Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          dbMfuJG5usKfRYd8zAy7iqGs36n1kgYQRXxSg7dCxns=
Subject key identifier:   BF:ED:43:06:BD:F2:C6:A2:9B:A6:37:53:58:0E:92:8E:05:11:27:33
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       05D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          04DD
Signing time:             Wed 09 Sep 2026 00:31:35 +0000
Manifest this update:     Wed 09 Sep 2026 00:31:35 +0000
Manifest next update:     Wed 16 Sep 2026 00:31:35 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: 3ajvrhRB0nEGOP/MLbyaeloHdYXCFQFKDEKGCOPOp78=)
                          2: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: g3/xtOL31AkLVTBnIUdXCHbVSuqpwrEw296Y7D5oHRk=)
                          3: 14671BD890A311F19EA46D796F11F970.roa (hash: LRK4uCWmqWpWw3Xm3dXQgxGRrJCrM0VZNsAVYzL7FS4=)
                          4: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: 6mq5bZQGJ64qqRG9rU+13rtax05sI2Ele52oI5PPSIM=)
                          5: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: 6BPjWf3PRrYbjxHXmcTYFTcq9mEbXJz5EDwd+WrDRUk=)
                          6: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: 92wRIZw680AyP/v/OZd/w9DgRsgSI6ONdeqJ58u9NjE=)
                          7: 39D293CC61A311F184335DAE8747A888.roa (hash: jedw50TUWq7AyJ3VTKcKZQQqP8Wlj4F5zK+M/tpfaYU=)
                          8: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: W828W0l0bTgnpTlS9/sHF0lVKlK0jtphre/w8R0LrXg=)
                          9: 48421E1E61A311F1AD9134E08747A888.roa (hash: 0L5T+62/+LuV8AB9j6gcu/g9GsKvWn9orUiZH54FdP4=)
                          10: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: FoSzwvvgDPOGghYrGRoNT/3F/hsXOUjc7S8nBc84FDI=)
                          11: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: jKcbK4IEw6IX5DBWAj2PfbXbqhFpVe65Ce73aszMZHQ=)
                          12: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: GfVyeK1u4sYQdScjmEZa/TgSrlbpkVV/b2NL/9s4N4g=)
                          13: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: oFCRKJ2F0EfbbPkmQz5K49dGmf/1cMbEIIfSRomsCOA=)
                          14: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: Xv/wQAgGQuRKdOuR7b3JljTxpd1z5U1GoeLFF2m7jXc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Sep 2026 00:31:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1492 (0x5d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Sep  9 00:31:35 2026 GMT
            Not After : Sep 16 00:31:35 2026 GMT
        Subject: CN=6aa0a8e7-7f8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fd:1b:5f:ef:02:f1:9d:28:5b:c2:95:cf:b0:
                    58:18:14:ba:95:9c:ed:2c:59:a4:ef:78:68:c9:da:
                    9e:d2:3d:d6:08:28:8b:b7:c1:2b:7b:6d:a3:71:a3:
                    50:80:1d:99:61:ed:13:7c:4b:73:68:0a:83:ce:28:
                    41:f9:7c:42:e9:36:6e:db:1b:f0:c1:9f:e7:2c:ec:
                    57:77:11:41:49:eb:3d:45:a7:5e:59:b5:93:9d:d0:
                    f1:69:8d:e9:6e:3f:e2:d7:76:46:b7:20:3e:f1:bf:
                    53:5d:bc:24:b7:a3:9a:04:69:c0:5d:6b:29:65:98:
                    9c:83:d3:12:14:2e:91:49:d2:06:ff:f3:ac:ce:67:
                    06:97:69:77:ef:01:11:82:0a:8b:0c:50:ac:11:81:
                    ef:f1:8a:68:5d:9b:ae:0f:8a:b0:2f:05:49:7d:09:
                    bb:83:5a:9c:ed:c7:12:47:14:c9:ed:9c:a3:a4:2a:
                    79:e8:f1:3d:b7:5f:f5:a3:4f:68:58:ca:11:74:2d:
                    8d:21:ee:bc:b2:59:46:ca:07:ef:73:16:28:02:f7:
                    f3:4d:5f:b6:b0:9f:0f:d6:13:a5:c3:92:73:50:b3:
                    20:67:0a:93:a9:be:a6:26:a7:1c:c8:b2:c5:f5:94:
                    18:63:a6:bf:70:25:77:39:99:5e:06:58:f2:04:ae:
                    8a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:ED:43:06:BD:F2:C6:A2:9B:A6:37:53:58:0E:92:8E:05:11:27:33
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:8e:ef:65:5a:46:c1:5d:6f:e2:e1:59:6b:17:99:f0:5f:fe:
         4a:e9:96:4b:2b:e6:71:de:03:42:8c:eb:49:15:2d:bc:c8:2c:
         f0:ba:be:d8:05:26:c2:8a:08:fe:58:b6:be:3c:5a:da:ec:19:
         b2:2a:8c:53:98:f6:96:7a:26:d1:57:5e:7b:63:a2:90:98:cd:
         18:3a:be:82:0c:23:a8:f8:db:e0:b7:ac:69:1d:17:7b:05:91:
         17:7a:fc:f0:fe:8a:96:44:74:ce:92:7f:12:86:f2:a1:cb:b0:
         c1:fb:28:b8:5a:b0:3f:0f:f3:c0:f4:12:80:a0:78:83:a4:a7:
         d1:31:40:e4:6f:49:9b:89:85:bd:a6:2c:bd:70:0f:d0:07:00:
         99:ae:84:b5:06:5f:b4:9a:dc:1e:2e:1d:06:38:de:20:75:85:
         bb:09:27:c5:80:27:e4:02:43:68:35:e3:44:18:d8:b2:3c:2d:
         24:0f:26:7b:9b:d5:cd:ed:83:6d:07:51:d2:f3:62:33:53:87:
         99:cb:3f:68:42:a2:ca:78:ff:3d:a2:7d:56:4e:88:eb:03:27:
         58:af:8c:23:a1:81:cb:78:a3:f5:ac:5c:71:61:b1:fb:d1:e6:
         a4:23:5f:c1:de:55:1c:bd:75:81:c6:88:c5:36:fd:af:c2:17:
         e2:1a:94:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 19:31:27 2026 by rpki-client