Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
File:                     7Yy8VM2G8sH5LexryQnbxvpjTIE.mft (raw, json)
Hash identifier:          8KcdZ9pNrrh+h+dLIdfp8nG9lm4DXJ/y11ZF0jyoHxg=
Subject key identifier:   99:C1:37:12:D8:D1:99:59:07:63:EA:B9:9D:72:E2:8A:EF:B6:14:A4
Authority key identifier: ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81
Certificate issuer:       /CN=A918A3E6/serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81
Certificate serial:       08AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
Manifest number:          089C
Signing time:             Fri 12 Jun 2026 20:37:54 +0000
Manifest this update:     Fri 12 Jun 2026 20:37:54 +0000
Manifest next update:     Fri 19 Jun 2026 20:37:54 +0000
Files and hashes:         1: 7Yy8VM2G8sH5LexryQnbxvpjTIE.crl (hash: DTJjSVbuPmlQmMLgfBN3pTulX3xH8FNROEsFok5QyLg=)
                          2: C130A016889811EE8EB03D6EC4F9AE02.roa (hash: cGT1GtukriCvrd1Pi2qRMUlR6UU6oh7XqqypKNl1qDY=)
                          3: 7ABD27E4889811EEB99AD46DC4F9AE02.roa (hash: jZ81Tdfx/+nsLOQTxl8GU75vMdax+UmYLl8rBqC2vqY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl
                          rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:37:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2221 (0x8ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A3E6, serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81
        Validity
            Not Before: Jun 12 20:37:54 2026 GMT
            Not After : Jun 19 20:37:54 2026 GMT
        Subject: CN=6a2c6e22-0296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:49:36:51:83:4b:73:5b:72:75:74:53:8d:34:
                    a5:43:0d:78:85:43:f5:38:a6:7e:3f:7c:87:27:7e:
                    9c:82:49:82:eb:44:c4:76:61:21:d1:44:94:65:b1:
                    50:a9:06:5a:9a:53:c7:54:5b:6d:e3:5c:7b:ca:65:
                    81:7c:ba:74:ac:fc:13:a4:c0:7b:b9:16:c8:b4:d9:
                    32:a6:58:77:bd:eb:ad:02:21:a5:44:97:a9:17:6d:
                    77:90:10:10:5e:4f:c9:a5:d6:dd:21:c0:74:35:a9:
                    9a:52:a8:fc:9e:54:9c:62:31:91:79:0b:a4:88:8e:
                    61:07:f4:82:8a:9b:b8:7a:db:cf:20:bc:7a:2f:68:
                    e4:d7:7a:89:7e:6e:43:0c:1d:a9:71:a8:3c:52:ca:
                    b9:da:db:89:27:a1:0e:c3:d4:3e:1c:9d:5c:bc:8f:
                    a4:14:2d:94:25:87:67:7a:e8:04:1b:c6:73:e4:c6:
                    8e:18:e7:4c:ef:5f:14:5b:1d:a4:15:a6:cc:70:55:
                    0b:f7:5c:9c:0d:8e:6c:93:cb:40:a9:04:84:40:87:
                    05:95:84:bf:85:ab:cd:1c:3f:b0:de:42:a5:ae:f2:
                    3e:f7:f1:b1:63:13:2a:15:c6:14:b0:e2:b0:40:75:
                    ca:6c:71:7a:5f:4a:48:d6:c3:ce:f4:28:2b:8d:0c:
