Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          cv4hytU0LCG1wGIN4lnqoFjTyXXDosdEV9Fg70Hidfs=
Subject key identifier:   EE:86:82:8A:09:FE:9E:6A:00:C2:D9:D9:47:A2:9F:0E:24:63:61:F1
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       057E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          0499
Signing time:             Thu 21 May 2026 00:47:48 +0000
Manifest this update:     Thu 21 May 2026 00:47:47 +0000
Manifest next update:     Thu 28 May 2026 00:47:47 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: nrRrf1uRVd1QD6DLYLHDEuumTN7gK6mRi7s9oMd57ug=)
                          2: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: kNZ9kMcIVbL2jK5YIL401eBQNsQQQ0xAhM8Sv/4h4WQ=)
                          3: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: WLbihB2PWZ1o++RM42EGDbLREOZKJSeaYxV3v/0bXwE=)
                          4: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: tnJ/yjknRBuc7UcBwzOHFJo2tnhzqFgevM34YS5rTmY=)
                          5: E984676EB5E611F0BCCCFA59C4F9AE02.roa (hash: RcSedgyQP0f/Mx0R7YzTVV6LUvz5MpJuolu8SeEYtAY=)
                          6: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: /JQTTMGxpG1rEnJAGVjqQn7ENfIeEQm+h8FaXqx7IVA=)
                          7: D3A8EA649F0911EE98065E23C4F9AE02.roa (hash: Xpp2kFVSkuxzwBMowkkOloasdXHXgZJRNUiRPlt0tnI=)
                          8: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: VkKyUkZvufLeqNWH4XS4MFj5LEClAP479cUeOm9p8S8=)
                          9: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: VpLsJjoOM5TQH3OZEcPzV4PLIS2G8Hn1FrYlhKbie54=)
                          10: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: 3zeR3y4ThnqjrUYK2B2lRbeCm3UuFhf7qDtePwaC2RU=)
                          11: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: awi/D8lHc6L4dnToUMe+Br+mJLk9zICL465IydEzQlc=)
                          12: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: mwjCND/hb5mcBVM5huPhi5+mLyWxYoFCwlwxmeL4yts=)
                          13: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: vsM3lJioCOwfp3LZZpdveH83fo62+Y9urJ8LtwiCnMw=)
                          14: B6E083D46E2F11EEB9C12A34C4F9AE02.roa (hash: n7XrDdLRgIOzlZQtMfnZ1wiO99lQrB5PrhvdGG1ja78=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 00:47:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1406 (0x57e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: May 21 00:47:47 2026 GMT
            Not After : May 28 00:47:47 2026 GMT
        Subject: CN=6a0e5634-da4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:01:25:f1:73:e5:6b:39:44:91:65:89:77:08:
                    58:8f:af:bb:76:9d:28:0c:54:b5:81:a0:64:f6:fe:
                    84:a8:3f:6a:2e:19:a3:e2:c1:a1:d7:8f:36:d5:ee:
                    8f:18:71:01:cd:a3:70:98:02:5d:ad:e5:3a:65:7c:
                    78:fd:4f:ac:74:86:47:76:61:58:31:f5:f6:f1:cf:
                    33:c2:1d:a3:a9:79:8a:0b:43:0b:2f:7d:da:39:a6:
                    e2:a1:e4:d4:78:0d:b4:58:bd:90:f9:02:3c:fd:4b:
                    45:11:86:73:bd:a3:d1:03:bb:e6:6a:c8:f2:c3:e0:
                    45:4f:94:f9:3f:96:b4:12:61:9f:0f:e9:e2:a7:4b:
