Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
File:                     526yVsD8sH4pB5eDQ-mtndIf4gY.mft (raw, json)
Hash identifier:          c5F4oWRTG46Ksdszohwagqxv5i3qePgDdse9hOzUsdI=
Subject key identifier:   32:9D:F4:22:66:C1:A4:B2:1B:5E:DD:3E:97:E1:17:70:89:4C:DD:6C
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Certificate issuer:       /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial:       3B7D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
Manifest number:          384F
Signing time:             Mon 27 Apr 2026 13:04:48 +0000
Manifest this update:     Mon 27 Apr 2026 13:04:47 +0000
Manifest next update:     Mon 04 May 2026 13:04:47 +0000
Files and hashes:         1: 526yVsD8sH4pB5eDQ-mtndIf4gY.crl (hash: gr9WgIzA1zehtdgUPfYVRhiI51xYmTdMCy1apzFHmWU=)
                          2: 7DCA8ECA071E11F1B7CAC03F293D8C67.roa (hash: 8fOyElcWwEQM1IJmzqQL3Xw/KjfH+51lgPX6KjwvJ6M=)
                          3: 696ECAD4881311F0BDB4B016C4F9AE02.roa (hash: mzJ6hxVR4uDilFXSaSfAp3k8hMQX/qoRbudA3wz4qxs=)
                          4: 0835BEDC2EBF11F18CA17C1DC0833773.roa (hash: Xes8pG6q68PHK5oEHGyA3zPUWQp6uwqJvSqjGKklaD8=)
                          5: 8646EEA0235611F194C606A0B0833773.roa (hash: Z5cjyQyppyEYazGYoJoGI4AQLs0JC7oPSqUYpOCgenQ=)
                          6: 34A857166DE211F0BE500371C4F9AE02.roa (hash: q0qNZ2KgBRRSwlHCN4b3HP7E/raeDabjsdzM/jVv2uk=)
                          7: D59574D2E34511F085C5E9F9726F56BC.roa (hash: lIQn0WxSnSQxiU/f7+7H91IMx+SUkjIqDdygeWe6YoM=)
                          8: CF554666863D11F08BD39411C4F9AE02.roa (hash: ViBAfZN4LiVLC+KVZsA7wOjPz6zBLhpLOCuCREPCPgs=)
                          9: 61459DDA2E9C11F1AC16778CB4833773.roa (hash: rG0y+cEbTQhnyJkFQo9I9NYYHYD0kmnWRFcD4nATZ2Q=)
                          10: 059AA6C236EC11F09677E64CC4F9AE02.roa (hash: UadNI/spmzmqtvYBNfsDX/i7Rs74mIsUiUwnzrOQ90U=)
                          11: DBC9F6D831DE11F19F32A596CC833773.roa (hash: 0C0JFV/77aFwCVQhI7VMUxGC7Hk6Z0KhOGDx+CvmTao=)
                          12: 900B7AF4EBA311F0BD47A0725D6F56BC.roa (hash: IJwfgCQdq7BeL5zQ1h4lHO+O/jN9YK0KRW/9iw0GmH8=)
                          13: BAA31B82334C11F1B39593F0C5833773.roa (hash: lIyTLXPAnH65MfXHS8yI5w9l1qk3vRaUTsOKyUDqbPo=)
                          14: AA00C86E327B11F1A7DE805FC2833773.roa (hash: GLnMYUW0obVaAZx3yEr7mPIVaC+9DIf6ZlS7Rzitt8M=)
                          15: 32A7EBFE071E11F1A62A9B3F293D8C67.roa (hash: CwEuo3yjGZBW6COo46Wwuerd28J69eKHrO9/S42Fy00=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
                          rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 13:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15229 (0x3b7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
        Validity
            Not Before: Apr 27 13:04:47 2026 GMT
            Not After : May  4 13:04:47 2026 GMT
        Subject: CN=69ef5eef-fdc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b1:ff:11:db:76:4c:10:92:2b:05:33:30:6c:
                    9d:44:13:0a:36:5c:bd:e9:4e:aa:99:7f:95:b2:17:
                    82:cf:46:d2:30:90:8f:cd:ea:cf:7c:d5:8b:7b:46:
                    e0:98:f1:0d:2d:5c:84:ab:42:96:2d:69:af:99:26:
                    98:30:87:f9:cb:ad:43:5f:05:fb:4c:99:2c:d1:e4:
                    af:1b:3e:f4:74:85:36:c0:1f:d4:c3:f0:2b:43:a9:
                    a6:82:cb:3f:24:ee:57:32:e8:ec:0e:5a:d8:08:d9:
                    6a:6d:b8:16:62:ce:54:43:08:63:13:87:a0:c4:ac:
                    9e:a9:95:7e:c6:76:74:61:a9:13:9f:d5:a7:e2:bc:
                    98:d4:e7:4f:51:2a:c5:d3:5f:c2:4b:b8:28:30:1f:
                    d1:b4:27:3f:e3:5b:7a:7a:77:61:a2:00:e1:1e:82:
                    af:2e:95:d9:2c:41:b4:cf:21:ed:39:c0:90:67:06:
                    ba:bc:ae:2d:d3:19:66:fd:92:04:73:60:5d:48:29:
                    1d:6e:b4:38:20:b6:1c:16:7b:35:16:63:94:b8:0e:
                    ef:23:3f:0a:8a:ba:9d:68:8f:6f:ed:3f:56:4c:96:
                    c6:59:af:25:68:b6:b5:9a:b8:39:39:eb:2f:8a:2c:
                    fd:ae:2c:54:29:05:00:d0:8e:72:98:1f:ba:79:e2:
                    bb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:9D:F4:22:66:C1:A4:B2:1B:5E:DD:3E:97:E1:17:70:89:4C:DD:6C
            X509v3 Authority Key Identifier:
                keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:c5:b0:7a:47:b6:42:b7:9a:99:05:a6:92:72:57:d1:0a:e6:
         69:e7:b0:66:f8:ed:0a:cd:a0:6c:05:be:17:aa:03:d4:c5:f2:
         dd:54:60:19:d8:51:40:22:51:ba:d9:5a:17:73:b7:b3:16:29:
         e5:eb:94:43:a6:1e:23:a5:8b:ef:ce:27:b5:8e:7e:17:d8:77:
         f7:6d:53:0b:63:45:b1:ad:d3:77:45:d5:e6:8a:c1:a5:66:5c:
         3a:bc:97:8a:92:b5:ff:d7:9a:35:1e:ec:29:6b:5d:77:2a:99:
         8f:a7:a0:27:cc:fe:0c:23:75:1d:33:c0:48:f4:0b:81:3a:fc:
         3a:58:98:34:97:11:7b:88:86:1b:92:7e:6a:f4:a8:60:c7:db:
         04:ad:a5:f9:47:1e:08:29:97:81:fd:86:bb:e3:b1:7e:92:1a:
         2e:07:d3:29:66:7b:02:3b:78:e9:40:56:b0:1a:e7:fe:c3:f6:
         0f:f8:66:ef:37:67:d7:33:db:5a:64:1d:9f:e1:7c:5d:c8:04:
         3e:c4:ad:94:aa:69:91:2d:d1:fd:a8:aa:b4:1d:ac:6a:0b:8f:
         62:f9:ac:2e:3c:6d:9a:cb:0b:e1:9d:04:fd:79:c4:cd:ec:d9:
         ac:37:92:3b:04:a6:ff:c1:b3:43:67:d0:1d:5c:73:3e:12:0f:
         da:d7:ca:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 07:19:03 2026 by rpki-client