Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
File:                     y-ExoIOkVjx8Q52webZLatEQGnw.mft (raw, json)
Hash identifier:          jf+mH+EZhX6Zh/cIVIDfBtSjtAXn+9OkwdUmOmX2sq4=
Subject key identifier:   43:17:70:02:B0:90:18:16:02:77:3F:B0:26:C5:69:F1:D2:4B:EC:34
Authority key identifier: CB:E1:31:A0:83:A4:56:3C:7C:43:9D:B0:79:B6:4B:6A:D1:10:1A:7C
Certificate issuer:       /CN=A914EED0/serialNumber=CBE131A083A4563C7C439DB079B64B6AD1101A7C
Certificate serial:       0966
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
Manifest number:          094C
Signing time:             Mon 06 Jul 2026 20:39:07 +0000
Manifest this update:     Mon 06 Jul 2026 20:39:07 +0000
Manifest next update:     Mon 13 Jul 2026 20:39:07 +0000
Files and hashes:         1: y-ExoIOkVjx8Q52webZLatEQGnw.crl (hash: idg4PLx8RBD82io7q4v+rvyc4zT9rHx2ouls6DWlRdY=)
                          2: F043A0CCC2B411EA9BAFF054C4F9AE02.roa (hash: VNNGkBpD1q5WZ16FnB1qRceTw8NjIdUzV5+D2PvmOUk=)
                          3: 90D4C28CC2BA11EA8A079767C4F9AE02.roa (hash: xPzPEEzjonH18gW4iaUITzfSURpkuwZnTJJlRi6h5I4=)
                          4: 91B81F1EC2BA11EA8A079767C4F9AE02.roa (hash: 6Szm2QWfkOsYb1i1zd7g9FOIR4EuHLgd8D1MqV0Eyn4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.crl
                          rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Jul 2026 20:39:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2406 (0x966)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EED0, serialNumber=CBE131A083A4563C7C439DB079B64B6AD1101A7C
        Validity
            Not Before: Jul  6 20:39:07 2026 GMT
            Not After : Jul 13 20:39:07 2026 GMT
        Subject: CN=6a4c126b-3da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4b:3e:cb:b3:d4:f6:82:01:1b:a6:1a:67:52:
                    33:d8:f1:ef:7b:bb:a7:df:40:70:c2:f3:e4:c8:ab:
                    5f:93:ca:a5:c0:b9:99:61:18:99:97:5a:f5:29:aa:
                    67:73:02:f2:75:eb:3a:69:10:99:90:68:4d:6c:bd:
                    d8:12:9e:dc:94:05:ed:f4:60:c6:59:11:16:be:9a:
                    84:15:b1:69:24:e5:6e:4b:17:d0:12:7e:58:d9:f7:
                    d2:91:9f:7b:9d:47:7c:66:c0:7b:2e:5b:62:8d:b5:
                    87:dd:13:9f:43:a6:28:1e:92:02:58:4b:2c:a2:8a:
                    8c:16:12:c5:77:7f:f8:c6:d9:aa:50:b7:95:d0:83:
                    ff:a9:af:c5:ba:6e:24:81:88:9d:3f:56:cc:bb:00:
                    52:10:73:b1:42:ad:62:eb:f8:3a:6b:85:67:38:ec:
                    38:e0:89:fd:7a:dc:7e:73:89:fe:b5:fb:16:42:d9:
                    f5:4a:ca:e4:64:95:51:5a:0c:a1:e7:ca:d7:0a:9b:
                    82:0f:cd:ae:2f:27:bb:ec:9c:e8:56:58:8a:da:98:
                    30:6d:94:1d:ae:ea:bf:52:fa:fb:c4:ee:c0:41:ea:
                    d4:9c:f9:64:ad:29:aa:c4:ea:9c:d7:5d:cd:72:71:
                    44:c2:5a:03:54:cc:19:51:39:94:ec:d9:36:06:2e:
