Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          O1J6/sgYAV4iB1C+LtpI+ckwNIPMtWHpfikUJFIP/No=
Subject key identifier:   32:7B:2C:9B:9A:13:96:02:16:C7:62:C7:87:4A:1E:8C:6E:B3:A4:E4
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       0591
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          04A9
Signing time:             Thu 11 Jun 2026 02:48:56 +0000
Manifest this update:     Thu 11 Jun 2026 02:48:55 +0000
Manifest next update:     Thu 18 Jun 2026 02:48:55 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: IrXXZfXZqpm9QnZlxkvFENAdVH+S66GQxPznng044xw=)
                          2: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: tnJ/yjknRBuc7UcBwzOHFJo2tnhzqFgevM34YS5rTmY=)
                          3: D3A8EA649F0911EE98065E23C4F9AE02.roa (hash: Xpp2kFVSkuxzwBMowkkOloasdXHXgZJRNUiRPlt0tnI=)
                          4: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: /JQTTMGxpG1rEnJAGVjqQn7ENfIeEQm+h8FaXqx7IVA=)
                          5: 39D293CC61A311F184335DAE8747A888.roa (hash: UFEXheRWbldng6QGjy1RCb9qHZzLRVLyuLDbBU1e2yo=)
                          6: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: WLbihB2PWZ1o++RM42EGDbLREOZKJSeaYxV3v/0bXwE=)
                          7: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: awi/D8lHc6L4dnToUMe+Br+mJLk9zICL465IydEzQlc=)
                          8: 48421E1E61A311F1AD9134E08747A888.roa (hash: 3KvNugzJmOfWXWejLGn4X2zH7tN8BJMAw0UhDMUUtUI=)
                          9: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: VkKyUkZvufLeqNWH4XS4MFj5LEClAP479cUeOm9p8S8=)
                          10: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: 3zeR3y4ThnqjrUYK2B2lRbeCm3UuFhf7qDtePwaC2RU=)
                          11: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: VpLsJjoOM5TQH3OZEcPzV4PLIS2G8Hn1FrYlhKbie54=)
                          12: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: mwjCND/hb5mcBVM5huPhi5+mLyWxYoFCwlwxmeL4yts=)
                          13: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: vsM3lJioCOwfp3LZZpdveH83fo62+Y9urJ8LtwiCnMw=)
                          14: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: kNZ9kMcIVbL2jK5YIL401eBQNsQQQ0xAhM8Sv/4h4WQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 02:48:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1425 (0x591)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Jun 11 02:48:55 2026 GMT
            Not After : Jun 18 02:48:55 2026 GMT
        Subject: CN=6a2a2218-239d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b8:9b:a6:ab:85:e2:ec:ef:e8:9b:19:74:49:
                    78:38:80:0d:95:43:bd:96:27:32:34:66:13:87:3a:
                    6c:11:b0:a7:49:ea:90:d6:40:8d:f8:a8:0a:1d:23:
                    f9:19:94:88:31:1f:4b:65:4a:c2:1f:e2:66:71:94:
                    7e:16:d9:4b:7d:82:be:71:2a:4d:52:3d:e7:7c:92:
                    a8:87:3c:17:cf:f3:9e:f4:56:94:b6:f7:4b:ed:8d:
                    bc:a6:b5:e2:0b:ac:40:9e:cc:9e:51:3e:bf:58:71:
                    ee:51:d8:63:0c:e2:a0:30:1c:d9:35:c3:db:1f:72:
                    f2:82:40:44:86:c2:35:92:47:65:a5:3d:90:77:1d:
                    3d:38:9b:0f:95:dc:0e:68:c0:32:67:9a:f5:a5:a5:
                    14:d1:80:c5:85:16:78:3d:95:5d:ed:db:2e:57:27:
                    ad:e2:5e:64:1d:98:66:30:77:1b:54:62:e0:c1:46:
                    2d:67:d6:a2:74:2c:b0:f1:bc:07:bf:46:9b:36:c2:
                    38:5c:14:c7:70:2a:96:b7:47:e6:4c:1c:a9:58:a0:
                    a0:91:9f:60:4a:e2:dc:69:8b:50:56:3a:37:d3:76:
                    a5:2e:af:87:36:e2:d0:9b:e1:93:7a:de:c2:69:dd:
                    1d:5e:f2:54:65:9d:45:cf:5a:eb:f3:74:91:f1:8f:
                    eb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:7B:2C:9B:9A:13:96:02:16:C7:62:C7:87:4A:1E:8C:6E:B3:A4:E4
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:40:8b:b8:2e:cd:b0:72:f3:2d:76:a7:3c:5d:54:a4:7c:55:
         d2:d6:97:cd:3b:1f:68:46:2d:b8:2d:cd:99:50:c7:40:45:0b:
         c7:e4:1c:98:79:eb:42:22:ab:62:a3:e5:99:4c:99:df:90:f4:
         ef:c6:3f:73:0f:a4:bc:05:40:b2:6d:aa:84:21:e7:42:4a:22:
         6d:fa:52:eb:99:08:2f:c9:72:83:5a:aa:88:28:ef:16:17:b8:
         15:a2:33:1a:72:85:d6:0d:e7:1e:a3:48:33:56:d6:77:4c:36:
         88:7c:d4:21:e0:16:24:5c:74:e6:86:df:c8:62:7d:0a:a5:83:
         bb:77:d8:28:0d:02:36:81:23:a5:48:7a:bc:e1:f2:1b:bd:c6:
         c8:d6:e5:0d:b3:c0:95:12:80:f9:0e:22:60:90:d1:4d:95:e8:
         0b:e0:db:df:2a:67:a5:22:76:23:af:a8:21:60:c6:97:d6:f1:
         d5:b1:f5:b9:a7:57:17:e8:5e:6a:b6:f2:4d:fb:03:ab:80:a3:
         ca:79:cf:c1:07:67:31:7b:33:e9:3f:59:41:0c:16:eb:10:f6:
         f3:aa:40:50:70:62:dd:74:0c:3e:2f:0f:ec:3d:08:61:0b:49:
         ed:75:f5:9b:38:1c:c8:d9:d1:20:47:c3:24:63:e9:24:96:b2:
         88:04:22:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 08:34:48 2026 by rpki-client