Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
File:                     YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft (raw, json)
Hash identifier:          N5h2wgk9Bq4NYDDvOQeiOu/19f7Xquyld0orTGTLMdQ=
Subject key identifier:   F5:53:12:71:48:43:0A:AB:19:7B:BE:97:03:86:E6:8E:CA:CB:93:A7
Authority key identifier: 62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E
Certificate issuer:       /CN=A9126996/serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
Certificate serial:       0130
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
Manifest number:          012A
Signing time:             Sat 31 May 2025 04:15:16 +0000
Manifest this update:     Sat 31 May 2025 04:15:15 +0000
Manifest next update:     Sat 07 Jun 2025 04:15:15 +0000
Files and hashes:         1: YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl (hash: 0OdVJk1thW60iYDHysO5JVh3wU2y1Uv6hO1lROAErSU=)
                          2: CE24A9DE739411EEB8BAE858C4F9AE02.roa (hash: HWR/P/AZhRPwJK+7MD3Snns1zA5ghns41mNna47imy0=)
                          3: CD34C770739411EEB8BAE858C4F9AE02.roa (hash: dHUWyA7t+OI4Hf/XcvAMzgewNzcJRsL7YMlUVTbODRw=)
                          4: CDB51BDC739411EEB8BAE858C4F9AE02.roa (hash: y80dPuObdKg8H5/o6aPEUDf3ud7ZzBogYMhK2YYNptc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl
                          rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 04:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 304 (0x130)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126996, serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
        Validity
            Not Before: May 31 04:15:15 2025 GMT
            Not After : Jun  7 04:15:15 2025 GMT
        Subject: CN=683a8253-bd33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1e:f3:0d:60:65:66:7e:e6:21:2d:a2:4c:1d:
                    fb:95:40:f7:8a:b3:9c:32:89:ef:7d:f7:c8:9a:8b:
                    8e:5a:d7:81:46:20:6b:15:40:79:5f:e8:95:43:fd:
                    56:ac:39:95:21:1b:d0:86:f2:eb:e4:01:8c:f0:7a:
                    a8:5e:f0:36:e9:dd:a6:c1:0d:04:f0:e9:a1:6d:2b:
                    73:f6:7d:1f:3d:c4:5a:0f:2e:5c:6d:4c:ad:04:74:
                    e5:3b:bc:31:f7:1d:1d:91:72:05:c9:d9:74:50:dc:
                    a1:e8:4f:e3:14:e7:70:47:ec:0e:fc:40:a7:6f:73:
                    a7:44:1d:59:1e:14:a4:57:a5:ba:76:57:b5:4a:aa:
                    f8:ef:a6:1c:d2:f1:52:31:1d:78:31:c5:66:82:91:
                    c2:9b:21:62:a8:f1:1b:b6:dc:4b:16:53:d7:36:2a:
                    e4:2a:8c:80:4d:9d:45:b0:92:25:b5:3e:c0:ce:ba:
                    bb:af:e3:d7:85:44:96:7f:32:a9:78:e0:d4:f2:65:
                    00:20:73:38:52:62:01:35:cb:e0:7b:1d:8f:78:91:
                    7d:18:bf:69:3c:e5:45:f4:a8:15:f9:b5:ce:71:7d:
                    77:81:39:8b:e8:52:f0:45:8c:17:b3:16:31:87:9a:
