Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9181C22/516C79787FF611F19F03B68591A30FBC/yoz-J9giejF1jevDyM-0mmi9nBY.mft
File:                     yoz-J9giejF1jevDyM-0mmi9nBY.mft (raw, json)
Hash identifier:          XPsPGhUsJlxWObjFhE//+9NzpCK5/l86Ew1Ai8S0IYU=
Subject key identifier:   71:51:DC:13:C1:1A:FB:21:87:33:5E:49:BA:69:F2:C6:C9:B0:6E:3B
Authority key identifier: CA:8C:FE:27:D8:22:7A:31:75:8D:EB:C3:C8:CF:B4:9A:68:BD:9C:16
Certificate issuer:       /CN=A9181C22/serialNumber=CA8CFE27D8227A31758DEBC3C8CFB49A68BD9C16
Certificate serial:       2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoz-J9giejF1jevDyM-0mmi9nBY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181C22/516C79787FF611F19F03B68591A30FBC/yoz-J9giejF1jevDyM-0mmi9nBY.mft
Manifest number:          2C
Signing time:             Sat 03 Oct 2026 09:28:47 +0000
Manifest this update:     Sat 03 Oct 2026 09:28:47 +0000
Manifest next update:     Sat 10 Oct 2026 09:28:47 +0000
Files and hashes:         1: yoz-J9giejF1jevDyM-0mmi9nBY.crl (hash: S0apc4mNP3wr340FJsZQwCP8QByg7N/WOv648Z/iBFk=)
                          2: 790311F0862B11F19F545A5A85A30FBC.roa (hash: K758P2i0ED5BUiODFKBBk7m3g6wZiKJoenMN8VI5EMY=)
                          3: 79FCD514862B11F19F545A5A85A30FBC.roa (hash: 0lUhr9E0+OD/ipp8YwvzpZUPTlZiljm7z4wnu4JJie8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181C22/516C79787FF611F19F03B68591A30FBC/yoz-J9giejF1jevDyM-0mmi9nBY.crl
                          rsync://rpki.apnic.net/member_repository/A9181C22/516C79787FF611F19F03B68591A30FBC/yoz-J9giejF1jevDyM-0mmi9nBY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoz-J9giejF1jevDyM-0mmi9nBY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 09:28:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181C22, serialNumber=CA8CFE27D8227A31758DEBC3C8CFB49A68BD9C16
        Validity
            Not Before: Oct  3 09:28:47 2026 GMT
            Not After : Oct 10 09:28:47 2026 GMT
        Subject: CN=6ac0cacf-4c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:af:d3:99:a3:ba:04:4c:31:31:28:18:7e:de:
                    59:f4:5a:c3:09:d2:8e:cc:d1:be:7a:3b:20:89:7d:
                    28:f3:fa:d6:81:4a:20:77:bd:9d:af:38:57:ab:ce:
                    0d:7c:7f:f8:cd:15:e0:4a:f5:87:b3:12:1a:c6:02:
                    97:7b:62:4d:1f:00:0a:f5:e9:b9:f4:31:2e:2a:22:
                    2c:7e:c0:ac:93:17:57:31:f0:83:21:16:17:b2:0e:
                    1f:ca:92:36:7c:9d:62:37:ca:24:8c:47:91:9a:58:
                    f3:2b:ea:dd:03:5a:02:80:e0:fb:eb:bd:ce:aa:25:
                    05:b2:77:68:ad:2f:e4:cf:7b:34:7a:d8:c4:7f:26:
                    7c:e2:84:97:59:66:9a:47:ac:6e:bd:26:d7:1f:c8:
                    c9:8a:7e:3b:95:98:9e:f3:0d:85:87:eb:1b:14:cc:
                    79:5d:94:71:5e:b9:cb:18:85:94:d3:9c:92:81:b3:
                    31:25:9c:69:99:f7:53:dc:6e:d5:58:cf:ce:5d:9f:
                    3b:75:8c:4d:c1:76:4b:76:0e:08:5d:d0:fd:63:de:
                    5f:f8:ea:4f:54:95:bb:5b:79:36:9c:22:1f:d7:0e:
                    20:02:cc:40:d7:d4:0c:1b:2c:4d:0a:e1:53:1f:64:
                    53:f9:7f:5d:9f:aa:f6:29:38:e4:9e:0a:c6:a1:d7:
                    80:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:51:DC:13:C1:1A:FB:21:87:33:5E:49:BA:69:F2:C6:C9:B0:6E:3B
            X509v3 Authority Key Identifier:
                keyid:CA:8C:FE:27:D8:22:7A:31:75:8D:EB:C3:C8:CF:B4:9A:68:BD:9C:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181C22/516C79787FF611F19F03B68591A30FBC/yoz-J9giejF1jevDyM-0mmi9nBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoz-J9giejF1jevDyM-0mmi9nBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181C22/516C79787FF611F19F03B68591A30FBC/yoz-J9giejF1jevDyM-0mmi9nBY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:20:fb:5c:64:d1:ad:a0:09:b3:ae:10:e3:c2:3b:34:fb:4a:
         08:b3:06:b0:49:f1:0b:6e:75:cf:0b:5b:dd:a2:4c:56:5e:a2:
         b2:ab:6b:c4:9e:1a:85:fa:e4:4f:fc:b1:10:7b:ce:0e:f5:29:
         1f:87:a5:90:9b:21:c7:10:c3:07:6a:9b:7e:b5:fb:71:54:69:
         29:53:04:4d:93:41:d1:63:7d:8c:49:9a:f3:60:04:47:c0:ec:
         9f:20:72:9d:12:3d:4b:37:0e:dc:f5:0b:25:39:8e:2e:54:a5:
         8f:5e:c1:21:ec:d5:c6:19:48:44:60:54:98:cd:25:50:24:0d:
         81:c3:5a:1e:6b:80:22:26:1e:3f:42:da:65:a8:99:34:0b:9c:
         07:39:e1:9c:66:19:c8:69:d4:8a:5a:71:69:91:f7:60:2c:3a:
         3d:ab:1c:ea:a5:8e:85:e0:49:08:d4:37:fa:c4:3b:ba:2c:2c:
         fd:7b:1f:c8:b4:a4:7e:01:67:77:36:45:b9:b4:2a:af:a3:00:
         47:00:07:be:92:c1:db:1d:6b:50:27:7d:ea:57:46:1a:a5:45:
         70:5e:c7:aa:52:22:08:5a:ee:8f:55:9c:70:42:c8:f2:85:14:
         f8:ac:cd:ca:5d:31:14:b9:f5:c8:20:f9:2b:ff:ba:1a:e0:6e:
         c8:3b:d9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:20:33 2026 by rpki-client