Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          U/YdvrteKjLLubLz6iDZuunpwV5dTEjseS4pT12qN5s=
Subject key identifier:   2A:FD:36:4C:99:50:82:E5:15:E6:EA:C0:8B:D6:CF:12:97:2E:BB:51
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       0574
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          048F
Signing time:             Fri 01 May 2026 00:56:32 +0000
Manifest this update:     Fri 01 May 2026 00:56:31 +0000
Manifest next update:     Fri 08 May 2026 00:56:31 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: MG3JiIjPdoO6EFJRZbxXLqILe8EzXG1ineu3FtZaSPc=)
                          2: D3A8EA649F0911EE98065E23C4F9AE02.roa (hash: Xpp2kFVSkuxzwBMowkkOloasdXHXgZJRNUiRPlt0tnI=)
                          3: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: awi/D8lHc6L4dnToUMe+Br+mJLk9zICL465IydEzQlc=)
                          4: E984676EB5E611F0BCCCFA59C4F9AE02.roa (hash: RcSedgyQP0f/Mx0R7YzTVV6LUvz5MpJuolu8SeEYtAY=)
                          5: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: mwjCND/hb5mcBVM5huPhi5+mLyWxYoFCwlwxmeL4yts=)
                          6: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: VpLsJjoOM5TQH3OZEcPzV4PLIS2G8Hn1FrYlhKbie54=)
                          7: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: 3zeR3y4ThnqjrUYK2B2lRbeCm3UuFhf7qDtePwaC2RU=)
                          8: B6E083D46E2F11EEB9C12A34C4F9AE02.roa (hash: n7XrDdLRgIOzlZQtMfnZ1wiO99lQrB5PrhvdGG1ja78=)
                          9: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: VkKyUkZvufLeqNWH4XS4MFj5LEClAP479cUeOm9p8S8=)
                          10: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: /JQTTMGxpG1rEnJAGVjqQn7ENfIeEQm+h8FaXqx7IVA=)
                          11: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: tnJ/yjknRBuc7UcBwzOHFJo2tnhzqFgevM34YS5rTmY=)
                          12: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: WLbihB2PWZ1o++RM42EGDbLREOZKJSeaYxV3v/0bXwE=)
                          13: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: vsM3lJioCOwfp3LZZpdveH83fo62+Y9urJ8LtwiCnMw=)
                          14: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: kNZ9kMcIVbL2jK5YIL401eBQNsQQQ0xAhM8Sv/4h4WQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 May 2026 00:56:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1396 (0x574)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: May  1 00:56:31 2026 GMT
            Not After : May  8 00:56:31 2026 GMT
        Subject: CN=69f3fa40-866a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4a:96:c9:42:e3:ab:ff:84:f7:e9:44:fa:f4:
                    a0:fb:01:0b:3e:c9:28:7f:69:e7:aa:c8:36:fb:0a:
                    74:56:18:10:dd:9c:5a:d9:6c:45:12:fa:60:c2:55:
                    9c:f8:59:59:84:8f:3d:42:57:cb:b8:a8:84:38:af:
                    85:f5:54:5e:c7:0c:bc:8b:87:73:f8:0b:8c:60:6c:
                    b4:6e:65:2a:ac:75:a3:e9:5f:b4:8d:aa:68:d7:0e:
                    e1:11:ed:f4:a5:d0:00:c0:47:6c:f0:30:6a:ac:94:
                    98:19:e1:a5:e3:8f:20:77:8f:a4:fc:89:1f:58:0e:
                    67:8c:97:04:16:4d:f2:75:18:62:b5:d4:5f:65:76:
