Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          yhcMlBySFwS0gGHOt+iA4YmrW3QY5c2YRp5D2ZCJmBE=
Subject key identifier:   18:74:51:4D:49:71:44:B3:82:BA:74:CE:ED:EB:9F:9A:8A:95:16:1E
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       05D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          04DC
Signing time:             Mon 07 Sep 2026 00:10:27 +0000
Manifest this update:     Mon 07 Sep 2026 00:10:26 +0000
Manifest next update:     Mon 14 Sep 2026 00:10:26 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: 1G7VSDU90Po7HUQ0dX/Dn7gnhVl9afQFVgnoR6ndDk8=)
                          2: 39D293CC61A311F184335DAE8747A888.roa (hash: jedw50TUWq7AyJ3VTKcKZQQqP8Wlj4F5zK+M/tpfaYU=)
                          3: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: 92wRIZw680AyP/v/OZd/w9DgRsgSI6ONdeqJ58u9NjE=)
                          4: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: jKcbK4IEw6IX5DBWAj2PfbXbqhFpVe65Ce73aszMZHQ=)
                          5: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: W828W0l0bTgnpTlS9/sHF0lVKlK0jtphre/w8R0LrXg=)
                          6: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: g3/xtOL31AkLVTBnIUdXCHbVSuqpwrEw296Y7D5oHRk=)
                          7: 48421E1E61A311F1AD9134E08747A888.roa (hash: 0L5T+62/+LuV8AB9j6gcu/g9GsKvWn9orUiZH54FdP4=)
                          8: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: 6mq5bZQGJ64qqRG9rU+13rtax05sI2Ele52oI5PPSIM=)
                          9: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: GfVyeK1u4sYQdScjmEZa/TgSrlbpkVV/b2NL/9s4N4g=)
                          10: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: oFCRKJ2F0EfbbPkmQz5K49dGmf/1cMbEIIfSRomsCOA=)
                          11: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: FoSzwvvgDPOGghYrGRoNT/3F/hsXOUjc7S8nBc84FDI=)
                          12: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: 6BPjWf3PRrYbjxHXmcTYFTcq9mEbXJz5EDwd+WrDRUk=)
                          13: 14671BD890A311F19EA46D796F11F970.roa (hash: LRK4uCWmqWpWw3Xm3dXQgxGRrJCrM0VZNsAVYzL7FS4=)
                          14: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: Xv/wQAgGQuRKdOuR7b3JljTxpd1z5U1GoeLFF2m7jXc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Sep 2026 00:10:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1491 (0x5d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Sep  7 00:10:26 2026 GMT
            Not After : Sep 14 00:10:26 2026 GMT
        Subject: CN=6a9e00f3-15ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:80:07:d6:20:70:5d:23:f0:fa:76:0e:4f:db:
                    c7:4a:c0:f5:b5:84:bb:bd:30:ed:93:d2:52:d5:4c:
                    7c:11:68:d9:66:29:57:0a:56:ce:79:aa:05:45:32:
                    21:a1:2a:57:f1:fc:75:c6:17:6d:89:3d:4d:90:c7:
                    8d:56:f7:5d:12:eb:b1:0c:1c:88:6f:3d:2e:10:97:
                    8a:82:f0:36:de:31:a5:14:e6:5a:42:bf:38:e3:74:
                    c9:41:3e:ac:89:e1:cb:ca:6c:21:cc:53:d7:65:44:
                    89:42:23:d0:14:96:9e:27:88:59:8f:15:03:05:3a:
                    45:ff:db:77:55:6f:30:1d:8c:b9:05:9d:b5:07:ee:
