Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
File:                     y-ExoIOkVjx8Q52webZLatEQGnw.mft (raw, json)
Hash identifier:          SDWCRjgoL1jYGyk6BbfeQmksA1hYxHHzPObJSlUxxFw=
Subject key identifier:   FA:04:C8:28:7F:31:E2:78:6D:87:6C:7D:9A:41:72:E1:05:22:DF:41
Authority key identifier: CB:E1:31:A0:83:A4:56:3C:7C:43:9D:B0:79:B6:4B:6A:D1:10:1A:7C
Certificate issuer:       /CN=A914EED0/serialNumber=CBE131A083A4563C7C439DB079B64B6AD1101A7C
Certificate serial:       089E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
Manifest number:          088A
Signing time:             Mon 30 Jun 2025 20:50:23 +0000
Manifest this update:     Mon 30 Jun 2025 20:50:23 +0000
Manifest next update:     Mon 07 Jul 2025 20:50:23 +0000
Files and hashes:         1: y-ExoIOkVjx8Q52webZLatEQGnw.crl (hash: zdNABcerXTZ/tdTm51dp7Dkn/fvCiIxQvOMsMnbh2QY=)
                          2: 90D4C28CC2BA11EA8A079767C4F9AE02.roa (hash: e+13EZAvpj9mc2IILMERDnSK9NszhBMUbUBC2BNslfY=)
                          3: F043A0CCC2B411EA9BAFF054C4F9AE02.roa (hash: NHcEruSqBuMj/IPzd/3S47VAhmXWgMgQYut3Slp0jA8=)
                          4: 91B81F1EC2BA11EA8A079767C4F9AE02.roa (hash: HnUSTDgiOASq4KYnjuG0nd8h+Pt87RrArwZX9gcI9gM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.crl
                          rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 20:50:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2206 (0x89e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EED0, serialNumber=CBE131A083A4563C7C439DB079B64B6AD1101A7C
        Validity
            Not Before: Jun 30 20:50:23 2025 GMT
            Not After : Jul  7 20:50:23 2025 GMT
        Subject: CN=6862f88f-76c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:00:5b:21:17:35:3a:6d:01:c3:32:d7:17:27:
                    01:a3:ff:78:1c:3c:94:ff:a8:2e:bb:c5:bb:37:43:
                    51:76:9b:a0:37:98:3e:e0:d7:9c:8c:09:d6:c3:3c:
                    5b:9f:4b:38:79:16:14:dd:ee:9e:4c:37:b7:52:ce:
                    ca:46:1b:17:b6:c0:b6:63:c9:05:97:75:9b:00:21:
                    6d:ff:15:8f:0d:f2:a5:23:32:07:6f:b7:8e:9e:93:
                    7c:8a:55:29:7d:ee:bb:58:83:e9:01:93:ee:b0:16:
                    96:88:bb:35:80:68:61:84:b4:ed:52:14:1d:06:b1:
                    41:51:5c:71:26:14:ae:88:f5:93:dd:67:6e:40:f0:
                    2f:78:bb:b7:38:a9:a2:03:56:e5:18:e9:e0:2c:3e:
                    92:f8:2c:46:23:5e:9b:cc:a9:da:11:7c:f6:09:c0:
                    dd:a8:0a:7e:53:0b:a4:03:e5:bc:fb:1f:53:64:ab:
                    d5:56:96:77:ec:94:94:8e:9d:dc:a3:37:13:bd:24:
                    6c:4b:0e:ee:ac:f9:2b:df:d5:47:c9:4a:1b:6d:63:
                    ae:a6:9b:7b:f3:0b:42:24:e5:ca:88:73:d1:11:14:
                    31:2f:ad:b7:70:bd:3f:d2:1c:bd:41:ee:a0:d2:2d:
                    14:e8:fa:c3:71:39:6a:86:72:e1:c6:24:1a:c8:5d:
                    d1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:04:C8:28:7F:31:E2:78:6D:87:6C:7D:9A:41:72:E1:05:22:DF:41
            X509v3 Authority Key Identifier:
                keyid:CB:E1:31:A0:83:A4:56:3C:7C:43:9D:B0:79:B6:4B:6A:D1:10:1A:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:d9:50:73:58:ea:bb:19:00:ba:9a:50:23:46:2b:e3:6f:4c:
         b9:77:0d:f6:3a:39:47:8d:e6:86:40:b9:e3:97:44:b0:5d:25:
         d6:26:8b:67:49:28:ed:90:b3:f2:64:76:f8:7f:9a:9d:38:8a:
         57:1b:7e:e3:72:db:75:63:25:ba:a1:eb:36:e8:c2:e7:2a:ec:
         f3:67:2c:b3:7f:aa:fb:0b:19:33:8b:16:95:29:90:c7:7d:9e:
         3d:54:04:42:1b:e0:80:ec:59:f5:b2:9a:8e:55:7e:f8:a8:1e:
         77:ed:31:07:84:51:6e:06:3c:db:31:3e:0d:c0:c4:37:a0:ee:
         de:c3:28:c9:df:2e:6f:7e:65:29:8b:dd:36:0f:8d:a0:cd:e3:
         43:6e:6d:3e:05:24:88:8b:bc:18:95:3b:35:43:b2:d6:88:f3:
         fa:85:26:ca:34:80:a4:1f:d9:82:3d:56:b5:0c:25:6a:a9:9f:
         ed:ad:10:7f:c7:42:72:e6:b8:fd:c8:ec:06:25:53:53:fc:4c:
         e5:af:5c:97:70:27:86:01:a1:dd:ea:d3:ea:e2:9c:5b:3f:5f:
         52:15:d0:6f:e2:aa:0c:41:aa:51:89:08:9b:fd:75:24:5e:d0:
         cc:75:37:d5:d8:a7:cd:fb:53:fe:56:1c:55:30:0d:66:72:17:
         8a:c7:83:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:37:29 2025 by rpki-client