Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
File:                     YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft (raw, json)
Hash identifier:          Wda0UzAdSOHNUyzlHHdE2PGvuqppN4mt0u5J9IGmL4U=
Subject key identifier:   03:FF:D8:73:7F:37:E1:8C:9F:7D:58:72:DF:80:61:5C:DF:08:53:A3
Authority key identifier: 62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E
Certificate issuer:       /CN=A9126996/serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
Certificate serial:       0126
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
Manifest number:          0120
Signing time:             Fri 09 May 2025 03:48:34 +0000
Manifest this update:     Fri 09 May 2025 03:48:34 +0000
Manifest next update:     Fri 16 May 2025 03:48:34 +0000
Files and hashes:         1: YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl (hash: 9PFkz8l8LLMutI7maMBfNG93eueW0HubQUiMY124nfs=)
                          2: CE24A9DE739411EEB8BAE858C4F9AE02.roa (hash: HWR/P/AZhRPwJK+7MD3Snns1zA5ghns41mNna47imy0=)
                          3: CD34C770739411EEB8BAE858C4F9AE02.roa (hash: dHUWyA7t+OI4Hf/XcvAMzgewNzcJRsL7YMlUVTbODRw=)
                          4: CDB51BDC739411EEB8BAE858C4F9AE02.roa (hash: y80dPuObdKg8H5/o6aPEUDf3ud7ZzBogYMhK2YYNptc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl
                          rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 May 2025 03:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294 (0x126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126996, serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
        Validity
            Not Before: May  9 03:48:34 2025 GMT
            Not After : May 16 03:48:34 2025 GMT
        Subject: CN=681d7b12-0fa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8d:07:3c:22:2e:8a:cc:84:16:98:f1:d9:f8:
                    1a:30:d8:05:53:54:9c:c8:fc:9c:03:67:67:0c:d5:
                    c5:1c:02:87:3a:4a:90:36:0c:91:ff:59:22:d6:39:
                    3b:18:6e:f9:83:42:8b:24:95:b9:c9:54:3a:fd:9b:
                    c2:07:a5:30:1c:73:a8:6c:9f:7f:ba:42:5b:71:c9:
                    24:d8:7c:65:be:23:0f:b9:54:85:87:02:8d:2e:6a:
                    94:c4:2d:a2:be:69:39:58:1e:a0:c9:6b:fa:e7:03:
                    84:db:25:0b:1a:b7:1e:f9:c2:04:56:f8:05:c6:73:
                    47:c9:5a:b3:49:63:2e:fe:d7:12:8e:a3:21:90:d6:
                    f4:8a:df:8f:ed:81:3e:84:95:5c:5f:43:05:c8:59:
                    c4:e8:54:90:74:6d:ae:15:55:54:da:b7:43:c0:42:
                    1b:65:b7:c4:81:cf:55:a1:08:7a:4d:e4:73:40:b9:
                    0b:6d:10:37:b2:da:65:e8:73:8a:b7:79:72:3d:e3:
                    73:8b:6a:18:97:c8:9f:fa:58:f8:52:28:44:2b:25:
                    20:3b:9e:ae:09:c7:a5:a1:fe:b5:5f:f9:fa:73:c8:
                    d4:96:3d:2c:11:77:c0:ed:b2:bf:18:fd:66:fc:19:
                    af:fe:fb:55:62:a5:f0:f9:72:12:b7:ed:95:45:ef:
                    34:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:FF:D8:73:7F:37:E1:8C:9F:7D:58:72:DF:80:61:5C:DF:08:53:A3
            X509v3 Authority Key Identifier:
                keyid:62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:69:3e:ee:4e:71:6b:c6:f2:dd:32:05:e7:eb:93:3b:ab:f0:
         4a:e7:64:80:e2:ae:64:56:bc:1e:c3:cb:14:07:3f:ac:bf:c0:
         a0:40:9c:28:02:bf:d1:de:5c:10:cc:cd:0a:57:16:00:06:96:
         1f:b6:9e:40:ee:47:de:39:0a:16:4a:f7:9c:32:89:8e:57:22:
         e4:31:99:70:f5:d8:13:2d:cf:46:2b:ab:9e:d7:69:53:c2:62:
         9d:77:b4:f6:39:00:74:e6:e7:7c:9e:52:28:02:db:ac:ca:53:
         6d:89:77:33:14:09:4b:e1:63:b6:5b:27:4b:6b:d7:dd:a2:bc:
         10:9a:f9:cd:29:23:23:b5:cb:8e:c4:55:0b:21:5d:76:4e:d0:
         bb:78:ba:e0:5c:be:28:32:df:59:dd:49:40:bb:bf:61:06:c7:
         fe:a0:d5:26:57:e8:1b:46:4f:b2:a6:94:c6:db:ff:3f:d0:9b:
         ab:6f:8f:28:5d:47:1b:a8:4b:39:a1:e7:af:51:58:f0:5c:a3:
         e6:5b:8d:74:fa:12:02:6a:cd:3a:6e:28:39:c9:42:61:06:34:
         e2:83:20:4b:28:d8:4d:30:24:92:94:78:a3:88:d9:de:93:97:
         27:d7:fe:e2:c5:d0:29:6d:a1:9b:c6:11:51:9d:03:32:22:20:
         bc:fa:cb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:11:17 2025 by rpki-client