Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
File:                     526yVsD8sH4pB5eDQ-mtndIf4gY.mft (raw, json)
Hash identifier:          JBCYW0OFW6tq816mDCqTL5Lx3xKSlrL0Pp5kWzPYPr4=
Subject key identifier:   BA:24:E5:88:E9:A9:7C:FD:77:1C:E9:10:EF:AF:05:6A:28:0D:2D:1B
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Certificate issuer:       /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial:       3C28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
Manifest number:          38CF
Signing time:             Mon 28 Sep 2026 14:31:34 +0000
Manifest this update:     Mon 28 Sep 2026 14:31:33 +0000
Manifest next update:     Mon 05 Oct 2026 14:31:33 +0000
Files and hashes:         1: 526yVsD8sH4pB5eDQ-mtndIf4gY.crl (hash: EqcotjbU6fbl2VdSReDDPJwRHbaww5vYRb/GB/WILkA=)
                          2: DBC9F6D831DE11F19F32A596CC833773.roa (hash: 0C0JFV/77aFwCVQhI7VMUxGC7Hk6Z0KhOGDx+CvmTao=)
                          3: 34A857166DE211F0BE500371C4F9AE02.roa (hash: q0qNZ2KgBRRSwlHCN4b3HP7E/raeDabjsdzM/jVv2uk=)
                          4: 6C90766A5E8A11F1951FE0531F7AAC22.roa (hash: Z0joRDTU6UnMTJGUdEJ2x7iNAhHSw9rxupkw/CwB3kA=)
                          5: E1C4E06CA86611F1A06FFE804511F970.roa (hash: KLkNbLn6X+M0vNBiSz80RHaLDjJDf9hBdL/AfvF56Jc=)
                          6: 81263468A86611F1AD29717D4511F970.roa (hash: O38Gm5DIBzbnesWMUjIbkZ/kmo2s/7k/PfJ1TeLx/wM=)
                          7: AC20C79663DD11F1A8F4A29A8647A888.roa (hash: vUlNLC5mlthz5n9FlOguA8d/zLZxdl4iSHcOGUsO0iQ=)
                          8: CC07A44EB03611F180C874233E11F970.roa (hash: MF9K2C4LlS7lYBhGCFkxTVqN4ZpSPRovRyF4KFdrT9M=)
                          9: 54D1C7F2541911F183547C4A96833773.roa (hash: LQdAIiOk1sBJSFerO+TkZnrFySbe+uENSVyUB4hyye0=)
                          10: CAF1B6B2B03611F180C874233E11F970.roa (hash: lJp3Vay17kxfjDgfPKPZv8WMFHJPQW32KJfTkL0J+ME=)
                          11: 696ECAD4881311F0BDB4B016C4F9AE02.roa (hash: mzJ6hxVR4uDilFXSaSfAp3k8hMQX/qoRbudA3wz4qxs=)
                          12: 7DCA8ECA071E11F1B7CAC03F293D8C67.roa (hash: 8fOyElcWwEQM1IJmzqQL3Xw/KjfH+51lgPX6KjwvJ6M=)
                          13: oDLUoXawp2QA711TQg82qdaL7xY.asa (hash: Ys7znSRNCneTeNFEjwpU1LIBFt1uJ9cK3tjYt8xYZm4=)
                          14: klqyR0Jg2m3JH3jAqxR3mV0K_Ww.asa (hash: 8usYXBil9VNIWwPRBZMI9oGDIid+R8mJ1on2E0LXobY=)
                          15: wt5YEsRneVM1Ae48Nc2G50437RA.asa (hash: n2BS6UAxp3+88ptQXu0ryAEeiqiHBOv1EcxLsH56KyY=)
                          16: 0835BEDC2EBF11F18CA17C1DC0833773.roa (hash: Xes8pG6q68PHK5oEHGyA3zPUWQp6uwqJvSqjGKklaD8=)
                          17: 900B7AF4EBA311F0BD47A0725D6F56BC.roa (hash: IJwfgCQdq7BeL5zQ1h4lHO+O/jN9YK0KRW/9iw0GmH8=)
                          18: 8166E7B6453711F188A3B6FDA0833773.roa (hash: 9GhOCUTtkwH0j0pn6Xy8i2836MJiyjAyN2vV+oyx7PA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
