Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          P9ASgjTSAw5KycrUpd8BgOTbh/x3meA3ans2nvNuuho=
Subject key identifier:   F8:D1:A7:3F:64:96:5E:BD:2A:EF:81:9D:16:CE:27:1D:A2:34:58:9A
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       04A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          03E1
Signing time:             Sat 05 Jul 2025 01:47:30 +0000
Manifest this update:     Sat 05 Jul 2025 01:47:30 +0000
Manifest next update:     Sat 12 Jul 2025 01:47:30 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: tM03TN9/fHlfcK60dfErLoodiP67bUmfcB9fhWeOyR4=)
                          2: B351D67E295D11F0B6373D85C4F9AE02.roa (hash: 6J+RHRu9KQC19R4POfCZ6vtZ0F8pQfkQ77qgKUv03E0=)
                          3: 235C33AA841511EEB8881E26C4F9AE02.roa (hash: gh6H1oXOeu80i+EJHcbBEp2/DgpqUvIG4FhNIsmOBc8=)
                          4: FC458FFABD2F11EFACAEDF48C4F9AE02.roa (hash: zB6o1ufSPR15qZaXVJkiDWkGqSq/IwuqWXWe0bUcf1Y=)
                          5: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: 3+hYQrTmF+e7jJciHHC9Syz1XLKiAuOCDuMHFEIoOO8=)
                          6: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: yoHxToNdVsEl2/mlXGoTSTZxsnICbltZ8OX7V22JdbQ=)
                          7: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: xMiHMYItwXrD425Qd67NbjvjX4HrJ3EnpnA8c/QF/4k=)
                          8: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: SilbnDSMyvFBaNxXZnHVsn7YIdcJKbT+9vzuxU+MumM=)
                          9: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: A8LP0mnaTBBKppNqPSMaDhPFCk6GGBkjSaBDc8dCjBI=)
                          10: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: GEOmMPHt+G2/MbW4UDY6/tPaY4MdJDx+hT+IJOD6OI0=)
                          11: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: 9J2iOFdXW0WTaVQoSkjTpRubYQV1uYwslH5WX54SWS8=)
                          12: B6E083D46E2F11EEB9C12A34C4F9AE02.roa (hash: cEUErhxJhRs9Ayd1OjEDxa3aUEaS/H1Cn1wGLQy/Hdo=)
                          13: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: OKC561ca7ASLfOkgXrHgKbplp4PP/4v4yOXE3sio9JA=)
                          14: DD12F48AEC2611EF94F85F09C4F9AE02.roa (hash: 5x3hwbD6OKSIDNRFPjnTH18AkwSHTg00pMz0FKOos+E=)
                          15: D3A8EA649F0911EE98065E23C4F9AE02.roa (hash: R2/WUKzxoHuFFd/QsgqeEUvYq+HCK78+7w9Z8fUIsWc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1191 (0x4a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Jul  5 01:47:30 2025 GMT
            Not After : Jul 12 01:47:30 2025 GMT
        Subject: CN=68688432-c206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f3:d1:b8:93:94:fa:b5:85:5e:04:a6:30:8c:
                    46:81:d5:8b:36:ae:5b:bc:b5:1d:fc:d9:ae:48:41:
                    9b:51:e9:28:e7:5c:56:00:e9:bb:cb:a4:a1:19:76:
                    72:62:e5:93:01:c0:04:d9:7a:9e:a8:49:d1:8f:c0:
                    98:77:d9:13:b5:a4:84:ec:88:fd:54:85:84:bb:82:
                    27:e7:77:14:ae:97:62:b2:14:e9:41:c6:4c:15:3c:
                    f3:a5:e3:b8:db:45:4e:e9:66:7a:97:16:e2:3f:99:
                    fa:27:dc:9e:c0:28:99:4c:d4:c5:da:28:14:10:05:
                    a1:db:b8:ab:4e:3d:d9:c4:fe:c2:e7:86:9e:e2:0c:
                    6a:93:72:51:dc:54:16:38:47:a8:e3:6c:92:61:f4:
                    40:b0:1a:c4:a2:b3:d8:a9:a1:e7:37:70:b6:5d:57:
                    44:7c:28:9c:ef:a5:98:7a:b0:c0:6c:0f:be:fd:8b:
                    66:44:14:21:22:5d:d2:ea:63:47:09:fb:ae:5f:0c:
                    bb:d0:a1:f8:e5:86:9d:6a:55:ff:f9:a6:f7:ff:20:
                    1f:a4:e8:77:9d:b9:e3:63:cd:bc:99:0b:c6:70:99:
                    fe:95:51:a2:77:f8:c8:4a:c4:b0:00:71:7b:39:b8:
                    ef:51:28:ce:29:ce:05:f9:ac:53:48:69:3e:c9:95:
                    82:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D1:A7:3F:64:96:5E:BD:2A:EF:81:9D:16:CE:27:1D:A2:34:58:9A
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:e6:d5:bb:df:e4:63:24:12:06:1c:2f:92:f2:f3:6d:e2:60:
         1f:95:29:4d:7f:b2:0e:00:51:76:69:48:36:5f:c5:27:25:a4:
         93:24:c6:e7:77:33:e3:9c:9e:55:a9:0b:a0:68:0c:3e:04:17:
         a8:49:99:ee:00:45:79:ea:0e:c9:34:a9:e6:5c:a3:5a:45:6a:
         99:93:92:5a:85:c5:4b:5b:af:51:d9:a0:ad:af:8e:74:a3:c7:
         88:cc:ba:01:15:86:e9:e0:41:00:60:95:32:a2:eb:99:03:df:
         0f:c1:94:85:4c:fe:27:8d:da:25:f6:95:cd:56:f9:14:3c:b1:
         89:4c:91:f4:2f:88:23:a0:45:fd:0b:5a:be:c5:0a:24:77:f4:
         1e:7f:89:e7:4e:04:d9:82:7b:96:f7:23:fc:47:18:fc:6a:13:
         9e:73:19:8b:e0:23:b5:6a:84:48:88:98:f7:02:de:e7:4e:49:
         ca:c7:ef:82:c8:a7:e0:ab:b3:23:c7:cc:e6:b7:7b:b8:21:6e:
         c1:cc:d9:40:cc:01:1d:2b:52:22:f4:84:b5:50:37:91:3d:0d:
         68:a9:e2:3b:59:34:b0:92:ba:02:d4:50:d4:47:98:8f:f2:24:
         b7:8a:75:ed:a1:2a:e0:a4:9e:54:d3:e2:4e:2b:c6:06:90:5a:
         83:de:6b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 23:02:45 2025 by rpki-client