Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9181C22/516C79787FF611F19F03B68591A30FBC/yoz-J9giejF1jevDyM-0mmi9nBY.mft
File:                     yoz-J9giejF1jevDyM-0mmi9nBY.mft (raw, json)
Hash identifier:          GnF+WtraBi8GLMbTSLPJ4LLUtoUGyb9BQ7SRyvhWPfc=
Subject key identifier:   FD:8B:F3:F4:B6:70:B9:75:13:DD:24:C7:28:F4:4D:28:81:E8:4D:6B
Authority key identifier: CA:8C:FE:27:D8:22:7A:31:75:8D:EB:C3:C8:CF:B4:9A:68:BD:9C:16
Certificate issuer:       /CN=A9181C22/serialNumber=CA8CFE27D8227A31758DEBC3C8CFB49A68BD9C16
Certificate serial:       2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoz-J9giejF1jevDyM-0mmi9nBY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181C22/516C79787FF611F19F03B68591A30FBC/yoz-J9giejF1jevDyM-0mmi9nBY.mft
Manifest number:          28
Signing time:             Fri 25 Sep 2026 08:55:34 +0000
Manifest this update:     Fri 25 Sep 2026 08:55:33 +0000
Manifest next update:     Fri 02 Oct 2026 08:55:33 +0000
Files and hashes:         1: yoz-J9giejF1jevDyM-0mmi9nBY.crl (hash: Jv0CNDwtDXwGC8W/Xm8rnLbR47CTvu4J3NYypQRBqKU=)
                          2: 790311F0862B11F19F545A5A85A30FBC.roa (hash: K758P2i0ED5BUiODFKBBk7m3g6wZiKJoenMN8VI5EMY=)
                          3: 79FCD514862B11F19F545A5A85A30FBC.roa (hash: 0lUhr9E0+OD/ipp8YwvzpZUPTlZiljm7z4wnu4JJie8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181C22/516C79787FF611F19F03B68591A30FBC/yoz-J9giejF1jevDyM-0mmi9nBY.crl
                          rsync://rpki.apnic.net/member_repository/A9181C22/516C79787FF611F19F03B68591A30FBC/yoz-J9giejF1jevDyM-0mmi9nBY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoz-J9giejF1jevDyM-0mmi9nBY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 08:55:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181C22, serialNumber=CA8CFE27D8227A31758DEBC3C8CFB49A68BD9C16
        Validity
            Not Before: Sep 25 08:55:33 2026 GMT
            Not After : Oct  2 08:55:33 2026 GMT
        Subject: CN=6ab63705-4841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ea:0d:55:d4:f8:bf:d0:ad:e2:80:07:30:7b:
                    ff:8c:66:38:bb:bc:a4:44:fa:d6:d6:13:bb:04:2e:
                    da:ce:92:58:c9:7c:1f:fc:6f:d6:e1:2e:5d:5a:02:
                    fa:ae:7d:4e:a1:ce:45:27:84:8a:58:0e:05:0e:44:
                    96:1a:57:56:dc:ef:2b:a5:47:84:26:6b:2f:87:57:
                    24:a8:31:7e:7e:c4:c2:45:17:96:61:cc:b3:6f:25:
                    ab:b1:81:3a:3b:b9:6d:d8:41:d5:27:eb:7a:54:1c:
                    38:a1:2e:43:ae:92:1f:ca:7a:ab:41:26:44:13:cc:
                    b7:46:87:d5:38:40:4b:1a:8e:d8:35:d6:9b:56:e0:
                    bb:af:12:cf:2c:9d:ed:99:f6:43:2c:73:33:0a:5d:
                    4d:7a:54:fb:9f:46:bd:5a:17:3c:95:60:07:41:6a:
                    a8:0b:5e:c1:d2:7f:b7:5a:e7:2b:be:92:40:2a:0a:
                    61:df:c6:b6:80:34:66:42:16:22:88:39:ab:15:29:
                    3e:8d:f5:73:7c:5e:c7:da:a7:0e:b8:03:24:69:56:
                    45:2e:22:d1:57:f3:57:10:24:35:f4:64:75:9b:bd:
                    63:5d:e1:8b:dc:2c:9e:03:1f:1b:3c:90:6a:3c:76:
                    37:a8:94:79:58:b6:8c:07:4c:a5:4d:b6:df:8b:25:
                    f2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:8B:F3:F4:B6:70:B9:75:13:DD:24:C7:28:F4:4D:28:81:E8:4D:6B
            X509v3 Authority Key Identifier:
                keyid:CA:8C:FE:27:D8:22:7A:31:75:8D:EB:C3:C8:CF:B4:9A:68:BD:9C:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181C22/516C79787FF611F19F03B68591A30FBC/yoz-J9giejF1jevDyM-0mmi9nBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoz-J9giejF1jevDyM-0mmi9nBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181C22/516C79787FF611F19F03B68591A30FBC/yoz-J9giejF1jevDyM-0mmi9nBY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:20:bb:62:a3:94:7b:0c:91:1d:6a:9d:09:e3:80:13:c1:b7:
         12:c4:c5:33:ed:c3:42:5c:1a:24:89:6c:06:73:bf:c3:55:25:
         d0:98:9d:73:68:dc:6d:1e:36:43:ce:34:6c:19:86:28:31:42:
         96:3f:a6:71:15:b3:47:38:fb:d6:5e:82:06:25:3c:89:49:29:
         eb:a8:0e:df:e9:7d:ca:d2:a3:d5:a8:85:be:58:90:02:fb:46:
         b3:b0:10:33:74:e7:41:8d:c3:ac:c4:01:48:65:3c:74:3e:2b:
         14:26:0d:98:c5:b2:db:fd:5e:35:b6:2b:8a:07:2d:2a:64:b4:
         81:e5:b4:9f:cb:ad:1d:65:05:d4:51:9b:f1:2c:ac:1a:cf:37:
         e0:e7:85:42:24:d7:5c:d5:41:e1:e3:ee:f5:53:fb:dd:8b:48:
         40:c4:6d:87:cb:4a:a4:98:ed:73:21:97:b2:f2:51:3a:f7:ac:
         1f:a9:6c:c5:a7:eb:3a:67:91:f1:1f:a6:bc:5c:7a:b2:bd:45:
         34:da:42:68:51:4c:0a:e3:43:9c:c7:03:e8:af:ca:e7:95:41:
         6e:29:2e:d0:a8:42:d4:3c:ea:de:ea:48:43:1a:9c:bb:e3:ee:
         4c:f5:10:b8:2a:9a:c0:5d:8d:59:bd:82:82:94:59:0d:63:58:
         6a:33:83:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:09:26 2026 by rpki-client