                    b5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C1:37:12:D8:D1:99:59:07:63:EA:B9:9D:72:E2:8A:EF:B6:14:A4
            X509v3 Authority Key Identifier:
                keyid:ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:8c:96:ae:a3:95:03:04:49:af:d1:97:35:47:18:8d:93:7d:
         f5:63:6d:6c:76:87:b3:f7:d7:d1:0d:86:bd:e9:ec:03:ed:0f:
         0d:e4:80:92:a7:ea:95:a6:ce:7d:05:31:6a:23:6c:c0:36:80:
         4f:24:a6:5f:20:91:03:3a:13:64:21:bc:f3:e1:aa:39:b7:8c:
         57:26:86:eb:6c:78:0a:98:01:72:33:74:60:16:6a:f2:05:d5:
         60:87:5d:b7:10:ad:3b:7d:ea:b7:99:6b:9c:44:4a:d0:dc:0b:
         83:88:2a:95:0f:ad:9c:49:d2:04:1b:15:68:a9:44:7d:51:91:
         47:f1:45:d5:e7:a9:96:92:b9:3a:46:6b:e2:e8:d8:b8:55:81:
         80:13:77:51:eb:92:20:2d:af:e2:25:e6:32:33:fc:e9:a3:a6:
         d7:8a:2c:fe:0e:a3:66:b9:5e:89:0e:95:ae:b2:f7:0d:78:21:
         bc:5b:99:25:96:f6:8b:1e:8a:aa:e5:fc:b4:ec:e4:2c:2a:9a:
         eb:63:4e:c9:44:d0:8a:59:83:96:2a:e7:f5:e1:f8:d6:3e:00:
         f5:4c:84:7a:0e:d7:46:c7:14:7f:8b:e1:0f:25:ed:33:53:c2:
         bc:5b:2a:c6:c0:ec:51:6f:6c:00:a6:be:24:15:cd:38:6e:88:
         fa:09:67:e4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEEzRTYxMTAvBgNVBAUTKEVEOENCQzU0Q0Q4NkYyQzFGOTJERUM2QkM5MDlEQkM2
RkE2MzRDODEwHhcNMjYwNjEyMjAzNzU0WhcNMjYwNjE5MjAzNzU0WjAYMRYwFAYD
VQQDEw02YTJjNmUyMi0wMjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2Uk2UYNLc1tydXRTjTSlQw14hUP1OKZ+P3yHJ36cgkmC60TEdmEh0USUZbFQ
qQZamlPHVFtt41x7ymWBfLp0rPwTpMB7uRbItNkyplh3veutAiGlRJepF213kBAQ
Xk/JpdbdIcB0NamaUqj8nlScYjGReQukiI5hB/SCipu4etvPILx6L2jk13qJfm5D
DB2pcag8Usq52tuJJ6EOw9Q+HJ1cvI+kFC2UJYdneugEG8Zz5MaOGOdM718UWx2k
FabMcFUL91ycDY5sk8tAqQSEQIcFlYS/havNHD+w3kKlrvI+9/GxYxMqFcYUsOKw
QHXKbHF6X0pI1sPO9CgrjQy16wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJnBNxLY
0ZlZB2PquZ1y4orvthSkMB8GA1UdIwQYMBaAFO2MvFTNhvLB+S3sa8kJ28b6Y0yB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTNFNi82NDBENjE4RUYy
QzkxMUVBODZGMTI3MTdDNEY5QUUwMi83WXk4Vk0yRzhzSDVMZXhyeVFuYnh2cGpU
SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdZeThWTTJHOHNINUxleHJ5UW5ieHZwalRJRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QTNFNi82NDBENjE4RUYyQzkxMUVBODZGMTI3MTdDNEY5QUUwMi83WXk4Vk0yRzhz
SDVMZXhyeVFuYnh2cGpUSUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALoyWrqOVAwRJr9GXNUcYjZN99WNtbHaHs/fX0Q2GvensA+0PDeSAkqfqlabO
fQUxaiNswDaATySmXyCRAzoTZCG88+GqObeMVyaG62x4CpgBcjN0YBZq8gXVYIdd
txCtO33qt5lrnERK0NwLg4gqlQ+tnEnSBBsVaKlEfVGRR/FF1eeplpK5OkZr4ujY
uFWBgBN3UeuSIC2v4iXmMjP86aOm14os/g6jZrleiQ6VrrL3DXghvFuZJZb2ix6K
quX8tOzkLCqa62NOyUTQilmDlirn9eH41j4A9UyEeg7XRscUf4vhDyXtM1PCvFsq
xsDsUW9sAKa+JBXNOG6I+gln5A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:22:40 2026 by rpki-client