                    10:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:17:70:02:B0:90:18:16:02:77:3F:B0:26:C5:69:F1:D2:4B:EC:34
            X509v3 Authority Key Identifier:
                keyid:CB:E1:31:A0:83:A4:56:3C:7C:43:9D:B0:79:B6:4B:6A:D1:10:1A:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:f7:06:95:54:5a:d0:86:7a:6c:37:45:ec:24:ff:8d:5a:8a:
         ce:b4:ed:ea:82:9f:20:45:5a:af:d7:37:9c:02:32:91:d4:33:
         25:6e:cc:88:85:c8:41:1b:6f:78:fb:7f:f4:d9:9e:f5:46:aa:
         4e:ec:d8:17:1f:6d:84:fa:f7:e0:2e:d7:c0:3f:c7:ce:fb:79:
         e8:69:65:e2:07:b1:34:43:91:79:08:49:fc:74:91:b2:d9:db:
         be:f9:e9:60:9a:5b:ee:af:51:32:c2:72:01:70:d3:5e:e4:55:
         f7:3d:e8:b9:a1:4c:96:32:b6:53:06:db:65:01:b5:3e:8d:b5:
         0d:78:84:2e:50:5f:9a:25:a0:73:70:d0:35:3f:f1:af:d4:80:
         1a:a7:95:ad:c7:24:f0:fb:ba:f4:5a:81:d2:58:39:c5:10:70:
         32:85:45:3a:56:12:ea:f5:01:4d:60:74:d1:23:10:0a:4e:82:
         e1:0e:aa:6c:9e:5a:d8:79:40:8f:88:09:e4:43:1f:64:3c:7b:
         3f:73:fe:49:ad:9e:18:59:2a:28:f8:f9:f1:69:3b:53:06:2c:
         0d:a5:ac:b6:1c:23:67:c9:75:26:00:aa:c7:41:19:9a:66:8f:
         d4:2a:01:97:d8:ea:46:ab:ce:c9:1a:27:fe:e9:b8:6b:41:2f:
         0f:18:ea:52
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEVFRDAxMTAvBgNVBAUTKENCRTEzMUEwODNBNDU2M0M3QzQzOURCMDc5QjY0QjZB
RDExMDFBN0MwHhcNMjYwNzA2MjAzOTA3WhcNMjYwNzEzMjAzOTA3WjAYMRYwFAYD
VQQDEw02YTRjMTI2Yi0zZGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjks+y7PU9oIBG6YaZ1Iz2PHve7un30BwwvPkyKtfk8qlwLmZYRiZl1r1Kapn
cwLydes6aRCZkGhNbL3YEp7clAXt9GDGWREWvpqEFbFpJOVuSxfQEn5Y2ffSkZ97
nUd8ZsB7LltijbWH3ROfQ6YoHpICWEssooqMFhLFd3/4xtmqULeV0IP/qa/Fum4k
gYidP1bMuwBSEHOxQq1i6/g6a4VnOOw44In9etx+c4n+tfsWQtn1SsrkZJVRWgyh
58rXCpuCD82uLye77JzoVliK2pgwbZQdruq/Uvr7xO7AQerUnPlkrSmqxOqc113N
cnFEwloDVMwZUTmU7Nk2Bi4Q4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEMXcAKw
kBgWAnc/sCbFafHSS+w0MB8GA1UdIwQYMBaAFMvhMaCDpFY8fEOdsHm2S2rREBp8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUVEMC82RUVCMTE1MEMy
QjMxMUVBQjQ4MzI3NTBDNEY5QUUwMi95LUV4b0lPa1ZqeDhRNTJ3ZWJaTGF0RVFH
bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ktRXhvSU9rVmp4OFE1MndlYlpMYXRFUUdudy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RUVEMC82RUVCMTE1MEMyQjMxMUVBQjQ4MzI3NTBDNEY5QUUwMi95LUV4b0lPa1Zq
eDhRNTJ3ZWJaTGF0RVFHbncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhPcGlVRa0IZ6bDdF7CT/jVqKzrTt6oKfIEVar9c3nAIykdQzJW7MiIXIQRtv
ePt/9Nme9UaqTuzYFx9thPr34C7XwD/Hzvt56Gll4gexNEOReQhJ/HSRstnbvvnp
YJpb7q9RMsJyAXDTXuRV9z3ouaFMljK2UwbbZQG1Po21DXiELlBfmiWgc3DQNT/x
r9SAGqeVrcck8Pu69FqB0lg5xRBwMoVFOlYS6vUBTWB00SMQCk6C4Q6qbJ5a2HlA
j4gJ5EMfZDx7P3P+Sa2eGFkqKPj58Wk7UwYsDaWsthwjZ8l1JgCqx0EZmmaP1CoB
l9jqRqvOyRon/um4a0EvDxjqUg==
-----END CERTIFICATE-----
Generated at Tue Jul 7 10:45:03 2026 by rpki-client