Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          BCiq01tinW9vZGrFKnr6zV0ASzXZ+DhPaJaj0LkPA6E=
Subject key identifier:   CC:8A:E5:7D:1B:F9:31:4B:B4:E5:A1:31:88:FF:A3:76:32:6B:C7:C4
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       05F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          04FD
Signing time:             Sat 07 Nov 2026 00:29:00 +0000
Manifest this update:     Sat 07 Nov 2026 00:28:59 +0000
Manifest next update:     Sat 14 Nov 2026 00:28:59 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: 3nLpIEdnNUFZFGGkr4XzXwRgQd2DZxEifNbH2ydJfew=)
                          2: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: 92wRIZw680AyP/v/OZd/w9DgRsgSI6ONdeqJ58u9NjE=)
                          3: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: 6mq5bZQGJ64qqRG9rU+13rtax05sI2Ele52oI5PPSIM=)
                          4: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: W828W0l0bTgnpTlS9/sHF0lVKlK0jtphre/w8R0LrXg=)
                          5: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: Xv/wQAgGQuRKdOuR7b3JljTxpd1z5U1GoeLFF2m7jXc=)
                          6: 14671BD890A311F19EA46D796F11F970.roa (hash: LRK4uCWmqWpWw3Xm3dXQgxGRrJCrM0VZNsAVYzL7FS4=)
                          7: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: oFCRKJ2F0EfbbPkmQz5K49dGmf/1cMbEIIfSRomsCOA=)
                          8: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: GfVyeK1u4sYQdScjmEZa/TgSrlbpkVV/b2NL/9s4N4g=)
                          9: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: jKcbK4IEw6IX5DBWAj2PfbXbqhFpVe65Ce73aszMZHQ=)
                          10: 39D293CC61A311F184335DAE8747A888.roa (hash: joZ9EADpowQvOzEFdnw3gm9oXDjZOt5p1JUDkYKz0AM=)
                          11: 48421E1E61A311F1AD9134E08747A888.roa (hash: 0L5T+62/+LuV8AB9j6gcu/g9GsKvWn9orUiZH54FdP4=)
                          12: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: FoSzwvvgDPOGghYrGRoNT/3F/hsXOUjc7S8nBc84FDI=)
                          13: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: 6BPjWf3PRrYbjxHXmcTYFTcq9mEbXJz5EDwd+WrDRUk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Nov 2026 00:28:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1525 (0x5f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Nov  7 00:28:59 2026 GMT
            Not After : Nov 14 00:28:59 2026 GMT
        Subject: CN=6aee70cc-538b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d9:4e:99:6f:75:f4:7a:16:1a:85:1c:e4:3a:
                    3b:e1:e3:ab:b4:55:b9:3d:c2:90:b7:e1:a1:2f:80:
                    35:b7:23:e7:94:bd:2a:8f:1d:54:69:ee:34:95:da:
                    aa:4b:0c:2b:b3:12:91:50:52:80:96:75:4f:48:57:
                    10:17:43:01:28:77:45:d4:f5:88:a5:69:4f:6f:07:
                    91:cb:c9:29:56:e2:88:16:62:2e:02:48:49:76:0d:
                    5f:af:e5:7b:ba:16:7a:7f:4c:52:cd:9e:ec:cf:a7:
                    76:10:b6:35:f8:e5:7a:c4:0c:25:d6:a2:8d:c3:7a:
                    b5:ea:05:1b:24:14:e3:31:08:f3:5c:4e:0a:49:6d:
                    ae:74:b8:75:6a:be:97:45:6c:15:a7:b3:0b:a8:52:
                    e9:21:2a:d0:88:2d:27:79:2b:07:df:21:8e:5d:ca:
                    12:a1:a5:98:6d:e0:d9:55:b1:51:61:2a:81:77:5a:
                    c7:1a:da:63:65:6f:05:1e:07:04:fa:31:2a:ea:bd:
                    44:2a:3b:bc:25:dc:aa:f8:a9:79:d8:db:12:05:cb:
                    e6:ac:af:a1:63:99:8e:27:5a:b0:81:02:b0:c0:a2:
                    27:ee:9b:fc:d9:ae:9a:50:3f:e5:07:8e:01:28:60:
                    76:68:01:4d:67:ec:64:fa:2b:f8:90:8c:38:e2:ae:
                    d4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:8A:E5:7D:1B:F9:31:4B:B4:E5:A1:31:88:FF:A3:76:32:6B:C7:C4
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:ed:d2:ff:23:ab:e7:f6:16:1a:af:ac:5b:2b:92:d3:12:24:
         22:2d:63:89:0b:72:80:55:ae:b6:05:7f:42:6c:69:45:8e:e1:
         b3:d2:64:bf:6c:98:ad:80:34:2e:54:1d:cd:e7:80:13:77:d8:
         07:28:5a:eb:83:d0:02:77:18:6f:45:54:df:c8:16:c0:76:46:
         88:ea:75:ee:c2:81:98:28:b1:f7:a3:22:24:c1:70:57:80:a0:
         f6:5e:47:58:21:0e:97:5a:3e:54:34:44:ad:1c:8d:c0:dd:5f:
         6f:31:c2:af:bd:83:41:c8:1f:be:1d:11:22:b1:0f:bf:77:d3:
         dd:76:75:0a:41:1e:49:d7:53:08:6f:07:0e:6c:02:b5:44:2e:
         ba:20:e3:3d:2e:c5:ad:a8:dd:42:1d:c6:80:e5:5e:cc:f0:2e:
         f8:5a:60:0a:e3:de:79:c9:6c:fc:e2:a6:54:d1:ae:71:ff:a6:
         71:bb:4a:d6:f6:2e:cf:b0:fd:2f:93:97:07:38:bb:62:72:63:
         7b:58:b2:d5:1c:49:5c:14:e3:71:6e:73:2f:d7:41:a9:3b:40:
         fe:0b:06:a0:f7:50:9d:93:5c:ee:68:0e:7f:32:b2:19:d4:de:
         6c:08:42:41:96:d2:8b:60:07:4d:c8:2f:91:bb:33:ba:90:2b:
         65:4a:aa:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 21:45:29 2026 by rpki-client