Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
File:                     YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft (raw, json)
Hash identifier:          qTgo/rRw1r4Kn/C9VZ/Kim9PhPkWgx1oKLAWGk9lOlk=
Subject key identifier:   5D:EA:80:9C:8F:B0:BB:26:CB:02:42:4A:68:B4:52:1C:9B:0B:B1:FA
Authority key identifier: 62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E
Certificate issuer:       /CN=A9126996/serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
Certificate serial:       0160
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
Manifest number:          0157
Signing time:             Sat 23 Aug 2025 04:15:48 +0000
Manifest this update:     Sat 23 Aug 2025 04:15:48 +0000
Manifest next update:     Sat 30 Aug 2025 04:15:48 +0000
Files and hashes:         1: YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl (hash: lNFznrzqMZO2gpQPaWeZMHrqRdzEcOuapJmwey4/tAs=)
                          2: CE24A9DE739411EEB8BAE858C4F9AE02.roa (hash: ZJiErtj7JD3f7pzyajmZVPN6isJjBUZ76oGPIUUVwBY=)
                          3: CD34C770739411EEB8BAE858C4F9AE02.roa (hash: rPDc7wA9YBNlcWlKBr0IYLRQFab23zFVZPlqITK1zkE=)
                          4: CDB51BDC739411EEB8BAE858C4F9AE02.roa (hash: ikqljjgT32Bw6a9RQR87GqhQE/+HrZgU1EsHnARenbE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl
                          rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 04:15:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 352 (0x160)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126996, serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
        Validity
            Not Before: Aug 23 04:15:48 2025 GMT
            Not After : Aug 30 04:15:48 2025 GMT
        Subject: CN=68a94074-fe94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d1:88:ba:83:a8:56:80:13:70:67:f7:9a:4e:
                    c9:8e:55:de:80:42:34:20:75:52:99:34:2b:11:45:
                    f8:bf:76:29:1c:78:c4:d8:b1:e9:6e:08:b0:bc:17:
                    c4:76:15:15:88:25:07:d5:c3:52:73:ba:63:89:55:
                    88:5d:3d:b6:82:87:bd:b7:d5:bf:96:7f:53:5d:42:
                    7e:4c:23:37:45:6d:ab:5b:db:a8:b4:08:32:b4:c1:
                    5b:2d:06:e9:38:54:5d:6a:29:61:2b:79:43:dc:ca:
                    1a:b0:6b:de:52:36:95:28:9d:7d:2f:b3:6d:3f:6e:
                    03:cd:57:e8:60:43:57:12:61:f5:7c:c8:fa:b4:39:
                    91:d7:f2:86:b1:78:4d:b8:94:13:07:38:3f:eb:e9:
                    e4:37:27:92:ce:fe:10:6a:30:e5:f4:23:bd:a3:68:
                    22:06:f6:67:af:4f:35:ee:e8:b0:be:f6:3b:b5:1c:
                    ca:6d:e2:80:4c:d6:03:9a:6f:9e:dc:b0:f1:df:06:
                    48:db:76:a7:ca:5c:fb:9b:2f:a0:b7:bd:c5:0c:b1:
                    31:25:e0:f1:3d:f3:66:a6:1d:b0:78:bb:c1:20:ee:
                    12:a0:be:eb:b0:81:dd:5a:c5:96:34:c7:ed:6c:e5:
                    52:8f:f5:ba:75:38:bf:91:82:4f:bb:96:f7:46:d0:
                    ac:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:EA:80:9C:8F:B0:BB:26:CB:02:42:4A:68:B4:52:1C:9B:0B:B1:FA
            X509v3 Authority Key Identifier:
                keyid:62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:0e:3f:97:b9:39:51:6f:b5:84:57:a9:de:92:32:03:7c:5f:
         43:b9:42:87:64:95:77:f4:c8:42:f2:0f:bb:fe:16:78:68:da:
         ca:27:ae:7e:4d:ed:fa:65:8e:2e:fa:06:5c:59:5f:5e:9e:70:
         6c:c7:8e:e8:c7:d9:55:e3:66:00:04:90:df:65:92:9a:8e:cc:
         8f:8e:21:23:82:a7:e9:79:42:a4:42:3b:9d:4b:ad:8d:72:b6:
         33:64:b6:e3:a7:f2:f2:fd:b7:2a:3c:4c:c5:b8:75:86:eb:d6:
         b0:2e:b3:20:cb:8f:97:0e:04:aa:94:87:b9:e5:c7:f7:07:e4:
         16:f9:62:41:ee:18:8a:67:12:02:d1:9d:04:cb:7b:2f:78:d4:
         56:7b:db:ca:8e:da:71:0d:21:fe:de:14:18:ab:95:85:b9:37:
         9c:23:ce:f9:bc:71:5d:e9:43:1a:1a:5f:30:fb:7d:65:e9:48:
         00:c7:8f:79:f8:78:48:88:e8:62:03:f4:4f:76:eb:68:b2:ed:
         14:3e:4f:4d:a8:e1:fd:8e:11:09:fa:f4:8b:ea:49:f8:f8:3a:
         55:75:4d:62:3e:9d:b2:16:62:14:77:d7:ce:db:aa:d0:3b:7a:
         dc:79:98:c7:8f:bc:b8:9b:de:43:3b:26:59:af:64:c4:d3:23:
         ad:20:39:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:31:05 2025 by rpki-client