                    cb:17:35:0e:d7:58:6b:15:6c:83:a3:4d:22:14:ae:
                    89:21:43:22:1d:2e:f5:73:59:64:89:68:55:8d:a2:
                    12:17:a8:54:2d:4d:7c:61:dc:57:74:e3:94:80:a7:
                    1c:ef:a6:b2:db:6d:40:aa:46:ed:7c:ce:d1:ac:f7:
                    5e:cb:2c:9b:c9:e1:ff:a5:8e:b6:0e:4b:9b:07:7c:
                    97:c4:6e:34:fe:59:22:76:2b:aa:c4:79:98:68:f3:
                    a0:f5:13:4b:d3:31:d7:2a:22:3a:6e:eb:20:fe:64:
                    1f:da:3e:f2:0a:c8:d3:4b:6b:48:da:7f:48:d1:1f:
                    28:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:FD:36:4C:99:50:82:E5:15:E6:EA:C0:8B:D6:CF:12:97:2E:BB:51
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:9d:b6:83:02:a2:6a:fc:c0:10:fa:18:96:2e:23:b6:8c:63:
         05:75:13:cf:d5:b4:75:d8:e7:a2:8f:91:c4:b4:7a:e7:db:55:
         f2:50:21:a4:ef:39:05:b1:03:5f:ba:cd:c0:5d:cd:5c:57:2e:
         2b:9a:8c:ac:ee:47:11:09:3b:2e:6e:86:85:9e:84:7f:11:56:
         2c:62:6a:6e:b3:49:ea:ed:57:4f:92:75:55:78:28:21:6d:06:
         06:8b:1a:46:cc:9b:81:83:a0:88:ad:49:1f:9f:bf:79:c6:90:
         11:35:46:c1:40:ae:e7:2a:cb:fa:d8:e1:7d:df:ab:39:79:3a:
         35:0b:d0:31:93:95:52:83:40:d3:d6:a1:3d:1f:81:d9:de:d2:
         8b:6d:cb:a0:a8:c9:b9:1e:57:80:b6:da:da:48:e0:09:43:ce:
         0a:8d:b1:49:96:e1:9b:cd:2c:ad:88:56:b3:9c:4f:90:a2:1b:
         d8:8c:99:f1:73:a5:1d:4c:4f:b0:d3:e6:41:f9:c2:f8:a4:04:
         9a:d6:3d:2c:61:57:82:e6:af:f8:d3:fa:04:b7:43:b4:5f:e8:
         25:b9:b1:fd:c0:97:ea:dc:8a:1e:6c:af:94:db:0f:47:b9:18:
         19:be:a3:bb:4d:f2:d7:da:68:30:f9:ed:85:8b:c8:ea:ed:77:
         15:af:66:28
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEZDNzUxMTAvBgNVBAUTKDQ4MkU1QTZFMDg5NkEyNjZBOTFBNDA2NkMwNkY0QjRF
RDk4NDY0OUQwHhcNMjYwNTAxMDA1NjMxWhcNMjYwNTA4MDA1NjMxWjAYMRYwFAYD
VQQDEw02OWYzZmE0MC04NjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx0qWyULjq/+E9+lE+vSg+wELPskof2nnqsg2+wp0VhgQ3Zxa2WxFEvpgwlWc
+FlZhI89QlfLuKiEOK+F9VRexwy8i4dz+AuMYGy0bmUqrHWj6V+0japo1w7hEe30
pdAAwEds8DBqrJSYGeGl448gd4+k/IkfWA5njJcEFk3ydRhitdRfZXbLFzUO11hr
FWyDo00iFK6JIUMiHS71c1lkiWhVjaISF6hULU18YdxXdOOUgKcc76ay221Aqkbt
fM7RrPdeyyybyeH/pY62DkubB3yXxG40/lkidiuqxHmYaPOg9RNL0zHXKiI6busg
/mQf2j7yCsjTS2tI2n9I0R8oiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCr9NkyZ
UILlFebqwIvWzxKXLrtRMB8GA1UdIwQYMBaAFEguWm4IlqJmqRpAZsBvS07ZhGSd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM3NS8zQUE1REVFMERE
NTgxMUVDODcwRkMyMERDNEY5QUUwMi9TQzVhYmdpV29tYXBHa0Jtd0c5TFR0bUVa
SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NDNWFiZ2lXb21hcEdrQm13RzlMVHRtRVpKMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RkM3NS8zQUE1REVFMERENTgxMUVDODcwRkMyMERDNEY5QUUwMi9TQzVhYmdpV29t
YXBHa0Jtd0c5TFR0bUVaSjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwZ22gwKiavzAEPoYli4jtoxjBXUTz9W0ddjnoo+RxLR659tV8lAhpO85BbED
X7rNwF3NXFcuK5qMrO5HEQk7Lm6GhZ6EfxFWLGJqbrNJ6u1XT5J1VXgoIW0GBosa
RsybgYOgiK1JH5+/ecaQETVGwUCu5yrL+tjhfd+rOXk6NQvQMZOVUoNA09ahPR+B
2d7Si23LoKjJuR5XgLba2kjgCUPOCo2xSZbhm80srYhWs5xPkKIb2IyZ8XOlHUxP
sNPmQfnC+KQEmtY9LGFXguav+NP6BLdDtF/oJbmx/cCX6tyKHmyvlNsPR7kYGb6j
u03y19poMPnthYvI6u13Fa9mKA==
-----END CERTIFICATE-----
Generated at Fri May 1 19:16:13 2026 by rpki-client