Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          SU+GrEyHGZvXTMIi6yNAqFf4eXRaq3yAl/Dj+2Nrigs=
Subject key identifier:   87:2A:47:0C:B4:94:FB:AC:3F:5D:AB:3A:C9:AD:79:E7:AA:05:7F:05
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       0599
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          04B1
Signing time:             Sat 27 Jun 2026 01:03:59 +0000
Manifest this update:     Sat 27 Jun 2026 01:03:58 +0000
Manifest next update:     Sat 04 Jul 2026 01:03:58 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: Sz1hdV8q7cNCJPR/4JkWzQp8X53d+LmWi5KwgtWytHs=)
                          2: 39D293CC61A311F184335DAE8747A888.roa (hash: UFEXheRWbldng6QGjy1RCb9qHZzLRVLyuLDbBU1e2yo=)
                          3: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: /JQTTMGxpG1rEnJAGVjqQn7ENfIeEQm+h8FaXqx7IVA=)
                          4: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: kNZ9kMcIVbL2jK5YIL401eBQNsQQQ0xAhM8Sv/4h4WQ=)
                          5: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: vsM3lJioCOwfp3LZZpdveH83fo62+Y9urJ8LtwiCnMw=)
                          6: D3A8EA649F0911EE98065E23C4F9AE02.roa (hash: Xpp2kFVSkuxzwBMowkkOloasdXHXgZJRNUiRPlt0tnI=)
                          7: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: WLbihB2PWZ1o++RM42EGDbLREOZKJSeaYxV3v/0bXwE=)
                          8: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: mwjCND/hb5mcBVM5huPhi5+mLyWxYoFCwlwxmeL4yts=)
                          9: 48421E1E61A311F1AD9134E08747A888.roa (hash: 3KvNugzJmOfWXWejLGn4X2zH7tN8BJMAw0UhDMUUtUI=)
                          10: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: awi/D8lHc6L4dnToUMe+Br+mJLk9zICL465IydEzQlc=)
                          11: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: 3zeR3y4ThnqjrUYK2B2lRbeCm3UuFhf7qDtePwaC2RU=)
                          12: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: VkKyUkZvufLeqNWH4XS4MFj5LEClAP479cUeOm9p8S8=)
                          13: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: tnJ/yjknRBuc7UcBwzOHFJo2tnhzqFgevM34YS5rTmY=)
                          14: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: VpLsJjoOM5TQH3OZEcPzV4PLIS2G8Hn1FrYlhKbie54=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 Jul 2026 01:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1433 (0x599)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Jun 27 01:03:58 2026 GMT
            Not After : Jul  4 01:03:58 2026 GMT
        Subject: CN=6a3f217f-b066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:11:16:ac:1a:67:02:c9:3e:79:b0:26:56:01:
                    7a:af:84:f2:d5:fa:a6:2b:e5:67:23:11:cb:ef:05:
                    cf:cb:e2:63:6e:99:a9:9b:54:ca:81:99:85:49:e7:
                    46:ba:c2:56:da:b5:c4:05:cd:c0:5e:b3:96:ae:65:
                    63:f3:f9:6c:3f:bb:33:db:e7:f3:d0:87:8e:e2:95:
                    5d:9b:b3:45:3b:15:b3:43:00:e7:2b:6c:ea:c6:17:
                    d6:bc:38:86:2e:08:b3:1f:4c:79:b6:13:69:82:c6:
                    39:f2:a7:3b:df:41:63:4f:d8:36:94:45:c8:0b:1d:
                    41:34:dc:ef:16:ff:39:cc:fe:a1:99:68:2a:e5:2f:
                    9c:fc:3e:d7:88:62:a7:7b:25:c2:60:e5:9a:c2:98:
                    5a:46:1f:c7:c0:d5:3b:0e:ea:c2:77:5b:ac:c1:d1:
                    bc:d5:7a:cb:61:23:16:ee:fb:89:07:a3:05:bb:4f:
                    3e:8b:be:9c:7e:bf:19:b0:e2:fd:c0:71:4f:19:43:
                    56:7e:e0:0f:f8:37:2f:31:52:ff:7e:b8:b5:db:ac:
                    cf:79:a6:07:20:48:23:05:63:a9:57:5a:79:fa:c5:
                    76:aa:e4:d6:5b:d7:a1:a7:df:85:ec:96:dd:fb:76:
                    9e:b7:2e:8b:df:b9:51:96:0d:41:7e:fe:f9:29:2b:
                    59:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:2A:47:0C:B4:94:FB:AC:3F:5D:AB:3A:C9:AD:79:E7:AA:05:7F:05
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:c4:80:db:df:44:c4:e9:50:b1:6c:7f:29:62:24:b7:b5:35:
         33:c7:53:dc:8c:48:9d:77:2d:c4:8a:3f:e6:ee:67:8d:a2:64:
         3d:36:b5:f5:ae:29:e2:46:d7:2c:89:4c:5a:f2:30:00:19:61:
         f5:d1:4f:1c:92:20:85:e6:17:ee:e4:18:e5:76:a9:32:2f:c9:
         65:d1:48:0a:1d:91:f1:24:36:16:2d:94:2d:9d:47:e8:45:9f:
         45:86:ae:7c:c0:7c:aa:7e:f4:a4:48:e0:3b:d6:7d:6e:0c:75:
         92:84:f4:f2:0a:31:d3:4c:e7:52:c9:d2:d1:f0:a8:24:19:1b:
         0b:3d:da:36:0e:13:c4:36:e6:f8:8c:94:32:ba:f3:f6:20:34:
         5c:c1:2b:be:b6:63:ba:f1:1e:3b:0b:5b:ed:62:52:44:e8:4c:
         8a:7c:27:07:6b:ee:4f:63:bc:5d:a2:28:ff:ac:6a:03:b9:36:
         dc:56:e3:5f:86:e7:84:ef:e9:46:47:92:55:a6:d6:d7:24:d3:
         2e:07:89:c4:e8:a8:62:93:77:5e:36:3e:db:87:48:ab:6c:de:
         59:e0:c6:11:1e:2b:cd:ab:d2:be:71:ba:0f:8a:de:37:1f:77:
         af:72:99:4a:a4:9e:aa:01:30:6c:ca:9e:fe:8b:8f:49:34:49:
         1c:6e:aa:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 23:27:37 2026 by rpki-client