Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          vvkOIgZZDTyKLwoZio43uJqw0UFSompT5kZdGGvKrkU=
Subject key identifier:   DE:54:3B:E8:78:1D:A8:71:64:67:71:8B:C2:CF:51:AE:2C:F7:A9:82
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       05B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          04C3
Signing time:             Wed 29 Jul 2026 01:20:26 +0000
Manifest this update:     Wed 29 Jul 2026 01:20:25 +0000
Manifest next update:     Wed 05 Aug 2026 01:20:25 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: 9NhvQQ+khLIJRmqGMeB2NzKPbeJ4lXS8n4l3Zqlh0ok=)
                          2: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: W828W0l0bTgnpTlS9/sHF0lVKlK0jtphre/w8R0LrXg=)
                          3: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: Xv/wQAgGQuRKdOuR7b3JljTxpd1z5U1GoeLFF2m7jXc=)
                          4: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: FoSzwvvgDPOGghYrGRoNT/3F/hsXOUjc7S8nBc84FDI=)
                          5: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: 6BPjWf3PRrYbjxHXmcTYFTcq9mEbXJz5EDwd+WrDRUk=)
                          6: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: jKcbK4IEw6IX5DBWAj2PfbXbqhFpVe65Ce73aszMZHQ=)
                          7: 39D293CC61A311F184335DAE8747A888.roa (hash: jedw50TUWq7AyJ3VTKcKZQQqP8Wlj4F5zK+M/tpfaYU=)
                          8: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: oFCRKJ2F0EfbbPkmQz5K49dGmf/1cMbEIIfSRomsCOA=)
                          9: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: GfVyeK1u4sYQdScjmEZa/TgSrlbpkVV/b2NL/9s4N4g=)
                          10: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: g3/xtOL31AkLVTBnIUdXCHbVSuqpwrEw296Y7D5oHRk=)
                          11: D3A8EA649F0911EE98065E23C4F9AE02.roa (hash: vmvv3bajE/r0eTCiEw69x6M9NsL+S+IX+coP+B6z88E=)
                          12: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: 92wRIZw680AyP/v/OZd/w9DgRsgSI6ONdeqJ58u9NjE=)
                          13: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: 6mq5bZQGJ64qqRG9rU+13rtax05sI2Ele52oI5PPSIM=)
                          14: 48421E1E61A311F1AD9134E08747A888.roa (hash: 0L5T+62/+LuV8AB9j6gcu/g9GsKvWn9orUiZH54FdP4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 01:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1464 (0x5b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Jul 29 01:20:25 2026 GMT
            Not After : Aug  5 01:20:25 2026 GMT
        Subject: CN=6a69555a-4b63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e1:e2:5c:6d:c7:03:26:66:2f:95:79:74:3b:
                    de:b6:cd:57:62:3b:9d:7f:ce:2f:7e:bc:9e:67:ed:
                    79:cc:40:d2:6f:f7:1a:94:b6:cc:78:fc:73:56:fb:
                    2c:b6:25:8e:12:f6:dd:83:0e:1c:72:97:20:36:67:
                    3c:87:4a:3f:51:81:74:76:de:e8:66:49:dc:5e:87:
                    7d:cd:9c:80:bd:8f:1f:5b:f0:b4:ca:08:59:c2:12:
                    80:ca:39:5b:a4:e8:61:bb:86:f9:80:ba:68:71:28:
                    30:0e:fc:f5:b2:aa:d5:70:a3:d0:81:9c:be:b9:7f:
                    f1:99:4a:d6:8f:55:8d:fa:9b:c4:16:f3:11:fd:0a:
                    62:74:bc:36:67:96:67:b1:b4:e0:2c:9b:a5:ff:87:
                    3d:8c:56:83:af:8e:aa:bf:0e:96:35:35:df:23:3d:
                    c0:66:03:7f:0b:88:71:c2:24:f3:34:db:60:08:62:
                    7b:ef:d4:11:b7:c1:ec:6f:d4:60:49:6f:77:5b:96:
                    0e:92:62:31:21:d3:4f:45:90:f3:5d:a6:d0:a7:53:
                    25:35:be:75:da:b7:9d:1b:3a:07:2d:03:11:20:8d:
                    72:9d:cd:ea:2b:02:f8:88:88:8b:f6:11:c8:89:69:
                    67:88:14:de:e0:2c:3a:99:ea:8a:76:fc:35:69:3b:
                    e5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:54:3B:E8:78:1D:A8:71:64:67:71:8B:C2:CF:51:AE:2C:F7:A9:82
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:14:02:4c:b6:fc:63:0e:26:5f:ba:44:24:0b:cb:f6:49:46:
         d1:7e:5e:e6:9b:fd:20:19:dd:dd:0e:a3:6e:d5:1b:0a:aa:fc:
         de:01:cd:bb:f9:07:1c:a5:45:18:cf:51:27:1e:a6:a5:9f:9d:
         af:76:8a:2c:88:45:97:73:dc:06:94:cb:9a:09:97:59:cf:51:
         bd:01:13:3d:3f:bf:7c:34:9a:b5:c4:37:51:d0:2b:73:c0:f0:
         3c:36:b2:14:cf:4b:45:d2:d6:74:ca:42:06:87:70:03:b3:0c:
         21:f9:f1:7b:ad:05:5f:6e:b1:ff:d3:aa:f9:6a:ba:48:43:68:
         4a:59:37:da:8c:4e:95:67:c1:1d:fe:8d:cd:48:d8:17:0c:fb:
         60:ce:87:97:dd:ef:4c:cc:5d:69:41:e3:90:bd:7a:73:b1:81:
         39:49:81:29:7b:cc:6f:1d:18:18:ae:e1:98:da:ae:39:11:0b:
         35:f1:46:09:61:c2:d1:ed:0c:b9:a0:48:4c:15:89:53:b1:f3:
         81:0f:43:b9:78:47:7d:c6:18:38:e8:6c:b9:a3:3a:09:ed:31:
         27:5f:9e:fd:50:32:23:e5:3f:c4:66:5b:a8:21:1c:bb:14:20:
         74:21:f8:8e:44:4d:fd:95:54:f5:8e:32:8d:c1:9e:86:1d:af:
         70:e2:5c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 02:19:53 2026 by rpki-client