Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          are8W/SB8MXfYwq12moQ0vcbeYh2b7LfEqGErskIz78=
Subject key identifier:   F8:7B:95:C0:72:B0:DD:00:06:2C:92:47:A0:77:DB:B4:B7:95:42:C6
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       05C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          04D2
Signing time:             Wed 19 Aug 2026 00:54:02 +0000
Manifest this update:     Wed 19 Aug 2026 00:54:02 +0000
Manifest next update:     Wed 26 Aug 2026 00:54:02 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: 9UnAfKVaODkorl/Revn4yM8meS/WwbpqQ8AD3XF8C4A=)
                          2: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: oFCRKJ2F0EfbbPkmQz5K49dGmf/1cMbEIIfSRomsCOA=)
                          3: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: FoSzwvvgDPOGghYrGRoNT/3F/hsXOUjc7S8nBc84FDI=)
                          4: 39D293CC61A311F184335DAE8747A888.roa (hash: jedw50TUWq7AyJ3VTKcKZQQqP8Wlj4F5zK+M/tpfaYU=)
                          5: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: GfVyeK1u4sYQdScjmEZa/TgSrlbpkVV/b2NL/9s4N4g=)
                          6: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: g3/xtOL31AkLVTBnIUdXCHbVSuqpwrEw296Y7D5oHRk=)
                          7: 14671BD890A311F19EA46D796F11F970.roa (hash: LRK4uCWmqWpWw3Xm3dXQgxGRrJCrM0VZNsAVYzL7FS4=)
                          8: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: 6BPjWf3PRrYbjxHXmcTYFTcq9mEbXJz5EDwd+WrDRUk=)
                          9: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: jKcbK4IEw6IX5DBWAj2PfbXbqhFpVe65Ce73aszMZHQ=)
                          10: 48421E1E61A311F1AD9134E08747A888.roa (hash: 0L5T+62/+LuV8AB9j6gcu/g9GsKvWn9orUiZH54FdP4=)
                          11: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: 92wRIZw680AyP/v/OZd/w9DgRsgSI6ONdeqJ58u9NjE=)
                          12: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: 6mq5bZQGJ64qqRG9rU+13rtax05sI2Ele52oI5PPSIM=)
                          13: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: Xv/wQAgGQuRKdOuR7b3JljTxpd1z5U1GoeLFF2m7jXc=)
                          14: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: W828W0l0bTgnpTlS9/sHF0lVKlK0jtphre/w8R0LrXg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 00:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1481 (0x5c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Aug 19 00:54:02 2026 GMT
            Not After : Aug 26 00:54:02 2026 GMT
        Subject: CN=6a84feaa-1452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9d:04:ae:88:37:f2:98:5a:85:a4:d2:ce:a1:
                    7d:b5:d9:a3:77:64:eb:4a:02:e7:e8:52:8d:94:81:
                    d7:51:cb:29:84:c1:3c:10:db:ad:51:2c:05:1f:ff:
                    84:94:a7:40:63:f0:b3:90:6a:18:fd:9b:7c:6e:72:
                    91:2a:76:56:c7:99:30:60:e6:6a:f8:67:cf:c1:a3:
                    4a:e3:06:6e:0a:54:4c:e1:76:37:77:e7:f3:d0:85:
                    2e:5e:bb:3f:2c:d1:3b:f6:09:40:82:52:0e:54:69:
                    01:8a:fc:27:7c:bb:33:cc:92:81:e8:17:23:1a:7e:
                    c0:e0:a4:5b:06:0c:02:f4:c6:c5:bc:5b:35:09:1b:
