Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
File:                     526yVsD8sH4pB5eDQ-mtndIf4gY.mft (raw, json)
Hash identifier:          C0vSrF6F81wM4OJcaV5k3V6aB95uhAD4CD82860JgsE=
Subject key identifier:   60:92:A9:63:62:D4:2A:B3:15:A5:B6:7A:C5:FD:72:77:0D:E2:4B:5B
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Certificate issuer:       /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial:       3930
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
Manifest number:          36E0
Signing time:             Wed 06 Aug 2025 14:30:50 +0000
Manifest this update:     Wed 06 Aug 2025 14:30:50 +0000
Manifest next update:     Wed 13 Aug 2025 14:30:50 +0000
Files and hashes:         1: 526yVsD8sH4pB5eDQ-mtndIf4gY.crl (hash: dSIOuMraum9b4iC2utZmwkRA6ftHE1o5tVgd9XY85a0=)
                          2: DF423C0071ED11F090895014C4F9AE02.roa (hash: dMZzuTkHFltG/dVIRN/FxGvcF5ptH85D1e8y4cQdkaI=)
                          3: 34A857166DE211F0BE500371C4F9AE02.roa (hash: HmDUno0HSKluJWL/25Jv0NxVQMmd6xGWMJWd+mUOe9g=)
                          4: 1B8CEF10160F11F0BC8CF16EC4F9AE02.roa (hash: Atw8mYr719QL2buAs4N+u5Fvkp0vLbC2BST8Rr2vnds=)
                          5: 5C696C684ABB11EFB64F1B36C4F9AE02.roa (hash: DpJlRaFGhxdvGqVu7m9VIpzHXrpSWXkrTNeb5efv6ao=)
                          6: AD20B4966DE111F0B114A76FC4F9AE02.roa (hash: 8DwnuWlJtLO3yvyzlgxkgDEv8U2ZAN96C3wp/WVS/Eo=)
                          7: 0D338B0C529811F09208B671C4F9AE02.roa (hash: A9LJkDWxUNjGLrFJE60dtpsZdMJ82+p9vH9KSTZ1WBU=)
                          8: 059AA6C236EC11F09677E64CC4F9AE02.roa (hash: 1TIqYxbhJpMCWZC+JAicjf6NUS2vrPDTIVCR78nJZiQ=)
                          9: 55CFC60E3F9811F098104369C4F9AE02.roa (hash: UdCkIarcUDsEiShYuFqpcC316/DtGKuONC/DzAx7Abk=)
                          10: 9EA1CDAAFBF611EEAEFDCB0CC4F9AE02.roa (hash: 4ynLb0Ypopkzl8emElYUHjGvnOkE64cL4WqzPSTgtgo=)
                          11: F64125BC6C7311F08E141A3DC4F9AE02.roa (hash: aS4YPz3WEsgv739ghiy1zDWE/HCfEBrkvC9D615/bFw=)
                          12: 359387D66DE211F0BE500371C4F9AE02.roa (hash: R0NHMfUdvYXxjzug2dIAcDz71vDJMZmp08QrbrAN3E4=)
                          13: 8773BD724ECB11F0ADEBBC83C4F9AE02.roa (hash: HKaHS237EvhFJjk431cbv94fDUgyIYPlQqoabwVRFDs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
                          rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 14:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14640 (0x3930)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
        Validity
            Not Before: Aug  6 14:30:50 2025 GMT
            Not After : Aug 13 14:30:50 2025 GMT
        Subject: CN=6893671a-0a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:38:e0:17:41:b7:2d:83:ee:64:83:8e:b0:52:
                    74:d1:22:d8:1e:42:f9:28:6b:94:19:36:b3:6a:4b:
                    24:f4:6c:dc:e2:2e:b2:52:cb:5a:b4:fd:93:06:d2:
                    8d:68:87:00:58:f7:36:39:7d:49:68:c0:45:b7:01:
                    d1:b2:50:b1:b9:ef:27:ac:6e:15:d5:c7:85:7b:17:
                    b0:ba:72:e7:eb:ac:2e:4a:db:b2:be:25:07:0b:4f:
                    4c:7a:1f:2a:69:ad:6d:96:e8:8b:4a:11:57:f8:7b:
                    a0:c2:75:2f:da:bc:18:b4:bb:92:ad:fe:2d:12:1c:
                    b7:06:7f:34:c2:6f:5f:51:8b:18:33:bb:82:ad:40:
                    c6:97:40:9d:5d:76:f0:ec:25:2c:fd:9e:3c:20:3a:
                    7b:b3:e9:cd:e3:bb:41:74:88:45:4a:93:5f:f4:78:
                    3d:23:58:71:6c:62:2c:91:12:87:ff:3d:39:df:7d:
                    e9:6d:6f:05:98:57:6c:fe:c5:59:88:14:97:12:38:
                    26:8e:fe:af:5c:05:1a:cb:4f:63:69:f3:b3:37:28:
                    00:79:f7:e6:c5:92:bf:fc:a6:55:53:69:c0:be:67:
                    40:7d:16:a5:c2:18:46:82:8a:3f:56:5d:3e:6f:d7:
                    30:ac:14:ae:ff:fc:8b:2c:f0:aa:38:80:be:9a:aa:
                    1b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:92:A9:63:62:D4:2A:B3:15:A5:B6:7A:C5:FD:72:77:0D:E2:4B:5B
            X509v3 Authority Key Identifier:
                keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:3f:47:65:42:51:63:4f:2a:c6:0d:87:3c:4e:4a:5e:f8:7d:
         cb:71:2d:23:30:35:17:5b:89:25:9e:37:44:af:0b:a4:5f:76:
         de:be:83:32:34:3a:a0:0e:ec:3b:4b:87:60:d5:bb:7d:4a:d7:
         f2:df:18:90:a2:72:54:b0:b0:ce:9a:d3:b6:0d:00:4f:19:ad:
         78:13:bd:2a:97:7d:5f:47:d8:21:83:d0:b5:26:80:1f:ab:b1:
         d7:66:a8:f9:b5:66:06:c2:35:1b:eb:36:8c:44:c8:db:44:da:
         3a:21:b7:ea:a5:48:45:8d:83:57:06:52:d4:aa:2b:63:93:67:
         8d:4c:93:4a:8c:f4:17:f0:d5:e2:7e:24:c9:38:7a:ef:ec:3d:
         11:ce:79:f4:00:da:b5:f7:ca:1c:aa:73:24:53:4a:65:db:79:
         fd:d3:e4:e9:cc:a8:20:5c:67:38:f1:ff:44:5f:22:85:a4:f5:
         96:da:09:ca:64:df:b9:bb:5b:ef:09:56:32:c7:eb:d9:a9:06:
         65:de:33:1b:cc:5b:38:c3:f4:d1:a5:1d:52:7d:06:ca:35:a0:
         e6:4a:2f:b9:84:5d:88:c4:ee:4f:a7:5d:7a:32:cf:7e:47:a9:
         25:cf:10:c2:e2:0d:42:6f:9f:a5:ce:63:e8:43:05:bf:68:8f:
         60:11:b9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:43:32 2025 by rpki-client