9e:00:3c:2a:7d:4f:96:c6:32:f6:fc:
         e4:1a:22:93:6f:25:e3:93:44:79:47:ce:95:5f:48:3b:bd:7c:
         ae:14:8b:d4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzc1NjIxMTAvBgNVBAUTKENBMkNDMTAyNDM1REU4NTFEREE2OTk4MzE1OTEyRjA2
RjQxMDRFQjEwHhcNMjYwNDE2MjMwMjEzWhcNMjYwNDIzMjMwMjEzWjAYMRYwFAYD
VQQDEw02OWUxNmE3Ni02YTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmuqndzkSf7l2ZPRI2tTUAYH4BGS/Ds6M4qayMQMvYFlJYalnU2BLoTKnSYKt
vZgik7qBEW9v+GYIUwfI0PtpSzGUspRssVGt29FwLjD5gR3qjbZYFt9NvKjy3Psa
0ZwUla8HMb2ajlxs0WPIQvMIoilQZ+3Jb+bL+3lg1QczBmkMUOrnNKsmZxkFCGAM
TQAsZT5prrAEw4tC9kpGp9O+FLuh3PxSJqn8Z9VKf7TiEUdBZuzJrLbkA0u6gvQy
7qsI5DilGaRcU6yzXMqPmwqZDXFxnoxiL0CkjlLI6eehPUAFZfZjPtZQeJeVntHa
RtfMVfnEU8CnHUx6Z+hZcS5wfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBQrvIX+
0tyy0jZgPaAp4YcbE8hHMB8GA1UdIwQYMBaAFMoswQJDXehR3aaZgxWRLwb0EE6x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzU2Mi82QTNGOTIxQzA3
MzAxMUVDQjEyNDk4NDFDNEY5QUUwMi95aXpCQWtOZDZGSGRwcG1ERlpFdkJ2UVFU
ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lpekJBa05kNkZIZHBwbURGWkV2QnZRUVRyRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NzU2Mi82QTNGOTIxQzA3MzAxMUVDQjEyNDk4NDFDNEY5QUUwMi95aXpCQWtOZDZG
SGRwcG1ERlpFdkJ2UVFUckUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARKubhrFYVoem0U5+K2PvCPIVgXfcx6eY7Lu7kJePmBA1pgUJMX12Rao6iyGr
7MfeolRYe7LUyTVYbVp1pOfFE7pLmb04AAyLZFdTa2eiKUaDqSVjSDR9yWHrQXS2
inAsdqnKmynKdP3Tn/Sl8IiTi5PRAvPKFSR8ZMUybGOR0UC7cPyF5Xrd4pP9UyD8
Ut7X1Gc1HlWbs/CHResj4mh/EepuKq9qi1oGxkM8+GhplJWn/tPE+u9bBlOeQWLX
JFwrRYQM3aeHdGYvNfEZcK5zKjBO3fMqZ8Tpg2cHrFCyNZ4APCp9T5bGMvb85Boi
k28l45NEeUfOlV9IO718rhSL1A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:20:07 2026 by rpki-client