Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
File:                     526yVsD8sH4pB5eDQ-mtndIf4gY.mft (raw, json)
Hash identifier:          MT3KG4mgvWrerjisZForcdli8cdYBlBuBV62gLtqKSU=
Subject key identifier:   58:71:84:4D:52:12:4B:C1:5B:8F:EE:5E:14:E4:7F:7B:90:84:DC:41
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Certificate issuer:       /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial:       3984
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
Manifest number:          3712
Signing time:             Sat 06 Sep 2025 14:31:10 +0000
Manifest this update:     Sat 06 Sep 2025 14:31:10 +0000
Manifest next update:     Sat 13 Sep 2025 14:31:10 +0000
Files and hashes:         1: 526yVsD8sH4pB5eDQ-mtndIf4gY.crl (hash: 2UGhkbbnKUOuvHjKwrQacwS4aEHZyMeTyMOyah2jvE0=)
                          2: CF554666863D11F08BD39411C4F9AE02.roa (hash: xO1be/sHFWCSWufgswMtE4HFdmxcDzgkTtFF/fSGsp4=)
                          3: F147640C8A5711F091373E3BC4F9AE02.roa (hash: ctCSX3q5/u0lm4Rb1sjLF8sCRDaza7dI7rfMKwaQFGA=)
                          4: 34A857166DE211F0BE500371C4F9AE02.roa (hash: HmDUno0HSKluJWL/25Jv0NxVQMmd6xGWMJWd+mUOe9g=)
                          5: 696ECAD4881311F0BDB4B016C4F9AE02.roa (hash: WOqG+5tSWG84qPrc5s5ituMYLAvkj7e0xswpxjmVkbQ=)
                          6: 5C696C684ABB11EFB64F1B36C4F9AE02.roa (hash: DpJlRaFGhxdvGqVu7m9VIpzHXrpSWXkrTNeb5efv6ao=)
                          7: AD20B4966DE111F0B114A76FC4F9AE02.roa (hash: 8DwnuWlJtLO3yvyzlgxkgDEv8U2ZAN96C3wp/WVS/Eo=)
                          8: 0D338B0C529811F09208B671C4F9AE02.roa (hash: A9LJkDWxUNjGLrFJE60dtpsZdMJ82+p9vH9KSTZ1WBU=)
                          9: 3FA447E4864011F0A421961BC4F9AE02.roa (hash: ThLTTjkgTLppu1P8ATvDXUJl7cEb7h2VXP9HwlXgFaY=)
                          10: 059AA6C236EC11F09677E64CC4F9AE02.roa (hash: 1TIqYxbhJpMCWZC+JAicjf6NUS2vrPDTIVCR78nJZiQ=)
                          11: 9EA1CDAAFBF611EEAEFDCB0CC4F9AE02.roa (hash: 4ynLb0Ypopkzl8emElYUHjGvnOkE64cL4WqzPSTgtgo=)
                          12: 442DE3EE888711F0878DDD72C4F9AE02.roa (hash: Hx6+a1QsxJh/pFcZUreaEjrGoPzgzjX+edJqu9UnJ7Y=)
                          13: F64125BC6C7311F08E141A3DC4F9AE02.roa (hash: aS4YPz3WEsgv739ghiy1zDWE/HCfEBrkvC9D615/bFw=)
                          14: A9D80C50865811F09AC97D44C4F9AE02.roa (hash: MNpsO6J8WRzvYujCZ7hvce7Nx4dHp3rsOHZBfJgfkLs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
                          rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 14:31:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14724 (0x3984)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
        Validity
            Not Before: Sep  6 14:31:10 2025 GMT
            Not After : Sep 13 14:31:10 2025 GMT
        Subject: CN=68bc45ae-7888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:89:cd:91:7b:28:e3:00:a1:05:c8:5b:a8:31:
                    63:e2:8e:3a:ca:76:d1:25:52:91:b9:ca:24:1c:b5:
                    dd:90:d8:fb:0a:ce:60:52:d7:c2:05:d7:e9:2e:2f:
                    c9:c9:3e:e5:23:d3:03:ba:03:57:02:14:41:35:b6:
                    06:4c:bd:60:c5:6f:84:c1:af:43:51:ca:24:22:23:
                    b3:71:4d:c3:51:85:30:34:12:1d:25:cc:d0:da:5c:
                    d2:ca:68:85:67:95:1c:5c:b9:da:fd:35:61:45:d7:
                    98:14:27:11:eb:73:73:0b:a0:4d:a5:55:4f:d9:ec:
                    43:b4:e7:e2:07:56:0c:55:8d:c7:59:5d:03:dd:41:
                    c3:f5:60:e2:40:6f:39:90:99:4c:b6:70:b7:9f:ac:
                    f7:43:80:d7:fa:51:b4:76:0b:fa:57:bc:a4:f2:ec:
                    c6:fe:7c:69:7c:eb:3d:bb:62:b6:cf:52:5a:e1:a3:
                    8e:87:f9:30:f6:c9:e5:7b:32:6e:72:6f:36:af:a7:
                    6f:2f:b9:fc:05:95:09:b2:48:5a:db:4a:89:72:21:
                    73:73:8a:90:18:5c:f6:28:3c:6e:58:42:54:6d:49:
                    d9:0e:90:75:4b:20:03:d3:84:cd:e8:17:6e:2f:48:
                    da:e5:81:dd:64:86:2d:bd:5b:17:55:4b:40:fd:10:
                    a1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:71:84:4D:52:12:4B:C1:5B:8F:EE:5E:14:E4:7F:7B:90:84:DC:41
            X509v3 Authority Key Identifier:
                keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:21:92:ed:6c:a5:df:94:3f:3c:22:7a:f8:2d:7d:74:6b:c2:
         79:e7:8c:d2:85:5e:73:bd:90:b7:06:dc:2b:34:32:1a:66:48:
         8d:ea:7a:7c:af:03:57:25:e8:a2:54:c7:1c:48:2a:76:e3:98:
         73:04:8b:5c:68:c9:8e:e4:83:d7:a8:3e:5c:09:39:11:58:4d:
         6e:bd:3c:ff:e7:a1:b9:c4:96:1e:64:90:c0:51:89:45:52:d7:
         63:15:4c:1e:e1:85:15:09:b9:f1:d7:50:81:f7:f2:5a:57:40:
         25:89:c7:a7:ad:0c:4a:39:aa:8b:28:af:be:1e:09:d0:0b:00:
         bf:26:72:20:81:81:61:dd:a0:a4:0b:50:f6:2d:a5:62:da:98:
         62:29:a4:31:ef:61:79:2b:1e:22:77:3d:a4:17:be:95:a7:13:
         bd:92:af:7d:f9:d7:c3:cb:fa:e6:3f:87:00:de:c8:b0:05:b5:
         35:62:7b:51:0e:f4:e9:be:7a:f3:bb:cd:f7:63:0a:9e:37:6f:
         e7:bd:6c:de:c1:4b:e1:37:e9:77:a9:03:ad:7a:5d:b2:84:be:
         c3:57:a7:a3:2c:46:e0:47:d2:8b:77:50:ab:3e:3d:6a:c1:9c:
         ed:c7:a8:f7:5f:4e:6b:c3:7d:95:a4:ff:e5:3a:f8:92:be:e6:
         d5:c6:28:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 03:32:10 2025 by rpki-client