Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft
File:                     yukPRsIh0AstoIB61MSwZQM3Q0Q.mft (raw, json)
Hash identifier:          62gazWCiQCESLAl2hMKbMp+8A0ft6m7V7kOvUzHMBvE=
Subject key identifier:   79:9A:9D:75:29:9A:9B:45:65:61:27:32:22:FA:58:80:92:07:42:04
Authority key identifier: CA:E9:0F:46:C2:21:D0:0B:2D:A0:80:7A:D4:C4:B0:65:03:37:43:44
Certificate issuer:       /CN=A9148526/serialNumber=CAE90F46C221D00B2DA0807AD4C4B06503374344
Certificate serial:       0201
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft
Manifest number:          01FB
Signing time:             Wed 23 Sep 2026 03:06:03 +0000
Manifest this update:     Wed 23 Sep 2026 03:06:03 +0000
Manifest next update:     Wed 30 Sep 2026 03:06:03 +0000
Files and hashes:         1: yukPRsIh0AstoIB61MSwZQM3Q0Q.crl (hash: ezxLXrxouaQOKT3+aHmMqaKjLKYYeuhFPOA1V/emnxc=)
                          2: 40F782C8B4AA11EEB330C137C4F9AE02.roa (hash: FPpOxqoZqRG2kj3GgFDrDDyQvTzjYGIWWyU3Fd62Dok=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.crl
                          rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 03:06:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 513 (0x201)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148526, serialNumber=CAE90F46C221D00B2DA0807AD4C4B06503374344
        Validity
            Not Before: Sep 23 03:06:03 2026 GMT
            Not After : Sep 30 03:06:03 2026 GMT
        Subject: CN=6ab3421b-04db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b5:21:29:78:79:eb:d1:8a:f8:63:42:95:d0:
                    ad:dc:21:2b:f3:4d:f0:3b:80:69:21:06:1d:11:aa:
                    5f:d5:84:93:da:5f:54:be:73:73:03:ac:c6:26:e5:
                    ba:26:58:dd:31:7c:63:d1:7c:2f:98:ce:30:48:44:
                    a1:ce:5f:01:31:8f:f7:e3:99:47:c0:58:15:a5:7b:
                    f1:55:b4:32:a4:69:89:27:1c:43:3b:e7:eb:fd:85:
                    53:e5:72:c6:c3:ea:51:e4:b8:0a:39:44:93:55:d7:
                    a1:26:35:71:06:d2:01:40:52:7a:30:66:27:74:40:
                    59:5e:65:29:bf:0e:a7:67:39:02:e2:49:a1:86:85:
                    29:51:c7:dd:23:2a:55:37:13:2b:aa:86:8a:b4:bd:
                    20:87:a9:87:6b:bd:0b:78:95:23:49:33:01:b6:75:
                    22:9d:6c:11:a3:95:83:07:e2:14:a0:73:19:8f:74:
                    42:95:40:30:99:bd:62:2b:c2:38:78:be:d5:43:bd:
                    e2:e8:49:63:cc:e9:9d:01:ed:76:1f:a2:0d:9a:ac:
                    85:c7:34:e9:c3:19:b7:dc:98:16:c4:aa:ff:6f:b7:
                    d2:30:fa:af:fc:c5:cf:5d:13:27:9d:31:fc:93:a6:
                    92:46:5a:a9:0d:54:79:64:a1:d4:ad:72:e6:07:88:
                    e0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:9A:9D:75:29:9A:9B:45:65:61:27:32:22:FA:58:80:92:07:42:04
            X509v3 Authority Key Identifier:
                keyid:CA:E9:0F:46:C2:21:D0:0B:2D:A0:80:7A:D4:C4:B0:65:03:37:43:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:8c:1f:5b:15:a1:e7:91:23:5b:a1:98:a7:40:f6:f5:9f:4a:
         5f:ac:8c:72:7f:7a:92:04:8e:4b:98:b2:d3:3d:de:58:12:3c:
         65:e7:4c:f9:db:b0:d8:e5:1c:9f:6e:bc:1f:3d:db:f7:a2:f7:
         01:54:5a:8f:d3:69:1b:f8:22:5f:23:e5:0a:81:f1:bb:f0:74:
         95:cc:5d:7a:1e:4a:29:42:df:6b:cd:42:18:f3:21:d3:be:25:
         8c:4b:c8:da:48:a3:d8:a2:d4:6e:4f:71:a1:ac:52:90:d9:8b:
         6b:84:33:fd:f4:73:d0:6e:5a:d8:28:9b:e4:71:eb:e1:5b:a8:
         de:a0:ca:fc:e3:64:bb:43:9b:72:3e:a9:00:a9:a0:04:2b:12:
         fc:3e:c2:31:31:8f:6c:62:6b:a7:83:ff:84:9d:19:ec:78:3d:
         23:dc:ff:5f:a7:d3:e3:89:3f:21:60:bd:4a:ff:65:76:a2:f9:
         f9:ab:2a:6c:61:34:2f:db:83:99:09:e0:3b:72:4c:3e:de:04:
         ed:4f:76:46:e4:82:80:ea:0f:81:61:91:94:d4:0f:2d:1d:09:
         9b:1e:5a:65:ef:1a:c3:88:3e:0b:0b:d5:a0:5d:24:9f:73:bb:
         4d:0c:d2:4d:d7:26:d5:a3:6a:96:63:ca:d5:f8:f3:0d:9a:78:
         af:cf:b0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:38:30 2026 by rpki-client