Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          q00qdsx4XTUhS9r5D0hqvuMK8IncUQhQdOf5CYDOQNY=
Subject key identifier:   7C:13:84:58:75:E9:1B:16:1A:55:18:9E:08:80:1E:79:C1:70:75:84
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       0578
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          0493
Signing time:             Sat 09 May 2026 00:44:28 +0000
Manifest this update:     Sat 09 May 2026 00:44:28 +0000
Manifest next update:     Sat 16 May 2026 00:44:28 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: l3JxMjgxwilD6FNNtwIZQSa+fm9dih+v+quyVJmF4rc=)
                          2: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: vsM3lJioCOwfp3LZZpdveH83fo62+Y9urJ8LtwiCnMw=)
                          3: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: mwjCND/hb5mcBVM5huPhi5+mLyWxYoFCwlwxmeL4yts=)
                          4: E984676EB5E611F0BCCCFA59C4F9AE02.roa (hash: RcSedgyQP0f/Mx0R7YzTVV6LUvz5MpJuolu8SeEYtAY=)
                          5: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: tnJ/yjknRBuc7UcBwzOHFJo2tnhzqFgevM34YS5rTmY=)
                          6: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: kNZ9kMcIVbL2jK5YIL401eBQNsQQQ0xAhM8Sv/4h4WQ=)
                          7: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: /JQTTMGxpG1rEnJAGVjqQn7ENfIeEQm+h8FaXqx7IVA=)
                          8: B6E083D46E2F11EEB9C12A34C4F9AE02.roa (hash: n7XrDdLRgIOzlZQtMfnZ1wiO99lQrB5PrhvdGG1ja78=)
                          9: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: WLbihB2PWZ1o++RM42EGDbLREOZKJSeaYxV3v/0bXwE=)
                          10: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: 3zeR3y4ThnqjrUYK2B2lRbeCm3UuFhf7qDtePwaC2RU=)
                          11: D3A8EA649F0911EE98065E23C4F9AE02.roa (hash: Xpp2kFVSkuxzwBMowkkOloasdXHXgZJRNUiRPlt0tnI=)
                          12: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: awi/D8lHc6L4dnToUMe+Br+mJLk9zICL465IydEzQlc=)
                          13: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: VpLsJjoOM5TQH3OZEcPzV4PLIS2G8Hn1FrYlhKbie54=)
                          14: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: VkKyUkZvufLeqNWH4XS4MFj5LEClAP479cUeOm9p8S8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 16 May 2026 00:44:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1400 (0x578)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: May  9 00:44:28 2026 GMT
            Not After : May 16 00:44:28 2026 GMT
        Subject: CN=69fe836c-1a9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5f:05:58:e9:c4:c2:96:35:f2:28:a8:59:ba:
                    6e:12:3c:dd:ec:33:0e:56:8b:2b:e6:fd:21:93:1e:
                    31:d3:03:03:de:2b:ce:d5:c2:84:27:f0:97:89:e4:
                    70:58:18:09:95:ae:c4:39:26:44:a5:ea:c7:22:7a:
                    aa:55:28:c5:b3:03:c3:46:34:93:60:45:e7:64:37:
                    90:21:9c:95:43:6e:a4:c7:ef:77:94:2d:7b:14:f4:
                    f9:1d:50:25:18:5c:f2:d3:25:c5:5b:b6:de:45:8b:
                    c3:af:e7:d6:54:3f:f7:ba:13:47:4a:9f:1f:8f:b0:
                    ff:3b:02:88:a9:e4:5c:5d:01:45:8d:fe:eb:d3:23:
                    d4:ed:c3:06:32:a2:b1:25:57:e0:91:24:68:13:d8:
                    e6:a4:5f:99:36:50:9b:c6:25:60:df:1f:9b:2b:b4:
                    7b:fa:fb:b5:38:ab:a3:04:e5:4b:16:c1:c0:cd:3c:
                    b8:5f:8e:bc:db:33:16:f6:d9:d2:7c:0e:82:8d:44:
                    2a:32:cc:d4:9b:04:da:70:14:31:15:f4:a5:e1:d8:
                    f4:5d:51:77:f1:5b:60:09:2b:99:b1:d1:f8:f0:d4:
                    fb:48:69:b7:64:27:7a:68:5f:89:04:a0:13:5c:2b:
                    b2:d8:15:66:2a:f3:aa:67:8d:0d:d0:4f:10:d4:f9:
                    01:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:13:84:58:75:E9:1B:16:1A:55:18:9E:08:80:1E:79:C1:70:75:84
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:33:c7:06:09:29:de:fd:05:42:b2:db:93:dd:8f:19:d0:de:
         f7:10:4b:de:87:5c:ad:df:30:23:38:7a:57:de:d4:17:d5:5a:
         f7:1a:5c:93:0b:a8:01:61:cc:d3:78:90:b3:f3:f6:88:3e:f0:
         ba:2a:8c:8d:af:26:33:5c:c0:a4:2e:3b:6d:f4:f5:10:a9:4c:
         4f:47:f4:80:cc:18:52:7d:c1:e1:11:b3:31:bb:46:34:dc:86:
         9b:7c:da:bd:d2:a8:87:fa:16:47:5f:3e:e1:fb:b2:ee:fa:fa:
         1d:40:d0:4d:aa:db:89:2f:1c:85:9e:21:30:c1:32:97:0b:ac:
         70:9b:55:21:cc:a5:4c:c7:37:72:72:70:76:e8:26:95:84:b9:
         d9:cc:ce:13:21:52:d2:53:13:80:31:4e:54:21:4a:7d:14:9b:
         3c:c7:0d:30:75:a6:b3:4c:2f:29:b4:3e:a2:a5:10:41:1b:17:
         59:7e:3f:13:d8:c1:fa:f4:9d:40:54:d0:1d:03:94:bd:81:2c:
         38:23:57:05:48:81:18:6e:62:09:af:71:4b:c6:87:ea:19:f5:
         3a:8d:df:8a:7f:f9:b3:9f:27:47:ea:79:76:d1:d3:42:4c:51:
         37:5a:7f:eb:02:86:27:34:36:b7:da:76:55:72:9f:ac:2c:96:
         e7:9b:a5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 18:11:41 2026 by rpki-client