Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
File:                     y-ExoIOkVjx8Q52webZLatEQGnw.mft (raw, json)
Hash identifier:          FyyZfXRpc3dt36EfJeWNVMvyKkFSuakYVOvAEKp7oO4=
Subject key identifier:   CB:AD:60:28:1B:F5:CD:15:10:EB:24:72:1E:35:56:73:A1:26:A1:E2
Authority key identifier: CB:E1:31:A0:83:A4:56:3C:7C:43:9D:B0:79:B6:4B:6A:D1:10:1A:7C
Certificate issuer:       /CN=A914EED0/serialNumber=CBE131A083A4563C7C439DB079B64B6AD1101A7C
Certificate serial:       091B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
Manifest number:          0907
Signing time:             Sat 28 Feb 2026 20:37:49 +0000
Manifest this update:     Sat 28 Feb 2026 20:37:48 +0000
Manifest next update:     Sat 07 Mar 2026 20:37:48 +0000
Files and hashes:         1: y-ExoIOkVjx8Q52webZLatEQGnw.crl (hash: Gpw7IMwnlUB40Mcc+nW7nWafg8ZeqjEv/xWSm5VikYg=)
                          2: 91B81F1EC2BA11EA8A079767C4F9AE02.roa (hash: HnUSTDgiOASq4KYnjuG0nd8h+Pt87RrArwZX9gcI9gM=)
                          3: F043A0CCC2B411EA9BAFF054C4F9AE02.roa (hash: NHcEruSqBuMj/IPzd/3S47VAhmXWgMgQYut3Slp0jA8=)
                          4: 90D4C28CC2BA11EA8A079767C4F9AE02.roa (hash: e+13EZAvpj9mc2IILMERDnSK9NszhBMUbUBC2BNslfY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.crl
                          rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 20:37:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2331 (0x91b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EED0, serialNumber=CBE131A083A4563C7C439DB079B64B6AD1101A7C
        Validity
            Not Before: Feb 28 20:37:48 2026 GMT
            Not After : Mar  7 20:37:48 2026 GMT
        Subject: CN=69a3521d-9624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:55:1b:e6:4c:69:a0:27:e4:51:0f:01:88:f8:
                    fc:f9:ba:44:93:9a:1d:0a:9a:40:06:ce:e6:d1:d3:
                    e3:4c:29:af:19:9a:c2:3b:f4:35:24:21:43:62:ce:
                    37:4c:b7:d6:c3:86:92:58:fd:8d:86:33:42:8a:1e:
                    bf:4d:83:cb:7e:3d:04:ff:5c:01:80:48:85:e6:7b:
                    77:ef:7d:04:eb:8d:66:5d:4c:91:6a:a0:bd:d7:84:
                    df:c5:97:6c:0d:aa:73:5d:d2:32:db:27:fd:77:26:
                    f5:4e:dc:c0:8c:e6:2d:0a:ed:61:db:13:e3:93:30:
                    eb:75:5d:e0:3d:ab:92:7b:a4:0f:b4:01:4a:a3:3d:
                    4b:ac:0f:c0:a5:b8:9d:a7:ba:20:2d:b9:43:6a:28:
                    3f:53:36:b8:41:7e:79:87:09:d8:91:ea:5a:29:75:
                    31:de:40:6b:0f:cb:1e:dc:67:ac:95:9c:e1:ca:f2:
                    41:ed:05:25:d1:b4:33:87:e6:51:8e:bd:4a:2f:2d:
                    81:de:43:27:f2:3d:6d:cd:41:18:dc:6d:af:01:cf:
                    07:60:11:44:d8:35:dc:fc:19:9d:0d:2f:92:01:54:
                    ab:1a:3f:6f:3b:fc:b9:fe:0d:eb:6b:37:a0:27:fb:
                    72:22:35:61:94:be:2f:e8:82:1b:d0:65:aa:a5:d6:
                    8e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:AD:60:28:1B:F5:CD:15:10:EB:24:72:1E:35:56:73:A1:26:A1:E2
            X509v3 Authority Key Identifier:
                keyid:CB:E1:31:A0:83:A4:56:3C:7C:43:9D:B0:79:B6:4B:6A:D1:10:1A:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:f3:4e:41:fc:fa:2b:19:05:c3:19:9e:21:f8:7c:11:6f:18:
         74:60:0d:3a:99:5a:8e:07:b5:0c:73:4c:95:f3:67:b4:93:55:
         b8:f2:01:ed:c2:1c:ad:57:a4:8d:79:54:09:b3:e5:90:d5:d1:
         77:fd:9f:2a:bc:36:9c:4d:bc:04:b4:1f:78:aa:1f:9a:03:f9:
         ef:fc:f3:b1:52:f1:75:3e:62:09:b9:e4:57:e8:51:86:3b:e0:
         91:e2:38:33:6c:7f:77:12:8e:04:92:74:fb:56:63:11:43:19:
         dc:fa:eb:3a:86:85:dd:98:d0:85:59:1c:1f:e8:bf:6e:f3:be:
         91:df:4f:40:66:03:ba:60:aa:c1:e7:c6:6a:aa:0f:0e:7d:1b:
         8f:63:71:1c:93:78:69:b2:8b:8e:3e:eb:ca:b1:16:66:c1:09:
         e0:64:8b:df:d4:ea:81:c7:b0:a0:10:36:c4:7b:93:3f:ce:d7:
         23:44:fe:f3:7f:bf:d8:72:95:74:ce:06:77:68:b9:c2:e2:e2:
         e1:2f:94:3d:9c:98:76:48:aa:61:52:d8:f2:59:cf:09:d2:bc:
         03:ca:2f:b5:01:06:b1:be:63:5d:99:55:02:58:1a:59:c4:15:
         2b:51:ae:14:fc:33:c4:ea:7d:47:66:26:ae:f4:81:a2:27:cc:
         9e:0e:ff:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:10:58 2026 by rpki-client