Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
File:                     y-ExoIOkVjx8Q52webZLatEQGnw.mft (raw, json)
Hash identifier:          eoYidKc6fPNRPOuNL7MPRf+XGHk/WIqJXfYCznaMAiI=
Subject key identifier:   C5:4D:44:CC:BD:F8:FB:0E:BB:E8:13:72:B2:C3:98:79:E6:C1:3B:2E
Authority key identifier: CB:E1:31:A0:83:A4:56:3C:7C:43:9D:B0:79:B6:4B:6A:D1:10:1A:7C
Certificate issuer:       /CN=A914EED0/serialNumber=CBE131A083A4563C7C439DB079B64B6AD1101A7C
Certificate serial:       094A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
Manifest number:          0930
Signing time:             Tue 12 May 2026 20:17:49 +0000
Manifest this update:     Tue 12 May 2026 20:17:49 +0000
Manifest next update:     Tue 19 May 2026 20:17:49 +0000
Files and hashes:         1: y-ExoIOkVjx8Q52webZLatEQGnw.crl (hash: +C43RCvkyApyt2QbZySf9+h828oA7C6bndCiPiMCI+g=)
                          2: 91B81F1EC2BA11EA8A079767C4F9AE02.roa (hash: 6Szm2QWfkOsYb1i1zd7g9FOIR4EuHLgd8D1MqV0Eyn4=)
                          3: F043A0CCC2B411EA9BAFF054C4F9AE02.roa (hash: VNNGkBpD1q5WZ16FnB1qRceTw8NjIdUzV5+D2PvmOUk=)
                          4: 90D4C28CC2BA11EA8A079767C4F9AE02.roa (hash: xPzPEEzjonH18gW4iaUITzfSURpkuwZnTJJlRi6h5I4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.crl
                          rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:17:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2378 (0x94a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EED0, serialNumber=CBE131A083A4563C7C439DB079B64B6AD1101A7C
        Validity
            Not Before: May 12 20:17:49 2026 GMT
            Not After : May 19 20:17:49 2026 GMT
        Subject: CN=6a038aed-2e60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d4:0f:5e:c5:a0:d0:48:a1:6b:83:98:d5:e7:
                    02:25:22:32:97:ce:60:66:e4:31:31:74:5b:85:7a:
                    3b:5b:65:01:0f:aa:96:37:2b:a3:61:37:e2:1a:0d:
                    19:ce:48:e5:60:d5:94:0e:f7:88:bd:89:c3:68:1f:
                    7f:4b:99:5c:84:37:5f:16:5e:9d:50:9d:67:2e:6a:
                    bd:ef:79:8c:00:27:39:d9:05:69:78:06:be:c3:c9:
                    2a:e4:f5:ef:dd:bd:b2:1d:54:ee:50:c7:9f:66:b3:
                    49:20:e9:93:19:57:77:48:ba:de:3e:8a:ff:46:36:
                    40:8e:cb:d9:87:83:46:ba:4c:e7:60:74:0e:ac:22:
                    66:59:ee:c1:43:d2:6b:fc:39:da:b2:c7:68:18:2a:
                    3e:b9:ec:8c:cf:96:02:e1:c8:c5:b7:e0:17:78:d4:
                    51:6b:d3:14:6b:be:2f:db:f1:a9:23:24:dc:ff:e6:
                    cb:df:90:87:77:80:97:63:d5:ab:e4:23:97:cb:4b:
                    fe:f5:61:ab:d2:3d:ed:45:8f:ba:78:6c:53:49:1d:
                    4a:42:f5:40:4e:8c:ee:57:e7:f0:35:46:d3:c2:ea:
                    ae:b2:1f:85:4b:cc:2e:b5:40:29:7e:65:cb:08:77:
                    0d:9c:56:87:37:b5:4c:10:cd:6c:ee:bb:ac:3a:f2:
                    19:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:4D:44:CC:BD:F8:FB:0E:BB:E8:13:72:B2:C3:98:79:E6:C1:3B:2E
            X509v3 Authority Key Identifier:
                keyid:CB:E1:31:A0:83:A4:56:3C:7C:43:9D:B0:79:B6:4B:6A:D1:10:1A:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:e5:6b:be:8b:4a:d6:fb:e2:fd:ef:f6:58:33:d8:a7:c3:7c:
         d9:4f:4d:cb:6e:ee:0e:0e:29:3e:3b:20:85:fd:22:44:5c:46:
         cd:cb:22:e5:18:13:77:ed:82:bd:35:61:69:82:47:c9:32:04:
         84:53:f7:cd:54:38:3b:03:1d:52:75:9c:6c:a0:9e:fe:9c:c6:
         a9:f4:86:d7:98:85:5a:8e:1f:5f:89:8d:cd:d0:6f:d2:6b:3b:
         05:1a:18:b8:2c:5b:04:1a:a3:87:a1:bb:f6:b9:40:8b:fe:3a:
         de:56:7b:bf:cd:7e:30:f8:88:4f:9a:6f:43:98:82:f3:07:bc:
         14:99:f3:c5:ba:ec:56:13:f8:b4:7a:8b:c9:a8:61:79:37:ee:
         91:0a:cc:df:82:9f:bd:24:fd:4c:36:b9:07:1f:d1:9d:c9:d6:
         29:1b:ad:b4:69:78:48:b3:1e:6d:8a:92:07:f9:92:0b:13:dc:
         0e:85:f4:b3:5b:f6:13:60:30:df:dd:34:7b:a1:6e:03:df:db:
         13:cd:57:0d:38:3c:17:41:0b:88:8b:c8:9b:ce:c6:56:c7:22:
         2b:4f:27:d4:e2:68:c3:a3:57:f2:7a:27:d2:32:d8:fa:c8:c6:
         91:ad:7c:c5:cc:d4:36:1f:83:1b:a6:ff:3d:71:8e:cc:40:10:
         0c:d9:38:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:17:38 2026 by rpki-client