Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
File:                     526yVsD8sH4pB5eDQ-mtndIf4gY.mft (raw, json)
Hash identifier:          9uPkTG/965nTZwMIEJEzBjhv6qR1VmCnrbE0avJAdbc=
Subject key identifier:   66:47:A0:39:8F:33:AE:54:14:36:E4:B2:E8:39:40:64:5B:3B:F7:6D
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Certificate issuer:       /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial:       3B8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
Manifest number:          385C
Signing time:             Tue 12 May 2026 14:31:19 +0000
Manifest this update:     Tue 12 May 2026 14:31:19 +0000
Manifest next update:     Tue 19 May 2026 14:31:19 +0000
Files and hashes:         1: 526yVsD8sH4pB5eDQ-mtndIf4gY.crl (hash: J7QPysnMbu17P+xty16YEsDFCmmZv569qfj9wx5Ppks=)
                          2: 8646EEA0235611F194C606A0B0833773.roa (hash: Z5cjyQyppyEYazGYoJoGI4AQLs0JC7oPSqUYpOCgenQ=)
                          3: D59574D2E34511F085C5E9F9726F56BC.roa (hash: lIQn0WxSnSQxiU/f7+7H91IMx+SUkjIqDdygeWe6YoM=)
                          4: 61459DDA2E9C11F1AC16778CB4833773.roa (hash: rG0y+cEbTQhnyJkFQo9I9NYYHYD0kmnWRFcD4nATZ2Q=)
                          5: 34A857166DE211F0BE500371C4F9AE02.roa (hash: q0qNZ2KgBRRSwlHCN4b3HP7E/raeDabjsdzM/jVv2uk=)
                          6: 059AA6C236EC11F09677E64CC4F9AE02.roa (hash: UadNI/spmzmqtvYBNfsDX/i7Rs74mIsUiUwnzrOQ90U=)
                          7: C09F4778453911F1A136E9A1A1833773.roa (hash: yjbpcIdH63hCQwSFgejVaijgTU0OBZ0ZWddT8xNBacw=)
                          8: 900B7AF4EBA311F0BD47A0725D6F56BC.roa (hash: IJwfgCQdq7BeL5zQ1h4lHO+O/jN9YK0KRW/9iw0GmH8=)
                          9: DBC9F6D831DE11F19F32A596CC833773.roa (hash: 0C0JFV/77aFwCVQhI7VMUxGC7Hk6Z0KhOGDx+CvmTao=)
                          10: 8166E7B6453711F188A3B6FDA0833773.roa (hash: 9GhOCUTtkwH0j0pn6Xy8i2836MJiyjAyN2vV+oyx7PA=)
                          11: 7DCA8ECA071E11F1B7CAC03F293D8C67.roa (hash: 8fOyElcWwEQM1IJmzqQL3Xw/KjfH+51lgPX6KjwvJ6M=)
                          12: CF554666863D11F08BD39411C4F9AE02.roa (hash: ViBAfZN4LiVLC+KVZsA7wOjPz6zBLhpLOCuCREPCPgs=)
                          13: 696ECAD4881311F0BDB4B016C4F9AE02.roa (hash: mzJ6hxVR4uDilFXSaSfAp3k8hMQX/qoRbudA3wz4qxs=)
                          14: BAA31B82334C11F1B39593F0C5833773.roa (hash: lIyTLXPAnH65MfXHS8yI5w9l1qk3vRaUTsOKyUDqbPo=)
                          15: 0835BEDC2EBF11F18CA17C1DC0833773.roa (hash: Xes8pG6q68PHK5oEHGyA3zPUWQp6uwqJvSqjGKklaD8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
                          rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:31:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15247 (0x3b8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
        Validity
            Not Before: May 12 14:31:19 2026 GMT
            Not After : May 19 14:31:19 2026 GMT
        Subject: CN=6a0339b7-0015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:76:90:b1:a0:26:a3:f8:76:6f:4b:4c:39:14:
                    9a:60:31:4d:97:a9:cf:b6:bb:a2:d9:36:79:8b:aa:
                    99:9d:77:a9:cd:00:d3:90:57:7c:3b:85:7c:f6:27:
                    5c:3c:ab:7c:d4:f3:40:36:3a:90:49:72:d9:07:ea:
                    0d:e4:72:f0:a1:59:f2:e0:a2:1d:bb:19:cb:05:db:
                    b0:0c:29:5f:43:1e:fe:23:4b:94:8f:6d:7c:63:5a:
                    bd:af:7e:4f:95:d3:1c:0e:99:ab:ce:b8:29:b4:98:
                    16:a7:1f:41:e5:c7:62:c5:10:9b:8f:f9:84:b1:5a:
