Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
File:                     y-ExoIOkVjx8Q52webZLatEQGnw.mft (raw, json)
Hash identifier:          exlnc7VMizgHKOxtxgK+hxH6HrijPKkmT1GJ4y/1zpI=
Subject key identifier:   D2:67:45:4A:AE:75:4D:CF:4B:F5:43:DB:46:AD:BB:0A:79:A4:DE:F2
Authority key identifier: CB:E1:31:A0:83:A4:56:3C:7C:43:9D:B0:79:B6:4B:6A:D1:10:1A:7C
Certificate issuer:       /CN=A914EED0/serialNumber=CBE131A083A4563C7C439DB079B64B6AD1101A7C
Certificate serial:       08DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
Manifest number:          08CA
Signing time:             Sun 02 Nov 2025 20:24:36 +0000
Manifest this update:     Sun 02 Nov 2025 20:24:36 +0000
Manifest next update:     Sun 09 Nov 2025 20:24:36 +0000
Files and hashes:         1: y-ExoIOkVjx8Q52webZLatEQGnw.crl (hash: s+J9AB2CWVagkg2dZMDTYT09dOxP5Vtu7EyO04cUBL0=)
                          2: 90D4C28CC2BA11EA8A079767C4F9AE02.roa (hash: e+13EZAvpj9mc2IILMERDnSK9NszhBMUbUBC2BNslfY=)
                          3: F043A0CCC2B411EA9BAFF054C4F9AE02.roa (hash: NHcEruSqBuMj/IPzd/3S47VAhmXWgMgQYut3Slp0jA8=)
                          4: 91B81F1EC2BA11EA8A079767C4F9AE02.roa (hash: HnUSTDgiOASq4KYnjuG0nd8h+Pt87RrArwZX9gcI9gM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.crl
                          rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 20:24:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2270 (0x8de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EED0, serialNumber=CBE131A083A4563C7C439DB079B64B6AD1101A7C
        Validity
            Not Before: Nov  2 20:24:36 2025 GMT
            Not After : Nov  9 20:24:36 2025 GMT
        Subject: CN=6907be04-0b26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:0a:a9:17:5d:b5:5d:c9:e4:1f:bf:b9:72:1b:
                    ed:5b:33:f3:ae:83:99:f2:ae:b0:c3:ff:27:97:80:
                    44:51:fc:ab:15:4c:f0:fc:d5:c4:13:ad:45:9d:77:
                    c6:14:d8:f1:5d:c9:f6:e4:cc:80:0d:e4:1e:92:09:
                    08:16:00:3a:80:d4:12:3f:cd:f5:9c:1b:85:95:12:
                    1e:1e:64:6d:da:b9:7b:b6:51:31:30:8c:fb:a9:d6:
                    ee:4c:5b:51:f9:97:c9:14:14:8b:d4:64:02:a1:ec:
                    91:0d:c2:cc:3e:24:9e:22:aa:62:3d:be:91:8c:35:
                    4f:1c:ab:86:41:21:9a:21:e3:e4:c5:30:4e:a4:27:
                    45:a0:9b:3e:0c:6b:1b:5b:f9:46:b9:7c:c6:ef:75:
                    46:3d:bc:ff:0b:eb:73:32:24:7e:e9:c5:b5:72:8a:
                    f5:13:50:44:67:98:38:6e:1b:b7:31:39:d6:78:97:
                    94:5d:14:0e:e5:39:54:19:cf:2b:87:9f:8e:62:3d:
                    70:3d:bb:11:aa:45:42:8f:14:0a:4f:3f:be:7e:28:
                    e2:4a:a8:c3:ee:26:34:e4:5b:e4:4c:44:2c:0e:4d:
                    46:41:9c:2d:4d:96:a9:0c:96:f6:e7:ce:ae:a4:4a:
                    4f:75:84:48:35:89:86:d1:e6:c4:ce:f1:ca:a1:13:
                    97:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:67:45:4A:AE:75:4D:CF:4B:F5:43:DB:46:AD:BB:0A:79:A4:DE:F2
            X509v3 Authority Key Identifier:
                keyid:CB:E1:31:A0:83:A4:56:3C:7C:43:9D:B0:79:B6:4B:6A:D1:10:1A:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:d3:ff:be:25:8f:f6:91:59:33:43:43:d8:e9:8e:3e:c0:8e:
         04:fa:dd:56:ce:83:1e:61:cc:f4:d2:3b:e9:bd:36:af:9a:d9:
         93:cc:68:fc:bb:5d:6a:ba:6b:de:30:21:88:c7:8f:79:f9:f1:
         f8:2f:35:46:69:32:e8:f3:8b:0f:ec:9b:fc:e9:58:18:df:98:
         a9:60:06:3e:b0:a8:eb:25:50:1d:ed:7c:e8:31:9c:52:0d:66:
         13:53:72:3b:19:94:33:a2:d5:07:e5:9c:4a:55:1e:b0:61:e0:
         8d:ab:ef:ea:3c:cf:1d:5d:46:eb:02:a0:8f:ec:94:52:59:e0:
         d0:e6:eb:13:01:ad:72:1d:56:2b:b0:20:04:b5:9f:33:a1:a1:
         f5:a3:00:7f:66:8e:d4:ba:a7:a0:57:3a:95:98:56:8d:40:ce:
         44:81:59:68:e2:b3:5b:71:55:08:59:c2:5d:5d:fc:13:78:38:
         c4:b8:37:70:33:ce:f8:f2:b2:ea:da:c1:3c:f8:bb:ef:9b:47:
         97:52:c3:48:5b:af:23:d7:cb:04:2a:4c:b7:99:14:de:7e:65:
         14:3a:78:1c:5d:12:6a:b4:6a:66:6d:d6:8d:8d:10:96:20:25:
         9b:21:71:a6:c8:48:2d:a8:b8:aa:70:2d:1a:6c:7c:60:48:af:
         aa:59:63:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:20:06 2025 by rpki-client