                    11:cf:69:8d:b3:8a:63:44:30:2f:12:2a:2b:b2:5a:
                    6d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:53:12:71:48:43:0A:AB:19:7B:BE:97:03:86:E6:8E:CA:CB:93:A7
            X509v3 Authority Key Identifier:
                keyid:62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:07:c3:2a:d0:b4:13:e3:19:3c:a3:8d:2d:24:76:91:c8:5c:
         39:b6:0d:26:e9:cd:bf:28:bd:7a:a6:3a:ba:1b:85:5b:db:c5:
         cb:cb:a4:e9:41:3b:2a:46:33:f6:36:e9:18:41:e1:22:48:2f:
         24:e5:89:e0:b8:12:57:4e:e4:37:c8:eb:04:8e:f8:8b:82:1f:
         39:44:93:04:91:e6:07:82:b8:b6:bd:36:3b:ce:2b:1a:5b:19:
         7e:50:13:2b:ee:d8:f8:f1:3b:7f:51:3c:ec:e1:01:2c:b1:d1:
         29:df:24:ac:ff:ec:2e:84:8c:23:b3:34:d4:bd:bf:e8:54:78:
         cb:84:77:ef:85:35:0b:e3:20:ea:45:e1:2a:fe:2b:47:5a:05:
         0d:6d:36:75:da:45:28:3a:1b:86:22:87:11:96:79:09:d1:8f:
         79:09:2f:d2:0b:62:0c:35:c6:5a:02:ae:af:d5:d5:39:f9:37:
         91:5c:ab:45:fe:17:64:2c:1d:02:bb:d1:e8:ef:78:b5:1a:0c:
         7b:53:78:46:e9:2c:a3:76:93:95:b4:4e:f5:86:1a:ec:f8:9c:
         eb:19:2e:c1:c8:e8:fc:32:6c:d5:88:23:09:f0:96:11:97:44:
         76:d3:d3:89:64:25:af:dd:c4:c5:62:8f:43:db:fc:cc:f5:96:
         e8:d0:16:11
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjY5OTYxMTAvBgNVBAUTKDYyODNCRTlCMzFEMjkwMzZCOTY3QkZGN0I3RTcxQkFE
RDUyOUE2NEUwHhcNMjUwNTMxMDQxNTE1WhcNMjUwNjA3MDQxNTE1WjAYMRYwFAYD
VQQDEw02ODNhODI1My1iZDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxx7zDWBlZn7mIS2iTB37lUD3irOcMonvfffImouOWteBRiBrFUB5X+iVQ/1W
rDmVIRvQhvLr5AGM8HqoXvA26d2mwQ0E8OmhbStz9n0fPcRaDy5cbUytBHTlO7wx
9x0dkXIFydl0UNyh6E/jFOdwR+wO/ECnb3OnRB1ZHhSkV6W6dle1Sqr476Yc0vFS
MR14McVmgpHCmyFiqPEbttxLFlPXNirkKoyATZ1FsJIltT7Azrq7r+PXhUSWfzKp
eODU8mUAIHM4UmIBNcvgex2PeJF9GL9pPOVF9KgV+bXOcX13gTmL6FLwRYwXsxYx
h5oRz2mNs4pjRDAvEiorslptKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPVTEnFI
QwqrGXu+lwOG5o7Ky5OnMB8GA1UdIwQYMBaAFGKDvpsx0pA2uWe/97fnG63VKaZO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjk5Ni8xMjMxRkM2ODcz
OTQxMUVFQTE3MDM4NERDNEY5QUUwMi9Zb08tbXpIU2tEYTVaN18zdC1jYnJkVXBw
azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lvTy1tekhTa0RhNVo3XzN0LWNicmRVcHBrNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
Njk5Ni8xMjMxRkM2ODczOTQxMUVFQTE3MDM4NERDNEY5QUUwMi9Zb08tbXpIU2tE
YTVaN18zdC1jYnJkVXBwazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDDB8Mq0LQT4xk8o40tJHaRyFw5tg0m6c2/KL16pjq6G4Vb28XLy6Tp
QTsqRjP2NukYQeEiSC8k5YnguBJXTuQ3yOsEjviLgh85RJMEkeYHgri2vTY7zisa
Wxl+UBMr7tj48Tt/UTzs4QEssdEp3ySs/+wuhIwjszTUvb/oVHjLhHfvhTUL4yDq
ReEq/itHWgUNbTZ12kUoOhuGIocRlnkJ0Y95CS/SC2IMNcZaAq6v1dU5+TeRXKtF
/hdkLB0Cu9Ho73i1Ggx7U3hG6SyjdpOVtE71hhrs+JzrGS7ByOj8MmzViCMJ8JYR
l0R209OJZCWv3cTFYo9D2/zM9Zbo0BYR
-----END CERTIFICATE-----
Generated at Sat May 31 15:06:09 2025 by rpki-client