                    86:0f:76:52:b4:2e:50:c6:b5:87:a7:8a:e8:09:77:
                    fd:52:51:e4:81:db:f9:f2:ec:38:6e:f5:fd:45:3c:
                    b8:53:8a:47:d2:35:8e:a0:7a:88:8e:09:f8:f6:75:
                    64:ab:78:08:fb:00:a0:c5:72:a7:10:bb:83:e9:2e:
                    7e:31:7e:53:b3:20:02:fa:14:c3:44:b9:b4:cf:e4:
                    e1:aa:36:20:25:a4:e4:f2:00:cf:9f:e2:2c:c8:2e:
                    94:f7:de:91:75:b7:b5:dc:e6:c1:20:88:34:f3:2f:
                    f0:26:f3:53:7f:43:19:99:3f:3e:57:fc:52:8a:09:
                    3a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:86:82:8A:09:FE:9E:6A:00:C2:D9:D9:47:A2:9F:0E:24:63:61:F1
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:2c:49:09:52:21:83:9e:24:89:9e:d0:e9:b6:7d:81:0e:91:
         94:83:dd:e7:83:eb:ea:90:c4:3d:64:5e:cd:37:ea:a8:d9:bf:
         9c:3f:37:17:ba:24:b9:c6:43:47:03:4f:b6:ca:cd:f4:eb:a6:
         15:99:27:39:0c:93:ed:79:d2:de:4d:d9:9f:3e:5c:13:ec:d8:
         9b:a3:c5:60:00:15:b3:29:9f:8a:36:76:9c:0d:69:43:20:b9:
         2c:81:9e:96:13:bf:7a:b8:08:5a:d7:6f:d9:40:c2:68:da:b0:
         4a:18:7c:3c:6b:c2:4f:6a:ce:ae:c1:c6:6d:85:de:04:10:37:
         7a:c7:fc:d0:b0:36:8d:cb:55:d4:c7:01:d0:80:1f:ad:78:4d:
         a9:29:f1:1a:63:90:7b:27:35:6b:70:1f:bc:1c:3f:e0:c5:a8:
         20:7a:8b:f0:c8:2a:c3:8d:a2:b3:98:22:19:8e:b7:5b:b3:bd:
         5b:3e:6f:49:69:68:21:12:20:84:d1:09:3e:39:61:50:32:ef:
         a1:f8:59:87:d6:c7:d2:e1:b3:2c:3b:26:b0:94:d5:65:c3:8a:
         a3:c2:a1:c5:3a:5e:83:dc:10:8f:71:69:e6:80:72:d9:b5:e5:
         d3:9e:71:90:c9:4f:2c:0b:52:4d:20:43:10:f2:75:b1:75:d2:
         a6:43:0c:09
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEZDNzUxMTAvBgNVBAUTKDQ4MkU1QTZFMDg5NkEyNjZBOTFBNDA2NkMwNkY0QjRF
RDk4NDY0OUQwHhcNMjYwNTIxMDA0NzQ3WhcNMjYwNTI4MDA0NzQ3WjAYMRYwFAYD
VQQDEw02YTBlNTYzNC1kYTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoAEl8XPlazlEkWWJdwhYj6+7dp0oDFS1gaBk9v6EqD9qLhmj4sGh14821e6P
GHEBzaNwmAJdreU6ZXx4/U+sdIZHdmFYMfX28c8zwh2jqXmKC0MLL33aOabioeTU
eA20WL2Q+QI8/UtFEYZzvaPRA7vmasjyw+BFT5T5P5a0EmGfD+nip0uGD3ZStC5Q
xrWHp4roCXf9UlHkgdv58uw4bvX9RTy4U4pH0jWOoHqIjgn49nVkq3gI+wCgxXKn
ELuD6S5+MX5TsyAC+hTDRLm0z+ThqjYgJaTk8gDPn+IsyC6U996Rdbe13ObBIIg0
8y/wJvNTf0MZmT8+V/xSigk6QQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO6GgooJ
/p5qAMLZ2Ueinw4kY2HxMB8GA1UdIwQYMBaAFEguWm4IlqJmqRpAZsBvS07ZhGSd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM3NS8zQUE1REVFMERE
NTgxMUVDODcwRkMyMERDNEY5QUUwMi9TQzVhYmdpV29tYXBHa0Jtd0c5TFR0bUVa
SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NDNWFiZ2lXb21hcEdrQm13RzlMVHRtRVpKMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RkM3NS8zQUE1REVFMERENTgxMUVDODcwRkMyMERDNEY5QUUwMi9TQzVhYmdpV29t
YXBHa0Jtd0c5TFR0bUVaSjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhixJCVIhg54kiZ7Q6bZ9gQ6RlIPd54Pr6pDEPWRezTfqqNm/nD83F7okucZD
RwNPtsrN9OumFZknOQyT7XnS3k3Znz5cE+zYm6PFYAAVsymfijZ2nA1pQyC5LIGe
lhO/ergIWtdv2UDCaNqwShh8PGvCT2rOrsHGbYXeBBA3esf80LA2jctV1McB0IAf
rXhNqSnxGmOQeyc1a3AfvBw/4MWoIHqL8Mgqw42is5giGY63W7O9Wz5vSWloIRIg
hNEJPjlhUDLvofhZh9bH0uGzLDsmsJTVZcOKo8KhxTpeg9wQj3Fp5oBy2bXl055x
kMlPLAtSTSBDEPJ1sXXSpkMMCQ==
-----END CERTIFICATE-----
Generated at Thu May 21 21:19:55 2026 by rpki-client