Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
File:                     YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft (raw, json)
Hash identifier:          qCx0thwiJ+xxfpnLbUUziADkVFU9kQkFylNPYL21u5k=
Subject key identifier:   F9:BC:20:98:98:16:A2:43:9A:05:E5:7A:CB:51:89:BC:C2:01:DB:04
Authority key identifier: 62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E
Certificate issuer:       /CN=A9126996/serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
Certificate serial:       0234
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
Manifest number:          0222
Signing time:             Mon 21 Sep 2026 02:50:59 +0000
Manifest this update:     Mon 21 Sep 2026 02:50:59 +0000
Manifest next update:     Mon 28 Sep 2026 02:50:59 +0000
Files and hashes:         1: YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl (hash: TGJvs6xyZqsDvMSKi2e7/gp25iF4bBk0poYzY4UV2/4=)
                          2: CD34C770739411EEB8BAE858C4F9AE02.roa (hash: eVVo4i8w9S86ym4XeGvHdcL3OB0X4iTyUgG3ihZswCE=)
                          3: CDB51BDC739411EEB8BAE858C4F9AE02.roa (hash: FCrLiwYHO+gGxzV/UjjW2dmefunZUp5R/lmKyNKr/CI=)
                          4: CE24A9DE739411EEB8BAE858C4F9AE02.roa (hash: 4ahWqxQvl8elCs1UptFAhORYOkZcTrsAbGkMLik0CTE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl
                          rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 564 (0x234)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126996, serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
        Validity
            Not Before: Sep 21 02:50:59 2026 GMT
            Not After : Sep 28 02:50:59 2026 GMT
        Subject: CN=6ab09b93-33f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e7:ce:3c:36:17:de:8d:4e:07:88:fb:db:de:
                    40:9a:8c:bc:d0:77:4d:9b:d0:ea:5b:e7:86:95:3a:
                    15:25:a4:b3:47:39:e3:9f:5c:97:71:41:46:53:7a:
                    91:b8:b3:90:76:d9:32:db:35:0c:52:8a:01:72:1b:
                    7c:20:f0:e2:ff:d4:9e:02:c3:a2:dc:bf:c2:c2:1c:
                    5f:09:aa:75:e3:c0:21:92:6d:f3:7a:6d:a1:0a:8f:
                    b0:ac:89:30:f6:71:cf:d1:6b:ff:b1:3d:80:85:94:
                    94:f2:31:9a:59:24:eb:81:67:41:e0:f8:b2:e4:91:
                    02:8e:db:bc:8f:75:7f:c6:5c:96:b9:cb:9a:d5:5c:
                    3e:1b:2d:68:f3:0a:12:59:3f:ad:d1:e9:f6:c8:13:
                    f8:19:e6:52:b8:81:d8:02:68:23:93:66:d9:8a:6e:
                    0a:f0:15:5e:26:b9:48:1d:83:80:af:66:80:58:1a:
                    88:c0:52:c7:d3:2b:17:47:35:16:75:58:21:7d:b1:
                    57:98:2a:81:04:de:88:fb:43:b3:3b:39:df:76:d9:
                    fa:ba:ef:05:d2:4e:a0:b1:14:c8:67:c4:52:71:62:
                    78:d1:b6:94:6b:23:3a:2a:af:7c:ec:95:c5:75:3b:
                    b0:5c:ee:c5:04:c6:f0:73:5d:31:51:8a:c3:72:16:
                    b1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:BC:20:98:98:16:A2:43:9A:05:E5:7A:CB:51:89:BC:C2:01:DB:04
            X509v3 Authority Key Identifier:
                keyid:62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:f3:09:4f:fe:87:f7:b6:45:ce:d4:de:5a:7a:8e:19:09:09:
         b8:47:1e:ee:4d:46:9d:ed:61:1f:3a:4e:47:77:50:14:91:22:
         a5:6c:00:bb:22:04:a7:73:f3:26:42:2b:c0:43:e4:24:34:64:
         cf:e9:5e:fb:87:1b:d2:6a:47:67:b6:4c:48:c8:6e:a0:64:19:
         59:a7:44:f9:d6:c4:24:fd:c7:63:45:45:c5:8b:66:c0:e1:7a:
         83:4a:95:6e:28:31:ee:24:c1:fd:1a:2f:01:99:2b:a6:e9:f9:
         21:9e:41:a9:9f:0c:ce:22:b1:7c:75:cb:99:87:12:b5:5d:38:
         f5:bd:da:9b:8b:be:5c:48:63:d1:f9:96:c1:e9:50:7d:d6:ac:
         06:36:50:a2:fc:00:7d:16:f4:5f:06:31:3a:42:14:79:78:6d:
         1e:6c:24:86:f4:5f:03:cd:1e:03:33:24:c4:ef:11:c3:da:15:
         6b:d5:8d:8e:8f:1b:cb:cf:6b:95:28:70:00:25:e8:49:c3:7a:
         67:4c:f2:f7:c5:0b:f9:d5:b7:1c:bd:17:e4:58:10:da:9e:3e:
         3b:ff:33:9e:45:be:a7:27:1e:7f:c6:b7:2e:f9:6a:c0:0a:77:
         ed:13:a9:b4:d1:7f:c6:8a:18:2c:d6:79:73:8f:91:30:72:41:
         98:cf:b2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:20:10 2026 by rpki-client