Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          9pzIlAIHy0gNQYYyONla5gePx7O+2HpW7BweF3OSEcE=
Subject key identifier:   C5:B9:3E:09:DA:51:F1:2A:99:C3:D2:A7:4C:8C:E6:87:9F:FD:26:59
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       04DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          0410
Signing time:             Wed 17 Sep 2025 01:35:37 +0000
Manifest this update:     Wed 17 Sep 2025 01:35:37 +0000
Manifest next update:     Wed 24 Sep 2025 01:35:37 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: 42sPIAHtAy/86pkrnaQ6eEQD4leWoAwrI1OxcKeVzP4=)
                          2: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: pE0TeYdIKCgc/QwPZRV1/6gtn2PDxZWuZWypXfqUCBk=)
                          3: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: 3+hYQrTmF+e7jJciHHC9Syz1XLKiAuOCDuMHFEIoOO8=)
                          4: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: yoHxToNdVsEl2/mlXGoTSTZxsnICbltZ8OX7V22JdbQ=)
                          5: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: xMiHMYItwXrD425Qd67NbjvjX4HrJ3EnpnA8c/QF/4k=)
                          6: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: SilbnDSMyvFBaNxXZnHVsn7YIdcJKbT+9vzuxU+MumM=)
                          7: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: A8LP0mnaTBBKppNqPSMaDhPFCk6GGBkjSaBDc8dCjBI=)
                          8: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: GEOmMPHt+G2/MbW4UDY6/tPaY4MdJDx+hT+IJOD6OI0=)
                          9: B97703967D5211F0A441E970C4F9AE02.roa (hash: GaALGIK/a9p5lApP+qC0JDNjMvW/jhDMhJJ0jOA0Itw=)
                          10: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: 9J2iOFdXW0WTaVQoSkjTpRubYQV1uYwslH5WX54SWS8=)
                          11: B6E083D46E2F11EEB9C12A34C4F9AE02.roa (hash: cEUErhxJhRs9Ayd1OjEDxa3aUEaS/H1Cn1wGLQy/Hdo=)
                          12: A8B7D7567D5211F09C93DD70C4F9AE02.roa (hash: +cGGs2fPTXXUHzBshsBMQ9rP960rSOW03CCe6MSibGs=)
                          13: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: OKC561ca7ASLfOkgXrHgKbplp4PP/4v4yOXE3sio9JA=)
                          14: DD12F48AEC2611EF94F85F09C4F9AE02.roa (hash: 5x3hwbD6OKSIDNRFPjnTH18AkwSHTg00pMz0FKOos+E=)
                          15: D3A8EA649F0911EE98065E23C4F9AE02.roa (hash: R2/WUKzxoHuFFd/QsgqeEUvYq+HCK78+7w9Z8fUIsWc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 01:35:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1244 (0x4dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Sep 17 01:35:37 2025 GMT
            Not After : Sep 24 01:35:37 2025 GMT
        Subject: CN=68ca1069-33d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:18:46:aa:b8:67:d3:a8:c6:20:ef:7c:db:13:
                    d3:46:75:80:3f:4a:b9:30:0c:9a:ff:b8:6b:54:e1:
                    98:86:cd:e7:44:8c:ff:7c:94:46:ec:72:a7:66:32:
                    8f:55:d2:c3:0a:8b:de:be:38:dd:5c:a9:5b:cf:a8:
                    14:eb:0a:a7:45:c9:cd:fd:5f:7d:1b:e6:90:a5:ef:
                    e4:69:1c:99:01:79:d2:54:ce:22:95:6f:b9:48:13:
                    21:48:16:2b:17:97:e6:4c:c3:e7:60:22:5d:76:18:
                    79:3f:de:2b:81:58:f2:43:8e:c3:85:ea:2e:4a:80:
                    39:89:18:24:8e:ab:b9:42:2a:b8:da:de:05:6f:e0:
                    8f:a2:be:d3:69:0a:36:2c:93:38:26:6d:94:b2:55:
                    d6:87:e3:4e:59:a3:e9:b8:cc:09:05:04:03:96:f9:
                    e2:e8:27:b6:b5:57:ca:49:96:24:32:5e:a7:5e:9a:
                    26:cb:aa:ad:94:02:06:a4:30:bb:a0:35:99:2e:aa:
                    3b:3d:99:40:ca:0e:32:f7:01:81:c8:67:30:83:03:
                    f4:93:5e:c9:06:ca:82:e5:59:53:18:d4:09:60:05:
                    f5:bf:76:95:f9:13:e7:d7:84:1a:fc:2c:77:f2:aa:
                    b6:5c:a7:4e:b3:47:a4:30:05:27:d6:2e:31:3f:ff:
                    d8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B9:3E:09:DA:51:F1:2A:99:C3:D2:A7:4C:8C:E6:87:9F:FD:26:59
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:38:9f:58:1a:44:c5:27:3f:ac:49:d2:bd:62:9f:1c:03:2d:
         32:c9:90:02:49:17:b1:6a:bd:2f:97:3f:97:bf:6d:88:1f:20:
         fb:bc:0f:6e:3d:77:74:22:89:b1:05:f2:31:bf:a3:9d:76:96:
         cd:f0:ca:d6:e6:07:fa:9b:90:ac:68:97:67:d8:af:03:ff:36:
         01:ca:4f:78:51:9c:4e:48:36:26:d3:10:a9:27:3d:25:c4:5f:
         e5:4d:d2:fa:2a:aa:2b:bf:2a:5a:77:68:91:bb:69:27:0b:8e:
         2e:58:c7:a5:88:01:85:d8:56:0a:27:5e:4d:61:10:ff:f4:27:
         3f:a4:b9:6c:6c:22:13:05:fb:41:a6:c0:55:28:63:6a:e8:e6:
         71:fa:8e:f9:e7:4b:d8:dd:23:09:30:76:a9:ec:6c:63:75:56:
         70:e1:a6:fe:42:bb:7c:0f:66:53:2c:3a:52:4c:ef:2a:1f:86:
         dd:a8:e6:02:ee:b7:7a:fe:df:bf:db:04:64:63:a3:0d:21:e9:
         3a:af:90:b8:23:a0:b5:7b:d2:78:0f:cf:f3:7f:b1:98:b5:70:
         e6:87:25:c4:85:fc:4c:5f:96:85:77:25:c6:85:00:36:da:08:
         b4:55:7f:39:95:56:8a:fe:27:d4:73:99:d9:40:47:da:2b:0b:
         98:31:fb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:35:47 2025 by rpki-client