Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
File:                     526yVsD8sH4pB5eDQ-mtndIf4gY.mft (raw, json)
Hash identifier:          mcIhxIrh/0vQmYIwK7OIxZxTph8Y7+n8t/yoddGU1HA=
Subject key identifier:   A4:79:EA:CC:10:D7:90:BF:91:EF:3C:12:89:21:C2:B4:36:16:E0:F4
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Certificate issuer:       /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial:       3C1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
Manifest number:          38C4
Signing time:             Thu 10 Sep 2026 14:30:47 +0000
Manifest this update:     Thu 10 Sep 2026 14:30:47 +0000
Manifest next update:     Thu 17 Sep 2026 14:30:47 +0000
Files and hashes:         1: 526yVsD8sH4pB5eDQ-mtndIf4gY.crl (hash: rPx/nwK9jEjUvRRsMLYq5ZCnImyaXXD+XbCCo7Ai0sc=)
                          2: 0835BEDC2EBF11F18CA17C1DC0833773.roa (hash: Xes8pG6q68PHK5oEHGyA3zPUWQp6uwqJvSqjGKklaD8=)
                          3: E1C4E06CA86611F1A06FFE804511F970.roa (hash: KLkNbLn6X+M0vNBiSz80RHaLDjJDf9hBdL/AfvF56Jc=)
                          4: AC20C79663DD11F1A8F4A29A8647A888.roa (hash: vUlNLC5mlthz5n9FlOguA8d/zLZxdl4iSHcOGUsO0iQ=)
                          5: CAAE3F82AD1A11F1946C2E6B4111F970.roa (hash: NYLrjYfUvGkQeyBSrHsnKeWzwsJyZcUseAGZu/2HkFY=)
                          6: CF554666863D11F08BD39411C4F9AE02.roa (hash: JMOVZc7q11U3s4rTmDGw+EjovrAG1LWE/tBGJ4oWPso=)
                          7: 696ECAD4881311F0BDB4B016C4F9AE02.roa (hash: mzJ6hxVR4uDilFXSaSfAp3k8hMQX/qoRbudA3wz4qxs=)
                          8: 81263468A86611F1AD29717D4511F970.roa (hash: O38Gm5DIBzbnesWMUjIbkZ/kmo2s/7k/PfJ1TeLx/wM=)
                          9: oDLUoXawp2QA711TQg82qdaL7xY.asa (hash: Ys7znSRNCneTeNFEjwpU1LIBFt1uJ9cK3tjYt8xYZm4=)
                          10: klqyR0Jg2m3JH3jAqxR3mV0K_Ww.asa (hash: 8usYXBil9VNIWwPRBZMI9oGDIid+R8mJ1on2E0LXobY=)
                          11: 8166E7B6453711F188A3B6FDA0833773.roa (hash: 9GhOCUTtkwH0j0pn6Xy8i2836MJiyjAyN2vV+oyx7PA=)
                          12: 900B7AF4EBA311F0BD47A0725D6F56BC.roa (hash: IJwfgCQdq7BeL5zQ1h4lHO+O/jN9YK0KRW/9iw0GmH8=)
                          13: 54D1C7F2541911F183547C4A96833773.roa (hash: LQdAIiOk1sBJSFerO+TkZnrFySbe+uENSVyUB4hyye0=)
                          14: DBC9F6D831DE11F19F32A596CC833773.roa (hash: 0C0JFV/77aFwCVQhI7VMUxGC7Hk6Z0KhOGDx+CvmTao=)
                          15: 6C90766A5E8A11F1951FE0531F7AAC22.roa (hash: Z0joRDTU6UnMTJGUdEJ2x7iNAhHSw9rxupkw/CwB3kA=)
                          16: 7DCA8ECA071E11F1B7CAC03F293D8C67.roa (hash: 8fOyElcWwEQM1IJmzqQL3Xw/KjfH+51lgPX6KjwvJ6M=)
                          17: wt5YEsRneVM1Ae48Nc2G50437RA.asa (hash: n2BS6UAxp3+88ptQXu0ryAEeiqiHBOv1EcxLsH56KyY=)
                          18: 34A857166DE211F0BE500371C4F9AE02.roa (hash: q0qNZ2KgBRRSwlHCN4b3HP7E/raeDabjsdzM/jVv2uk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
