Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          bOf+OizljnByeeBwwMbJNCK9k7v0iG2HOKhCWaaMucc=
Subject key identifier:   6B:D6:3B:A4:9E:6B:2A:47:9C:6E:28:91:7D:2E:72:4F:51:AA:42:40
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       05CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          04D3
Signing time:             Fri 21 Aug 2026 00:23:47 +0000
Manifest this update:     Fri 21 Aug 2026 00:23:47 +0000
Manifest next update:     Fri 28 Aug 2026 00:23:47 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: 8D16PpQDU4ntHTNR4sMbkArG0EnxrrgkDgvIagP3spc=)
                          2: 14671BD890A311F19EA46D796F11F970.roa (hash: LRK4uCWmqWpWw3Xm3dXQgxGRrJCrM0VZNsAVYzL7FS4=)
                          3: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: Xv/wQAgGQuRKdOuR7b3JljTxpd1z5U1GoeLFF2m7jXc=)
                          4: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: oFCRKJ2F0EfbbPkmQz5K49dGmf/1cMbEIIfSRomsCOA=)
                          5: 39D293CC61A311F184335DAE8747A888.roa (hash: jedw50TUWq7AyJ3VTKcKZQQqP8Wlj4F5zK+M/tpfaYU=)
                          6: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: g3/xtOL31AkLVTBnIUdXCHbVSuqpwrEw296Y7D5oHRk=)
                          7: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: 92wRIZw680AyP/v/OZd/w9DgRsgSI6ONdeqJ58u9NjE=)
                          8: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: 6mq5bZQGJ64qqRG9rU+13rtax05sI2Ele52oI5PPSIM=)
                          9: 48421E1E61A311F1AD9134E08747A888.roa (hash: 0L5T+62/+LuV8AB9j6gcu/g9GsKvWn9orUiZH54FdP4=)
                          10: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: jKcbK4IEw6IX5DBWAj2PfbXbqhFpVe65Ce73aszMZHQ=)
                          11: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: FoSzwvvgDPOGghYrGRoNT/3F/hsXOUjc7S8nBc84FDI=)
                          12: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: 6BPjWf3PRrYbjxHXmcTYFTcq9mEbXJz5EDwd+WrDRUk=)
                          13: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: GfVyeK1u4sYQdScjmEZa/TgSrlbpkVV/b2NL/9s4N4g=)
                          14: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: W828W0l0bTgnpTlS9/sHF0lVKlK0jtphre/w8R0LrXg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1482 (0x5ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Aug 21 00:23:47 2026 GMT
            Not After : Aug 28 00:23:47 2026 GMT
        Subject: CN=6a879a93-3774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cd:22:59:54:da:0a:a1:4e:ca:77:12:fb:bd:
                    40:b3:69:e9:20:49:91:8f:1a:c3:d3:42:63:69:5a:
                    ca:63:62:c0:67:1a:d2:9f:60:80:8b:8e:7f:77:8d:
                    04:1b:c7:e8:f1:ce:fe:2e:0c:2d:4b:a0:13:e6:4c:
                    a4:01:de:b8:b2:7a:eb:02:34:d0:8f:92:c3:84:79:
                    75:1d:b9:a4:8e:75:5e:6a:04:30:69:a5:b4:d3:1e:
                    a0:ed:54:e7:57:4f:13:f9:ad:33:0a:c8:6f:e9:5c:
                    70:e0:8f:fa:e3:c2:2d:ac:37:e5:dd:96:21:7f:43:
                    a3:fc:ae:4d:6a:18:39:c4:a5:4d:44:bd:bf:ad:7e:
                    4d:ea:f6:31:81:a1:7a:c8:3d:fa:c2:ea:d4:a8:e2:
                    bf:19:41:bd:90:23:f9:59:a1:54:f5:ac:70:fa:fd:
                    ae:84:9f:e9:1d:09:84:42:20:12:4b:02:01:02:9f:
                    69:f5:49:b9:fe:04:8b:ba:af:83:b5:22:ec:94:69:
                    0a:d1:b7:d8:17:cd:06:99:62:2d:40:b8:dc:23:b9:
                    19:a5:0e:8a:54:b8:5e:5b:98:ff:af:cc:35:20:64:
                    45:12:c4:e3:59:a5:48:94:f9:fe:bb:51:3e:54:24:
                    92:f5:24:0c:67:92:cb:a7:4e:ff:bd:65:cf:f1:80:
                    f5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D6:3B:A4:9E:6B:2A:47:9C:6E:28:91:7D:2E:72:4F:51:AA:42:40
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:c8:d8:8e:56:cc:f2:cb:13:10:88:d9:96:4f:6c:cb:77:fe:
         b9:15:43:8e:a8:ce:73:03:13:08:ed:59:b2:7d:ec:7d:71:e3:
         cc:78:18:fe:01:fb:2f:6c:4f:28:e8:4a:87:0c:1b:f4:44:b2:
         ea:22:06:b4:95:a2:65:87:3c:39:ea:2b:69:11:1a:75:fc:b5:
         10:a3:a3:b2:a1:ae:9e:1c:e3:7b:99:5e:b0:72:79:63:7b:42:
         5c:23:aa:c6:6e:58:ff:9a:4c:28:b8:0a:80:cc:40:4d:4b:84:
         d4:4d:b0:8b:97:bb:2d:09:60:ac:fe:2b:36:20:40:20:1d:ed:
         0c:fd:f7:73:3a:db:88:b0:dd:4e:35:b7:26:5a:0c:a0:20:7a:
         4b:4e:10:e7:a4:57:59:39:3e:e1:9c:a4:08:83:b4:c9:03:df:
         f1:2d:51:70:31:0a:c7:93:3e:40:aa:74:3b:dd:d5:ca:b5:96:
         e3:d5:e5:4b:95:9d:d7:41:80:f2:3f:6a:a9:ea:74:b4:e0:70:
         27:b5:e6:1d:c4:31:d0:2b:4f:41:2b:6b:eb:98:1a:4d:34:af:
         de:ef:a1:1b:78:e8:bb:b3:7e:65:d0:fd:69:3b:4b:75:cb:35:
         5b:c5:ee:73:43:3e:a4:cc:69:3f:a1:4f:0f:c2:49:79:fc:e6:
         75:0b:01:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 19:54:07 2026 by rpki-client