Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
File:                     526yVsD8sH4pB5eDQ-mtndIf4gY.mft (raw, json)
Hash identifier:          yXEgWqKhcmCha+MgVSnakInwTP/Ff9VVbKhR5KtEsjg=
Subject key identifier:   05:15:D5:B4:C3:C4:12:39:80:38:29:09:80:71:0D:10:A5:C4:12:0A
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Certificate issuer:       /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial:       38FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
Manifest number:          36BC
Signing time:             Mon 30 Jun 2025 14:34:33 +0000
Manifest this update:     Mon 30 Jun 2025 14:34:32 +0000
Manifest next update:     Mon 07 Jul 2025 14:34:32 +0000
Files and hashes:         1: 526yVsD8sH4pB5eDQ-mtndIf4gY.crl (hash: P+E9R1hq7L5D+o/jXdO7GjyHnbJZi7bP7Dw1IE/vUuM=)
                          2: 16EEEDEE4FF511F08191435BC4F9AE02.roa (hash: SJehZ3ZZZl4PJgKsoT1k6g8jgXxJGPQTDsPeWApRkHo=)
                          3: 2C1ADE1A35C811EEB06D6E4FC4F9AE02.roa (hash: Kb65CgSbpk+g+27O3L9YO/NalEccXczxBWE1egLtaM4=)
                          4: E01731A04A0511EFBE524A77C4F9AE02.roa (hash: ywzvrLxBT/Z7nPd3pBvdmtRanDDISy0oLSGMtPD+fnk=)
                          5: 1B8CEF10160F11F0BC8CF16EC4F9AE02.roa (hash: Atw8mYr719QL2buAs4N+u5Fvkp0vLbC2BST8Rr2vnds=)
                          6: 5C696C684ABB11EFB64F1B36C4F9AE02.roa (hash: DpJlRaFGhxdvGqVu7m9VIpzHXrpSWXkrTNeb5efv6ao=)
                          7: 6B9538F223DD11EF81EBB933C4F9AE02.roa (hash: Qqy4u5Du4YJjLwWpq0dlcmlkR6uc3a3M7nv191S71u8=)
                          8: 0D338B0C529811F09208B671C4F9AE02.roa (hash: A9LJkDWxUNjGLrFJE60dtpsZdMJ82+p9vH9KSTZ1WBU=)
                          9: 059AA6C236EC11F09677E64CC4F9AE02.roa (hash: 1TIqYxbhJpMCWZC+JAicjf6NUS2vrPDTIVCR78nJZiQ=)
                          10: 55CFC60E3F9811F098104369C4F9AE02.roa (hash: UdCkIarcUDsEiShYuFqpcC316/DtGKuONC/DzAx7Abk=)
                          11: 9EA1CDAAFBF611EEAEFDCB0CC4F9AE02.roa (hash: 4ynLb0Ypopkzl8emElYUHjGvnOkE64cL4WqzPSTgtgo=)
                          12: 2AFAC78029B311F0AF325E4AC4F9AE02.roa (hash: nUUhIGZHO3RHOUl1TnIm6KeN8p6UUqQmkzO4UL1GmbU=)
                          13: 6289DC0452A811F08D69FB63C4F9AE02.roa (hash: sp9IYpFweC1yMeQwKbqyuVyOlySCgp1EtVwqB4gt4sI=)
                          14: 8773BD724ECB11F0ADEBBC83C4F9AE02.roa (hash: HKaHS237EvhFJjk431cbv94fDUgyIYPlQqoabwVRFDs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
                          rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 14:34:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14591 (0x38ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
        Validity
            Not Before: Jun 30 14:34:32 2025 GMT
            Not After : Jul  7 14:34:32 2025 GMT
        Subject: CN=6862a079-5d7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b0:f0:40:6a:f8:f2:11:18:da:58:97:55:63:
                    e7:0f:1b:a0:72:ea:da:c3:95:62:5c:dc:93:17:db:
                    c1:4b:e9:b4:5e:7c:da:d0:1f:d6:f3:a4:26:66:e5:
                    c5:92:2e:da:80:8b:d7:72:99:e6:9e:27:b1:99:f6:
                    0b:7b:de:51:8e:92:14:12:3c:24:52:18:33:6a:27:
                    07:d4:a5:1f:a4:48:2c:6c:4c:c7:3e:4a:24:f3:8c:
                    4b:c0:2b:36:63:c0:97:4c:c5:67:29:a5:5e:23:f3:
                    50:1a:c7:72:f1:a8:d3:66:12:00:12:b2:57:4e:7f:
                    77:d7:da:1d:a3:5e:24:46:e3:78:34:3d:2e:4c:0a:
                    7e:cc:4a:5a:a8:97:54:8c:de:ca:16:3c:77:ed:0f:
                    47:07:c0:c2:49:59:86:db:c4:2a:e2:ef:cc:b8:8c:
                    be:71:cb:32:76:df:74:d3:7a:ad:b6:ff:b1:f7:f1:
                    2e:cf:9d:a2:ef:c6:64:8c:d6:24:4f:6c:38:77:51:
                    50:a8:8a:ea:a8:b5:46:41:c2:b0:17:15:ad:38:29:
                    12:f0:90:52:8d:e8:6c:6c:52:42:0c:75:52:76:59:
                    7c:34:ad:7a:91:63:75:e8:65:97:13:27:16:b0:c7:
                    1a:04:ed:4e:90:2b:4a:3d:0d:d6:78:b1:b4:67:d6:
                    ff:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:15:D5:B4:C3:C4:12:39:80:38:29:09:80:71:0D:10:A5:C4:12:0A
            X509v3 Authority Key Identifier:
                keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:a2:a2:0f:44:bb:34:c2:bc:69:e3:87:20:d1:42:1e:cd:cf:
         7b:42:6c:28:ce:fc:45:d4:f5:75:f5:f6:41:25:4e:b3:97:5d:
         5c:17:9c:d6:b7:32:32:69:67:ce:f5:3d:90:21:4a:39:7a:c2:
         0a:e6:e0:35:ee:74:0e:4d:4d:7a:b6:e4:69:6c:55:88:49:57:
         81:a9:51:7c:d7:fe:f5:f5:ce:db:36:a5:3c:64:07:5b:f5:ea:
         72:fc:21:af:21:86:26:bf:18:20:a8:50:78:d2:1f:cb:71:35:
         87:f8:66:46:6c:89:5b:bf:1d:c9:de:52:92:0b:81:3a:54:89:
         7d:ae:27:36:d0:92:c5:ec:40:f5:46:51:19:7d:85:b1:ea:4b:
         9a:1f:41:92:58:c1:34:f9:6e:5e:73:2c:cf:9e:23:70:e5:f5:
         e8:7b:1e:1e:f0:1c:06:68:c0:f9:b9:ad:98:cf:68:ad:94:f2:
         82:ae:b8:37:f3:d6:0c:2b:9f:02:d7:b7:15:99:bd:9f:4e:6d:
         5f:84:79:f1:79:6a:f8:98:74:07:61:3e:b2:a2:b2:d1:a2:f3:
         2f:c4:4b:0c:b4:9a:d5:a2:c9:aa:38:98:4f:9e:54:91:94:89:
         66:24:f3:4d:9e:99:ac:26:6e:46:d0:bd:ea:36:3b:84:58:78:
         e8:2b:4f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:42:56 2025 by rpki-client