Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          rLjvykfGKXkdwpB6d9cFLaD9CsS24lWaHLnawTBaKFs=
Subject key identifier:   47:86:7C:D7:29:B6:28:56:8F:02:CF:A5:0E:54:E2:D6:47:95:EF:C8
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       05D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          04D9
Signing time:             Tue 01 Sep 2026 00:26:37 +0000
Manifest this update:     Tue 01 Sep 2026 00:26:37 +0000
Manifest next update:     Tue 08 Sep 2026 00:26:37 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: yLXfEgZoEqxbOGHsf7KfAG8g7op8eBa++CHU2ip3fSs=)
                          2: 48421E1E61A311F1AD9134E08747A888.roa (hash: 0L5T+62/+LuV8AB9j6gcu/g9GsKvWn9orUiZH54FdP4=)
                          3: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: GfVyeK1u4sYQdScjmEZa/TgSrlbpkVV/b2NL/9s4N4g=)
                          4: 14671BD890A311F19EA46D796F11F970.roa (hash: LRK4uCWmqWpWw3Xm3dXQgxGRrJCrM0VZNsAVYzL7FS4=)
                          5: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: jKcbK4IEw6IX5DBWAj2PfbXbqhFpVe65Ce73aszMZHQ=)
                          6: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: 92wRIZw680AyP/v/OZd/w9DgRsgSI6ONdeqJ58u9NjE=)
                          7: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: 6mq5bZQGJ64qqRG9rU+13rtax05sI2Ele52oI5PPSIM=)
                          8: 39D293CC61A311F184335DAE8747A888.roa (hash: jedw50TUWq7AyJ3VTKcKZQQqP8Wlj4F5zK+M/tpfaYU=)
                          9: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: g3/xtOL31AkLVTBnIUdXCHbVSuqpwrEw296Y7D5oHRk=)
                          10: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: W828W0l0bTgnpTlS9/sHF0lVKlK0jtphre/w8R0LrXg=)
                          11: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: oFCRKJ2F0EfbbPkmQz5K49dGmf/1cMbEIIfSRomsCOA=)
                          12: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: 6BPjWf3PRrYbjxHXmcTYFTcq9mEbXJz5EDwd+WrDRUk=)
                          13: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: Xv/wQAgGQuRKdOuR7b3JljTxpd1z5U1GoeLFF2m7jXc=)
                          14: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: FoSzwvvgDPOGghYrGRoNT/3F/hsXOUjc7S8nBc84FDI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Sep 2026 00:26:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1488 (0x5d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Sep  1 00:26:37 2026 GMT
            Not After : Sep  8 00:26:37 2026 GMT
        Subject: CN=6a961bbd-72cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:68:ae:a1:e1:a3:45:7d:7a:2e:aa:01:8d:b8:
                    82:3e:d1:62:ee:cf:a8:88:5e:c6:98:fd:17:f3:51:
                    c6:af:2a:14:2f:52:0b:5a:76:15:e4:48:a9:ed:56:
                    23:33:67:8c:b2:1a:42:f1:58:60:af:a9:5b:ed:44:
                    07:99:20:85:d0:06:ed:07:31:55:8e:0d:d9:4b:80:
                    39:38:e2:41:db:05:73:fa:ef:76:91:a2:c9:f6:75:
                    f7:ec:a6:04:92:b0:21:40:8f:5b:35:f0:1d:a3:ec:
                    8e:0e:8f:03:c9:16:63:3c:ca:5d:f1:81:19:c8:92:
                    66:62:4f:55:1f:e4:65:ea:88:6f:d9:a6:fd:ba:de:
                    0c:b4:f8:3b:32:3d:89:d1:bc:de:d0:99:c0:47:8c:
                    16:76:29:cd:69:c0:3f:a6:0f:8d:9c:92:dc:1a:08:
                    8c:c7:89:c4:5d:b9:cf:18:68:d1:a6:58:dd:e9:cb:
                    e8:d8:65:9a:79:ad:30:2b:48:ce:58:af:52:fb:75:
                    ef:a2:68:ef:b6:e4:b8:89:2b:ab:db:29:59:97:2f:
                    87:3b:06:2a:65:0d:97:9d:1e:9c:19:9d:48:73:83:
                    73:6c:e7:b1:01:4c:6a:a9:4a:1f:75:61:8d:4c:f4:
                    19:aa:7f:e3:fc:c6:17:cf:25:7f:61:23:29:09:3b:
                    87:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:86:7C:D7:29:B6:28:56:8F:02:CF:A5:0E:54:E2:D6:47:95:EF:C8
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:82:66:30:83:3b:8f:6f:53:a8:16:d0:4a:96:2b:76:9b:20:
         76:32:18:4a:3b:ed:a1:f1:44:bb:a6:9d:e0:cb:c7:20:9c:cb:
         b1:da:41:72:89:54:6b:02:45:d5:2e:9d:fc:cd:08:73:31:a7:
         3a:00:24:93:33:d8:ab:68:dc:9a:47:66:8a:f8:c2:c7:07:0a:
         65:c9:d1:c5:56:cc:79:a8:2f:4f:57:bc:93:86:b1:09:b7:8e:
         79:3f:39:e8:ad:fc:ef:db:76:d4:27:fd:df:7b:05:10:d1:ac:
         44:b4:c2:33:1a:c3:d4:a8:57:60:24:f2:6e:39:85:39:1d:3b:
         83:b7:4e:c2:39:af:0f:ea:f2:a3:36:78:d1:c8:17:e6:eb:70:
         ff:b1:83:45:56:59:9e:f0:03:f9:36:b7:63:05:98:51:9c:1a:
         1c:d2:5f:be:4e:10:e8:23:0d:61:47:bb:93:3b:5b:4c:89:97:
         ae:75:f0:99:7a:84:ce:7d:3e:99:c8:18:d1:6f:a0:c7:7a:95:
         69:46:d7:e2:ce:d8:66:ee:4a:d5:d8:53:98:7c:b6:63:a6:7a:
         6f:04:02:b1:e8:4c:41:9a:68:d2:76:7c:96:77:5a:10:14:e7:
         cf:2c:4b:15:1a:9a:7f:d0:5e:7d:29:ad:fc:5b:c3:a4:fb:d5:
         1a:f6:94:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 10:48:42 2026 by rpki-client