                    2a:a7:8a:ed:e1:b4:5f:c9:4b:da:47:32:19:eb:17:
                    75:7b:9b:b4:cb:27:3d:25:05:0b:e9:15:44:46:75:
                    d5:c0:58:75:77:5d:24:42:5f:17:64:2c:58:60:b2:
                    c4:98:13:31:7e:e9:cc:96:85:16:cc:62:88:bf:98:
                    f1:f9:15:bc:1e:85:8b:28:8a:9d:fa:b0:bd:91:92:
                    49:3a:47:c0:b1:cb:94:0b:b7:d4:9d:d5:d8:17:e2:
                    5c:ab:43:d8:0d:04:85:7e:2a:d5:cb:77:5a:f6:1e:
                    22:a1:3c:d1:e8:cf:04:b0:d8:a7:06:7a:d7:4e:4b:
                    95:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:7B:95:C0:72:B0:DD:00:06:2C:92:47:A0:77:DB:B4:B7:95:42:C6
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:1e:7d:72:da:a1:44:09:90:fb:7a:74:3c:af:27:a3:26:20:
         0b:8b:4a:cb:5c:69:a7:0a:2b:07:76:71:45:e2:7e:52:7d:98:
         69:c0:bb:f1:5a:78:5e:3a:8e:73:c7:a5:d5:3f:f5:b3:48:54:
         bf:18:11:3c:18:e2:22:2a:83:f1:e5:56:0b:28:99:dc:84:1d:
         49:06:45:f4:46:31:fb:eb:4c:c5:ee:29:bd:b4:83:df:9f:ff:
         ae:61:c3:56:03:05:7d:32:31:0b:6f:f6:c9:0d:7b:a0:4a:8a:
         6e:0f:58:1a:d2:d0:6d:90:1b:d5:3a:1c:b5:9d:79:f3:76:dd:
         82:62:10:c5:a4:55:69:31:72:a9:27:f0:13:67:d0:ef:f4:e1:
         41:86:5f:86:fd:3b:5e:42:ff:d8:e0:26:c6:b3:21:55:de:7e:
         36:fc:56:61:9a:93:0f:dc:3d:ec:55:16:65:5d:ca:2f:14:6e:
         2d:00:96:4e:87:bb:ef:4c:af:28:a4:b4:99:5d:9b:0e:88:55:
         17:27:26:93:c9:12:a5:12:1d:18:d9:fc:63:9d:08:1b:25:4b:
         5b:21:aa:79:22:4f:52:83:63:80:13:98:ca:5a:f3:ee:ba:92:
         50:d1:5d:df:27:7d:ef:2d:c9:0e:a1:82:31:fb:dd:46:ea:27:
         88:9d:3f:d0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEZDNzUxMTAvBgNVBAUTKDQ4MkU1QTZFMDg5NkEyNjZBOTFBNDA2NkMwNkY0QjRF
RDk4NDY0OUQwHhcNMjYwODE5MDA1NDAyWhcNMjYwODI2MDA1NDAyWjAYMRYwFAYD
VQQDEw02YTg0ZmVhYS0xNDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv50Erog38phahaTSzqF9tdmjd2TrSgLn6FKNlIHXUcsphME8ENutUSwFH/+E
lKdAY/CzkGoY/Zt8bnKRKnZWx5kwYOZq+GfPwaNK4wZuClRM4XY3d+fz0IUuXrs/
LNE79glAglIOVGkBivwnfLszzJKB6BcjGn7A4KRbBgwC9MbFvFs1CRsqp4rt4bRf
yUvaRzIZ6xd1e5u0yyc9JQUL6RVERnXVwFh1d10kQl8XZCxYYLLEmBMxfunMloUW
zGKIv5jx+RW8HoWLKIqd+rC9kZJJOkfAscuUC7fUndXYF+Jcq0PYDQSFfirVy3da
9h4ioTzR6M8EsNinBnrXTkuV4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPh7lcBy
sN0ABiySR6B327S3lULGMB8GA1UdIwQYMBaAFEguWm4IlqJmqRpAZsBvS07ZhGSd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM3NS8zQUE1REVFMERE
NTgxMUVDODcwRkMyMERDNEY5QUUwMi9TQzVhYmdpV29tYXBHa0Jtd0c5TFR0bUVa
SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NDNWFiZ2lXb21hcEdrQm13RzlMVHRtRVpKMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RkM3NS8zQUE1REVFMERENTgxMUVDODcwRkMyMERDNEY5QUUwMi9TQzVhYmdpV29t
YXBHa0Jtd0c5TFR0bUVaSjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmx59ctqhRAmQ+3p0PK8noyYgC4tKy1xppworB3ZxReJ+Un2YacC78Vp4XjqO
c8el1T/1s0hUvxgRPBjiIiqD8eVWCyiZ3IQdSQZF9EYx++tMxe4pvbSD35//rmHD
VgMFfTIxC2/2yQ17oEqKbg9YGtLQbZAb1ToctZ1583bdgmIQxaRVaTFyqSfwE2fQ
7/ThQYZfhv07XkL/2OAmxrMhVd5+NvxWYZqTD9w97FUWZV3KLxRuLQCWToe770yv
KKS0mV2bDohVFycmk8kSpRIdGNn8Y50IGyVLWyGqeSJPUoNjgBOYylrz7rqSUNFd
3yd97y3JDqGCMfvdRuoniJ0/0A==
-----END CERTIFICATE-----
Generated at Wed Aug 19 20:12:55 2026 by rpki-client