Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          Ws//SrXe2V54LkCpn8bxXZTC78B7qrbSBrHi3tHVQPQ=
Subject key identifier:   2E:E1:7A:6A:30:E6:C6:06:08:ED:40:34:B8:E1:33:C3:37:A2:FE:22
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       056E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          0489
Signing time:             Sun 19 Apr 2026 00:40:18 +0000
Manifest this update:     Sun 19 Apr 2026 00:40:17 +0000
Manifest next update:     Sun 26 Apr 2026 00:40:17 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: T4whewxmjUPnKNz5Ta+iFwj5S1rMiKvISOgH3rzGTQM=)
                          2: E984676EB5E611F0BCCCFA59C4F9AE02.roa (hash: RcSedgyQP0f/Mx0R7YzTVV6LUvz5MpJuolu8SeEYtAY=)
                          3: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: VkKyUkZvufLeqNWH4XS4MFj5LEClAP479cUeOm9p8S8=)
                          4: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: mwjCND/hb5mcBVM5huPhi5+mLyWxYoFCwlwxmeL4yts=)
                          5: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: tnJ/yjknRBuc7UcBwzOHFJo2tnhzqFgevM34YS5rTmY=)
                          6: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: vsM3lJioCOwfp3LZZpdveH83fo62+Y9urJ8LtwiCnMw=)
                          7: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: VpLsJjoOM5TQH3OZEcPzV4PLIS2G8Hn1FrYlhKbie54=)
                          8: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: /JQTTMGxpG1rEnJAGVjqQn7ENfIeEQm+h8FaXqx7IVA=)
                          9: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: kNZ9kMcIVbL2jK5YIL401eBQNsQQQ0xAhM8Sv/4h4WQ=)
                          10: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: awi/D8lHc6L4dnToUMe+Br+mJLk9zICL465IydEzQlc=)
                          11: D3A8EA649F0911EE98065E23C4F9AE02.roa (hash: Xpp2kFVSkuxzwBMowkkOloasdXHXgZJRNUiRPlt0tnI=)
                          12: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: 3zeR3y4ThnqjrUYK2B2lRbeCm3UuFhf7qDtePwaC2RU=)
                          13: B6E083D46E2F11EEB9C12A34C4F9AE02.roa (hash: n7XrDdLRgIOzlZQtMfnZ1wiO99lQrB5PrhvdGG1ja78=)
                          14: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: WLbihB2PWZ1o++RM42EGDbLREOZKJSeaYxV3v/0bXwE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 00:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1390 (0x56e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Apr 19 00:40:17 2026 GMT
            Not After : Apr 26 00:40:17 2026 GMT
        Subject: CN=69e42471-da4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:88:dc:a1:c3:cc:02:7d:49:39:a7:cf:a3:ad:
                    92:87:47:85:23:fb:f6:50:58:60:69:19:1f:11:ef:
                    52:c6:70:47:07:cc:d1:87:3b:1e:a3:94:dd:66:b6:
                    e8:df:a1:7e:a1:78:f0:28:24:1e:d8:f6:98:69:69:
                    03:11:59:d0:9f:b1:a6:73:b7:bc:8f:c8:06:3e:19:
                    46:9f:1b:e5:52:1d:21:f2:04:05:db:78:fd:97:23:
                    d7:8b:f4:30:68:db:33:60:4f:32:69:2c:48:df:a7:
                    b9:df:30:0c:75:fb:4f:2a:7e:7b:1e:cb:96:79:dd:
                    48:7c:68:bb:7b:26:47:62:5a:3b:3f:17:44:84:30:
                    cf:95:75:1b:4c:2d:05:f4:c3:38:ea:03:73:cf:17:
                    c7:21:27:dd:c0:a3:b4:df:28:8e:0c:20:5b:37:7b:
                    33:21:06:8a:9f:c4:f4:ef:1c:49:8d:5b:10:08:db:
                    69:fb:4e:0d:de:a1:9c:28:d2:d7:03:f8:ee:41:0a:
                    c1:e7:96:35:39:dc:af:8e:78:32:59:ba:28:55:58:
                    4f:35:ec:d6:1c:c7:56:28:5d:f3:01:a3:e6:bf:f1:
                    69:df:cf:08:f4:98:90:05:a8:2e:16:eb:3c:02:fc:
                    5c:b7:64:93:78:a6:a1:19:92:81:68:44:db:54:f6:
                    b8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E1:7A:6A:30:E6:C6:06:08:ED:40:34:B8:E1:33:C3:37:A2:FE:22
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:2d:ec:3a:99:40:aa:b4:3c:f6:12:d6:af:9b:8c:73:80:3a:
         02:a5:bb:1f:a0:cf:6f:77:b2:63:db:b6:0b:77:39:e6:75:e0:
         d7:a5:90:70:68:ab:50:1f:52:aa:a2:0d:1a:60:f1:68:95:43:
         ac:9c:9d:55:e5:b7:df:5b:39:b7:e6:3d:96:e6:4b:40:96:62:
         e7:00:81:15:00:20:b7:81:2f:f1:b7:23:c2:8a:dc:65:a0:5b:
         38:31:50:6a:7d:2e:42:7f:12:d5:89:45:c9:bc:36:bf:98:d0:
         68:23:09:f2:4b:c0:fc:bf:a4:73:6e:51:e0:b8:8f:d0:ab:34:
         5f:1b:77:eb:25:e2:46:58:44:09:b9:81:9c:ae:9a:51:a8:9c:
         26:c5:56:b1:aa:40:56:8d:04:b8:a3:ec:ec:5e:0e:41:51:55:
         cc:e8:84:94:00:7f:e3:e4:dd:2a:94:f3:48:b9:c8:d1:70:01:
         e8:69:52:f8:62:12:a1:44:b4:de:71:9a:75:e8:90:55:ee:64:
         51:4a:4c:73:d5:af:99:26:42:97:ab:69:2f:5f:a4:9a:cc:d8:
         ac:19:f8:1f:ee:31:85:dd:96:60:15:2d:ba:f9:6a:33:26:88:
         19:eb:16:20:5b:99:14:8d:cd:6c:ba:bc:2b:18:9c:80:b6:67:
         8a:aa:60:1a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEZDNzUxMTAvBgNVBAUTKDQ4MkU1QTZFMDg5NkEyNjZBOTFBNDA2NkMwNkY0QjRF
RDk4NDY0OUQwHhcNMjYwNDE5MDA0MDE3WhcNMjYwNDI2MDA0MDE3WjAYMRYwFAYD
VQQDEw02OWU0MjQ3MS1kYTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA04jcocPMAn1JOafPo62Sh0eFI/v2UFhgaRkfEe9SxnBHB8zRhzseo5TdZrbo
36F+oXjwKCQe2PaYaWkDEVnQn7Gmc7e8j8gGPhlGnxvlUh0h8gQF23j9lyPXi/Qw
aNszYE8yaSxI36e53zAMdftPKn57HsuWed1IfGi7eyZHYlo7PxdEhDDPlXUbTC0F
9MM46gNzzxfHISfdwKO03yiODCBbN3szIQaKn8T07xxJjVsQCNtp+04N3qGcKNLX
A/juQQrB55Y1OdyvjngyWbooVVhPNezWHMdWKF3zAaPmv/Fp388I9JiQBaguFus8
Avxct2STeKahGZKBaETbVPa46wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC7hemow
5sYGCO1ANLjhM8M3ov4iMB8GA1UdIwQYMBaAFEguWm4IlqJmqRpAZsBvS07ZhGSd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM3NS8zQUE1REVFMERE
NTgxMUVDODcwRkMyMERDNEY5QUUwMi9TQzVhYmdpV29tYXBHa0Jtd0c5TFR0bUVa
SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NDNWFiZ2lXb21hcEdrQm13RzlMVHRtRVpKMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RkM3NS8zQUE1REVFMERENTgxMUVDODcwRkMyMERDNEY5QUUwMi9TQzVhYmdpV29t
YXBHa0Jtd0c5TFR0bUVaSjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAei3sOplAqrQ89hLWr5uMc4A6AqW7H6DPb3eyY9u2C3c55nXg16WQcGirUB9S
qqINGmDxaJVDrJydVeW331s5t+Y9luZLQJZi5wCBFQAgt4Ev8bcjworcZaBbODFQ
an0uQn8S1YlFybw2v5jQaCMJ8kvA/L+kc25R4LiP0Ks0Xxt36yXiRlhECbmBnK6a
UaicJsVWsapAVo0EuKPs7F4OQVFVzOiElAB/4+TdKpTzSLnI0XAB6GlS+GISoUS0
3nGadeiQVe5kUUpMc9WvmSZCl6tpL1+kmszYrBn4H+4xhd2WYBUtuvlqMyaIGesW
IFuZFI3NbLq8KxicgLZniqpgGg==
-----END CERTIFICATE-----
Generated at Mon Apr 20 15:35:35 2026 by rpki-client