Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          xFDCiMnVX1tRbEMHTYdaUEmshYhgIVCseeKgRE22MNw=
Subject key identifier:   A0:C9:ED:F3:91:83:B3:56:E5:7C:F0:F1:5D:87:9C:9C:1A:93:4F:28
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       05C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          04CE
Signing time:             Tue 11 Aug 2026 00:06:31 +0000
Manifest this update:     Tue 11 Aug 2026 00:06:30 +0000
Manifest next update:     Tue 18 Aug 2026 00:06:30 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: 3o5uvL68De4ysSGptbtyOtnfyA6GqW7sSI/+Yg+ODNE=)
                          2: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: FoSzwvvgDPOGghYrGRoNT/3F/hsXOUjc7S8nBc84FDI=)
                          3: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: Xv/wQAgGQuRKdOuR7b3JljTxpd1z5U1GoeLFF2m7jXc=)
                          4: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: 92wRIZw680AyP/v/OZd/w9DgRsgSI6ONdeqJ58u9NjE=)
                          5: 48421E1E61A311F1AD9134E08747A888.roa (hash: 0L5T+62/+LuV8AB9j6gcu/g9GsKvWn9orUiZH54FdP4=)
                          6: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: 6mq5bZQGJ64qqRG9rU+13rtax05sI2Ele52oI5PPSIM=)
                          7: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: jKcbK4IEw6IX5DBWAj2PfbXbqhFpVe65Ce73aszMZHQ=)
                          8: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: g3/xtOL31AkLVTBnIUdXCHbVSuqpwrEw296Y7D5oHRk=)
                          9: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: W828W0l0bTgnpTlS9/sHF0lVKlK0jtphre/w8R0LrXg=)
                          10: 39D293CC61A311F184335DAE8747A888.roa (hash: jedw50TUWq7AyJ3VTKcKZQQqP8Wlj4F5zK+M/tpfaYU=)
                          11: 14671BD890A311F19EA46D796F11F970.roa (hash: LRK4uCWmqWpWw3Xm3dXQgxGRrJCrM0VZNsAVYzL7FS4=)
                          12: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: 6BPjWf3PRrYbjxHXmcTYFTcq9mEbXJz5EDwd+WrDRUk=)
                          13: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: GfVyeK1u4sYQdScjmEZa/TgSrlbpkVV/b2NL/9s4N4g=)
                          14: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: oFCRKJ2F0EfbbPkmQz5K49dGmf/1cMbEIIfSRomsCOA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 18 Aug 2026 00:06:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1477 (0x5c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Aug 11 00:06:30 2026 GMT
            Not After : Aug 18 00:06:30 2026 GMT
        Subject: CN=6a7a6787-7195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a5:28:0f:13:89:d5:db:a6:2d:89:f7:22:03:
                    6f:23:bb:cf:cb:55:7c:33:b9:ee:59:b6:d3:e4:14:
                    5a:53:0e:70:3a:bc:80:90:b0:c1:c0:2e:60:1f:01:
                    bd:1b:2a:48:53:af:69:2a:62:b0:01:54:c5:e7:e1:
                    d8:f5:52:4b:b5:31:ce:e7:ef:63:a9:78:dc:06:5f:
                    6b:fb:53:ea:7e:98:76:f2:73:cc:49:5c:28:ca:34:
                    95:07:e1:f3:61:e7:71:d3:6d:ee:01:69:cf:31:5d:
                    98:56:a1:24:50:31:08:81:57:9b:14:f8:f8:86:f6:
                    c2:a6:1c:71:79:dc:a3:40:ca:26:c4:82:47:e8:9b:
                    ec:85:24:82:66:0c:80:a8:10:8a:85:e4:f3:97:50:
                    19:5d:fa:40:30:de:e9:a3:97:5a:b4:94:56:a5:8d:
                    a4:8a:43:2b:0e:86:7e:9c:ec:46:8b:9a:cf:b8:44:
                    fe:c0:4f:ca:60:26:e2:1b:10:b4:11:1c:97:db:9b:
                    22:20:ce:fe:d7:9d:05:16:fd:19:b4:8e:1d:77:4e:
                    71:fe:98:08:2b:06:35:d1:9a:ef:3e:71:d9:d0:36:
                    87:a0:cb:45:b1:2d:81:04:fa:53:8d:d4:60:29:5c:
                    db:28:37:40:40:7c:86:1c:a0:87:ef:d5:f6:1a:97:
                    58:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C9:ED:F3:91:83:B3:56:E5:7C:F0:F1:5D:87:9C:9C:1A:93:4F:28
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:cf:77:f9:99:0d:02:72:13:06:f7:c5:25:5b:de:06:b1:4c:
         b5:b1:61:27:2d:fc:a1:d9:21:c6:02:ec:7d:ca:f5:d7:25:71:
         83:60:ae:f4:e5:e4:1f:1a:f6:27:8a:1d:a5:5a:93:21:d8:13:
         cb:07:79:2f:a5:39:82:40:74:f0:35:50:30:25:1c:f7:4f:ad:
         69:2b:be:70:d0:49:8e:80:3a:1f:41:eb:1f:c3:cb:70:9d:e4:
         e8:be:57:74:16:4a:ba:20:4a:04:8e:ad:5d:6a:7f:a5:4a:91:
         d8:9f:9e:1e:e9:58:76:d4:0a:86:4d:eb:a8:ba:b0:b5:1e:df:
         22:76:f0:73:75:2f:38:8b:22:6b:5c:aa:8a:c3:a5:67:3f:a6:
         75:80:f6:50:20:5a:4c:9f:7b:c3:ed:09:40:1b:5c:eb:76:6f:
         01:72:51:97:df:76:9c:62:2e:c5:36:3b:08:f2:f0:be:92:27:
         10:1b:09:c5:ce:90:81:3f:d8:a2:3e:39:4c:aa:a3:bd:1b:8f:
         71:ff:f0:80:1f:57:f1:07:36:9a:ec:e9:2c:9f:3e:84:51:eb:
         38:76:6b:00:41:cc:f8:7b:7d:5e:db:f8:d8:3b:12:91:0b:98:
         a3:7a:ff:fc:c7:97:af:ac:65:39:53:a4:ec:b3:fe:21:7e:04:
         e1:88:f0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 11 14:36:03 2026 by rpki-client