                          rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 14:31:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15400 (0x3c28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
        Validity
            Not Before: Sep 28 14:31:33 2026 GMT
            Not After : Oct  5 14:31:33 2026 GMT
        Subject: CN=6aba7a46-57ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f0:4b:c7:59:ff:b8:b4:7f:88:6d:f1:73:4a:
                    6b:b2:a0:28:12:8c:a4:f5:73:45:d5:62:50:fe:c3:
                    cd:2d:1c:df:b7:e3:66:f9:d1:6c:4f:43:aa:5a:ff:
                    7d:22:df:92:9e:79:53:71:36:82:bf:23:25:06:97:
                    ce:c0:88:78:b3:1d:23:ad:ec:8a:c3:1b:69:fe:6c:
                    64:14:d3:19:fb:b1:31:c8:0b:e0:8f:6a:bb:ed:59:
                    db:4c:6d:02:e0:a9:91:18:c4:3e:cf:9d:3f:be:cb:
                    11:de:f1:58:ae:e8:82:92:48:a0:84:c6:82:d0:5a:
                    08:a1:82:c0:7a:a7:ac:6d:a7:a8:82:69:e0:70:d9:
                    ab:d1:31:96:e1:9a:5e:16:78:9d:35:ac:dc:74:94:
                    30:c1:2b:2d:a1:2a:cf:e6:75:d5:bb:22:04:e3:5a:
                    b4:16:95:2a:3f:4a:f9:6c:a0:8e:7a:e1:40:bd:99:
                    83:55:4c:f6:f4:12:34:ef:82:6e:37:8b:aa:b8:34:
                    b9:ea:a5:92:f9:45:6f:ff:33:9b:9e:c0:9f:b0:70:
                    7e:b9:1b:5e:bf:75:43:08:be:81:83:1f:d0:22:5c:
                    59:80:f5:9e:68:30:bc:e9:3e:d5:b4:e2:14:ac:6d:
                    66:9b:f3:e7:c3:11:b6:20:3f:b0:a8:91:2e:cc:6a:
                    88:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:24:E5:88:E9:A9:7C:FD:77:1C:E9:10:EF:AF:05:6A:28:0D:2D:1B
            X509v3 Authority Key Identifier:
                keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:c7:01:fd:86:da:1d:3c:01:91:cf:72:40:f1:6a:50:31:3f:
         77:11:25:90:66:db:e0:1b:a8:b3:e8:69:fb:39:13:e0:56:08:
         d6:f7:cb:54:39:65:6a:bf:39:21:63:04:1a:55:40:89:d6:b5:
         3e:1a:b9:4d:bc:cd:e0:7e:b4:12:cf:ec:0d:e2:1a:ef:fa:0c:
         97:1a:a0:ff:e2:d4:8c:fb:09:bb:7c:06:03:ce:92:ca:59:4b:
         d2:d6:78:25:16:2b:56:94:90:6a:2d:01:e5:6d:5b:b2:ba:64:
         2e:6a:dc:ee:8b:52:40:b1:af:0f:76:f2:59:b0:e7:2a:5a:29:
         a7:6d:32:c4:04:52:aa:69:08:ba:70:f7:0e:cc:dc:2c:86:f7:
         61:bd:f2:f1:3e:08:1a:01:95:79:e7:75:33:15:d5:9d:91:65:
         7a:dc:35:4d:f0:3e:c2:b6:af:c7:65:c1:e6:07:41:71:86:ff:
         87:81:f0:89:23:ca:50:be:66:d7:f1:96:7e:42:6a:f5:0e:93:
         a1:84:4f:60:99:20:c2:22:ae:b6:54:2d:b4:dd:df:ba:5d:96:
         ef:cb:de:6d:e7:fd:9a:cd:8b:50:61:be:c2:84:a6:1c:8f:08:
         32:b8:21:bc:87:8a:f3:8f:dc:d2:49:8c:d6:d1:12:5b:c6:8a:
         66:4f:c7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:54:40 2026 by rpki-client