Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
File:                     526yVsD8sH4pB5eDQ-mtndIf4gY.mft (raw, json)
Hash identifier:          pgDDVZMA9aKQeifOrQ/L7m1HRcIsn65Sn+xXXLBStGs=
Subject key identifier:   E9:68:FF:2C:C5:F5:11:CC:EC:3F:DF:78:99:00:D9:5B:5A:AC:1C:AE
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Certificate issuer:       /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial:       390A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
Manifest number:          36C7
Signing time:             Fri 18 Jul 2025 14:32:24 +0000
Manifest this update:     Fri 18 Jul 2025 14:32:24 +0000
Manifest next update:     Fri 25 Jul 2025 14:32:24 +0000
Files and hashes:         1: 526yVsD8sH4pB5eDQ-mtndIf4gY.crl (hash: FCos3oIq+Zzt6pl06GIMzWf1fFlcXDiNGaOjcFouN78=)
                          2: 16EEEDEE4FF511F08191435BC4F9AE02.roa (hash: SJehZ3ZZZl4PJgKsoT1k6g8jgXxJGPQTDsPeWApRkHo=)
                          3: 2C1ADE1A35C811EEB06D6E4FC4F9AE02.roa (hash: Kb65CgSbpk+g+27O3L9YO/NalEccXczxBWE1egLtaM4=)
                          4: E01731A04A0511EFBE524A77C4F9AE02.roa (hash: ywzvrLxBT/Z7nPd3pBvdmtRanDDISy0oLSGMtPD+fnk=)
                          5: 1B8CEF10160F11F0BC8CF16EC4F9AE02.roa (hash: Atw8mYr719QL2buAs4N+u5Fvkp0vLbC2BST8Rr2vnds=)
                          6: 6B9538F223DD11EF81EBB933C4F9AE02.roa (hash: Qqy4u5Du4YJjLwWpq0dlcmlkR6uc3a3M7nv191S71u8=)
                          7: 5C696C684ABB11EFB64F1B36C4F9AE02.roa (hash: DpJlRaFGhxdvGqVu7m9VIpzHXrpSWXkrTNeb5efv6ao=)
                          8: 0D338B0C529811F09208B671C4F9AE02.roa (hash: A9LJkDWxUNjGLrFJE60dtpsZdMJ82+p9vH9KSTZ1WBU=)
                          9: 059AA6C236EC11F09677E64CC4F9AE02.roa (hash: 1TIqYxbhJpMCWZC+JAicjf6NUS2vrPDTIVCR78nJZiQ=)
                          10: 55CFC60E3F9811F098104369C4F9AE02.roa (hash: UdCkIarcUDsEiShYuFqpcC316/DtGKuONC/DzAx7Abk=)
                          11: 9EA1CDAAFBF611EEAEFDCB0CC4F9AE02.roa (hash: 4ynLb0Ypopkzl8emElYUHjGvnOkE64cL4WqzPSTgtgo=)
                          12: 2AFAC78029B311F0AF325E4AC4F9AE02.roa (hash: nUUhIGZHO3RHOUl1TnIm6KeN8p6UUqQmkzO4UL1GmbU=)
                          13: 6289DC0452A811F08D69FB63C4F9AE02.roa (hash: sp9IYpFweC1yMeQwKbqyuVyOlySCgp1EtVwqB4gt4sI=)
                          14: 8773BD724ECB11F0ADEBBC83C4F9AE02.roa (hash: HKaHS237EvhFJjk431cbv94fDUgyIYPlQqoabwVRFDs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
                          rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 14:32:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14602 (0x390a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
        Validity
            Not Before: Jul 18 14:32:24 2025 GMT
            Not After : Jul 25 14:32:24 2025 GMT
        Subject: CN=687a5af8-08bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:00:43:e6:a1:c8:da:84:de:79:56:93:08:80:
                    c0:15:0f:56:aa:3b:18:1f:86:2a:10:8e:ff:77:fc:
                    d0:be:b6:d6:21:99:ac:8b:23:f2:c4:8b:d6:5e:ae:
                    f5:20:60:4c:4b:32:40:66:ec:fc:5c:d5:0a:19:2d:
                    07:da:3a:00:e5:3c:bd:09:ae:e5:3a:13:77:0b:f2:
                    b5:3f:8e:6b:97:7a:78:53:0e:59:1a:8c:5c:03:dc:
                    68:c3:6c:62:d9:21:bb:33:67:e9:81:ff:75:7d:38:
                    74:d9:61:13:73:6d:67:50:a7:2b:fc:5f:2c:d5:87:
                    72:d1:2a:fd:00:3b:67:90:02:fe:f7:20:f6:8c:00:
                    b6:b1:50:f2:ce:f5:4c:bd:86:6b:95:a7:e1:c9:6f:
                    09:ed:e3:80:35:fd:ea:fc:68:33:86:1f:9f:6e:f8:
                    4c:a6:3a:ce:2a:5d:0c:1e:db:52:c9:8d:fd:23:a0:
                    72:41:4d:f5:e4:99:48:d8:36:00:2f:e4:68:80:e7:
                    df:4f:21:eb:e1:6a:e7:4f:78:88:86:2a:b2:c6:cb:
                    b4:66:bb:77:23:41:36:45:7a:20:f3:0b:e2:72:e4:
                    e7:8d:7f:dd:8f:25:cb:6b:1e:a1:88:58:8b:00:6d:
                    8c:a2:b3:78:93:16:07:ac:cf:f7:c6:2c:5d:d3:3a:
                    f5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:68:FF:2C:C5:F5:11:CC:EC:3F:DF:78:99:00:D9:5B:5A:AC:1C:AE
            X509v3 Authority Key Identifier:
                keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:47:52:6f:49:43:cd:ef:49:aa:6e:9e:3b:10:8a:54:ec:7a:
         11:f6:f9:57:f3:85:87:7d:d0:8a:0d:c4:16:fa:63:57:42:dc:
         1d:ac:27:3f:24:b8:e0:ab:11:ec:56:81:ef:a1:17:dc:da:a8:
         00:be:67:52:f8:a8:ca:63:6f:d6:56:6a:16:ad:f5:e1:1b:cd:
         9a:41:07:75:d2:c7:72:0d:0b:17:76:3e:df:9d:bd:50:ce:0b:
         4b:fc:f3:20:96:71:3a:8d:a8:ad:96:a9:7f:b6:f6:26:b9:4b:
         d2:e1:37:9a:ed:a6:22:d5:4d:9c:c0:3c:80:4c:1f:f8:26:06:
         48:b0:50:3a:12:f4:c0:b4:29:56:85:d4:95:60:98:76:c2:b3:
         06:ac:3a:37:b0:a4:0d:d3:15:e2:38:42:dd:26:56:52:b0:f0:
         03:13:9c:65:bb:a3:9d:b0:3d:b7:f9:d6:a4:fd:cd:87:63:b7:
         39:09:5a:e6:22:2a:bb:e2:9b:f5:6d:c6:cd:04:92:28:24:e2:
         07:b4:33:76:70:d3:06:e1:88:42:82:36:f0:32:8c:9f:6d:04:
         7f:d4:23:fa:64:2f:03:84:cb:5e:af:04:51:5b:11:99:55:7c:
         3d:46:0f:9c:d5:90:97:b2:bd:43:c2:3d:32:b0:58:a3:ba:e0:
         2b:4b:e9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:22:30 2025 by rpki-client