Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.mft
File:                     y-PSoWWxlLlY7sO2qURXdyo6CSo.mft (raw, json)
Hash identifier:          HmCOXNuabTx9cqgSluKNycGFgcesA6Uu03ktjfrwgTs=
Subject key identifier:   BF:19:B7:22:ED:29:0A:E8:D7:E9:1F:0F:C2:A9:24:4D:90:73:EA:4A
Authority key identifier: CB:E3:D2:A1:65:B1:94:B9:58:EE:C3:B6:A9:44:57:77:2A:3A:09:2A
Certificate issuer:       /CN=A9154FE7/serialNumber=CBE3D2A165B194B958EEC3B6A94457772A3A092A
Certificate serial:       090C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-PSoWWxlLlY7sO2qURXdyo6CSo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.mft
Manifest number:          08F0
Signing time:             Wed 22 Jul 2026 20:48:37 +0000
Manifest this update:     Wed 22 Jul 2026 20:48:37 +0000
Manifest next update:     Wed 29 Jul 2026 20:48:37 +0000
Files and hashes:         1: y-PSoWWxlLlY7sO2qURXdyo6CSo.crl (hash: DrZSMOGWibKigX+bJt7D5CgfM/OrFJrbqLabvXxGPxI=)
                          2: 4B3AC7DC5FC811ED869A6956C4F9AE02.roa (hash: gwFMK8dXQ0BUy50EitJsxHltkOumkaciXIm9wu0O67s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.crl
                          rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-PSoWWxlLlY7sO2qURXdyo6CSo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2316 (0x90c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154FE7, serialNumber=CBE3D2A165B194B958EEC3B6A94457772A3A092A
        Validity
            Not Before: Jul 22 20:48:37 2026 GMT
            Not After : Jul 29 20:48:37 2026 GMT
        Subject: CN=6a612ca5-93a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:be:36:2c:fd:25:7c:86:8e:74:a6:95:e2:2a:
                    71:85:31:b9:e1:4f:49:62:0e:c5:ac:3a:82:9b:66:
                    67:d9:b0:4b:57:71:2c:f1:82:f5:2c:37:77:28:58:
                    48:9e:93:a2:fd:06:5f:6a:53:38:7f:31:8b:de:0d:
                    21:79:9c:47:70:3f:2c:d2:c8:c0:25:fb:92:47:8f:
                    6d:c5:43:3b:21:b7:08:c0:88:2b:69:94:a7:3c:84:
                    6b:41:4c:3b:88:d4:43:e4:43:fa:51:d1:ab:2b:33:
                    72:8c:34:58:fd:1c:4b:31:cb:69:ce:d9:8d:de:d6:
                    f2:fa:62:2f:c7:0b:ea:8d:01:80:e3:ab:53:34:4a:
                    e4:48:bb:d1:49:7e:03:93:66:44:81:20:4c:62:3c:
                    8d:ce:42:5c:20:26:be:b7:be:8e:7b:15:f5:ab:a3:
                    09:88:61:3f:5f:ed:67:55:16:6d:83:6c:f7:79:49:
                    51:3b:f7:62:59:c2:4a:da:76:d7:89:46:18:83:2a:
                    b8:2b:3a:8f:b3:20:9a:76:3e:e6:dd:56:bb:db:ba:
                    b2:b0:8a:fe:2e:37:51:d6:0d:f1:e0:db:1e:4d:ae:
                    90:d0:c1:f6:06:d2:5a:3f:8f:2b:c5:63:21:46:f0:
                    96:e3:de:04:93:d1:fa:e4:f2:0e:8d:d0:e9:78:2f:
                    15:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:19:B7:22:ED:29:0A:E8:D7:E9:1F:0F:C2:A9:24:4D:90:73:EA:4A
