Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          PEf050yChzkX2es9e9jAu3adyCFpPqD5scAXKJGQwh0=
Subject key identifier:   5C:B6:B8:A2:AA:5E:8D:49:A6:C2:27:43:7F:3A:70:11:F4:2F:43:6F
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       05B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          04BF
Signing time:             Tue 21 Jul 2026 01:29:57 +0000
Manifest this update:     Tue 21 Jul 2026 01:29:56 +0000
Manifest next update:     Tue 28 Jul 2026 01:29:56 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: IsR5L+/xwEeLlUTkFakyte/ceRkdaj3nW6k8XzCjBYg=)
                          2: 48421E1E61A311F1AD9134E08747A888.roa (hash: 0L5T+62/+LuV8AB9j6gcu/g9GsKvWn9orUiZH54FdP4=)
                          3: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: oFCRKJ2F0EfbbPkmQz5K49dGmf/1cMbEIIfSRomsCOA=)
                          4: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: g3/xtOL31AkLVTBnIUdXCHbVSuqpwrEw296Y7D5oHRk=)
                          5: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: 6mq5bZQGJ64qqRG9rU+13rtax05sI2Ele52oI5PPSIM=)
                          6: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: GfVyeK1u4sYQdScjmEZa/TgSrlbpkVV/b2NL/9s4N4g=)
                          7: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: 6BPjWf3PRrYbjxHXmcTYFTcq9mEbXJz5EDwd+WrDRUk=)
                          8: 39D293CC61A311F184335DAE8747A888.roa (hash: jedw50TUWq7AyJ3VTKcKZQQqP8Wlj4F5zK+M/tpfaYU=)
                          9: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: Xv/wQAgGQuRKdOuR7b3JljTxpd1z5U1GoeLFF2m7jXc=)
                          10: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: 92wRIZw680AyP/v/OZd/w9DgRsgSI6ONdeqJ58u9NjE=)
                          11: D3A8EA649F0911EE98065E23C4F9AE02.roa (hash: vmvv3bajE/r0eTCiEw69x6M9NsL+S+IX+coP+B6z88E=)
                          12: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: FoSzwvvgDPOGghYrGRoNT/3F/hsXOUjc7S8nBc84FDI=)
                          13: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: jKcbK4IEw6IX5DBWAj2PfbXbqhFpVe65Ce73aszMZHQ=)
                          14: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: W828W0l0bTgnpTlS9/sHF0lVKlK0jtphre/w8R0LrXg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 01:29:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1460 (0x5b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Jul 21 01:29:56 2026 GMT
            Not After : Jul 28 01:29:56 2026 GMT
        Subject: CN=6a5ecb95-49f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a6:5f:af:41:c9:2f:81:22:3d:91:24:49:dd:
                    c9:29:56:5e:6e:f9:d7:fb:e8:ae:f4:a8:82:47:cc:
                    58:67:f0:84:ff:0c:29:8a:6a:5e:fd:81:10:24:99:
                    3b:b7:fc:64:dd:4e:41:36:b8:7f:78:ca:b7:3d:27:
                    fe:e9:11:38:a3:17:ae:95:b1:b2:5d:97:0b:04:79:
                    da:58:d1:63:9f:f6:3d:67:be:7c:f3:5a:ce:09:93:
                    5c:0e:5b:be:50:db:63:d2:a7:09:bc:47:b7:f9:2e:
                    59:78:f4:1f:06:96:3b:cc:18:9b:d3:94:37:75:8a:
                    e5:5e:d0:f3:57:5a:62:5b:ee:1f:4f:58:69:a6:f8:
                    d9:ed:25:62:c2:72:7e:b6:6c:01:e9:58:83:77:8b:
                    7b:41:9c:0c:7e:aa:6c:ce:f8:0d:41:66:f4:88:26:
                    3b:64:fb:83:13:31:96:cf:40:ed:d1:d4:50:1a:aa:
                    c3:9e:b9:b6:7b:8b:9c:db:b9:a5:aa:a5:82:eb:0f:
                    79:d2:18:e9:a7:0c:aa:93:24:d5:18:4c:52:b4:ba:
                    50:72:0f:14:71:13:27:5a:cf:b2:24:a1:ef:7f:fc:
                    a0:4c:94:fa:ac:d6:68:9f:a1:65:53:85:80:a8:16:
                    67:6c:2d:86:6e:48:2a:67:8e:5a:9d:6c:bf:10:a4:
                    0f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B6:B8:A2:AA:5E:8D:49:A6:C2:27:43:7F:3A:70:11:F4:2F:43:6F
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:a5:52:68:57:ea:69:f4:ca:81:7a:c6:b0:2c:ea:e2:e1:72:
         0c:20:47:55:04:ae:96:3b:77:fb:bf:91:38:b1:96:c2:cf:65:
         3e:ec:86:c9:30:60:2a:5a:c5:80:ea:23:e6:ea:cb:c6:8a:04:
         d9:87:3e:c5:48:61:e3:d3:bd:d8:19:f0:d8:eb:ae:93:13:b4:
         e8:3a:6c:f3:57:c2:76:9e:f9:a9:e2:10:52:79:da:08:22:9f:
         99:1a:22:dd:e2:38:17:bd:31:8f:4c:d9:16:28:64:18:f5:f8:
         d9:ba:69:a0:34:99:de:43:f0:3a:33:e0:22:bb:86:2c:3a:c4:
         bd:fa:d6:8e:a1:4f:ab:70:88:b1:56:5a:3c:75:59:78:5a:68:
         a6:e1:fb:d3:d5:8b:fd:ed:7f:37:24:03:4f:b5:4a:d3:b1:8f:
         71:ce:fa:4e:05:96:c9:17:9f:1b:35:1a:e7:af:ec:db:e7:6f:
         04:44:de:43:0b:ab:5d:c5:39:0b:cf:a5:2c:ba:41:f9:1e:5f:
         6f:97:3e:ac:0d:b8:cf:c3:4d:30:a6:79:64:ad:0d:90:6a:92:
         d5:79:8a:9b:81:17:3e:fa:a1:76:ad:52:85:d2:ee:c7:06:32:
         c2:3b:1a:03:52:ed:2c:06:7a:63:9c:bb:e9:02:93:b2:07:85:
         0c:be:7b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:43:25 2026 by rpki-client