Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
File:                     YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft (raw, json)
Hash identifier:          a+loIrLw9d3xElzQDjj/Avi77IXpPrGS57Rrfo1qlXg=
Subject key identifier:   E1:CD:15:AB:F1:FC:A0:3B:B9:BA:42:4C:E3:21:C4:35:63:12:6A:34
Authority key identifier: 62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E
Certificate issuer:       /CN=A9126996/serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
Certificate serial:       0229
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
Manifest number:          0217
Signing time:             Mon 31 Aug 2026 03:51:55 +0000
Manifest this update:     Mon 31 Aug 2026 03:51:54 +0000
Manifest next update:     Mon 07 Sep 2026 03:51:54 +0000
Files and hashes:         1: YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl (hash: Ub0FPnTvlzEIcPxaLwjR9khIPg2kFAoPYMSK5DFNk4c=)
                          2: CDB51BDC739411EEB8BAE858C4F9AE02.roa (hash: FCrLiwYHO+gGxzV/UjjW2dmefunZUp5R/lmKyNKr/CI=)
                          3: CE24A9DE739411EEB8BAE858C4F9AE02.roa (hash: 4ahWqxQvl8elCs1UptFAhORYOkZcTrsAbGkMLik0CTE=)
                          4: CD34C770739411EEB8BAE858C4F9AE02.roa (hash: eVVo4i8w9S86ym4XeGvHdcL3OB0X4iTyUgG3ihZswCE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl
                          rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 03:51:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 553 (0x229)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126996, serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
        Validity
            Not Before: Aug 31 03:51:54 2026 GMT
            Not After : Sep  7 03:51:54 2026 GMT
        Subject: CN=6a94fa5b-c0f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7f:21:52:c5:07:cb:fd:4f:89:f5:05:bc:19:
                    e1:72:e0:2a:eb:a2:50:7c:b1:1d:da:4b:08:b3:de:
                    e6:22:9b:7b:90:29:a6:a9:63:33:df:47:9d:6c:86:
                    eb:0a:c5:e1:30:bf:69:aa:71:13:04:78:81:1d:5b:
                    8a:2c:db:56:aa:6e:5e:7f:2c:37:19:17:f2:2a:51:
                    1e:84:b8:fa:19:9c:b4:96:88:dc:8e:87:96:ee:d1:
                    5e:d4:0e:34:20:c3:35:ab:a6:df:33:05:d4:56:d6:
                    46:95:d3:0a:f2:0e:52:a2:65:6c:10:9d:7c:6e:34:
                    42:fd:c4:2b:52:aa:b6:ed:79:78:8c:8c:09:ee:54:
                    25:63:07:d5:cc:85:c8:8d:7c:03:a1:f5:f3:23:21:
                    a0:5f:5c:05:f1:4d:90:86:fe:39:0f:d5:90:6f:e5:
                    96:34:ad:99:9b:59:cb:a3:1c:56:df:93:c3:cf:c3:
                    09:67:70:9f:86:2b:cf:de:27:4a:42:5d:07:19:1a:
                    1e:47:75:18:d9:43:42:ae:bc:89:87:95:f1:a8:16:
                    5c:4d:1c:48:0c:98:ec:30:e2:53:82:2e:67:66:7b:
                    c9:08:aa:0d:4a:35:51:90:38:65:44:26:7f:10:ed:
                    d9:81:f3:ee:70:23:c6:f8:47:82:2f:e2:c4:50:65:
                    54:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:CD:15:AB:F1:FC:A0:3B:B9:BA:42:4C:E3:21:C4:35:63:12:6A:34
            X509v3 Authority Key Identifier:
                keyid:62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:bc:31:12:0e:bb:2e:98:38:a8:b4:0e:97:06:3e:47:3e:bc:
         03:08:04:57:7e:65:75:22:89:4f:8a:30:bc:fa:c8:85:7e:bf:
         95:da:c7:27:03:81:ca:ff:dc:c3:b2:a9:0e:36:11:8f:12:f6:
         97:c1:fc:00:b0:6d:80:ee:bc:fb:38:6a:49:bf:1b:06:ce:4b:
         3b:c9:b9:2c:18:5d:66:df:bb:d5:0b:5f:24:06:4e:ca:ea:b5:
         dc:07:fb:10:c5:b1:48:e6:e2:e9:57:83:ae:9b:36:c2:24:3c:
         e9:bd:38:20:5d:dc:53:17:c3:3d:2b:1e:15:c3:4f:aa:a6:17:
         c5:07:08:d9:3f:56:26:d8:cf:1c:06:d9:63:bb:2b:4f:42:55:
         68:5e:c7:0e:3b:0f:dc:ad:e8:43:02:f7:54:c5:d8:42:98:9b:
         05:86:4a:f5:6f:88:fb:eb:23:55:9c:37:f7:7a:c0:e6:1a:54:
         60:8f:e0:ae:da:aa:8e:3c:5d:98:f9:d4:8e:60:92:d9:c2:ec:
         48:c7:e4:24:5d:af:64:11:03:0a:f9:88:54:3c:9e:0f:0c:42:
         25:48:41:f4:74:56:3e:08:e7:81:49:92:9e:f8:2c:47:f9:eb:
         6c:32:3b:84:37:b7:13:ce:01:4a:29:c8:b5:d9:9e:c0:36:c9:
         31:e7:54:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 13:22:51 2026 by rpki-client