Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
File:                     y-ExoIOkVjx8Q52webZLatEQGnw.mft (raw, json)
Hash identifier:          EiO3lwQw4i4MSvptLkdiTcfDlUQX42CpRpZNxLxNd6g=
Subject key identifier:   D5:5E:3F:CB:76:A4:9B:A3:E3:8E:66:F9:B5:5D:17:C2:13:12:FA:D1
Authority key identifier: CB:E1:31:A0:83:A4:56:3C:7C:43:9D:B0:79:B6:4B:6A:D1:10:1A:7C
Certificate issuer:       /CN=A914EED0/serialNumber=CBE131A083A4563C7C439DB079B64B6AD1101A7C
Certificate serial:       096E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
Manifest number:          0954
Signing time:             Wed 22 Jul 2026 20:36:53 +0000
Manifest this update:     Wed 22 Jul 2026 20:36:53 +0000
Manifest next update:     Wed 29 Jul 2026 20:36:53 +0000
Files and hashes:         1: y-ExoIOkVjx8Q52webZLatEQGnw.crl (hash: /WOOOv0vqRO6zB5YQjtlHE9JrLrFX6Lq835AqaeNuoM=)
                          2: 91B81F1EC2BA11EA8A079767C4F9AE02.roa (hash: 6Szm2QWfkOsYb1i1zd7g9FOIR4EuHLgd8D1MqV0Eyn4=)
                          3: F043A0CCC2B411EA9BAFF054C4F9AE02.roa (hash: VNNGkBpD1q5WZ16FnB1qRceTw8NjIdUzV5+D2PvmOUk=)
                          4: 90D4C28CC2BA11EA8A079767C4F9AE02.roa (hash: xPzPEEzjonH18gW4iaUITzfSURpkuwZnTJJlRi6h5I4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.crl
                          rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:36:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2414 (0x96e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EED0, serialNumber=CBE131A083A4563C7C439DB079B64B6AD1101A7C
        Validity
            Not Before: Jul 22 20:36:53 2026 GMT
            Not After : Jul 29 20:36:53 2026 GMT
        Subject: CN=6a6129e5-c84a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b8:a6:11:99:ab:c4:8a:04:d7:ac:c1:f4:11:
                    a5:f4:97:fa:e0:7a:b7:78:e2:41:ff:e5:03:80:60:
                    4c:a9:05:60:41:a3:cd:e5:09:70:da:54:bb:1e:7e:
                    58:45:2f:7b:74:fa:ce:76:2a:90:50:df:38:a7:7e:
                    c0:ce:95:e4:fb:53:c9:08:0c:28:77:70:0d:a6:ba:
                    ef:37:5b:a1:cf:06:ae:19:2c:6b:0f:38:1c:e5:89:
                    d4:3c:de:00:2a:0f:59:8a:b5:4f:dd:8a:ab:41:bb:
                    7a:0c:53:7a:a7:2d:d9:f0:01:b5:00:54:db:b4:9a:
                    64:71:60:87:c1:3d:49:03:3c:4a:3e:11:40:c7:4a:
                    c9:bf:b5:de:38:99:a9:61:52:d1:2c:3a:c8:4e:f5:
                    5e:99:cc:65:69:14:41:c5:bc:a5:a9:6f:21:02:16:
                    5c:65:7a:4d:8c:f9:0d:00:48:a1:e2:6d:6d:1c:47:
                    e2:11:df:61:67:e5:93:0b:dd:54:41:f2:1e:70:c7:
                    61:9d:92:65:db:0c:c1:83:b0:80:d5:21:bd:8c:82:
                    a3:8f:fb:c6:e3:78:b0:b6:16:85:b5:15:18:03:fa:
                    4e:78:00:15:a6:89:db:fd:67:03:53:6f:44:60:a8:
                    b4:89:86:42:e3:bc:10:6e:ac:5a:7f:ac:57:ca:7a:
                    99:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:5E:3F:CB:76:A4:9B:A3:E3:8E:66:F9:B5:5D:17:C2:13:12:FA:D1
            X509v3 Authority Key Identifier:
                keyid:CB:E1:31:A0:83:A4:56:3C:7C:43:9D:B0:79:B6:4B:6A:D1:10:1A:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:b7:1e:5a:09:7d:18:52:fa:84:ff:07:6e:ee:58:e0:3c:41:
         55:ad:88:52:f0:b0:1f:cb:60:ec:a0:ec:c8:34:59:c3:5a:d1:
         75:04:f5:f8:f1:44:4c:97:30:32:e8:9b:ea:34:4b:47:cc:f2:
         15:a7:b6:b9:1c:2b:5a:7a:ce:da:2d:dd:df:37:a5:ed:5f:fa:
         cb:db:28:96:fd:76:c5:4f:b8:87:15:0d:52:1c:e3:22:66:43:
         48:78:ab:53:0a:ff:55:1f:df:b9:27:7f:19:e7:19:84:5b:bf:
         ac:6c:85:0a:16:4b:0b:b9:7d:6f:bc:48:83:18:43:6f:1e:6d:
         ea:45:92:59:fc:53:4a:b1:eb:1c:08:7f:57:fb:b1:75:57:e5:
         3a:a7:f7:35:ef:8d:1e:a5:90:13:8b:15:bb:75:71:a6:a8:8a:
         48:ec:2f:20:0e:24:97:70:65:6c:5f:44:dd:95:a5:3c:be:a7:
         14:62:03:2d:94:da:b4:17:e7:a1:9e:02:83:85:2e:f5:fb:03:
         21:f0:51:41:f3:2b:10:ec:fb:b4:1f:8a:5b:b2:5a:90:f2:f7:
         00:d4:47:12:0f:6b:3d:75:ba:40:af:8e:46:4f:bd:4d:85:10:
         47:12:f5:11:25:3f:3d:d9:fe:bc:4a:a7:c9:8d:93:e6:8a:ac:
         1a:03:2e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:11:23 2026 by rpki-client