Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
File:                     YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft (raw, json)
Hash identifier:          6sgJ1zNiwqKWKcZuj+9EZP60fMkceL0SUwUprxzYEoU=
Subject key identifier:   BA:FA:C8:F3:C4:B0:09:DD:34:9D:16:83:F7:24:77:7A:FC:0A:CC:2D
Authority key identifier: 62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E
Certificate issuer:       /CN=A9126996/serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
Certificate serial:       014A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
Manifest number:          0144
Signing time:             Mon 21 Jul 2025 04:23:58 +0000
Manifest this update:     Mon 21 Jul 2025 04:23:57 +0000
Manifest next update:     Mon 28 Jul 2025 04:23:57 +0000
Files and hashes:         1: YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl (hash: 5dbG/9qOYLfAIH8uFB49/V046hsg86aXDyh9LqoPhrw=)
                          2: CE24A9DE739411EEB8BAE858C4F9AE02.roa (hash: HWR/P/AZhRPwJK+7MD3Snns1zA5ghns41mNna47imy0=)
                          3: CD34C770739411EEB8BAE858C4F9AE02.roa (hash: dHUWyA7t+OI4Hf/XcvAMzgewNzcJRsL7YMlUVTbODRw=)
                          4: CDB51BDC739411EEB8BAE858C4F9AE02.roa (hash: y80dPuObdKg8H5/o6aPEUDf3ud7ZzBogYMhK2YYNptc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl
                          rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 04:23:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 330 (0x14a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126996, serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
        Validity
            Not Before: Jul 21 04:23:57 2025 GMT
            Not After : Jul 28 04:23:57 2025 GMT
        Subject: CN=687dc0de-e554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7e:5b:81:dc:24:aa:1a:44:e2:19:3c:64:06:
                    68:fb:18:b9:25:00:e9:d6:47:fb:2e:bf:f5:16:17:
                    bc:aa:65:55:c8:9c:04:41:55:7a:3b:81:1b:06:6f:
                    dc:77:22:00:ab:8c:9d:6d:9c:51:eb:c8:ef:52:2f:
                    ee:c5:3b:3a:fc:1f:d2:0e:43:76:2e:d8:7e:71:7c:
                    8e:62:9d:5a:63:3c:68:be:ef:f7:21:b1:19:58:e8:
                    1b:91:86:ed:c0:d7:76:fc:86:a9:52:2c:0a:f6:6f:
                    39:34:60:d3:72:61:9a:b0:4d:3c:a6:9e:45:3b:b6:
                    24:6e:fe:2b:95:bc:4d:50:32:b6:95:3c:17:35:2b:
                    5d:34:34:08:fa:87:fe:cd:4c:8f:86:a3:fb:c1:76:
                    2c:d6:59:54:75:4c:fb:6a:07:ae:44:a8:cb:12:b2:
                    f4:0c:18:95:65:be:1e:81:96:a9:da:1f:25:d9:ad:
                    35:32:d7:99:18:9c:ea:34:89:c3:b9:b0:38:d6:90:
                    74:ab:3e:06:55:82:2f:12:1b:84:6c:55:91:6e:e6:
                    e3:c8:c5:97:a5:ba:9b:b5:62:5c:a0:2a:0c:e9:9f:
                    c3:d0:4b:fc:93:10:e8:56:f4:52:68:7a:59:e3:e1:
