Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          zb0wfgUB+q6Yd9yRACzP5U2PmxmMT162XuFXq+m7x1U=
Subject key identifier:   11:52:13:61:68:ED:ED:0A:FF:B8:F5:9F:0E:56:EB:7B:32:41:B8:D4
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       0585
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          049F
Signing time:             Wed 27 May 2026 00:50:40 +0000
Manifest this update:     Wed 27 May 2026 00:50:40 +0000
Manifest next update:     Wed 03 Jun 2026 00:50:40 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: bnscre5bVt0d2ri6GA5ZaT2XRFx3VYfWHCoH6LZTkSw=)
                          2: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: VpLsJjoOM5TQH3OZEcPzV4PLIS2G8Hn1FrYlhKbie54=)
                          3: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: /JQTTMGxpG1rEnJAGVjqQn7ENfIeEQm+h8FaXqx7IVA=)
                          4: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: tnJ/yjknRBuc7UcBwzOHFJo2tnhzqFgevM34YS5rTmY=)
                          5: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: awi/D8lHc6L4dnToUMe+Br+mJLk9zICL465IydEzQlc=)
                          6: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: mwjCND/hb5mcBVM5huPhi5+mLyWxYoFCwlwxmeL4yts=)
                          7: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: 3zeR3y4ThnqjrUYK2B2lRbeCm3UuFhf7qDtePwaC2RU=)
                          8: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: VkKyUkZvufLeqNWH4XS4MFj5LEClAP479cUeOm9p8S8=)
                          9: D3A8EA649F0911EE98065E23C4F9AE02.roa (hash: Xpp2kFVSkuxzwBMowkkOloasdXHXgZJRNUiRPlt0tnI=)
                          10: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: kNZ9kMcIVbL2jK5YIL401eBQNsQQQ0xAhM8Sv/4h4WQ=)
                          11: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: vsM3lJioCOwfp3LZZpdveH83fo62+Y9urJ8LtwiCnMw=)
                          12: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: WLbihB2PWZ1o++RM42EGDbLREOZKJSeaYxV3v/0bXwE=)
                          13: E984676EB5E611F0BCCCFA59C4F9AE02.roa (hash: uUAKq3WdurEXVnOvC0tNlrlFTEpatkNGmOxIMHpkd7c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 00:50:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1413 (0x585)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: May 27 00:50:40 2026 GMT
            Not After : Jun  3 00:50:40 2026 GMT
        Subject: CN=6a163fe0-e0e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c5:fd:19:3e:39:b3:47:4c:1d:7b:81:e4:9b:
                    a7:41:ff:77:f2:13:73:55:a6:6e:c6:7a:5a:95:71:
                    b7:72:68:08:18:26:7f:ea:07:b0:56:48:b6:39:86:
                    0f:88:50:d1:8e:2a:de:4e:3a:b4:3f:6a:a1:da:e9:
                    cb:db:88:80:97:cf:ca:74:ad:f6:9b:78:80:56:e6:
                    af:8b:fb:2e:c3:9a:69:b3:fa:4a:cd:18:61:8c:61:
                    c9:29:89:04:8d:d1:b5:7d:d6:21:0f:35:52:df:9d:
                    a9:80:eb:ab:a8:6f:a6:35:31:cc:ad:df:3e:24:ff:
                    b0:60:bc:40:97:5e:5f:bd:21:5c:aa:5d:99:40:4d:
                    89:22:3f:b1:fe:0c:4c:7e:b2:30:90:d8:44:56:d1:
                    cd:93:3b:9d:50:ed:82:6c:cc:28:70:21:28:ff:2d:
                    60:b2:71:b1:f1:eb:e1:33:e7:15:62:36:9b:bf:0b:
                    74:4f:b4:66:d4:66:44:da:d9:c1:c4:8f:44:a3:65:
                    35:b3:f2:6b:d0:25:2e:38:bd:ca:d6:05:9c:b9:a5:
                    d0:d3:58:47:bd:03:df:8a:43:29:3b:f7:df:94:e2:
                    4a:3d:b2:7b:30:40:f0:e0:83:72:2a:97:f5:5e:a0:
                    5c:27:16:85:68:ae:07:80:27:5a:79:ab:c0:c6:5d:
                    87:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:52:13:61:68:ED:ED:0A:FF:B8:F5:9F:0E:56:EB:7B:32:41:B8:D4
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:80:b7:09:39:13:b6:59:5d:af:7e:4b:ff:97:14:44:fa:41:
         49:cf:72:bc:a0:47:49:34:ac:1c:b3:a6:72:7d:6a:16:fb:31:
         6f:f5:83:0b:08:fb:83:de:fc:93:cb:ef:a3:39:fc:98:7e:13:
         7f:20:e7:66:40:61:6d:59:be:fe:06:9c:be:ad:5a:91:1a:fd:
         ee:16:b5:ee:19:8f:62:47:74:1a:07:71:26:25:1d:aa:57:8a:
         e0:31:77:4b:68:e5:ca:45:6f:31:9b:b0:25:47:67:9f:4d:dc:
         80:0f:9f:39:ae:04:14:e5:ba:b3:27:27:76:ea:fb:e7:8b:f5:
         c4:9c:be:d4:52:54:58:f6:e8:82:66:f0:e5:2a:f2:5f:77:2e:
         0b:6b:62:d1:da:c9:ac:b7:48:33:c8:15:d9:7d:95:0c:ae:16:
         20:18:37:9e:fc:1a:20:28:e1:d8:96:c8:75:0a:40:82:a5:58:
         d6:00:b8:8f:42:a7:cb:d2:ee:4a:67:21:aa:d1:79:77:09:4e:
         16:e5:d3:a5:96:32:cd:c1:e6:4e:87:e5:d8:2c:2e:56:2a:68:
         29:52:2b:00:e1:8c:62:e4:b4:20:3b:fa:97:fc:e8:e9:63:84:
         98:bd:a1:fe:5a:a3:51:9d:b8:f4:8b:8f:d9:49:1a:3a:01:8e:
         9c:cc:20:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 04:35:04 2026 by rpki-client