                          rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 14:30:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15386 (0x3c1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
        Validity
            Not Before: Sep 10 14:30:47 2026 GMT
            Not After : Sep 17 14:30:47 2026 GMT
        Subject: CN=6aa2bf17-c068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:54:ec:cc:6b:62:34:a1:df:1f:5e:5a:cb:ad:
                    6d:69:6e:5a:ef:da:ca:b5:ed:f9:c6:9c:4a:9e:d0:
                    be:8d:62:f0:68:eb:af:95:b2:ed:0d:d3:ce:e1:35:
                    0b:c8:41:0d:f3:25:6a:03:47:51:ee:1b:f1:b4:dd:
                    ab:f3:ea:bb:69:8d:b7:99:ba:24:61:b7:37:8f:f1:
                    df:ed:79:66:6f:2c:2f:8e:cd:9f:2b:eb:84:3d:82:
                    2f:e3:99:ca:26:14:01:6f:f0:71:a6:b7:b2:d8:9b:
                    00:5f:41:1d:74:ab:2b:69:8d:7e:0c:6f:3b:de:6b:
                    62:e1:ab:7a:6b:06:4c:2a:13:e4:68:c5:3f:e4:fa:
                    67:ce:fc:e0:05:cd:9c:eb:3f:31:90:0d:d2:eb:ad:
                    1a:80:df:b6:22:e7:57:cd:9a:c7:d1:16:64:a5:65:
                    df:69:1d:fa:be:56:bc:b7:b1:7d:3c:cc:67:a7:e7:
                    20:5e:62:d5:00:28:29:17:42:3f:bd:cd:d2:df:40:
                    3f:1a:36:f1:d2:ca:8c:1e:1b:b5:1b:a6:aa:30:b7:
                    c2:c2:af:8b:16:73:79:6c:aa:4e:1f:49:4e:61:cb:
                    58:81:fa:c6:83:34:5b:ad:c2:f3:a5:57:23:a5:2e:
                    2b:f3:57:0d:26:63:aa:86:55:c8:03:5c:7f:5b:09:
                    5f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:79:EA:CC:10:D7:90:BF:91:EF:3C:12:89:21:C2:B4:36:16:E0:F4
            X509v3 Authority Key Identifier:
                keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:00:93:0a:3b:2e:e8:6c:a4:1c:11:51:58:3b:89:bc:3f:4d:
         37:2a:1b:44:3c:0a:53:f3:8d:7b:a4:7e:c9:1d:5f:d6:81:c9:
         58:09:59:96:1f:3f:d5:37:c5:05:15:86:4a:11:fe:ea:dc:2b:
         68:4d:bf:e4:62:55:7b:26:6a:bf:de:d1:b9:b5:9e:0a:0d:0a:
         e6:cf:50:67:06:d6:6d:0b:20:d5:d9:00:5f:0a:5a:64:79:27:
         d0:db:21:b1:f1:b6:be:41:08:d6:35:a2:1a:be:37:ec:51:99:
         cc:14:64:b4:7a:37:7b:25:cd:b6:42:23:ba:79:53:b8:38:d5:
         14:4f:42:d9:1a:db:e4:68:09:bc:dc:17:7e:95:16:f0:09:e3:
         db:6f:cc:4b:ff:8a:96:dc:3f:b8:d4:06:b7:bf:6d:e8:56:8c:
         b0:a5:3e:23:23:7e:7a:ca:43:da:e7:bd:5c:56:05:60:43:4d:
         b4:71:d7:51:ee:d5:3e:28:50:df:1d:45:a3:f1:6a:77:82:bc:
         28:b5:b8:24:1d:b2:13:58:75:f4:36:52:ae:ca:43:ab:09:dd:
         2f:98:88:52:3f:3c:50:2e:42:90:39:0c:17:5b:80:d4:92:16:
         a7:4b:60:7d:fb:ad:4c:3d:8c:42:a0:00:aa:77:69:05:b0:36:
         ce:a1:94:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 12:08:54 2026 by rpki-client