Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
File:                     526yVsD8sH4pB5eDQ-mtndIf4gY.mft (raw, json)
Hash identifier:          mDUcboe6pamLVdFqsHrEfmXtLLKlIdhRUW2GjOcv83c=
Subject key identifier:   08:77:04:2D:C1:B4:1F:08:46:11:57:1B:00:6E:08:B4:7C:63:40:68
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Certificate issuer:       /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial:       3C3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
Manifest number:          38E1
Signing time:             Mon 26 Oct 2026 14:31:05 +0000
Manifest this update:     Mon 26 Oct 2026 14:31:05 +0000
Manifest next update:     Mon 02 Nov 2026 14:31:05 +0000
Files and hashes:         1: 526yVsD8sH4pB5eDQ-mtndIf4gY.crl (hash: /S7afyb2rzsptXaPxYebevppikPAfnlNPT+ACNzpe7E=)
                          2: AC20C79663DD11F1A8F4A29A8647A888.roa (hash: vUlNLC5mlthz5n9FlOguA8d/zLZxdl4iSHcOGUsO0iQ=)
                          3: 54D1C7F2541911F183547C4A96833773.roa (hash: LQdAIiOk1sBJSFerO+TkZnrFySbe+uENSVyUB4hyye0=)
                          4: 696ECAD4881311F0BDB4B016C4F9AE02.roa (hash: mzJ6hxVR4uDilFXSaSfAp3k8hMQX/qoRbudA3wz4qxs=)
                          5: CC07A44EB03611F180C874233E11F970.roa (hash: MF9K2C4LlS7lYBhGCFkxTVqN4ZpSPRovRyF4KFdrT9M=)
                          6: 81263468A86611F1AD29717D4511F970.roa (hash: O38Gm5DIBzbnesWMUjIbkZ/kmo2s/7k/PfJ1TeLx/wM=)
                          7: 900B7AF4EBA311F0BD47A0725D6F56BC.roa (hash: IJwfgCQdq7BeL5zQ1h4lHO+O/jN9YK0KRW/9iw0GmH8=)
                          8: 8166E7B6453711F188A3B6FDA0833773.roa (hash: 9GhOCUTtkwH0j0pn6Xy8i2836MJiyjAyN2vV+oyx7PA=)
                          9: 7DCA8ECA071E11F1B7CAC03F293D8C67.roa (hash: 8fOyElcWwEQM1IJmzqQL3Xw/KjfH+51lgPX6KjwvJ6M=)
                          10: 34A857166DE211F0BE500371C4F9AE02.roa (hash: q0qNZ2KgBRRSwlHCN4b3HP7E/raeDabjsdzM/jVv2uk=)
                          11: klqyR0Jg2m3JH3jAqxR3mV0K_Ww.asa (hash: 8usYXBil9VNIWwPRBZMI9oGDIid+R8mJ1on2E0LXobY=)
                          12: DBC9F6D831DE11F19F32A596CC833773.roa (hash: 0C0JFV/77aFwCVQhI7VMUxGC7Hk6Z0KhOGDx+CvmTao=)
                          13: oDLUoXawp2QA711TQg82qdaL7xY.asa (hash: Ys7znSRNCneTeNFEjwpU1LIBFt1uJ9cK3tjYt8xYZm4=)
                          14: A6EC746ACE6C11F19E1BBADF2F66CEF9.roa (hash: 4OiYt8TpTxGWusbxSbuDn/FcJ/TMZRfQsFS2eJkGfaA=)
                          15: 0835BEDC2EBF11F18CA17C1DC0833773.roa (hash: Xes8pG6q68PHK5oEHGyA3zPUWQp6uwqJvSqjGKklaD8=)
                          16: wt5YEsRneVM1Ae48Nc2G50437RA.asa (hash: n2BS6UAxp3+88ptQXu0ryAEeiqiHBOv1EcxLsH56KyY=)
                          17: 6C90766A5E8A11F1951FE0531F7AAC22.roa (hash: Z0joRDTU6UnMTJGUdEJ2x7iNAhHSw9rxupkw/CwB3kA=)
                          18: E1C4E06CA86611F1A06FFE804511F970.roa (hash: KLkNbLn6X+M0vNBiSz80RHaLDjJDf9hBdL/AfvF56Jc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
