Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          nmds0I18UycEFzuyjRxlFBFBX1L3CicH0IPTTbD54fQ=
Subject key identifier:   35:16:18:35:72:E6:DD:22:01:57:F6:FD:19:E4:75:4D:10:35:91:E5
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       05C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          04CC
Signing time:             Fri 07 Aug 2026 00:16:09 +0000
Manifest this update:     Fri 07 Aug 2026 00:16:09 +0000
Manifest next update:     Fri 14 Aug 2026 00:16:09 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: 5ViM1lIMTkBMJXxlqxcAetPQW7tslc7sB6XKxzG3Cro=)
                          2: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: 92wRIZw680AyP/v/OZd/w9DgRsgSI6ONdeqJ58u9NjE=)
                          3: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: FoSzwvvgDPOGghYrGRoNT/3F/hsXOUjc7S8nBc84FDI=)
                          4: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: W828W0l0bTgnpTlS9/sHF0lVKlK0jtphre/w8R0LrXg=)
                          5: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: g3/xtOL31AkLVTBnIUdXCHbVSuqpwrEw296Y7D5oHRk=)
                          6: 14671BD890A311F19EA46D796F11F970.roa (hash: LRK4uCWmqWpWw3Xm3dXQgxGRrJCrM0VZNsAVYzL7FS4=)
                          7: 39D293CC61A311F184335DAE8747A888.roa (hash: jedw50TUWq7AyJ3VTKcKZQQqP8Wlj4F5zK+M/tpfaYU=)
                          8: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: GfVyeK1u4sYQdScjmEZa/TgSrlbpkVV/b2NL/9s4N4g=)
                          9: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: oFCRKJ2F0EfbbPkmQz5K49dGmf/1cMbEIIfSRomsCOA=)
                          10: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: Xv/wQAgGQuRKdOuR7b3JljTxpd1z5U1GoeLFF2m7jXc=)
                          11: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: 6BPjWf3PRrYbjxHXmcTYFTcq9mEbXJz5EDwd+WrDRUk=)
                          12: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: jKcbK4IEw6IX5DBWAj2PfbXbqhFpVe65Ce73aszMZHQ=)
                          13: 48421E1E61A311F1AD9134E08747A888.roa (hash: 0L5T+62/+LuV8AB9j6gcu/g9GsKvWn9orUiZH54FdP4=)
                          14: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: 6mq5bZQGJ64qqRG9rU+13rtax05sI2Ele52oI5PPSIM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Aug 2026 00:16:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1475 (0x5c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Aug  7 00:16:09 2026 GMT
            Not After : Aug 14 00:16:09 2026 GMT
        Subject: CN=6a7523c9-c3c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c7:41:09:89:5b:f5:73:9b:9a:d0:e3:f1:e7:
                    92:b6:86:b1:d0:df:4c:a4:8a:19:d3:9f:b5:ad:53:
                    a2:54:d2:33:3f:fa:de:5b:ae:9e:1e:69:a8:f7:c2:
                    05:ce:f4:34:18:ed:65:26:91:53:6b:a3:4d:6b:a1:
                    13:a5:ca:28:e0:63:81:86:21:97:56:16:12:b2:d5:
                    be:dd:16:c6:4b:5b:e9:00:1a:ad:fc:12:16:52:ab:
                    c9:59:92:5c:17:d4:f2:00:85:e1:f9:6c:c8:b4:75:
                    21:75:0f:38:c2:a0:c5:9d:00:39:72:a8:0c:73:7a:
                    0c:71:2b:d7:06:3c:78:0a:b0:7c:85:08:9b:b5:37:
                    ff:a8:37:23:44:0f:46:06:64:a9:c0:eb:70:9f:13:
                    ce:36:b7:b7:ae:31:90:a2:bb:5e:2b:e6:8a:88:d5:
                    1b:5b:bc:d4:52:f2:a7:c8:97:b5:4e:48:a3:1f:35:
                    99:b0:8a:24:96:4d:94:a5:2c:87:c6:48:21:af:e3:
                    97:24:e6:ac:00:e4:2e:84:7d:e2:97:cb:f2:c0:2b:
                    6f:c1:43:2b:7a:d2:79:1b:a6:ef:58:99:b3:86:10:
                    cb:6b:23:a8:0c:3a:e4:27:59:fa:e0:b7:6c:87:1d:
                    cb:2e:d2:84:e3:d6:48:a4:05:ed:c0:ba:cc:f5:fd:
                    d0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:16:18:35:72:E6:DD:22:01:57:F6:FD:19:E4:75:4D:10:35:91:E5
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:99:40:f7:ee:57:07:db:18:81:9c:e3:49:1b:f0:25:d9:31:
         54:8a:d3:c6:44:b3:25:4d:c5:c8:e2:56:fb:32:bc:26:19:82:
         33:ce:87:bd:6d:41:5e:66:3c:a7:5e:b8:de:37:79:c8:d9:f9:
         21:0a:c6:a4:ff:44:9c:73:fd:69:97:de:a1:66:a0:28:23:fd:
         77:64:f9:55:7e:18:c0:14:8a:a5:58:ed:88:79:47:9f:a7:e8:
         0b:c1:01:31:b1:ae:db:82:da:e0:a2:d9:e0:a8:9d:65:a3:b7:
         7a:50:9c:58:a6:5f:f4:a9:31:99:ee:0f:dd:3d:0f:a5:cb:49:
         1a:d6:ae:47:50:5d:21:e7:68:91:6d:f2:b2:d7:e8:94:06:76:
         fa:af:4b:8e:41:6d:cf:05:88:e2:be:74:13:a0:7c:12:6e:26:
         a4:8d:a3:4e:2a:cb:5f:58:e9:0c:b6:9c:e1:e9:da:33:34:36:
         8a:cc:4c:98:50:79:07:10:e8:14:4d:db:36:c2:28:cc:8b:04:
         32:c8:77:e9:14:64:61:c7:35:27:be:95:4f:82:3a:a6:2a:89:
         5c:d4:dc:f0:89:c2:f9:70:c1:88:d6:4b:de:7f:4e:1c:e1:cc:
         17:fc:ca:4f:f3:c1:70:d9:e2:a9:36:ab:9e:fe:35:2d:4a:73:
         80:d0:60:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 11:39:46 2026 by rpki-client