Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
File:                     526yVsD8sH4pB5eDQ-mtndIf4gY.mft (raw, json)
Hash identifier:          hAvsyiZIQI0KPOEsI8AYxnXkbpiCrNNNlO6fvW9JtQA=
Subject key identifier:   BE:05:F0:67:9A:D3:AB:26:D4:D8:DB:F2:6D:82:CD:85:76:DC:03:BF
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Certificate issuer:       /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial:       3BE2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
Manifest number:          389C
Signing time:             Sun 26 Jul 2026 14:32:08 +0000
Manifest this update:     Sun 26 Jul 2026 14:32:08 +0000
Manifest next update:     Sun 02 Aug 2026 14:32:08 +0000
Files and hashes:         1: 526yVsD8sH4pB5eDQ-mtndIf4gY.crl (hash: XPu7a2OmvyzIlYTwfiO9a0PPTYXWmBS1ttPZWSFvJ0E=)
                          2: 3601365863DE11F1AE9C550C8747A888.roa (hash: a5VM7JtD6LcodsYeGlB0EAm1aE+9xhQRh0wSSd39kMo=)
                          3: DBC9F6D831DE11F19F32A596CC833773.roa (hash: 0C0JFV/77aFwCVQhI7VMUxGC7Hk6Z0KhOGDx+CvmTao=)
                          4: CF554666863D11F08BD39411C4F9AE02.roa (hash: ViBAfZN4LiVLC+KVZsA7wOjPz6zBLhpLOCuCREPCPgs=)
                          5: AC20C79663DD11F1A8F4A29A8647A888.roa (hash: iqHrEZCcn4iOrmIl6xU/5IkvDTh+MMY2cMGXFBRoFRY=)
                          6: 696ECAD4881311F0BDB4B016C4F9AE02.roa (hash: mzJ6hxVR4uDilFXSaSfAp3k8hMQX/qoRbudA3wz4qxs=)
                          7: 54D1C7F2541911F183547C4A96833773.roa (hash: LQdAIiOk1sBJSFerO+TkZnrFySbe+uENSVyUB4hyye0=)
                          8: 8166E7B6453711F188A3B6FDA0833773.roa (hash: 9GhOCUTtkwH0j0pn6Xy8i2836MJiyjAyN2vV+oyx7PA=)
                          9: oDLUoXawp2QA711TQg82qdaL7xY.asa (hash: Ys7znSRNCneTeNFEjwpU1LIBFt1uJ9cK3tjYt8xYZm4=)
                          10: 7DCA8ECA071E11F1B7CAC03F293D8C67.roa (hash: 8fOyElcWwEQM1IJmzqQL3Xw/KjfH+51lgPX6KjwvJ6M=)
                          11: 0835BEDC2EBF11F18CA17C1DC0833773.roa (hash: Xes8pG6q68PHK5oEHGyA3zPUWQp6uwqJvSqjGKklaD8=)
                          12: 34A857166DE211F0BE500371C4F9AE02.roa (hash: q0qNZ2KgBRRSwlHCN4b3HP7E/raeDabjsdzM/jVv2uk=)
                          13: 6C90766A5E8A11F1951FE0531F7AAC22.roa (hash: Z0joRDTU6UnMTJGUdEJ2x7iNAhHSw9rxupkw/CwB3kA=)
                          14: wt5YEsRneVM1Ae48Nc2G50437RA.asa (hash: n2BS6UAxp3+88ptQXu0ryAEeiqiHBOv1EcxLsH56KyY=)
                          15: 900B7AF4EBA311F0BD47A0725D6F56BC.roa (hash: IJwfgCQdq7BeL5zQ1h4lHO+O/jN9YK0KRW/9iw0GmH8=)
                          16: klqyR0Jg2m3JH3jAqxR3mV0K_Ww.asa (hash: 8usYXBil9VNIWwPRBZMI9oGDIid+R8mJ1on2E0LXobY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
