Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
File:                     YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft (raw, json)
Hash identifier:          VR9Ty0idEFF8kQCwvL9m855zgr9tgvpTQo4v2i4n+GM=
Subject key identifier:   19:2C:18:54:A4:E1:18:B4:A2:55:98:2A:96:44:2F:EE:C9:69:56:7E
Authority key identifier: 62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E
Certificate issuer:       /CN=A9126996/serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
Certificate serial:       0137
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
Manifest number:          0131
Signing time:             Fri 13 Jun 2025 03:30:22 +0000
Manifest this update:     Fri 13 Jun 2025 03:30:22 +0000
Manifest next update:     Fri 20 Jun 2025 03:30:22 +0000
Files and hashes:         1: YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl (hash: Zi2hL3Or4WcRvQKUmtO2PzeI8VvtoU0PJbtB0LqLfBA=)
                          2: CE24A9DE739411EEB8BAE858C4F9AE02.roa (hash: HWR/P/AZhRPwJK+7MD3Snns1zA5ghns41mNna47imy0=)
                          3: CD34C770739411EEB8BAE858C4F9AE02.roa (hash: dHUWyA7t+OI4Hf/XcvAMzgewNzcJRsL7YMlUVTbODRw=)
                          4: CDB51BDC739411EEB8BAE858C4F9AE02.roa (hash: y80dPuObdKg8H5/o6aPEUDf3ud7ZzBogYMhK2YYNptc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl
                          rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 03:30:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 311 (0x137)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126996, serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
        Validity
            Not Before: Jun 13 03:30:22 2025 GMT
            Not After : Jun 20 03:30:22 2025 GMT
        Subject: CN=684b9b4e-caaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:30:06:75:4e:2f:08:cd:0a:36:0e:49:e3:ae:
                    7e:ff:39:93:5e:81:0f:73:d6:17:d4:3d:3d:d4:46:
                    52:96:dc:57:46:26:2f:0e:95:19:22:b2:48:33:9e:
                    0d:ca:ce:c5:9d:ea:f3:5a:f1:d9:91:1c:78:c8:7d:
                    1f:b5:85:31:28:55:da:b9:cd:07:6e:b1:b3:60:b3:
                    24:a8:f3:d4:3e:7e:9d:90:6a:58:24:eb:8d:d8:d2:
                    aa:3e:50:62:57:1b:6e:aa:10:8d:7e:d4:b2:46:ab:
                    8b:0d:2c:b3:89:4f:0a:49:34:fa:ac:63:86:ed:c2:
                    de:cf:69:d8:88:54:d8:83:d0:1b:e7:d3:d6:aa:0f:
                    50:96:08:dc:47:b1:2f:83:c7:20:50:71:10:64:be:
                    6b:80:e6:52:5d:66:57:da:17:df:a1:25:ce:4b:1c:
                    1d:15:1d:28:6c:0b:8c:ad:b5:a8:1e:4b:85:90:af:
                    d7:f8:1f:b9:80:31:28:ff:a8:a9:65:6c:3d:8f:bc:
                    20:13:6f:15:2c:f2:01:26:28:4c:98:95:db:2f:57:
                    ed:97:0e:f4:73:0e:bc:a6:7b:88:0c:4d:eb:a4:a2:
                    5d:c8:1f:c8:07:14:12:8b:cc:f1:bf:74:f3:f6:90:
                    41:48:a8:16:13:c5:d7:3d:85:70:66:a6:a3:a5:0d:
                    28:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:2C:18:54:A4:E1:18:B4:A2:55:98:2A:96:44:2F:EE:C9:69:56:7E
            X509v3 Authority Key Identifier:
                keyid:62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:5d:85:d3:10:21:3f:61:f2:e5:02:d7:c0:fa:71:15:e0:17:
         52:87:b8:8c:69:d7:e7:da:88:cf:47:e7:6c:78:90:b7:e4:8a:
         89:77:b2:83:f8:c3:ce:99:90:3f:2a:c0:09:ff:a7:f9:e2:78:
         5f:b7:54:b4:ad:12:55:37:c0:33:fa:b1:00:62:32:2e:42:f2:
         33:ae:dd:87:18:b9:d8:43:29:02:28:8f:9a:08:b5:55:55:4e:
         d6:7d:50:a2:09:ad:20:6c:46:1f:03:c4:8a:55:b4:81:ee:c8:
         4e:5e:58:02:f1:c4:35:b1:e5:58:1b:69:f0:c5:60:a9:ac:5d:
         96:c9:95:6f:37:d6:66:58:20:94:33:26:dc:fe:7e:bc:25:bd:
         d7:aa:39:3f:96:ad:04:0a:d2:c3:2c:2e:ea:df:00:37:9f:9c:
         2e:f8:d6:ab:af:03:c4:f3:88:ae:43:79:59:30:39:a3:3d:10:
         13:93:1a:ad:16:f9:d5:1d:36:67:ad:fb:70:3c:d3:3b:df:59:
         f1:69:d1:26:51:1b:07:aa:59:2c:85:b9:a4:a1:79:f2:a8:52:
         be:2a:db:8a:5c:52:c3:2e:da:8a:91:58:a8:23:20:0b:17:7b:
         12:35:85:a9:80:29:a2:42:9e:ac:52:1f:a6:df:51:36:02:90:
         44:85:14:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 17:43:57 2025 by rpki-client