                          rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 14:31:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15422 (0x3c3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
        Validity
            Not Before: Oct 26 14:31:05 2026 GMT
            Not After : Nov  2 14:31:05 2026 GMT
        Subject: CN=6adf6429-5929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9d:3a:b2:6d:ba:15:6c:4e:ba:dc:ee:86:17:
                    e2:24:ea:36:a8:12:ae:f3:2c:02:a9:a9:81:63:d1:
                    2e:d2:a5:90:f6:60:f6:3d:a9:14:b4:55:f9:ac:01:
                    34:0d:f2:ed:5a:92:13:2e:4b:60:07:98:51:02:ec:
                    9f:d2:e9:38:02:60:77:32:1c:05:38:e2:54:99:6c:
                    51:2b:3e:79:39:ea:96:04:ba:92:d7:cb:3a:5b:83:
                    cc:eb:14:1e:1b:15:ee:28:cc:89:4d:a7:58:31:6e:
                    58:a9:8e:04:18:82:dc:7e:f7:dc:82:9e:3a:ee:51:
                    2b:66:1d:ea:91:31:2e:cb:e8:16:09:85:b9:2e:c7:
                    06:ca:32:1b:e1:13:4c:e6:49:e3:8e:aa:97:e4:4f:
                    94:71:05:6f:ff:68:54:66:02:c2:68:ce:aa:3a:8e:
                    10:9f:74:f8:73:ec:f0:d9:eb:32:34:23:a4:7e:9a:
                    07:a7:7d:fb:dd:3a:db:72:43:18:90:10:1b:5b:18:
                    68:c6:21:e4:fa:63:79:dc:5d:28:8a:13:90:60:3f:
                    6a:4e:2d:5c:a1:91:5f:3f:20:c8:0f:19:fa:3c:b2:
                    f2:ff:f4:fd:ba:b3:60:78:11:ab:d8:f8:14:92:ee:
                    5c:7e:31:6e:af:ea:2e:60:18:0e:c4:73:bc:4d:c0:
                    29:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:77:04:2D:C1:B4:1F:08:46:11:57:1B:00:6E:08:B4:7C:63:40:68
            X509v3 Authority Key Identifier:
                keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:ac:64:e7:59:73:71:61:4c:9a:10:a4:50:7c:2e:4e:a2:fc:
         6b:a9:69:1f:5c:a3:db:44:84:1e:dc:91:1f:2d:67:74:cb:0b:
         f6:a7:43:c8:8a:a5:5b:7d:4f:57:83:9e:c5:1c:7b:f3:d3:85:
         1d:ef:9b:41:72:74:d1:2f:4d:28:bc:13:18:ae:73:46:25:c8:
         12:de:87:bd:72:5e:f1:bb:6f:59:ec:ba:9b:9d:92:09:ec:38:
         12:d1:1d:bc:29:ee:51:57:b2:a0:31:f7:ab:14:08:71:b6:a8:
         84:53:7d:3c:5c:d9:55:54:81:fd:d0:2e:f0:68:35:c5:b1:71:
         c5:46:64:f7:37:89:5b:fa:68:56:28:61:f5:80:9b:c4:6e:e3:
         3e:36:b9:2d:71:17:e1:27:00:78:fa:ca:0b:bc:75:1e:75:82:
         02:9e:52:7b:5e:81:13:6b:a9:c3:e6:54:35:52:4a:3b:96:33:
         d1:f9:d1:da:7e:21:59:1f:59:8a:0e:09:5f:be:cb:fd:27:8c:
         f8:5e:a2:d9:4b:7b:4f:99:dd:a9:04:a0:10:1b:c4:dc:d0:99:
         8f:03:ee:6e:cd:94:b1:22:b0:6a:ad:7d:83:0d:c3:ef:e2:97:
         aa:23:5e:52:9e:06:fb:6b:da:e1:4b:26:34:5e:76:e4:3a:eb:
         02:bb:8c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:22:27 2026 by rpki-client