Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft
File:                     yoPUPlpeWcd1mxubL72YqUff07w.mft (raw, json)
Hash identifier:          ldBc/+vQb2oSjzWA8RqSsHzsygJVeDFO4IJe67IHI2o=
Subject key identifier:   08:41:F7:8A:3C:AB:BC:69:EC:41:2F:A2:78:92:F1:35:B0:D6:72:63
Authority key identifier: CA:83:D4:3E:5A:5E:59:C7:75:9B:1B:9B:2F:BD:98:A9:47:DF:D3:BC
Certificate issuer:       /CN=A9136DD6/serialNumber=CA83D43E5A5E59C7759B1B9B2FBD98A947DFD3BC
Certificate serial:       1189
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft
Manifest number:          1158
Signing time:             Fri 04 Sep 2026 17:13:14 +0000
Manifest this update:     Fri 04 Sep 2026 17:13:14 +0000
Manifest next update:     Fri 11 Sep 2026 17:13:14 +0000
Files and hashes:         1: yoPUPlpeWcd1mxubL72YqUff07w.crl (hash: gSGi/aiZQRBHNEzAkZfbXFG2bzOyxr+ZPEuqbPfFV20=)
                          2: AAAA30A6288411EEAD22D65DC4F9AE02.roa (hash: 7K/QpVAO7JoVbT1z1p+Qj6Yu5pdtMluMhKw9vV8LigY=)
                          3: 7B306A34218D11EC87C96D6DC4F9AE02.roa (hash: UaBguah8aqrFfyBedD0PzoPcWPfm260vsagvZpaZCng=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.crl
                          rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 17:13:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4489 (0x1189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136DD6, serialNumber=CA83D43E5A5E59C7759B1B9B2FBD98A947DFD3BC
        Validity
            Not Before: Sep  4 17:13:14 2026 GMT
            Not After : Sep 11 17:13:14 2026 GMT
        Subject: CN=6a9afc2a-5952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e7:30:12:64:c7:d5:7f:b9:91:ee:2b:eb:a1:
                    50:53:6e:72:6d:ad:8c:ee:c0:d2:de:96:03:7d:70:
                    39:94:25:6e:3f:23:20:b2:00:34:4a:6c:4a:6c:e1:
                    4d:9e:51:7d:a4:c0:d5:67:ba:23:7b:80:36:65:3d:
                    24:09:66:ac:68:ca:d8:e3:26:0d:5a:25:2b:c0:cf:
                    f1:26:c2:81:6a:31:d8:2f:24:4b:5b:ee:47:db:80:
                    24:aa:6a:68:42:5b:e7:e0:2a:d9:d2:73:9e:4d:f6:
                    c7:d0:68:0a:60:70:39:8d:03:46:c8:a9:c9:d6:c6:
                    d1:ed:18:69:46:9c:65:f1:00:6c:1c:3a:28:c3:1e:
                    94:db:df:93:a1:cc:1d:dd:de:5b:ec:aa:3e:da:50:
                    89:2d:60:da:ec:25:a3:63:01:55:83:c5:79:ed:8d:
                    a6:64:3f:c6:04:00:e5:12:4d:e2:7a:27:87:72:45:
                    16:6f:42:7d:b1:e7:f2:cc:c9:e5:37:a5:17:85:bb:
                    cd:7b:d1:03:a3:63:9e:54:aa:d9:91:e9:51:a9:bb:
                    a1:ec:ca:e8:d2:be:a6:e1:8a:d7:07:25:8d:42:a6:
                    59:74:f7:6d:aa:28:fd:f7:d9:6b:8e:c2:c8:bd:c6:
                    19:e8:7f:ce:df:0a:42:38:4a:a4:c0:88:52:62:0b:
                    9a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:41:F7:8A:3C:AB:BC:69:EC:41:2F:A2:78:92:F1:35:B0:D6:72:63
            X509v3 Authority Key Identifier:
                keyid:CA:83:D4:3E:5A:5E:59:C7:75:9B:1B:9B:2F:BD:98:A9:47:DF:D3:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:75:3d:90:dc:bf:b5:20:ce:50:50:67:28:be:56:5d:98:f3:
         a2:78:fb:0a:30:51:fc:30:11:cb:72:1d:00:88:8b:4a:a5:05:
         29:88:b1:41:4d:2d:b8:93:a5:34:56:41:a6:2e:67:04:1f:79:
         64:3d:4e:7d:21:d7:80:de:f4:36:21:93:dc:0d:23:e8:05:24:
         e2:7e:38:d6:2c:bc:15:b8:51:33:68:6e:e1:eb:57:9f:94:84:
         68:d4:f5:11:89:ec:fb:78:a2:84:83:02:86:ad:fd:40:af:5b:
         e3:8a:a6:72:33:0d:11:22:7d:26:49:cb:33:09:d3:51:3d:b1:
         9f:52:4a:59:44:3f:a2:8e:f3:69:17:bd:33:3e:48:39:40:3e:
         69:17:fb:a2:a1:f4:55:65:11:e7:8e:05:e5:61:39:0d:2d:5e:
         b9:e6:66:b6:22:cf:a5:38:c5:be:ac:8d:35:7f:2a:cb:3c:af:
         c2:e3:53:a1:67:2f:90:cc:bb:d5:8a:89:f3:37:ea:37:8e:29:
         d3:bb:a8:70:b5:34:2f:9c:50:09:bb:e5:d2:cc:5c:a5:eb:bd:
         76:93:0b:54:26:e7:7c:ca:f2:bf:19:d4:a5:32:16:ca:03:88:
         34:2c:a2:1b:30:cb:bc:40:60:d0:51:03:b5:92:3b:b5:47:a4:
         81:fe:7b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:00:16 2026 by rpki-client