Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          Y+orAby/fDfcYKn5puB9Cbps3LofMSsMMgikZgsRv0E=
Subject key identifier:   87:17:FA:0C:5D:03:11:78:94:5B:A5:DC:8F:81:9C:E5:9C:65:C4:10
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       0595
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          04AD
Signing time:             Fri 19 Jun 2026 00:41:46 +0000
Manifest this update:     Fri 19 Jun 2026 00:41:45 +0000
Manifest next update:     Fri 26 Jun 2026 00:41:45 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: +8y9zdaryqj2FnX8ZW0XKJpl/ufYUG5dcwHwX81GhTc=)
                          2: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: VkKyUkZvufLeqNWH4XS4MFj5LEClAP479cUeOm9p8S8=)
                          3: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: VpLsJjoOM5TQH3OZEcPzV4PLIS2G8Hn1FrYlhKbie54=)
                          4: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: vsM3lJioCOwfp3LZZpdveH83fo62+Y9urJ8LtwiCnMw=)
                          5: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: /JQTTMGxpG1rEnJAGVjqQn7ENfIeEQm+h8FaXqx7IVA=)
                          6: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: kNZ9kMcIVbL2jK5YIL401eBQNsQQQ0xAhM8Sv/4h4WQ=)
                          7: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: tnJ/yjknRBuc7UcBwzOHFJo2tnhzqFgevM34YS5rTmY=)
                          8: D3A8EA649F0911EE98065E23C4F9AE02.roa (hash: Xpp2kFVSkuxzwBMowkkOloasdXHXgZJRNUiRPlt0tnI=)
                          9: 48421E1E61A311F1AD9134E08747A888.roa (hash: 3KvNugzJmOfWXWejLGn4X2zH7tN8BJMAw0UhDMUUtUI=)
                          10: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: WLbihB2PWZ1o++RM42EGDbLREOZKJSeaYxV3v/0bXwE=)
                          11: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: 3zeR3y4ThnqjrUYK2B2lRbeCm3UuFhf7qDtePwaC2RU=)
                          12: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: mwjCND/hb5mcBVM5huPhi5+mLyWxYoFCwlwxmeL4yts=)
                          13: 39D293CC61A311F184335DAE8747A888.roa (hash: UFEXheRWbldng6QGjy1RCb9qHZzLRVLyuLDbBU1e2yo=)
                          14: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: awi/D8lHc6L4dnToUMe+Br+mJLk9zICL465IydEzQlc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Jun 2026 00:41:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1429 (0x595)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Jun 19 00:41:45 2026 GMT
            Not After : Jun 26 00:41:45 2026 GMT
        Subject: CN=6a34904a-0de5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cc:3a:cb:11:70:6e:e9:d6:5a:5b:f0:aa:cf:
                    c5:c1:f6:27:c8:4d:b2:f3:b7:f3:e2:ac:dc:68:a7:
                    7d:4c:e6:8a:08:2e:1f:5b:12:ca:b6:0f:6a:6f:f0:
                    dd:5a:9a:43:73:f0:84:f5:81:0b:29:6b:60:2c:30:
                    9c:9f:b1:3f:bf:16:90:ce:7c:6e:71:68:0c:b6:c5:
                    67:a4:ab:65:db:8b:d9:38:8d:43:b2:96:6f:73:dd:
                    05:d3:a0:7c:de:24:d6:94:67:60:2d:a8:6b:94:56:
                    73:3c:07:ac:0a:74:4a:4c:ac:e2:cf:42:36:f3:6b:
                    0c:89:4d:43:f5:06:d1:f5:a2:68:88:d7:10:28:d7:
                    c7:e4:85:ec:8d:50:f0:e6:2e:15:6a:cc:8d:fd:51:
                    52:53:2c:67:55:e2:4b:31:f3:c1:d9:f2:63:f7:b6:
                    13:19:06:34:70:9e:89:87:fc:b0:b0:0b:f5:f7:1e:
                    c9:59:5c:8c:9a:8e:eb:b6:38:45:1b:de:c2:bc:fa:
                    7d:65:8b:c4:43:61:d7:71:de:e3:ea:92:1d:64:fb:
                    1a:f8:de:9d:80:7c:6f:ad:fd:a0:db:3f:e4:e4:ec:
                    3c:fd:b3:13:c0:d2:27:80:b5:d2:19:d4:d8:4b:ed:
                    7c:54:fa:3f:12:65:1d:6b:e6:b0:72:41:c5:c1:97:
                    f6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:17:FA:0C:5D:03:11:78:94:5B:A5:DC:8F:81:9C:E5:9C:65:C4:10
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:06:b5:7b:bf:cf:80:90:c8:31:3d:73:b9:9b:d3:73:c7:19:
         18:4e:9d:e4:ea:74:4c:2f:0c:fc:9e:c8:4d:1c:4e:66:ad:94:
         e6:a0:e7:16:f6:bf:cd:96:6b:3c:47:0b:8c:bb:3d:39:57:a2:
         fc:82:ef:1f:3c:fc:46:64:b8:91:22:6f:e2:b7:f8:30:98:96:
         8d:a7:bf:e8:a3:22:de:0e:23:25:f3:af:45:f0:7b:55:c6:98:
         63:aa:7f:53:f7:83:47:a3:9d:40:e3:0e:a1:b8:ea:62:17:c5:
         12:62:18:fd:1f:a6:ee:6b:58:ef:79:8b:fd:d7:03:ab:89:43:
         41:e2:4a:a2:f5:fc:51:91:4d:12:49:72:34:e6:a5:90:5c:08:
         6b:eb:9c:39:92:9b:8d:17:05:fa:fc:a8:59:14:72:69:9e:20:
         74:90:cd:4e:92:50:9a:f9:e6:23:22:35:1a:b9:9e:08:b7:58:
         29:c6:0e:e6:57:17:42:a1:93:a7:7a:75:42:b3:f6:46:db:21:
         48:49:e6:6e:fa:9b:13:15:1d:fa:90:d3:f2:50:51:10:61:c0:
         08:27:80:3b:e2:87:57:b6:10:fe:99:79:1d:e6:9b:a0:f6:f2:
         88:a5:08:67:f9:d9:65:82:69:eb:9e:5c:a4:be:4b:5f:f8:57:
         d3:1f:df:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 10:45:22 2026 by rpki-client