Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          j/YRjV1kw9ZSTGvfsCNLslBAM2rFnURHiMH3cswPN/o=
Subject key identifier:   5D:30:D4:1F:F8:94:05:45:07:32:D1:FE:ED:A0:13:C7:3B:BD:93:E7
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       05CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          04D4
Signing time:             Sun 23 Aug 2026 00:12:51 +0000
Manifest this update:     Sun 23 Aug 2026 00:12:50 +0000
Manifest next update:     Sun 30 Aug 2026 00:12:50 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: jpiu6vH2W2k9AqgsdUwdxHhJQereeKV4V5kB9angrQs=)
                          2: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: 6mq5bZQGJ64qqRG9rU+13rtax05sI2Ele52oI5PPSIM=)
                          3: 14671BD890A311F19EA46D796F11F970.roa (hash: LRK4uCWmqWpWw3Xm3dXQgxGRrJCrM0VZNsAVYzL7FS4=)
                          4: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: W828W0l0bTgnpTlS9/sHF0lVKlK0jtphre/w8R0LrXg=)
                          5: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: jKcbK4IEw6IX5DBWAj2PfbXbqhFpVe65Ce73aszMZHQ=)
                          6: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: Xv/wQAgGQuRKdOuR7b3JljTxpd1z5U1GoeLFF2m7jXc=)
                          7: 39D293CC61A311F184335DAE8747A888.roa (hash: jedw50TUWq7AyJ3VTKcKZQQqP8Wlj4F5zK+M/tpfaYU=)
                          8: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: 92wRIZw680AyP/v/OZd/w9DgRsgSI6ONdeqJ58u9NjE=)
                          9: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: oFCRKJ2F0EfbbPkmQz5K49dGmf/1cMbEIIfSRomsCOA=)
                          10: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: 6BPjWf3PRrYbjxHXmcTYFTcq9mEbXJz5EDwd+WrDRUk=)
                          11: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: FoSzwvvgDPOGghYrGRoNT/3F/hsXOUjc7S8nBc84FDI=)
                          12: 48421E1E61A311F1AD9134E08747A888.roa (hash: 0L5T+62/+LuV8AB9j6gcu/g9GsKvWn9orUiZH54FdP4=)
                          13: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: g3/xtOL31AkLVTBnIUdXCHbVSuqpwrEw296Y7D5oHRk=)
                          14: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: GfVyeK1u4sYQdScjmEZa/TgSrlbpkVV/b2NL/9s4N4g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1483 (0x5cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Aug 23 00:12:50 2026 GMT
            Not After : Aug 30 00:12:50 2026 GMT
        Subject: CN=6a8a3b02-c4a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ef:6d:e6:96:58:b6:30:7b:27:cb:ae:6b:6b:
                    2c:d3:97:05:3e:2a:7b:6a:fa:24:ff:bc:64:a6:f3:
                    d8:e8:f5:40:43:96:e0:ac:da:b1:50:1f:05:4c:f2:
                    b5:90:29:fe:e5:87:d7:14:ed:56:df:9d:2c:f5:c7:
                    b6:8b:b3:6f:8e:70:52:de:5c:b7:a0:a4:62:9a:50:
                    7c:3b:63:f9:db:ea:15:0b:36:d8:51:ff:99:93:2c:
                    6b:74:b9:ee:28:1f:3d:af:aa:e7:f0:a2:ad:42:5d:
                    d8:e8:d5:34:d5:93:99:80:14:e8:fc:de:16:45:04:
                    06:b8:91:8a:2c:7d:d4:fd:82:3b:74:2c:a0:b6:c7:
                    4b:99:12:6a:32:ce:3c:ea:34:51:2f:bc:fe:f5:e8:
                    36:7b:ac:76:31:5f:7c:9a:de:33:05:90:18:27:d9:
                    da:41:db:0d:76:ad:db:5f:b0:7f:5c:8e:99:d1:cf:
                    4a:07:31:7f:97:41:bd:3e:08:37:41:6e:bf:58:f2:
                    08:41:01:de:ae:0a:e2:2b:fc:f8:94:d3:48:66:d7:
                    23:26:6f:21:7a:c7:d1:cc:18:ae:7d:0c:6b:bd:fa:
                    66:cf:7e:a1:be:a2:86:7b:3f:cd:a4:51:75:33:a1:
                    ac:04:77:66:80:6f:7e:d5:b9:cf:74:38:c8:44:00:
                    d6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:30:D4:1F:F8:94:05:45:07:32:D1:FE:ED:A0:13:C7:3B:BD:93:E7
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:82:58:ba:7f:b6:e0:96:e5:07:b8:7b:3c:b6:8b:84:17:0e:
         6c:6f:67:49:c8:31:2b:5f:60:72:06:8a:4c:90:ba:7e:62:8d:
         67:f7:17:35:46:a0:e2:13:f6:e0:81:54:62:8a:2d:51:e7:8a:
         49:73:03:2d:4f:e9:fb:6f:d5:4a:f7:c1:fd:d5:3e:01:af:c5:
         56:32:ea:cc:45:dc:39:9d:d8:0c:4f:f8:b2:a9:45:79:66:b8:
         ea:03:45:77:5e:70:01:1d:67:53:b1:08:a4:29:08:13:78:f8:
         d3:5e:1d:84:fc:a2:73:b7:44:79:7a:50:46:ab:07:11:5b:be:
         ac:8d:7a:4c:82:ee:da:79:07:f8:a0:2e:ad:93:74:31:26:46:
         92:ef:4b:a2:d3:cb:60:04:7b:78:56:cc:2d:6a:34:1d:68:ea:
         99:15:3a:6e:d3:18:44:c1:fa:13:1f:b8:7a:e5:79:da:06:9d:
         bb:5f:f8:6a:68:a1:9e:19:0a:99:d7:d0:15:45:d9:cf:a3:61:
         29:b7:e1:33:07:0b:47:71:da:bc:95:09:c8:e9:ee:17:ef:f1:
         a5:cd:90:0b:d9:21:aa:0a:6f:9f:fe:cc:a9:b1:ff:98:70:96:
         f4:3f:7f:80:bf:f4:c4:5f:ac:a6:35:35:33:55:03:a8:c3:b5:
         37:5e:32:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 07:20:34 2026 by rpki-client