Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
File:                     526yVsD8sH4pB5eDQ-mtndIf4gY.mft (raw, json)
Hash identifier:          H2MAoj1G2vfDm73U2dmb8gY7FACExv1cs8VK/jBOzdI=
Subject key identifier:   8A:BD:E4:9D:B5:EB:3E:07:53:3C:25:B2:DE:B0:71:B2:F3:E9:83:91
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Certificate issuer:       /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial:       3ABF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
Manifest number:          37E5
Signing time:             Sun 01 Mar 2026 23:35:20 +0000
Manifest this update:     Sun 01 Mar 2026 23:35:18 +0000
Manifest next update:     Sun 08 Mar 2026 23:35:18 +0000
Files and hashes:         1: 526yVsD8sH4pB5eDQ-mtndIf4gY.crl (hash: vGUHIlhsID/zlp7NxMPcgS96mmyN4yOZOO0kISMXh8c=)
                          2: 7A0BAADC040111F1B9060863163D8C67.roa (hash: d0nFI/f/S/tqaejcjs3vrz/QJLOz0kfb6ONxAG87hjo=)
                          3: CF554666863D11F08BD39411C4F9AE02.roa (hash: pyrV3BniMPDFfoOztYlzXnzXJxkjNlJMhqiwzw+B7E8=)
                          4: 66E3763C8DBA11F09481A638C4F9AE02.roa (hash: qSgMMRhUbVy2Pz7nixB9sIdpvvbfUsqlR9kSg6CQW8U=)
                          5: 696ECAD4881311F0BDB4B016C4F9AE02.roa (hash: 70lq6hB6RM8SsXFNoAKIOYxi3AShZ0ZVU7UdYmirsQ4=)
                          6: D59574D2E34511F085C5E9F9726F56BC.roa (hash: XCriQAPUVYRKMSV5lxUDIOtEejB4sgW82gir/nC2odk=)
                          7: 7DCA8ECA071E11F1B7CAC03F293D8C67.roa (hash: c1xDduY4DMH63BqJVdvlJA5rm1sNH9Q4Qe0uUhKQQfk=)
                          8: 34A857166DE211F0BE500371C4F9AE02.roa (hash: vIfs8UhQRo8j412Fg6mqRk3fGw0kErwAUs6YHPann20=)
                          9: D660396C035011F192BB7F0F283D8C67.roa (hash: KBU+0OVl/Sfdv4xv4ZbInGTJAuEiWblygg+fN/8XEjs=)
                          10: 32A7EBFE071E11F1A62A9B3F293D8C67.roa (hash: ZFHZLOMarevC8PrPVwz/Uje1jTxsVlmVaNUXCB1xam0=)
                          11: 8004DF30095B11F19BF21184093D8C67.roa (hash: Oy5cpl1NYEukiYent/lKJacU52rMfFWkdAkCHLMVwvw=)
                          12: 93C96908FC6A11F0BC7E1059506F56BC.roa (hash: VadYfbsphBJo10Q1PQxsQb5rUBK2V859fwzx42S57es=)
                          13: 900B7AF4EBA311F0BD47A0725D6F56BC.roa (hash: efxaAV4pwZWacw1VRNdRblTA9ytukgvXa2fI4vCTXPg=)
                          14: A75A1EDE027011F1A92E33DF2A3D8C67.roa (hash: J9CNzp8vlOQa2aK9fXuDzhgt5nlu46a9cTsza5pQcbc=)
                          15: 059AA6C236EC11F09677E64CC4F9AE02.roa (hash: pbU1Q+VvCEica/PDRe8oUkeQ2lDeSD9k0D9wvM67rNU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
                          rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:35:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15039 (0x3abf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
        Validity
            Not Before: Mar  1 23:35:18 2026 GMT
            Not After : Mar  8 23:35:18 2026 GMT
        Subject: CN=69a4cd37-5074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:57:39:53:d9:b6:09:3f:6f:6c:19:b0:b3:b2:
                    9b:0d:63:25:93:34:ae:6b:f0:04:0b:f4:74:05:2a:
                    71:39:e9:a4:e1:8e:91:6c:62:ce:a9:74:2c:6d:00:
                    47:be:4d:52:6d:89:da:1a:62:b8:17:59:98:01:a1:
                    bf:0d:bf:a3:97:71:cb:6f:61:86:27:34:ef:ea:24:
                    32:d0:d9:00:94:f1:f5:4d:72:65:77:78:d2:fa:7c:
                    4c:7f:97:c1:d6:ee:4a:b2:da:33:10:eb:16:30:f4:
                    b2:f2:ef:a1:a9:6d:15:d4:30:b0:70:db:d5:e3:fb:
                    56:c9:22:72:97:7b:79:b6:95:e6:35:55:b0:ea:fd:
                    ea:b1:c2:16:63:4e:1d:da:28:8e:48:60:8c:11:49:
                    cc:fe:a9:69:cb:1d:b0:0a:2d:c9:fb:8d:c0:c3:6d:
                    7f:ee:60:cf:00:05:6c:29:8a:bf:fc:dc:fa:8b:35:
                    2b:ce:3d:24:20:e3:7c:23:ab:91:a0:23:3c:b1:2f:
                    49:32:6f:58:c1:74:f3:29:1f:9d:65:fe:fa:fc:bf:
                    3d:b3:76:5d:04:08:8c:1a:51:78:eb:73:6b:c7:e4:
                    d3:6f:73:26:2c:f8:72:51:77:95:2e:21:b0:5c:0a:
                    35:bf:15:41:9e:71:bf:e9:ce:62:17:fb:61:68:44:
                    8e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:BD:E4:9D:B5:EB:3E:07:53:3C:25:B2:DE:B0:71:B2:F3:E9:83:91
            X509v3 Authority Key Identifier:
                keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:6d:e9:c7:3e:09:c0:8f:d0:74:5a:1a:82:ef:93:5d:e0:81:
         d6:29:3c:cf:96:48:55:63:bd:8d:ee:74:3c:f7:37:1e:25:e6:
         11:23:e6:cb:e7:31:20:28:55:36:86:4e:26:a7:05:cc:52:f8:
         e2:35:b2:00:fa:a8:c3:a0:a3:69:d0:d1:38:44:67:9d:d6:e5:
         45:8b:97:9b:c2:79:bb:54:1c:15:eb:77:33:3f:53:a7:eb:27:
         5d:e6:6d:02:3f:4d:c7:9f:af:dd:af:55:f3:15:1d:b3:fc:21:
         a6:9b:03:6a:bc:12:08:95:55:3c:4d:2c:43:84:83:a2:c6:55:
         d3:7f:08:54:83:c8:f8:21:3a:7d:11:22:24:1c:fa:44:e4:42:
         44:c4:01:8e:c3:b0:c3:85:0c:2f:b8:44:f6:bb:03:06:90:97:
         d3:6a:06:55:49:f5:a8:5b:fb:7f:88:ff:67:a4:a4:f2:04:5b:
         ee:5d:f4:73:0d:0d:dd:c4:53:42:b4:e7:e2:0e:72:f4:10:62:
         bf:8f:d0:1e:c3:35:28:c1:3a:98:6c:51:ef:b7:27:4c:e2:0d:
         2b:5f:29:32:22:48:5f:1a:8e:6f:2f:da:06:44:87:5c:0e:fb:
         58:a2:d8:49:8c:71:41:a2:9f:2c:93:9e:be:c0:e9:64:4b:8e:
         bd:d6:2f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:34:02 2026 by rpki-client