                          rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 14:32:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15330 (0x3be2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
        Validity
            Not Before: Jul 26 14:32:08 2026 GMT
            Not After : Aug  2 14:32:08 2026 GMT
        Subject: CN=6a661a68-7267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f4:a9:fa:7a:78:d1:8d:7d:d8:36:5d:cd:ea:
                    53:21:0c:a7:09:4f:d3:05:de:6a:5a:c7:31:f8:d1:
                    cd:ed:ec:ed:75:03:af:ca:35:24:3a:dd:21:e1:6a:
                    2a:2b:3b:60:67:e4:c2:b0:8c:23:24:f0:57:c9:23:
                    03:f0:0b:65:56:94:ae:ee:e0:08:21:48:da:8e:fa:
                    54:f6:3f:87:ed:ea:cc:2a:fc:11:5c:49:56:64:0b:
                    27:55:3b:5b:86:0f:88:af:0b:84:86:90:11:5f:08:
                    25:9d:b3:ab:c7:f0:45:d2:d3:e0:ad:8b:ef:ed:1f:
                    8a:84:a6:03:f2:46:f1:00:36:b6:02:66:f8:b5:29:
                    c3:94:57:03:b8:0e:0d:d7:54:38:7c:b7:cd:90:f6:
                    c3:24:e8:aa:6a:9a:58:4d:b5:cb:1d:79:70:7a:da:
                    6f:43:57:b1:b6:32:9a:af:aa:ed:f8:be:3e:d7:09:
                    33:26:18:41:27:c7:55:33:df:b7:56:34:c7:2c:bf:
                    9c:34:37:a1:3a:f5:c9:a1:d0:a2:28:b6:a9:ee:c8:
                    c0:49:84:8d:31:85:bf:f2:11:5f:02:55:62:2b:44:
                    14:79:c2:27:45:82:cb:fa:6d:52:bb:da:85:6b:eb:
                    01:a6:b5:81:59:c9:ad:de:01:5a:7b:97:6e:84:11:
                    9f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:05:F0:67:9A:D3:AB:26:D4:D8:DB:F2:6D:82:CD:85:76:DC:03:BF
            X509v3 Authority Key Identifier:
                keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:fe:67:f9:e3:42:c5:4d:66:2a:42:6c:cf:6a:cf:1b:79:cd:
         84:af:30:51:cd:8c:ff:75:77:a2:6e:11:17:4d:ca:0b:3b:e9:
         f2:fb:00:d7:69:c0:81:49:83:88:b0:76:21:d1:80:3b:fc:a8:
         81:77:7c:15:ae:6c:6e:49:ff:17:ee:11:05:1d:61:9b:7e:32:
         85:5b:c7:89:fb:cb:67:65:94:de:02:f3:34:70:a1:d5:dc:2a:
         fb:b9:16:23:ed:ec:44:df:95:e9:68:8c:30:04:1d:3d:30:3e:
         c3:68:3d:d8:5e:4e:05:f9:f2:c7:68:55:41:68:be:38:a1:a3:
         ca:f6:40:de:9e:d7:2b:8b:b8:1c:46:8f:45:5a:3a:f3:a4:1f:
         c5:15:83:85:24:da:7d:77:33:bc:6f:d0:37:14:9d:20:53:52:
         6b:47:11:a7:f0:90:96:5e:a4:49:be:59:f6:84:f4:5b:12:ae:
         de:ed:8c:36:b3:ae:4b:6f:58:3b:7d:66:ce:dc:2a:79:18:fe:
         cc:d0:21:7d:a6:a8:a2:e7:c8:63:39:1f:4a:18:3b:a0:76:9b:
         1a:f9:a9:91:ac:7d:ce:9b:48:c2:b7:7e:89:e4:5f:b1:92:96:
         6a:ca:3a:fd:d1:86:39:60:8b:e3:a3:f3:49:51:ac:16:28:b6:
         6e:5d:9f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 03:47:34 2026 by rpki-client