Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          63z6ujTsPQ0UCmH1/zMqDRku6mG+BBX3ElJuJhMtFBY=
Subject key identifier:   3D:80:E5:B3:FE:1E:F5:DB:C3:B8:0B:30:C6:5B:D1:00:40:26:00:DA
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       05D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          04DA
Signing time:             Thu 03 Sep 2026 00:27:27 +0000
Manifest this update:     Thu 03 Sep 2026 00:27:26 +0000
Manifest next update:     Thu 10 Sep 2026 00:27:26 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: zUfbZhCfTgR8MAF5zcEjoHkhAvAZdNPqWz8pjYdJ2EM=)
                          2: 39D293CC61A311F184335DAE8747A888.roa (hash: jedw50TUWq7AyJ3VTKcKZQQqP8Wlj4F5zK+M/tpfaYU=)
                          3: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: FoSzwvvgDPOGghYrGRoNT/3F/hsXOUjc7S8nBc84FDI=)
                          4: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: Xv/wQAgGQuRKdOuR7b3JljTxpd1z5U1GoeLFF2m7jXc=)
                          5: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: GfVyeK1u4sYQdScjmEZa/TgSrlbpkVV/b2NL/9s4N4g=)
                          6: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: oFCRKJ2F0EfbbPkmQz5K49dGmf/1cMbEIIfSRomsCOA=)
                          7: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: 6mq5bZQGJ64qqRG9rU+13rtax05sI2Ele52oI5PPSIM=)
                          8: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: 6BPjWf3PRrYbjxHXmcTYFTcq9mEbXJz5EDwd+WrDRUk=)
                          9: 14671BD890A311F19EA46D796F11F970.roa (hash: LRK4uCWmqWpWw3Xm3dXQgxGRrJCrM0VZNsAVYzL7FS4=)
                          10: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: g3/xtOL31AkLVTBnIUdXCHbVSuqpwrEw296Y7D5oHRk=)
                          11: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: 92wRIZw680AyP/v/OZd/w9DgRsgSI6ONdeqJ58u9NjE=)
                          12: 48421E1E61A311F1AD9134E08747A888.roa (hash: 0L5T+62/+LuV8AB9j6gcu/g9GsKvWn9orUiZH54FdP4=)
                          13: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: W828W0l0bTgnpTlS9/sHF0lVKlK0jtphre/w8R0LrXg=)
                          14: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: jKcbK4IEw6IX5DBWAj2PfbXbqhFpVe65Ce73aszMZHQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 00:27:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1489 (0x5d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Sep  3 00:27:26 2026 GMT
            Not After : Sep 10 00:27:26 2026 GMT
        Subject: CN=6a98beef-6912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fd:21:5d:85:ec:5b:75:01:6e:05:5a:e9:1f:
                    55:d0:99:4d:db:58:c1:8c:6d:44:b1:8c:2a:43:65:
                    71:1c:e5:35:39:fe:0c:26:9b:4a:d0:0d:e3:b2:94:
                    56:30:18:1f:18:06:69:a5:73:ae:55:08:44:f4:fe:
                    31:5b:89:7e:33:a4:e1:f1:e8:b0:3f:e8:70:c1:c9:
                    d8:74:ff:5a:69:a6:80:99:b7:50:23:35:19:81:4a:
                    56:99:13:a4:a8:fe:21:4d:c6:33:f3:81:3e:6f:d7:
                    e3:5a:ef:66:7c:b3:80:38:ea:26:93:50:86:68:dc:
                    43:d1:2b:37:da:33:5e:0a:d4:48:ba:1a:57:62:5d:
                    80:55:a9:d0:62:82:88:78:04:a6:1d:f4:35:1a:92:
                    a3:96:64:a0:97:ab:ff:00:45:f3:0a:10:78:21:07:
                    70:d0:39:15:12:38:5a:87:ea:be:ae:e4:b2:35:2a:
                    04:08:38:e8:67:30:80:eb:1f:94:2d:83:e7:54:6b:
                    22:cd:0e:80:18:0c:97:f4:72:b2:61:12:ae:00:bf:
                    48:c3:7f:f6:5a:a9:1f:9d:bf:bb:06:6e:c8:73:6e:
                    79:9c:9d:53:e9:7d:68:cb:0b:fb:08:57:e3:ca:8a:
                    5c:0a:99:c7:db:ad:c1:75:77:b2:47:5b:f6:82:af:
                    b5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:80:E5:B3:FE:1E:F5:DB:C3:B8:0B:30:C6:5B:D1:00:40:26:00:DA
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:46:ba:34:25:8f:f5:13:9f:15:90:f5:d3:13:c5:92:33:84:
         b4:7f:52:fe:0d:ab:ce:e4:6f:36:cf:73:3c:9e:e1:20:bc:46:
         fc:78:35:7e:12:dc:eb:7d:1a:e5:ac:3b:5d:3d:d0:ef:86:59:
         9b:eb:a1:bb:97:97:08:14:53:a2:f7:80:ef:c1:92:07:84:52:
         f7:8e:81:6a:41:01:7f:52:ad:90:ea:55:ee:a5:ed:7f:b5:0a:
         3d:56:20:52:35:86:72:72:c0:f0:68:c0:69:a5:54:eb:09:67:
         98:86:60:3a:24:5e:de:d4:98:b4:1b:ec:f1:66:bc:a9:a5:66:
         18:7d:58:33:a4:c2:86:55:a0:0b:d1:d7:44:1c:09:4c:d0:bf:
         d4:bf:44:5a:49:0b:4f:2a:99:62:3d:6c:61:e4:ce:58:1e:1d:
         d9:d5:7e:73:78:d3:77:3a:3c:a8:8c:01:05:38:a3:cb:ac:57:
         37:68:5b:a3:e7:27:8f:14:63:12:75:7d:5f:80:34:fe:9d:85:
         37:b8:d9:25:15:f2:9e:bd:90:22:8c:b6:7a:6f:7f:e6:06:94:
         f5:26:de:a9:1a:ca:31:98:0e:b8:a4:05:49:42:26:ad:a9:9a:
         5d:2c:e9:42:80:a6:ec:92:a0:18:12:a1:14:4d:b4:f1:b9:1b:
         99:12:ce:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:58:32 2026 by rpki-client