Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          oW+QI+mxc8C2oR7vZ9nWx7KF6uKNEibRAxGwZVbxIV0=
Subject key identifier:   AD:EA:8F:0F:23:9E:DA:E1:35:DB:9E:35:06:67:1A:B8:FA:3C:B6:8B
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       055A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          0475
Signing time:             Wed 11 Mar 2026 00:17:07 +0000
Manifest this update:     Wed 11 Mar 2026 00:17:06 +0000
Manifest next update:     Wed 18 Mar 2026 00:17:06 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: ueyv09xCU4DoBL3XyJ215CpMLEzg4gdwgAjxOahWAgg=)
                          2: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: VkKyUkZvufLeqNWH4XS4MFj5LEClAP479cUeOm9p8S8=)
                          3: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: vsM3lJioCOwfp3LZZpdveH83fo62+Y9urJ8LtwiCnMw=)
                          4: B6E083D46E2F11EEB9C12A34C4F9AE02.roa (hash: n7XrDdLRgIOzlZQtMfnZ1wiO99lQrB5PrhvdGG1ja78=)
                          5: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: 3zeR3y4ThnqjrUYK2B2lRbeCm3UuFhf7qDtePwaC2RU=)
                          6: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: awi/D8lHc6L4dnToUMe+Br+mJLk9zICL465IydEzQlc=)
                          7: D3A8EA649F0911EE98065E23C4F9AE02.roa (hash: Xpp2kFVSkuxzwBMowkkOloasdXHXgZJRNUiRPlt0tnI=)
                          8: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: /JQTTMGxpG1rEnJAGVjqQn7ENfIeEQm+h8FaXqx7IVA=)
                          9: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: mwjCND/hb5mcBVM5huPhi5+mLyWxYoFCwlwxmeL4yts=)
                          10: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: WLbihB2PWZ1o++RM42EGDbLREOZKJSeaYxV3v/0bXwE=)
                          11: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: VpLsJjoOM5TQH3OZEcPzV4PLIS2G8Hn1FrYlhKbie54=)
                          12: E984676EB5E611F0BCCCFA59C4F9AE02.roa (hash: RcSedgyQP0f/Mx0R7YzTVV6LUvz5MpJuolu8SeEYtAY=)
                          13: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: tnJ/yjknRBuc7UcBwzOHFJo2tnhzqFgevM34YS5rTmY=)
                          14: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: kNZ9kMcIVbL2jK5YIL401eBQNsQQQ0xAhM8Sv/4h4WQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Mar 2026 00:17:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1370 (0x55a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Mar 11 00:17:06 2026 GMT
            Not After : Mar 18 00:17:06 2026 GMT
        Subject: CN=69b0b482-9cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2a:dd:6c:7f:08:cd:4d:39:20:a0:f0:b1:bf:
                    3f:61:3f:26:69:36:2a:74:2f:3b:f7:63:2e:45:ac:
                    ce:af:e1:bd:d5:7f:4d:f2:42:4a:30:3f:57:74:77:
                    62:89:2a:fb:b4:a7:66:94:45:f1:3c:0b:8c:d0:6a:
                    dd:cc:08:a2:67:cd:ef:d4:88:c0:31:fb:bb:1b:9e:
                    e1:ea:19:4a:19:a5:d7:af:3f:31:29:f4:64:5c:a6:
                    7b:cd:2a:b5:70:b3:3a:8b:3a:89:a3:49:be:a9:c0:
                    08:af:48:6b:99:08:76:0d:2e:46:14:ca:fa:40:3d:
                    45:6d:bd:1a:21:e5:25:d4:f7:9f:5a:da:f8:7e:ef:
                    16:60:51:82:2a:cf:55:92:86:c3:f8:83:8d:27:77:
                    3f:c4:51:e3:d1:62:c7:90:c1:b7:b4:b5:4e:37:1d:
                    87:2a:ec:d3:27:b7:52:bf:41:98:9f:ff:7b:bd:04:
                    dd:2b:64:8f:e5:09:83:ec:cb:9e:da:f6:f2:90:a1:
                    4c:64:1d:11:17:e4:6e:87:68:a2:64:7e:d2:19:39:
                    34:68:6d:18:dd:7a:4e:8c:b8:90:06:39:bf:52:2f:
                    c9:7b:cf:db:c7:8f:1f:90:81:af:35:21:0f:6c:ea:
                    41:d4:0e:50:7d:c0:16:08:0c:c9:56:83:94:b6:b2:
                    f3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:EA:8F:0F:23:9E:DA:E1:35:DB:9E:35:06:67:1A:B8:FA:3C:B6:8B
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:7c:c0:74:7d:02:2f:23:1d:0b:ed:a3:87:45:c7:d4:2c:58:
         da:c9:47:81:58:ce:cf:ec:97:e2:56:01:fc:40:a9:76:5f:5e:
         cc:13:b9:2f:a7:2c:fb:bf:20:79:cf:89:19:8e:08:c4:a5:fe:
         47:6a:fc:35:93:e6:b4:b9:66:9b:ce:1c:b2:99:51:8c:1c:f1:
         aa:5e:09:08:06:73:3b:e0:95:87:d7:66:6f:d7:09:c6:3a:6d:
         d3:b7:3d:2a:5f:0f:f4:a6:b7:72:e3:33:b7:03:9a:67:9d:32:
         e2:3c:10:68:e5:83:46:41:8e:75:5d:96:85:04:e3:32:80:02:
         9f:2b:4e:2c:56:65:e7:50:20:0f:6f:e4:2a:15:61:4b:93:8c:
         80:21:1c:12:39:f7:fc:20:b0:ec:20:25:e4:48:33:ae:19:25:
         e1:e5:79:3c:bb:eb:e4:db:b2:df:e4:36:fa:85:08:06:95:38:
         a7:b1:99:65:c3:4b:31:c6:c5:bb:7a:ff:14:7c:29:ea:75:02:
         35:60:4e:7c:5b:d1:ad:6f:99:d5:f4:2a:02:f9:a1:6d:cd:6f:
         74:f1:0e:c2:af:be:7f:ed:08:cb:a9:23:9a:ef:23:61:a6:78:
         16:c2:5d:66:6f:80:25:b8:97:3b:3a:a4:25:d4:cf:bd:f0:f2:
         e2:01:1e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 09:21:49 2026 by rpki-client