Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
File:                     526yVsD8sH4pB5eDQ-mtndIf4gY.mft (raw, json)
Hash identifier:          tgzqafyw8OvdnfGaXq9YW5uloXkdnJjz2DnZ2251Y34=
Subject key identifier:   32:C0:5E:0A:6F:49:39:7C:1D:80:F7:82:F6:B2:68:64:7F:28:4F:71
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Certificate issuer:       /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial:       3949
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
Manifest number:          36F0
Signing time:             Fri 22 Aug 2025 14:30:59 +0000
Manifest this update:     Fri 22 Aug 2025 14:30:59 +0000
Manifest next update:     Fri 29 Aug 2025 14:30:59 +0000
Files and hashes:         1: 526yVsD8sH4pB5eDQ-mtndIf4gY.crl (hash: eyxwxu8A4R9Zs34SqzB/UN/DCk8uKyz967c8g/g9A34=)
                          2: DF423C0071ED11F090895014C4F9AE02.roa (hash: dMZzuTkHFltG/dVIRN/FxGvcF5ptH85D1e8y4cQdkaI=)
                          3: 7B06673E750811F080D1FF71C4F9AE02.roa (hash: sXSnDESPMgBum177DRW+MC1MXYxsuH8tFbv4DdNoHog=)
                          4: BB325C9676F711F08DF03837C4F9AE02.roa (hash: hZnu1npuJq+XWisFxutzHm3N3d1yBBY4yhjjy4nOi2g=)
                          5: 34A857166DE211F0BE500371C4F9AE02.roa (hash: HmDUno0HSKluJWL/25Jv0NxVQMmd6xGWMJWd+mUOe9g=)
                          6: CED48958739211F09FE8D469C4F9AE02.roa (hash: BrQ/9NfTDJ8Z6vT2XotPHDTHvQF871M0RzY6TfS8e3Y=)
                          7: 1B8CEF10160F11F0BC8CF16EC4F9AE02.roa (hash: Atw8mYr719QL2buAs4N+u5Fvkp0vLbC2BST8Rr2vnds=)
                          8: 5C696C684ABB11EFB64F1B36C4F9AE02.roa (hash: DpJlRaFGhxdvGqVu7m9VIpzHXrpSWXkrTNeb5efv6ao=)
                          9: AD20B4966DE111F0B114A76FC4F9AE02.roa (hash: 8DwnuWlJtLO3yvyzlgxkgDEv8U2ZAN96C3wp/WVS/Eo=)
                          10: 0D338B0C529811F09208B671C4F9AE02.roa (hash: A9LJkDWxUNjGLrFJE60dtpsZdMJ82+p9vH9KSTZ1WBU=)
                          11: 059AA6C236EC11F09677E64CC4F9AE02.roa (hash: 1TIqYxbhJpMCWZC+JAicjf6NUS2vrPDTIVCR78nJZiQ=)
                          12: 9EA1CDAAFBF611EEAEFDCB0CC4F9AE02.roa (hash: 4ynLb0Ypopkzl8emElYUHjGvnOkE64cL4WqzPSTgtgo=)
                          13: F64125BC6C7311F08E141A3DC4F9AE02.roa (hash: aS4YPz3WEsgv739ghiy1zDWE/HCfEBrkvC9D615/bFw=)
                          14: 8773BD724ECB11F0ADEBBC83C4F9AE02.roa (hash: HKaHS237EvhFJjk431cbv94fDUgyIYPlQqoabwVRFDs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
                          rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 14:30:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14665 (0x3949)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
        Validity
            Not Before: Aug 22 14:30:59 2025 GMT
            Not After : Aug 29 14:30:59 2025 GMT
        Subject: CN=68a87f23-5feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:83:b6:db:2f:4e:12:64:58:3e:db:45:c4:be:
                    89:dc:40:82:aa:8b:3c:53:18:d0:a1:81:6d:b9:b7:
                    3f:1b:79:00:94:9f:5d:04:f7:ad:c9:67:c0:ba:e5:
                    d2:92:0d:4a:95:a4:0d:cf:0c:15:62:86:35:4d:2d:
                    c9:2b:e9:75:c5:9e:6a:4e:7f:da:f0:75:ca:a8:28:
                    71:90:68:2d:12:e3:89:c5:9e:21:da:2d:95:98:a9:
                    cc:f3:f7:da:2e:49:5f:d4:b6:3e:78:b6:2b:30:ef:
                    aa:87:b5:73:7c:ad:69:2e:20:c0:9f:8f:04:ac:94:
                    03:33:d9:c5:ad:33:3f:d4:43:9c:50:7b:3c:8e:50:
                    78:bc:9e:66:88:c5:51:32:73:fa:e1:c5:4f:3e:9b:
                    5f:5c:17:4a:52:1d:62:ba:5c:30:ff:18:00:4a:c3:
                    82:7c:6a:14:28:66:28:f9:e1:73:a7:de:69:65:c0:
                    b9:d4:0c:2d:25:64:af:2f:07:68:93:ab:67:7d:23:
                    54:b7:61:b2:dc:ee:a7:1a:08:6d:6f:ce:59:c8:ec:
                    96:63:a5:bd:ca:21:f3:3d:ac:a8:c4:bd:6b:b1:87:
                    8b:34:64:f0:6e:e2:8d:0c:ab:34:53:9a:31:90:ae:
                    ba:13:ed:e0:c9:0a:12:3d:71:52:45:b1:2d:29:8f:
                    aa:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C0:5E:0A:6F:49:39:7C:1D:80:F7:82:F6:B2:68:64:7F:28:4F:71
            X509v3 Authority Key Identifier:
                keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:20:97:0e:9e:8f:45:0d:d5:fe:51:77:24:0c:09:56:57:ef:
         95:da:e2:91:60:0c:e4:0c:57:f5:c6:5a:2c:1a:da:fd:49:93:
         43:84:14:e6:81:05:80:f2:d3:e5:69:87:53:0c:86:ad:a5:95:
         97:ee:24:ae:a5:7b:3c:4b:ee:46:91:fe:37:fe:b3:f4:df:97:
         8a:23:6f:ab:57:1b:cc:fa:98:6b:23:d3:a2:98:83:08:6d:04:
         4c:0c:4a:44:b3:e3:b7:fc:e9:63:d9:85:c1:2d:8b:ce:ea:05:
         f8:21:b0:5f:7e:cf:b2:94:db:00:55:60:fe:16:0d:88:47:90:
         24:75:1d:4d:58:de:36:43:73:3a:d3:dd:ba:78:7d:0b:9a:45:
         df:3f:ad:c3:7e:7d:9a:1e:b6:a3:e9:3d:57:68:db:65:19:13:
         24:cb:ed:35:79:27:24:6e:1c:e4:03:af:66:5c:ca:f5:ff:c5:
         e4:6c:3d:f1:70:95:06:81:25:67:20:5e:ac:84:0d:4a:22:70:
         81:b4:e9:20:9e:d2:8d:7b:fe:d7:68:50:5e:25:c4:c1:99:27:
         f8:77:74:49:64:8c:91:3e:e3:70:6f:34:5d:b0:ab:cd:31:51:
         82:7a:7f:a7:8b:f9:b0:23:23:69:ee:8b:45:e2:00:38:d8:3a:
         e6:4a:3b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:22 2025 by rpki-client