Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          /pooOe4qleWHVVvKMMmULIdJC0DVVNyko+rOBKJV9B4=
Subject key identifier:   70:4F:B8:8B:D5:E9:C1:72:64:67:3A:B1:2F:4C:B5:2D:5B:C2:C8:0A
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       05C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          04D0
Signing time:             Sat 15 Aug 2026 00:30:30 +0000
Manifest this update:     Sat 15 Aug 2026 00:30:30 +0000
Manifest next update:     Sat 22 Aug 2026 00:30:30 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: c+NIouofscfv/FYqwm25vWJJe9sVQxWsNhfzmCcMSRM=)
                          2: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: Xv/wQAgGQuRKdOuR7b3JljTxpd1z5U1GoeLFF2m7jXc=)
                          3: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: 6mq5bZQGJ64qqRG9rU+13rtax05sI2Ele52oI5PPSIM=)
                          4: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: g3/xtOL31AkLVTBnIUdXCHbVSuqpwrEw296Y7D5oHRk=)
                          5: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: FoSzwvvgDPOGghYrGRoNT/3F/hsXOUjc7S8nBc84FDI=)
                          6: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: 92wRIZw680AyP/v/OZd/w9DgRsgSI6ONdeqJ58u9NjE=)
                          7: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: GfVyeK1u4sYQdScjmEZa/TgSrlbpkVV/b2NL/9s4N4g=)
                          8: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: W828W0l0bTgnpTlS9/sHF0lVKlK0jtphre/w8R0LrXg=)
                          9: 14671BD890A311F19EA46D796F11F970.roa (hash: LRK4uCWmqWpWw3Xm3dXQgxGRrJCrM0VZNsAVYzL7FS4=)
                          10: 39D293CC61A311F184335DAE8747A888.roa (hash: jedw50TUWq7AyJ3VTKcKZQQqP8Wlj4F5zK+M/tpfaYU=)
                          11: 48421E1E61A311F1AD9134E08747A888.roa (hash: 0L5T+62/+LuV8AB9j6gcu/g9GsKvWn9orUiZH54FdP4=)
                          12: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: 6BPjWf3PRrYbjxHXmcTYFTcq9mEbXJz5EDwd+WrDRUk=)
                          13: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: oFCRKJ2F0EfbbPkmQz5K49dGmf/1cMbEIIfSRomsCOA=)
                          14: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: jKcbK4IEw6IX5DBWAj2PfbXbqhFpVe65Ce73aszMZHQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Aug 2026 00:30:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1479 (0x5c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Aug 15 00:30:30 2026 GMT
            Not After : Aug 22 00:30:30 2026 GMT
        Subject: CN=6a7fb326-2cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:34:9d:d1:af:96:38:85:97:91:79:ce:d3:a9:
                    d2:46:4a:3f:5a:e3:7d:c5:4d:ea:c4:63:19:b0:2c:
                    e1:93:66:09:39:9b:4f:9d:76:b9:97:bc:e0:22:c9:
                    28:72:33:91:83:07:4e:9c:3e:a9:1e:65:b3:92:5c:
                    31:6f:97:7d:03:b4:d5:10:59:a4:7b:43:ec:43:3c:
                    bc:ca:38:1c:44:fa:5d:fc:67:32:d9:9a:88:84:37:
                    af:6b:85:2d:1b:e9:94:ae:f1:21:ff:31:cd:a6:d0:
                    a8:7a:0c:63:36:63:95:a2:9f:0a:f7:32:65:a0:68:
                    2b:74:32:75:ae:33:5f:2b:ca:78:31:54:96:8b:0e:
                    ac:8c:9b:c4:98:b7:90:20:93:22:a2:20:3f:f8:f5:
                    34:a3:26:e2:9d:5d:cf:c1:9d:24:4d:24:dd:4f:91:
                    28:b6:98:0c:a3:32:74:4e:2f:17:43:c1:c0:ad:e7:
                    f3:0c:ad:3f:c3:8d:fd:be:69:b4:75:6a:92:bc:fc:
                    19:b0:73:1f:6a:d1:7a:c4:67:84:03:e2:05:3c:d8:
                    3d:9a:c6:4d:16:43:33:de:38:87:52:7d:00:96:e6:
                    bd:76:94:77:44:e5:a9:0a:ed:22:cb:2e:31:86:6a:
                    dd:ee:bf:2f:bf:f9:a4:ca:a6:69:a6:90:9a:58:3c:
                    89:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:4F:B8:8B:D5:E9:C1:72:64:67:3A:B1:2F:4C:B5:2D:5B:C2:C8:0A
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:61:f7:22:01:92:98:2c:ad:17:a1:b5:ba:32:f9:14:80:1a:
         59:f7:5e:38:7e:52:83:a0:ad:dc:71:60:97:67:d9:82:97:8a:
         77:31:b7:4b:1f:37:b6:5f:53:7f:8f:ee:c2:ed:56:8d:8d:d4:
         02:75:ae:74:a0:bf:06:14:32:ac:87:6e:47:34:69:6d:de:f2:
         86:c1:4c:8d:e1:47:6f:f1:92:a7:7a:65:0d:36:aa:6a:04:45:
         dd:f8:17:ad:36:d8:5b:d9:b7:e0:f5:5b:dc:ec:92:e4:f1:43:
         97:93:da:6f:27:37:bf:8a:74:2e:89:d3:62:f5:f6:7b:d5:97:
         50:63:21:ec:ba:cd:c2:64:e7:45:0c:1c:e7:b9:25:dc:57:15:
         86:b1:27:13:fd:04:d4:be:a2:4a:70:ca:ae:b5:c3:8a:9a:fa:
         66:4e:ed:5a:61:24:e7:27:57:1e:33:fd:10:4e:81:fd:44:f8:
         ee:a4:b2:1b:ef:17:9e:94:c0:ea:81:f9:92:23:eb:1d:ee:f2:
         4e:2b:46:16:4f:2a:a2:d4:7e:32:04:2c:8c:d1:a5:8d:c1:a9:
         e9:68:59:1c:c1:19:98:4b:90:81:ec:da:12:ad:78:00:18:c7:
         b5:be:9c:7a:75:15:29:d9:4d:81:83:d8:cb:84:61:f5:a1:57:
         60:f6:1c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 22:09:50 2026 by rpki-client