                    bd:81:c6:a4:06:d2:f9:85:01:19:1c:07:e0:a5:98:
                    0b:19:ea:02:dd:b2:64:90:cb:67:c0:26:53:31:d8:
                    d5:a6:e6:4d:29:26:96:e6:a4:9f:b2:1e:88:9c:bb:
                    7e:2e:a8:94:cc:6b:31:78:98:34:de:c1:23:5b:36:
                    52:f1:45:44:13:81:f7:f7:b4:06:d3:85:36:30:6b:
                    2a:c5:3d:a1:73:fe:cf:e6:89:a3:51:9b:d6:d5:c1:
                    34:c0:48:fc:f7:a8:82:fa:89:e9:8b:33:74:8c:3e:
                    b3:d8:ad:60:62:ad:76:0c:75:a0:7e:43:de:2e:13:
                    05:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:74:51:4D:49:71:44:B3:82:BA:74:CE:ED:EB:9F:9A:8A:95:16:1E
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:df:d1:c3:20:c7:6e:67:bf:92:d8:23:5f:71:9a:50:53:ac:
         f5:9e:e3:0c:2a:5c:43:3b:1e:bc:b3:1f:2c:93:b2:59:9d:82:
         50:89:77:1c:ae:ca:1a:91:26:91:08:1b:b8:ac:49:43:9f:a9:
         87:b2:4c:0e:cf:5e:1e:c9:dd:17:13:2e:42:fb:08:cf:9e:3b:
         06:90:14:13:05:83:79:62:05:ba:1e:42:5e:77:e8:40:db:5b:
         35:b5:0b:bd:10:79:b5:75:7c:92:df:ff:56:02:1a:b7:e1:ac:
         80:7e:f4:0c:08:67:b5:7f:0d:e2:09:b6:d8:d0:74:bb:6f:77:
         bb:dc:c8:67:c3:2a:e6:40:66:8a:db:58:36:4a:45:01:16:9a:
         20:c4:41:83:f7:b4:df:21:cc:bf:a3:80:43:2a:4c:c3:17:88:
         03:1c:8e:f3:21:49:4c:57:47:98:e4:60:26:79:83:b5:7b:05:
         73:7e:9d:0a:b1:35:fe:c4:ba:71:32:48:4d:d0:16:eb:70:59:
         ba:31:2c:99:00:ef:57:10:ca:dc:6d:4e:49:6b:7c:be:77:37:
         15:33:1f:74:69:1f:13:dd:2d:e2:b1:40:ee:2c:f9:47:75:f8:
         d7:f3:0b:d9:7f:87:b6:60:61:f0:8e:97:20:fa:45:ad:08:58:
         b6:db:ee:90
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEZDNzUxMTAvBgNVBAUTKDQ4MkU1QTZFMDg5NkEyNjZBOTFBNDA2NkMwNkY0QjRF
RDk4NDY0OUQwHhcNMjYwOTA3MDAxMDI2WhcNMjYwOTE0MDAxMDI2WjAYMRYwFAYD
VQQDEw02YTllMDBmMy0xNWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp4AH1iBwXSPw+nYOT9vHSsD1tYS7vTDtk9JS1Ux8EWjZZilXClbOeaoFRTIh
oSpX8fx1xhdtiT1NkMeNVvddEuuxDByIbz0uEJeKgvA23jGlFOZaQr8443TJQT6s
ieHLymwhzFPXZUSJQiPQFJaeJ4hZjxUDBTpF/9t3VW8wHYy5BZ21B+69gcakBtL5
hQEZHAfgpZgLGeoC3bJkkMtnwCZTMdjVpuZNKSaW5qSfsh6InLt+LqiUzGsxeJg0
3sEjWzZS8UVEE4H397QG04U2MGsqxT2hc/7P5omjUZvW1cE0wEj896iC+onpizN0
jD6z2K1gYq12DHWgfkPeLhMFdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBh0UU1J
cUSzgrp0zu3rn5qKlRYeMB8GA1UdIwQYMBaAFEguWm4IlqJmqRpAZsBvS07ZhGSd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM3NS8zQUE1REVFMERE
NTgxMUVDODcwRkMyMERDNEY5QUUwMi9TQzVhYmdpV29tYXBHa0Jtd0c5TFR0bUVa
SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NDNWFiZ2lXb21hcEdrQm13RzlMVHRtRVpKMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RkM3NS8zQUE1REVFMERENTgxMUVDODcwRkMyMERDNEY5QUUwMi9TQzVhYmdpV29t
YXBHa0Jtd0c5TFR0bUVaSjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJN/RwyDHbme/ktgjX3GaUFOs9Z7jDCpcQzsevLMfLJOyWZ2CUIl3HK7KGpEm
kQgbuKxJQ5+ph7JMDs9eHsndFxMuQvsIz547BpAUEwWDeWIFuh5CXnfoQNtbNbUL
vRB5tXV8kt//VgIat+GsgH70DAhntX8N4gm22NB0u293u9zIZ8Mq5kBmittYNkpF
ARaaIMRBg/e03yHMv6OAQypMwxeIAxyO8yFJTFdHmORgJnmDtXsFc36dCrE1/sS6
cTJITdAW63BZujEsmQDvVxDK3G1OSWt8vnc3FTMfdGkfE90t4rFA7iz5R3X41/ML
2X+HtmBh8I6XIPpFrQhYttvukA==
-----END CERTIFICATE-----
Generated at Mon Sep 7 17:43:15 2026 by rpki-client