Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
File:                     YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft (raw, json)
Hash identifier:          vBLR3l/GmTf/w9J5OxZ0o5tCW0BFiE6NwIlDID0WX54=
Subject key identifier:   75:78:96:79:8E:CF:5B:63:5F:78:F5:FF:84:59:9C:71:36:66:AD:ED
Authority key identifier: 62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E
Certificate issuer:       /CN=A9126996/serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
Certificate serial:       0120
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
Manifest number:          011A
Signing time:             Sun 27 Apr 2025 03:43:14 +0000
Manifest this update:     Sun 27 Apr 2025 03:43:13 +0000
Manifest next update:     Sun 04 May 2025 03:43:13 +0000
Files and hashes:         1: YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl (hash: OajO3MV0li5rCQBtcUBYACcktLvW9G2iVq0CXXNlBJQ=)
                          2: CE24A9DE739411EEB8BAE858C4F9AE02.roa (hash: HWR/P/AZhRPwJK+7MD3Snns1zA5ghns41mNna47imy0=)
                          3: CD34C770739411EEB8BAE858C4F9AE02.roa (hash: dHUWyA7t+OI4Hf/XcvAMzgewNzcJRsL7YMlUVTbODRw=)
                          4: CDB51BDC739411EEB8BAE858C4F9AE02.roa (hash: y80dPuObdKg8H5/o6aPEUDf3ud7ZzBogYMhK2YYNptc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl
                          rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 288 (0x120)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126996, serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
        Validity
            Not Before: Apr 27 03:43:13 2025 GMT
            Not After : May  4 03:43:13 2025 GMT
        Subject: CN=680da7d2-00b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9a:38:12:d4:b6:83:8f:50:70:f2:92:82:da:
                    51:83:62:e2:49:4d:b0:ba:33:73:5a:cb:b5:07:6d:
                    2f:da:24:cd:f6:83:23:97:3d:7f:18:ba:70:81:bd:
                    bd:90:70:c9:97:06:9c:e0:14:8a:d0:2e:1b:ca:85:
                    ee:ad:a2:cf:59:9e:0d:eb:51:8f:6f:2e:c7:ec:4e:
                    bc:5f:10:24:5b:b5:2a:ac:de:e4:3d:c8:14:95:7f:
                    e9:1b:b6:c1:e8:8f:33:a4:b9:d3:1a:24:13:64:19:
                    76:bc:3a:af:ff:e5:a4:d5:86:40:e3:1d:b3:10:19:
                    6e:bd:cc:82:84:a4:21:e8:50:43:00:ec:7e:b0:91:
                    d7:b1:6f:1b:54:d8:fa:30:de:64:6e:a0:7b:2f:99:
                    b3:a6:57:86:89:41:cc:54:a0:68:cc:f3:4a:24:fc:
                    78:ff:09:bf:3e:d8:00:39:72:a4:1b:6e:48:fd:8c:
                    92:a7:66:e1:c1:d8:0d:16:db:bc:2f:af:8f:db:10:
                    56:ca:88:f8:02:fe:60:2a:0c:2c:12:da:f6:b4:3a:
                    85:3b:f8:4d:03:61:de:e0:71:31:1c:9e:1c:63:4e:
                    55:bf:ef:f5:0e:49:9a:9f:3a:a2:3c:b8:39:f2:b8:
                    7a:37:c2:d0:d4:ac:6a:a8:61:48:27:6f:f3:4a:07:
                    8b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:78:96:79:8E:CF:5B:63:5F:78:F5:FF:84:59:9C:71:36:66:AD:ED
            X509v3 Authority Key Identifier:
                keyid:62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:fd:17:df:fc:8a:9b:ac:cb:c7:d4:d2:99:ee:59:bb:d6:a8:
         d3:2e:18:2b:18:36:4b:cd:bc:f0:7f:8d:31:8f:bb:10:d5:0c:
         f9:eb:d3:be:83:2c:2e:49:e1:d4:1e:c3:e0:21:15:75:b1:9b:
         4c:27:27:3a:52:29:fd:45:f0:e7:e2:b7:95:c4:51:ad:a9:67:
         7e:7d:ea:98:67:e5:73:47:8c:17:33:d4:38:be:f2:12:21:76:
         5b:6b:ac:f6:ec:b6:a5:2d:93:62:00:ab:20:4c:df:fd:ae:4e:
         7a:2f:1f:bb:35:8c:08:a1:1f:bf:13:a9:b6:e5:48:57:24:9b:
         db:3a:5e:a3:97:3e:1a:45:f9:b5:d5:7f:40:29:0a:0f:3d:ea:
         a3:45:c1:2d:29:fd:53:c3:3e:b0:c1:b5:19:6a:9d:c7:5b:1f:
         e6:30:b2:9c:e3:56:4d:af:16:c4:1e:45:cd:30:67:d7:eb:72:
         0f:e7:05:42:56:30:c5:17:e4:7a:fc:20:d3:f8:70:3e:7f:93:
         be:39:c3:4f:e4:fb:28:0e:0e:18:a1:10:5c:99:87:08:47:db:
         d6:3f:9c:b1:06:89:67:69:65:0d:a1:3a:fe:19:11:ee:4a:3c:
         a2:3a:d9:62:a3:cf:ef:49:83:11:5c:f1:fb:b4:21:39:4f:63:
         94:fc:15:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:20 2025 by rpki-client on console.sobornost.net