                    8c:0b:94:eb:49:51:18:2c:06:5c:6a:f5:78:47:6c:
                    79:f6:bb:f6:9d:e3:cc:2f:f5:cb:0a:b4:0c:4d:81:
                    33:fd:99:6b:08:59:a2:54:50:4b:0b:de:c7:38:fc:
                    43:54:6f:c3:b6:e9:28:14:a4:24:ed:a8:9a:db:ad:
                    a9:29:ab:bd:4a:94:64:5d:49:71:76:d2:b5:0b:80:
                    1f:bf:25:42:39:8f:2c:b3:cd:2c:cc:c0:31:e2:f0:
                    64:db:21:94:e7:23:2d:91:26:71:e7:22:f0:1b:f1:
                    64:25:a9:da:b3:fd:ed:f4:53:51:a3:ec:30:79:91:
                    6e:55:ce:bf:e1:38:3c:87:dc:56:9d:26:9e:e5:95:
                    30:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:47:A0:39:8F:33:AE:54:14:36:E4:B2:E8:39:40:64:5B:3B:F7:6D
            X509v3 Authority Key Identifier:
                keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:f3:0b:22:5a:15:ed:87:05:d6:bf:dd:e8:b9:e4:ae:14:1b:
         34:70:ab:25:8f:b2:f3:f9:2f:39:95:c1:7a:23:ce:a6:b1:12:
         62:b2:91:7e:4f:98:b5:d0:51:f2:84:df:75:00:1f:7c:46:ea:
         0a:54:9f:92:d2:88:4d:be:34:74:9d:2c:d5:12:a6:7e:3f:5a:
         84:7d:aa:4c:81:82:34:14:cd:3e:f6:7c:cc:5a:3f:a1:f7:2f:
         30:83:b2:6e:82:8d:3f:2e:f4:59:21:8c:ef:e0:83:ec:a4:97:
         a3:dd:06:b9:81:01:cf:0e:97:22:78:96:1a:42:54:24:45:4f:
         32:c6:4d:10:c5:c1:8b:82:b6:e0:4d:27:00:2d:0b:e4:b4:ae:
         93:a9:c2:1f:32:80:71:20:1b:6e:bb:3d:45:96:b9:65:c1:75:
         57:83:39:a4:3f:50:55:b5:01:8d:d2:b0:68:b6:5c:c9:4b:91:
         27:50:07:78:0d:79:77:53:a2:a7:48:89:8a:67:c6:fd:51:2e:
         57:2a:cf:b5:3f:71:3c:1c:83:dd:75:3d:8f:b7:59:a3:45:7a:
         ec:da:1a:06:56:19:db:aa:9b:18:73:d8:4a:5f:79:ef:89:fa:
         b6:e3:78:ce:6e:39:78:c6:40:e4:85:f4:4d:6e:e7:27:c3:9b:
         db:12:c4:33
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICO48wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkM4M0IxMTAvBgNVBAUTKEU3NkVCMjU2QzBGQ0IwN0UyOTA3OTc4MzQzRTlBRDlE
RDIxRkUyMDYwHhcNMjYwNTEyMTQzMTE5WhcNMjYwNTE5MTQzMTE5WjAYMRYwFAYD
VQQDEw02YTAzMzliNy0wMDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArnaQsaAmo/h2b0tMORSaYDFNl6nPtrui2TZ5i6qZnXepzQDTkFd8O4V89idc
PKt81PNANjqQSXLZB+oN5HLwoVny4KIduxnLBduwDClfQx7+I0uUj218Y1q9r35P
ldMcDpmrzrgptJgWpx9B5cdixRCbj/mEsVqMC5TrSVEYLAZcavV4R2x59rv2nePM
L/XLCrQMTYEz/ZlrCFmiVFBLC97HOPxDVG/DtukoFKQk7aia262pKau9SpRkXUlx
dtK1C4AfvyVCOY8ss80szMAx4vBk2yGU5yMtkSZx5yLwG/FkJanas/3t9FNRo+ww
eZFuVc6/4Tg8h9xWnSae5ZUwRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGZHoDmP
M65UFDbksug5QGRbO/dtMB8GA1UdIwQYMBaAFOduslbA/LB+KQeXg0PprZ3SH+IG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzgzQi9FNEUxMEI0QTFE
ODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNEOHNINHBCNWVEUS1tdG5kSWY0
Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzUyNnlWc0Q4c0g0cEI1ZURRLW10bmRJZjRnWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QzgzQi9FNEUxMEI0QTFEODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNEOHNI
NHBCNWVEUS1tdG5kSWY0Z1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnvMLIloV7YcF1r/d6LnkrhQbNHCrJY+y8/kvOZXBeiPOprESYrKRfk+YtdBR
8oTfdQAffEbqClSfktKITb40dJ0s1RKmfj9ahH2qTIGCNBTNPvZ8zFo/ofcvMIOy
boKNPy70WSGM7+CD7KSXo90GuYEBzw6XIniWGkJUJEVPMsZNEMXBi4K24E0nAC0L
5LSuk6nCHzKAcSAbbrs9RZa5ZcF1V4M5pD9QVbUBjdKwaLZcyUuRJ1AHeA15d1Oi
p0iJimfG/VEuVyrPtT9xPByD3XU9j7dZo0V67NoaBlYZ26qbGHPYSl9574n6tuN4
zm45eMZA5IX0TW7nJ8Ob2xLEMw==
-----END CERTIFICATE-----
Generated at Wed May 13 09:53:08 2026 by rpki-client