Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
File:                     YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft (raw, json)
Hash identifier:          OpWT4LGKTpYkSm/986VjA3euqpNZOeBIMHGgDV+rdP0=
Subject key identifier:   1B:2C:30:4C:2C:8F:6F:5F:50:6D:99:03:4D:F4:9A:3C:F3:D4:FE:36
Authority key identifier: 62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E
Certificate issuer:       /CN=A9126996/serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
Certificate serial:       0168
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
Manifest number:          015F
Signing time:             Sun 07 Sep 2025 04:26:17 +0000
Manifest this update:     Sun 07 Sep 2025 04:26:16 +0000
Manifest next update:     Sun 14 Sep 2025 04:26:16 +0000
Files and hashes:         1: YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl (hash: dI7/LxotlWAGlAvEoGB8FIu1JiZTwJfH9aNASQg0mqI=)
                          2: CE24A9DE739411EEB8BAE858C4F9AE02.roa (hash: ZJiErtj7JD3f7pzyajmZVPN6isJjBUZ76oGPIUUVwBY=)
                          3: CD34C770739411EEB8BAE858C4F9AE02.roa (hash: rPDc7wA9YBNlcWlKBr0IYLRQFab23zFVZPlqITK1zkE=)
                          4: CDB51BDC739411EEB8BAE858C4F9AE02.roa (hash: ikqljjgT32Bw6a9RQR87GqhQE/+HrZgU1EsHnARenbE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl
                          rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 04:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126996, serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
        Validity
            Not Before: Sep  7 04:26:16 2025 GMT
            Not After : Sep 14 04:26:16 2025 GMT
        Subject: CN=68bd0968-56e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e8:ea:8c:8a:66:2e:2e:24:d3:b1:b1:78:79:
                    69:33:c9:16:54:a1:69:bb:2b:97:cd:40:58:38:37:
                    ed:eb:e1:56:dc:29:a0:af:eb:a2:21:53:b1:72:6d:
                    b0:0b:73:5e:e0:21:b6:f3:cf:95:f3:03:73:86:a2:
                    7a:d5:07:3f:13:a7:59:c8:4a:60:51:d4:13:22:3a:
                    8f:93:f9:93:85:d0:85:b2:9a:87:bb:8e:71:9d:42:
                    26:08:21:11:81:6a:cd:35:c1:01:de:89:97:61:ad:
                    da:e4:3d:93:49:ef:2d:3e:4c:4c:f2:c8:82:b1:42:
                    4f:e6:58:67:44:40:30:aa:5c:be:a5:79:e4:93:90:
                    c7:62:76:89:4d:ef:c0:e0:22:67:1b:4c:87:79:a2:
                    5d:33:f5:8e:3f:f6:3c:0c:3d:a0:6b:18:f9:e9:56:
                    a3:e8:df:09:ec:95:41:d5:d3:77:4e:7f:fd:a9:c9:
                    e6:57:90:9c:29:47:f0:fd:0f:f2:4f:69:87:3e:d6:
                    36:49:21:f3:65:b8:0c:fe:81:fd:19:c4:64:78:9c:
                    22:8c:1f:2a:25:81:df:23:75:a7:9d:4b:0a:33:c8:
                    10:07:05:ac:03:c4:06:14:64:63:60:87:5e:3d:66:
                    22:dc:a2:0e:1e:54:0d:0e:8d:e2:85:38:9f:87:6e:
                    4d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:2C:30:4C:2C:8F:6F:5F:50:6D:99:03:4D:F4:9A:3C:F3:D4:FE:36
            X509v3 Authority Key Identifier:
                keyid:62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:83:5e:6c:de:42:27:ac:7f:ef:4d:27:8a:23:ea:ce:89:0c:
         bd:41:1a:88:85:48:19:c3:4b:34:9a:0c:f1:e2:be:49:fd:bf:
         cd:4e:5a:d2:b7:78:44:2c:e8:cf:dd:43:cb:35:b9:5a:0a:bc:
         34:00:fe:12:cd:a3:f8:fc:7f:e7:f8:db:a4:66:de:33:33:2c:
         91:5d:4e:f6:c5:fd:fd:2e:73:8f:03:32:5d:90:f2:7b:66:78:
         e2:ab:39:d2:23:98:f7:8f:f8:fe:73:84:32:79:06:47:21:cb:
         21:41:b7:d5:ab:86:c5:46:e1:7f:31:66:63:97:bb:e9:38:0a:
         1b:fc:f6:4b:ba:5a:41:d8:47:47:7a:9c:fc:b3:dd:4f:46:c6:
         3d:ee:d9:3d:8a:2e:d3:db:8e:d1:27:13:25:da:be:de:ff:18:
         7e:e6:9d:d8:98:a2:e1:37:4c:33:28:6c:7b:74:d1:12:90:fa:
         09:37:47:50:26:83:d2:ca:b6:7a:73:f4:0a:2c:30:2d:15:f8:
         47:16:91:54:d8:af:0f:76:a8:ac:f5:e1:d8:aa:78:1d:d4:d1:
         6e:54:4e:86:f6:89:ed:2a:d6:52:04:4f:1a:a8:bc:a4:ef:34:
         f3:eb:47:82:ad:2f:42:20:e1:46:a8:0c:33:95:31:26:ac:28:
         2e:24:c5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 00:37:03 2025 by rpki-client