Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
File:                     YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft (raw, json)
Hash identifier:          ttmMiVueL5SKTf4OAJZfwR6haSWC8mMMnycRlSB/aBo=
Subject key identifier:   3F:95:F4:89:7F:CD:D6:B4:CF:F7:08:D4:B5:8F:54:FE:56:4A:6A:E2
Authority key identifier: 62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E
Certificate issuer:       /CN=A9126996/serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
Certificate serial:       01E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
Manifest number:          01D1
Signing time:             Fri 17 Apr 2026 03:21:59 +0000
Manifest this update:     Fri 17 Apr 2026 03:21:58 +0000
Manifest next update:     Fri 24 Apr 2026 03:21:58 +0000
Files and hashes:         1: YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl (hash: dhY1LAwsamaSR+s4/G4sZOysowpZ+SPWLuRjobHvo4Q=)
                          2: CD34C770739411EEB8BAE858C4F9AE02.roa (hash: qZE2RJVXRkOaQUu308Ogy2i4oQQi5FTddemUiT3SAjM=)
                          3: CDB51BDC739411EEB8BAE858C4F9AE02.roa (hash: wNyWzcRKJYqMachMShaQ5xH7ilqP4KvZkktUsCzRUfA=)
                          4: CE24A9DE739411EEB8BAE858C4F9AE02.roa (hash: 1ypTR4tpjHhybEU79OLgj9vwi7cGiaHW8fChke9PVj0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl
                          rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:21:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 480 (0x1e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126996, serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
        Validity
            Not Before: Apr 17 03:21:58 2026 GMT
            Not After : Apr 24 03:21:58 2026 GMT
        Subject: CN=69e1a756-9de5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:74:ac:5b:a5:ff:3f:ac:3c:87:4b:df:94:08:
                    f2:96:ff:cf:7e:7d:d1:be:99:f4:ac:f7:c2:89:06:
                    ee:7d:ea:17:2a:45:47:b4:3d:45:03:6b:8e:07:d8:
                    d1:d9:b3:bb:68:0a:4d:c2:70:02:5f:f7:2b:57:93:
                    46:7c:5e:9c:8c:1d:7a:d6:bd:5b:7e:be:dd:36:25:
                    0b:8a:c4:0e:95:df:f1:cb:3e:91:45:98:1e:51:21:
                    f3:f8:7e:fb:d6:c8:2b:be:fa:cc:34:56:65:3e:eb:
                    98:97:1d:ec:9a:f7:00:8f:a1:c0:2b:c3:5c:d3:e3:
                    06:58:f3:01:18:e2:88:b2:77:ba:74:9a:81:6d:47:
                    f9:8f:57:3c:89:cd:9d:f2:18:d0:49:d3:73:91:17:
                    e3:cf:be:e5:3b:77:c4:8a:63:78:01:84:b0:29:3b:
                    6c:50:15:40:46:cf:cb:d1:ff:b5:9e:a3:84:6b:ef:
                    42:b6:7c:d5:6a:5e:91:ba:79:d9:9b:13:52:27:6a:
                    85:72:64:00:a5:2b:00:2d:0f:7a:17:84:9d:09:95:
                    a6:80:92:13:32:fa:07:34:19:c8:8f:8e:f2:7d:bd:
                    d2:0d:90:17:d4:5d:8b:72:a5:78:e2:84:42:2e:fb:
                    4e:cb:6b:d5:0c:5d:c1:ea:24:61:f0:c0:2c:0c:c1:
                    b8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:95:F4:89:7F:CD:D6:B4:CF:F7:08:D4:B5:8F:54:FE:56:4A:6A:E2
            X509v3 Authority Key Identifier:
                keyid:62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:ec:81:1a:1e:17:b6:62:aa:85:b2:a6:6f:9d:d4:17:72:53:
         70:00:77:87:38:56:47:29:ad:f9:fb:93:a9:a6:80:55:e2:a9:
         91:44:09:e2:43:77:ce:dd:fd:70:25:37:b4:8a:1c:20:c4:6d:
         27:57:bc:c3:be:06:19:7e:a9:51:8f:34:bf:37:93:93:89:f5:
         58:2f:70:38:90:22:a1:a3:6d:72:02:0e:ea:7e:e3:ee:1a:b2:
         cf:1e:6c:c7:44:cd:d8:06:d7:a9:0b:1b:ac:22:88:fa:b4:b8:
         33:18:54:63:4c:b9:1a:58:82:57:a7:43:8f:f2:35:57:a8:13:
         61:f7:b5:12:81:23:32:d2:76:54:66:21:97:8c:9a:c3:19:a1:
         50:7c:8c:2d:52:a6:21:76:ee:91:07:2e:05:11:61:03:97:22:
         5c:d1:57:a2:86:eb:cb:46:a3:1d:dc:2a:e1:9e:0b:b2:0e:4d:
         22:54:52:2e:20:63:df:ba:71:75:71:cc:40:de:57:bf:c4:f9:
         b5:b5:1b:e0:b7:ac:83:43:25:3a:6a:9b:6e:10:d4:68:a1:d7:
         85:d2:75:b0:fd:aa:b1:13:4b:78:bb:91:56:68:42:58:fe:a6:
         ba:bb:04:8f:f7:9b:27:c1:fb:03:9a:ff:86:ae:ff:4f:64:50:
         6f:f3:26:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:05:34 2026 by rpki-client