            X509v3 Authority Key Identifier:
                keyid:CB:E3:D2:A1:65:B1:94:B9:58:EE:C3:B6:A9:44:57:77:2A:3A:09:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-PSoWWxlLlY7sO2qURXdyo6CSo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:3b:a8:86:53:13:c2:f1:50:bf:17:fa:d3:3c:ed:72:22:9c:
         a7:b1:35:80:6e:6a:e9:42:c8:69:16:6f:92:c7:8b:c4:23:79:
         4e:b8:c3:2a:7a:78:0a:13:0f:ec:1d:fb:83:70:a0:a8:c0:ee:
         6c:1f:59:60:50:2d:fd:84:6c:c5:24:82:c2:71:bb:ef:6f:6b:
         e3:02:b0:de:ba:99:82:8b:20:33:fc:38:bd:73:dc:fa:bf:c5:
         ba:00:48:cd:2e:46:d9:13:2e:29:bb:ea:e5:64:3e:44:95:38:
         26:7a:0d:8d:5e:bb:54:4e:97:59:7a:0d:6b:80:06:31:cc:de:
         ad:40:28:08:9a:46:32:00:af:0b:17:2c:61:cf:1e:fd:a3:00:
         7a:a7:7f:fa:25:aa:5f:c7:71:01:40:64:3c:ca:67:77:4c:61:
         b6:6b:62:00:13:27:16:d4:10:ed:82:d4:d4:c4:e0:0c:c5:0e:
         84:4e:0d:ee:7a:07:0c:d0:9a:23:54:e2:f5:e8:c1:01:c9:06:
         19:b6:4e:a4:ba:33:a0:ae:26:0d:c1:d0:0e:28:88:24:bd:f7:
         7c:53:fa:1c:37:fa:44:c5:cf:03:a0:ba:6c:61:1b:ab:dc:e8:
         0c:ac:6d:db:e3:85:78:69:34:c6:bf:5f:c4:02:5e:b2:de:66:
         44:60:2c:11
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTRGRTcxMTAvBgNVBAUTKENCRTNEMkExNjVCMTk0Qjk1OEVFQzNCNkE5NDQ1Nzc3
MkEzQTA5MkEwHhcNMjYwNzIyMjA0ODM3WhcNMjYwNzI5MjA0ODM3WjAYMRYwFAYD
VQQDEw02YTYxMmNhNS05M2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5L42LP0lfIaOdKaV4ipxhTG54U9JYg7FrDqCm2Zn2bBLV3Es8YL1LDd3KFhI
npOi/QZfalM4fzGL3g0heZxHcD8s0sjAJfuSR49txUM7IbcIwIgraZSnPIRrQUw7
iNRD5EP6UdGrKzNyjDRY/RxLMctpztmN3tby+mIvxwvqjQGA46tTNErkSLvRSX4D
k2ZEgSBMYjyNzkJcICa+t76OexX1q6MJiGE/X+1nVRZtg2z3eUlRO/diWcJK2nbX
iUYYgyq4KzqPsyCadj7m3Va727qysIr+LjdR1g3x4NseTa6Q0MH2BtJaP48rxWMh
RvCW494Ek9H65PIOjdDpeC8V5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL8ZtyLt
KQro1+kfD8KpJE2Qc+pKMB8GA1UdIwQYMBaAFMvj0qFlsZS5WO7DtqlEV3cqOgkq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEZFNy81QTJEODlFQURC
N0QxMUVBQkNGM0VDM0VDNEY5QUUwMi95LVBTb1dXeGxMbFk3c08ycVVSWGR5bzZD
U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ktUFNvV1d4bExsWTdzTzJxVVJYZHlvNkNTby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NEZFNy81QTJEODlFQURCN0QxMUVBQkNGM0VDM0VDNEY5QUUwMi95LVBTb1dXeGxM
bFk3c08ycVVSWGR5bzZDU28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwDuohlMTwvFQvxf60zztciKcp7E1gG5q6ULIaRZvkseLxCN5TrjDKnp4ChMP
7B37g3CgqMDubB9ZYFAt/YRsxSSCwnG7729r4wKw3rqZgosgM/w4vXPc+r/FugBI
zS5G2RMuKbvq5WQ+RJU4JnoNjV67VE6XWXoNa4AGMczerUAoCJpGMgCvCxcsYc8e
/aMAeqd/+iWqX8dxAUBkPMpnd0xhtmtiABMnFtQQ7YLU1MTgDMUOhE4N7noHDNCa
I1Ti9ejBAckGGbZOpLozoK4mDcHQDiiIJL33fFP6HDf6RMXPA6C6bGEbq9zoDKxt
2+OFeGk0xr9fxAJest5mRGAsEQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:20:24 2026 by rpki-client