Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          jJhc562z4p5/K8qCy2NHYnEK7IcL8QqiM9zyPIG9s24=
Subject key identifier:   29:C0:06:20:C9:5D:01:FF:F6:93:03:AE:FE:D1:3A:D8:8D:C1:4B:AD
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       059A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          04B2
Signing time:             Mon 29 Jun 2026 00:58:40 +0000
Manifest this update:     Mon 29 Jun 2026 00:58:40 +0000
Manifest next update:     Mon 06 Jul 2026 00:58:40 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: oz28yFRDlx5eKuVu7CGzqZ2WlYy48HkXqd6fR13aohI=)
                          2: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: kNZ9kMcIVbL2jK5YIL401eBQNsQQQ0xAhM8Sv/4h4WQ=)
                          3: 48421E1E61A311F1AD9134E08747A888.roa (hash: 3KvNugzJmOfWXWejLGn4X2zH7tN8BJMAw0UhDMUUtUI=)
                          4: D3A8EA649F0911EE98065E23C4F9AE02.roa (hash: Xpp2kFVSkuxzwBMowkkOloasdXHXgZJRNUiRPlt0tnI=)
                          5: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: tnJ/yjknRBuc7UcBwzOHFJo2tnhzqFgevM34YS5rTmY=)
                          6: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: vsM3lJioCOwfp3LZZpdveH83fo62+Y9urJ8LtwiCnMw=)
                          7: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: VkKyUkZvufLeqNWH4XS4MFj5LEClAP479cUeOm9p8S8=)
                          8: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: VpLsJjoOM5TQH3OZEcPzV4PLIS2G8Hn1FrYlhKbie54=)
                          9: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: awi/D8lHc6L4dnToUMe+Br+mJLk9zICL465IydEzQlc=)
                          10: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: WLbihB2PWZ1o++RM42EGDbLREOZKJSeaYxV3v/0bXwE=)
                          11: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: mwjCND/hb5mcBVM5huPhi5+mLyWxYoFCwlwxmeL4yts=)
                          12: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: /JQTTMGxpG1rEnJAGVjqQn7ENfIeEQm+h8FaXqx7IVA=)
                          13: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: 3zeR3y4ThnqjrUYK2B2lRbeCm3UuFhf7qDtePwaC2RU=)
                          14: 39D293CC61A311F184335DAE8747A888.roa (hash: UFEXheRWbldng6QGjy1RCb9qHZzLRVLyuLDbBU1e2yo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 Jul 2026 00:58:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1434 (0x59a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Jun 29 00:58:40 2026 GMT
            Not After : Jul  6 00:58:40 2026 GMT
        Subject: CN=6a41c340-a704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b2:88:a6:cd:03:cc:97:e5:6f:a2:46:15:08:
                    c4:1e:8d:e4:a5:0e:fa:2c:5e:58:24:47:3c:2c:28:
                    03:7d:e0:be:a3:6f:28:cd:9d:28:50:74:4c:20:f9:
                    28:f2:c7:e4:c9:71:4a:38:b2:cb:7e:b3:c2:ab:5a:
                    b4:ca:30:fb:7b:32:1c:13:8e:f3:ba:54:83:af:71:
                    12:64:50:8d:60:df:35:08:00:a8:92:39:9d:65:aa:
                    a4:ea:d0:aa:82:5e:c5:28:c6:45:43:59:3f:5e:88:
                    0d:46:24:2b:3c:06:cf:a2:74:9a:36:1f:09:fa:cd:
                    89:e5:9f:59:b9:79:54:d2:5f:99:9d:cb:af:cd:20:
                    4f:6b:7d:51:02:0c:3a:cf:23:80:fd:6f:e8:4d:43:
                    4e:29:6f:12:72:6c:fa:e7:5b:e2:b4:17:f7:f7:14:
                    92:66:21:1e:50:d8:3f:5c:b7:55:4e:47:3a:f5:e7:
                    3c:b0:32:62:ef:51:56:50:f1:2a:5b:02:2f:59:22:
                    3e:a8:64:c5:f1:93:c9:70:87:55:97:6f:58:b2:ec:
                    2e:10:f9:30:37:0b:b7:a1:e5:b3:87:af:e7:7c:c5:
                    b9:06:ac:8e:8e:ce:c1:0a:31:9f:fb:6b:14:96:52:
                    1b:87:29:d8:f9:6d:c2:8c:a5:65:3b:26:fc:f6:bb:
                    c3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C0:06:20:C9:5D:01:FF:F6:93:03:AE:FE:D1:3A:D8:8D:C1:4B:AD
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:f1:fd:82:13:90:a3:39:ac:6e:eb:ee:0f:8b:72:b4:34:97:
         9b:72:71:bb:9a:5d:3b:79:ae:63:05:d2:70:e7:30:fa:ba:29:
         59:2e:85:0f:93:5d:ad:8f:8b:c2:e3:54:bf:82:c6:67:62:4e:
         00:74:6e:0b:aa:e9:eb:5e:7c:f8:e5:06:32:7a:6a:b3:63:61:
         7a:d9:20:c5:76:39:22:63:8b:37:7b:4b:20:a2:6a:77:40:70:
         b6:f0:dd:d4:95:25:f5:3f:2b:bd:04:23:31:2e:41:3a:c8:0f:
         01:0c:3e:3b:f0:21:fb:68:8f:29:f8:58:ab:fa:03:49:80:04:
         0f:2c:9d:7d:5d:9d:10:ae:14:9c:5c:5e:ca:2d:64:3d:74:fe:
         12:75:0d:9f:8b:09:9d:ab:7e:2a:82:79:a6:29:ec:aa:a6:5f:
         1d:7b:ea:91:56:f5:b1:c2:69:16:15:d2:bc:0e:f7:eb:b6:a0:
         a6:b2:44:64:01:f9:30:00:c6:de:d3:90:fa:a0:d0:1e:22:a8:
         1b:32:90:db:0d:85:7f:02:b5:f6:28:e4:b4:9b:c4:94:fd:f2:
         75:bd:4f:3e:07:e7:3c:45:ab:af:c7:e4:0a:97:de:12:aa:bd:
         85:f4:df:0b:e6:74:b5:9c:9a:0b:9a:3e:25:36:31:5b:a4:f3:
         bd:8e:b7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 04:00:29 2026 by rpki-client