Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          2BfmOIwP9nI2DCAm4VgAe44grs0JtdHXF6UTV0tMxf8=
Subject key identifier:   D4:71:53:93:E6:93:74:45:2F:09:1B:F2:34:99:2B:8E:CE:2E:AB:77
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       0596
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          04AE
Signing time:             Sun 21 Jun 2026 00:39:35 +0000
Manifest this update:     Sun 21 Jun 2026 00:39:34 +0000
Manifest next update:     Sun 28 Jun 2026 00:39:34 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: SROL1+edmmvP6VxcEyV1GtkwjoGHFvfJz9Gn/ES+aQU=)
                          2: 39D293CC61A311F184335DAE8747A888.roa (hash: UFEXheRWbldng6QGjy1RCb9qHZzLRVLyuLDbBU1e2yo=)
                          3: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: VkKyUkZvufLeqNWH4XS4MFj5LEClAP479cUeOm9p8S8=)
                          4: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: mwjCND/hb5mcBVM5huPhi5+mLyWxYoFCwlwxmeL4yts=)
                          5: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: vsM3lJioCOwfp3LZZpdveH83fo62+Y9urJ8LtwiCnMw=)
                          6: 48421E1E61A311F1AD9134E08747A888.roa (hash: 3KvNugzJmOfWXWejLGn4X2zH7tN8BJMAw0UhDMUUtUI=)
                          7: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: WLbihB2PWZ1o++RM42EGDbLREOZKJSeaYxV3v/0bXwE=)
                          8: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: VpLsJjoOM5TQH3OZEcPzV4PLIS2G8Hn1FrYlhKbie54=)
                          9: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: awi/D8lHc6L4dnToUMe+Br+mJLk9zICL465IydEzQlc=)
                          10: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: 3zeR3y4ThnqjrUYK2B2lRbeCm3UuFhf7qDtePwaC2RU=)
                          11: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: tnJ/yjknRBuc7UcBwzOHFJo2tnhzqFgevM34YS5rTmY=)
                          12: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: /JQTTMGxpG1rEnJAGVjqQn7ENfIeEQm+h8FaXqx7IVA=)
                          13: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: kNZ9kMcIVbL2jK5YIL401eBQNsQQQ0xAhM8Sv/4h4WQ=)
                          14: D3A8EA649F0911EE98065E23C4F9AE02.roa (hash: Xpp2kFVSkuxzwBMowkkOloasdXHXgZJRNUiRPlt0tnI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Jun 2026 00:39:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1430 (0x596)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Jun 21 00:39:34 2026 GMT
            Not After : Jun 28 00:39:34 2026 GMT
        Subject: CN=6a3732c6-c2fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4b:e4:38:24:68:78:53:4b:e0:58:5a:6c:29:
                    af:db:14:87:e7:63:e4:c7:f4:b5:aa:16:5d:2d:40:
                    b1:9a:b2:3f:ee:42:60:dd:f1:05:01:a5:8c:36:b9:
                    5b:06:4f:a8:41:e0:69:da:cd:af:fe:cc:78:d5:8a:
                    69:ba:49:77:2b:91:76:16:8a:2b:f2:80:40:33:73:
                    22:f0:d1:67:c9:3a:79:46:1e:b1:61:1b:79:39:0d:
                    28:df:9f:ab:16:ee:2f:3b:3e:41:2d:8d:d5:ca:9d:
                    70:9e:a3:61:10:55:83:81:08:a1:f5:21:91:4d:de:
                    38:1e:dc:b3:2d:a6:53:d6:dd:07:29:e2:ed:5e:30:
                    67:6e:23:e3:8e:fb:e0:3a:6d:6d:6b:d0:1f:4f:5c:
                    e9:13:2d:96:87:ef:ab:a3:71:3b:a7:78:f6:f4:d9:
                    6d:46:8c:ca:5d:2d:23:fe:6e:ec:ac:34:ac:f1:f4:
                    18:72:56:59:e0:58:98:00:38:f4:44:53:af:34:42:
                    ca:47:05:4d:1b:4d:a9:9f:ab:cb:fc:4e:af:ed:51:
                    20:43:17:d8:b7:ad:bc:60:33:0b:8e:64:83:f3:2f:
                    2b:90:6f:a0:8f:b9:cd:0a:bd:5d:5e:52:1c:00:47:
                    7c:d1:08:04:30:24:36:6e:94:75:22:8c:7e:64:bb:
                    ff:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:71:53:93:E6:93:74:45:2F:09:1B:F2:34:99:2B:8E:CE:2E:AB:77
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:c8:41:c0:6e:88:49:82:ec:07:a0:2b:5a:d3:c3:7d:88:bb:
         a3:93:bb:47:f3:8c:91:e8:85:fa:c7:0a:4f:45:39:e7:8c:91:
         31:b0:2b:25:7b:66:52:80:3a:86:68:5e:b1:81:a2:60:68:e4:
         04:35:75:08:db:04:0b:27:e9:cd:bb:ed:da:7e:d7:a3:03:67:
         fd:8a:a2:d4:52:43:29:57:a0:27:11:a1:6d:f9:40:a7:c7:62:
         e6:1e:dc:e3:15:6a:24:ec:6c:9e:9c:ed:62:f7:a4:d6:d2:d3:
         dd:e0:c3:6c:f6:41:38:da:c5:5c:39:67:f5:c4:4e:cb:55:12:
         52:cd:99:79:56:ef:19:ca:f1:3d:17:11:5a:9b:f7:a5:75:2c:
         e1:49:28:07:13:ca:a3:2f:36:c2:58:1f:e5:8b:f5:cb:17:fb:
         9d:c8:1f:97:eb:1a:94:c4:6e:ed:e2:7e:a6:42:7e:d3:0a:30:
         7e:4e:bb:7c:c2:a6:a6:51:59:39:5a:67:f9:4e:08:9b:f5:39:
         bb:a9:a5:ea:7f:2c:60:d6:cc:5e:45:e0:f5:6c:b3:43:82:2e:
         86:cc:24:e8:f7:5c:89:67:59:67:21:71:2b:27:7a:b1:06:08:
         a8:f4:6c:6c:82:9d:a8:29:98:1e:49:47:58:d3:65:19:56:c2:
         95:2a:f7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 13:27:15 2026 by rpki-client