                    fd:27:8f:f7:84:10:ee:ce:21:fc:23:47:03:a7:5b:
                    54:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FA:C8:F3:C4:B0:09:DD:34:9D:16:83:F7:24:77:7A:FC:0A:CC:2D
            X509v3 Authority Key Identifier:
                keyid:62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:b3:cd:ed:8f:a3:bc:6b:17:21:06:27:7d:e2:f1:10:11:9a:
         fd:5b:88:df:29:f2:90:23:45:ab:73:11:a6:23:ad:d1:1f:af:
         c4:b8:9c:8f:f0:d0:74:25:c1:8e:6d:9c:5a:46:69:2b:91:7b:
         3f:e4:df:25:1c:76:8f:f1:32:81:e5:f8:11:eb:26:3d:df:7a:
         94:c6:77:1e:c5:c4:e8:3d:86:3a:0b:b5:71:ea:92:96:a3:b6:
         f6:56:df:f7:64:70:9f:ed:4d:46:3e:43:ce:28:90:93:be:31:
         14:0c:aa:b9:f3:93:52:56:40:aa:98:60:30:cd:15:a4:75:df:
         23:7f:7f:1a:7d:85:01:32:02:f0:7e:09:40:af:d3:82:9f:1f:
         8c:41:71:dc:db:fa:1b:40:71:8e:28:0b:f6:a2:85:91:ba:fa:
         ab:10:97:14:bd:e2:6f:1d:87:c4:a0:8f:ab:0a:57:99:8c:56:
         e2:58:e6:ef:42:2d:cd:97:ce:05:df:c5:66:c5:5a:ad:39:92:
         6e:d3:02:12:8a:d6:58:50:71:2e:66:8c:97:b2:91:ca:d0:98:
         15:17:fa:ed:d4:20:26:6a:10:ac:c1:d3:da:8d:66:5b:f1:3e:
         ad:e7:0f:7a:89:af:50:30:ae:c9:b7:9f:e3:9c:20:30:66:96:
         5b:87:f7:b0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjY5OTYxMTAvBgNVBAUTKDYyODNCRTlCMzFEMjkwMzZCOTY3QkZGN0I3RTcxQkFE
RDUyOUE2NEUwHhcNMjUwNzIxMDQyMzU3WhcNMjUwNzI4MDQyMzU3WjAYMRYwFAYD
VQQDEw02ODdkYzBkZS1lNTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz35bgdwkqhpE4hk8ZAZo+xi5JQDp1kf7Lr/1Fhe8qmVVyJwEQVV6O4EbBm/c
dyIAq4ydbZxR68jvUi/uxTs6/B/SDkN2Lth+cXyOYp1aYzxovu/3IbEZWOgbkYbt
wNd2/IapUiwK9m85NGDTcmGasE08pp5FO7Ykbv4rlbxNUDK2lTwXNStdNDQI+of+
zUyPhqP7wXYs1llUdUz7ageuRKjLErL0DBiVZb4egZap2h8l2a01MteZGJzqNInD
ubA41pB0qz4GVYIvEhuEbFWRbubjyMWXpbqbtWJcoCoM6Z/D0Ev8kxDoVvRSaHpZ
4+H9J4/3hBDuziH8I0cDp1tUTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLr6yPPE
sAndNJ0Wg/ckd3r8CswtMB8GA1UdIwQYMBaAFGKDvpsx0pA2uWe/97fnG63VKaZO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjk5Ni8xMjMxRkM2ODcz
OTQxMUVFQTE3MDM4NERDNEY5QUUwMi9Zb08tbXpIU2tEYTVaN18zdC1jYnJkVXBw
azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lvTy1tekhTa0RhNVo3XzN0LWNicmRVcHBrNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
Njk5Ni8xMjMxRkM2ODczOTQxMUVFQTE3MDM4NERDNEY5QUUwMi9Zb08tbXpIU2tE
YTVaN18zdC1jYnJkVXBwazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC0s83tj6O8axchBid94vEQEZr9W4jfKfKQI0WrcxGmI63RH6/EuJyP
8NB0JcGObZxaRmkrkXs/5N8lHHaP8TKB5fgR6yY933qUxncexcToPYY6C7Vx6pKW
o7b2Vt/3ZHCf7U1GPkPOKJCTvjEUDKq585NSVkCqmGAwzRWkdd8jf38afYUBMgLw
fglAr9OCnx+MQXHc2/obQHGOKAv2ooWRuvqrEJcUveJvHYfEoI+rCleZjFbiWObv
Qi3Nl84F38VmxVqtOZJu0wISitZYUHEuZoyXspHK0JgVF/rt1CAmahCswdPajWZb
8T6t5w96ia9QMK7Jt5/jnCAwZpZbh/ew
-----END CERTIFICATE-----
Generated at Tue Jul 22 05:51:37 2025 by rpki-client