Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          G/g/eacy2LZAzt/KrOhZnLwqlWf4daZNrmBcb7mumaU=
Subject key identifier:   F4:F1:EC:72:E4:49:40:E5:E1:7B:2D:DC:9E:BD:E1:84:3C:A6:2F:0C
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       05C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          04D1
Signing time:             Mon 17 Aug 2026 00:50:52 +0000
Manifest this update:     Mon 17 Aug 2026 00:50:51 +0000
Manifest next update:     Mon 24 Aug 2026 00:50:51 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: goHrjwwp9EDklLRSZEiOeE9vWFvuYSiP4NPfox7AAsc=)
                          2: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: oFCRKJ2F0EfbbPkmQz5K49dGmf/1cMbEIIfSRomsCOA=)
                          3: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: GfVyeK1u4sYQdScjmEZa/TgSrlbpkVV/b2NL/9s4N4g=)
                          4: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: 6BPjWf3PRrYbjxHXmcTYFTcq9mEbXJz5EDwd+WrDRUk=)
                          5: 48421E1E61A311F1AD9134E08747A888.roa (hash: 0L5T+62/+LuV8AB9j6gcu/g9GsKvWn9orUiZH54FdP4=)
                          6: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: 6mq5bZQGJ64qqRG9rU+13rtax05sI2Ele52oI5PPSIM=)
                          7: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: Xv/wQAgGQuRKdOuR7b3JljTxpd1z5U1GoeLFF2m7jXc=)
                          8: 14671BD890A311F19EA46D796F11F970.roa (hash: LRK4uCWmqWpWw3Xm3dXQgxGRrJCrM0VZNsAVYzL7FS4=)
                          9: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: jKcbK4IEw6IX5DBWAj2PfbXbqhFpVe65Ce73aszMZHQ=)
                          10: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: 92wRIZw680AyP/v/OZd/w9DgRsgSI6ONdeqJ58u9NjE=)
                          11: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: g3/xtOL31AkLVTBnIUdXCHbVSuqpwrEw296Y7D5oHRk=)
                          12: 39D293CC61A311F184335DAE8747A888.roa (hash: jedw50TUWq7AyJ3VTKcKZQQqP8Wlj4F5zK+M/tpfaYU=)
                          13: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: W828W0l0bTgnpTlS9/sHF0lVKlK0jtphre/w8R0LrXg=)
                          14: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: FoSzwvvgDPOGghYrGRoNT/3F/hsXOUjc7S8nBc84FDI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Aug 2026 00:23:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1480 (0x5c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Aug 17 00:50:51 2026 GMT
            Not After : Aug 24 00:50:51 2026 GMT
        Subject: CN=6a825aec-3089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:98:ae:2b:dc:80:9d:c1:c5:9b:40:31:ee:22:
                    f9:58:5c:46:bf:4c:84:91:13:4b:39:5f:c0:ba:22:
                    8a:8e:f2:fd:65:e3:e9:26:5f:4c:94:72:90:a1:81:
                    d5:2f:28:3b:f3:bb:71:d2:35:52:fc:81:e2:fc:f5:
                    0b:f5:ba:02:ad:20:67:9d:bd:02:92:19:0a:2e:c3:
                    0c:64:71:d9:85:1e:6b:8f:93:cd:21:40:aa:31:f2:
                    fd:7b:17:84:5e:f3:2b:13:73:fd:08:b6:1b:17:ff:
                    04:a4:a4:51:5d:bb:9d:c3:d3:99:52:11:b8:78:b4:
                    88:2f:f2:b2:00:80:88:ef:ed:0f:4a:84:b4:a0:22:
                    45:d5:bb:e9:4c:68:38:35:d2:ad:7e:a3:31:75:08:
                    ae:df:df:86:53:ab:09:d9:a3:cf:11:03:73:cc:07:
                    bd:17:34:73:e9:b3:77:b6:a6:40:9f:5f:15:7c:c7:
                    bd:8d:31:aa:1e:e5:7f:41:52:31:cd:db:73:da:6a:
                    1e:0b:62:c3:d2:5b:db:40:d4:82:21:a7:0c:24:fa:
                    8c:5c:c7:39:a0:a6:1b:8d:6a:16:ec:86:ac:d2:3a:
                    12:0b:1e:83:ee:be:10:d0:82:ef:c2:42:ee:fc:04:
                    78:95:33:92:a7:c2:f4:1a:16:5e:be:da:a3:29:fa:
                    4f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F1:EC:72:E4:49:40:E5:E1:7B:2D:DC:9E:BD:E1:84:3C:A6:2F:0C
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:19:5e:58:0b:13:a7:67:95:68:92:6f:bd:54:51:e5:70:f6:
         6c:57:83:d7:5d:c0:2e:81:3d:a5:31:63:3a:f7:48:34:f7:3e:
         cf:71:7b:24:e2:da:4a:bb:a4:88:5f:55:61:4c:ff:ec:e1:b6:
         d6:38:60:c9:92:8f:91:fb:77:f0:8d:79:76:1f:30:4d:8d:ea:
         c2:b9:4e:d6:4b:86:17:a8:10:12:75:3a:a1:43:95:13:6b:d3:
         e0:d5:65:12:c0:a4:4e:d8:0e:1a:00:3b:9b:27:ef:13:03:eb:
         e5:24:c3:81:cb:34:22:f6:87:aa:41:d2:c1:ca:0d:66:e1:75:
         e3:f6:75:27:dd:e4:23:92:49:bf:a3:6c:25:31:dc:60:71:89:
         54:1f:54:1b:cd:92:b6:1d:14:2c:63:7c:13:ac:1b:a1:a3:3d:
         6d:9b:8e:ce:64:3a:f1:3a:48:10:54:b5:74:7c:a9:71:fe:61:
         7b:15:b3:4e:5f:16:65:a8:89:8a:f3:37:1d:f4:10:1a:50:55:
         a4:dc:44:af:e2:ba:08:7e:e1:25:f8:ce:f7:77:57:1a:89:6a:
         2e:ac:36:f9:29:ac:45:9e:78:97:ad:58:e2:cf:4f:ad:4f:3e:
         47:de:03:8a:16:4d:05:92:e5:34:ec:16:57:7e:b6:e7:7a:2f:
         77:23:fe:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:11:22 2026 by rpki-client