Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
File:                     YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft (raw, json)
Hash identifier:          naOJXUvjm/6egJ/J6RDvhwdMrJr6JrSQuP1zmf2+rbo=
Subject key identifier:   F8:76:DF:FA:58:79:D3:B5:53:43:BA:2C:CB:C3:A7:46:80:F8:6C:D5
Authority key identifier: 62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E
Certificate issuer:       /CN=A9126996/serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
Certificate serial:       011F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
Manifest number:          0119
Signing time:             Fri 25 Apr 2025 03:53:45 +0000
Manifest this update:     Fri 25 Apr 2025 03:53:44 +0000
Manifest next update:     Fri 02 May 2025 03:53:44 +0000
Files and hashes:         1: YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl (hash: uZKNPJaTmtEbRJjXeje2uUuHoaJxyHYoMJ2XtVkcCqU=)
                          2: CE24A9DE739411EEB8BAE858C4F9AE02.roa (hash: HWR/P/AZhRPwJK+7MD3Snns1zA5ghns41mNna47imy0=)
                          3: CD34C770739411EEB8BAE858C4F9AE02.roa (hash: dHUWyA7t+OI4Hf/XcvAMzgewNzcJRsL7YMlUVTbODRw=)
                          4: CDB51BDC739411EEB8BAE858C4F9AE02.roa (hash: y80dPuObdKg8H5/o6aPEUDf3ud7ZzBogYMhK2YYNptc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl
                          rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 03:53:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 287 (0x11f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126996, serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
        Validity
            Not Before: Apr 25 03:53:44 2025 GMT
            Not After : May  2 03:53:44 2025 GMT
        Subject: CN=680b0749-f438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7d:e4:24:25:e9:6f:7c:39:c6:50:31:99:2f:
                    7b:27:da:00:22:f0:c4:4c:94:ca:57:fe:5d:42:ea:
                    32:bc:98:f0:3a:dd:b7:a0:63:a2:5e:c3:b9:ca:a9:
                    5b:b4:58:19:ec:4e:ef:47:27:65:0e:19:41:69:bc:
                    0b:05:d9:e1:b8:ed:52:eb:c2:f9:f7:64:34:fc:2a:
                    74:8e:29:44:9d:46:b4:52:65:e8:92:9d:a5:2b:98:
                    66:47:f5:ca:6a:ec:72:65:9b:9f:fb:12:2a:f4:a6:
                    f5:3d:e1:6a:f3:bd:1f:7d:ea:75:da:c4:18:f9:d7:
                    47:88:d4:cb:fe:ab:e6:b2:91:ad:c7:78:60:14:40:
                    1c:8b:7d:ae:bc:59:91:44:e3:ff:57:10:f1:9a:d5:
                    6d:49:31:ee:8e:14:94:ee:ed:72:df:38:9f:dd:42:
                    04:53:89:af:30:03:01:60:51:17:1f:be:25:c0:69:
                    7d:53:2e:45:c7:08:72:95:96:ac:1d:56:53:fe:32:
                    60:d9:d9:23:5b:9a:26:4c:2d:e9:26:2f:92:7d:da:
                    36:df:6d:55:d0:5c:70:e2:be:08:0e:42:74:80:b6:
                    26:57:6f:e8:00:63:00:3d:74:18:bb:39:ff:e8:81:
                    5b:48:d2:69:2e:2b:a0:0b:67:64:1e:8f:86:b0:5c:
                    7a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:76:DF:FA:58:79:D3:B5:53:43:BA:2C:CB:C3:A7:46:80:F8:6C:D5
            X509v3 Authority Key Identifier:
                keyid:62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:3d:53:4c:2d:46:2b:72:64:f1:a4:31:13:3d:0e:92:c0:e8:
         19:77:fe:2e:aa:01:4a:de:bb:92:e4:67:34:52:f7:a4:a5:91:
         ed:21:52:e1:b0:7c:f0:89:4d:66:05:f9:9f:c0:26:e8:14:a5:
         35:3e:e7:bb:cb:00:50:40:e9:22:37:65:52:fc:89:e5:10:41:
         08:5a:17:20:11:b1:05:f6:b1:73:50:90:aa:be:0b:6e:f0:2b:
         b6:c0:25:4f:e0:7b:a3:ed:71:ed:e6:23:ec:00:4f:a3:38:61:
         d4:71:f3:f1:16:f9:66:47:50:bf:1c:90:3d:e4:bf:50:c2:fa:
         87:c5:70:00:1a:6a:ad:ed:a0:ab:cf:0c:ca:ac:60:51:26:71:
         4d:10:82:2b:28:fb:fc:59:fb:dc:25:ba:3b:7e:dc:03:1d:15:
         cd:a1:2c:3d:e9:2d:fb:a1:60:d1:11:10:d8:c0:80:15:90:35:
         99:3a:6e:88:3e:a6:d8:4e:96:c8:97:1c:d3:3c:2a:43:7a:1a:
         0a:6f:49:a4:ab:8c:2a:16:39:19:df:67:4c:6e:35:24:c3:2e:
         d9:db:0b:6d:86:5c:f9:9d:21:e2:13:97:39:57:75:6b:eb:1d:
         4d:9b:0f:2c:5c:aa:4f:8f:16:e1:b5:6f:3c:6b:2e:7f:5b:c2:
         60:0f:1a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:21:56 2025 by rpki-client