Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          3oIV6/dbDOPxxseV2/8BveGz4omAxhC3ua6+nL87D9U=
Subject key identifier:   47:15:C6:0D:A4:AB:28:85:16:EC:73:11:FA:CC:89:E9:01:F7:87:30
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       056C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          0487
Signing time:             Wed 15 Apr 2026 00:36:14 +0000
Manifest this update:     Wed 15 Apr 2026 00:36:13 +0000
Manifest next update:     Wed 22 Apr 2026 00:36:13 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: S/6k+AzJKzcyobfoWGTDmGpplDKAMBP3u5v/Pg6unHk=)
                          2: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: VpLsJjoOM5TQH3OZEcPzV4PLIS2G8Hn1FrYlhKbie54=)
                          3: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: kNZ9kMcIVbL2jK5YIL401eBQNsQQQ0xAhM8Sv/4h4WQ=)
                          4: D3A8EA649F0911EE98065E23C4F9AE02.roa (hash: Xpp2kFVSkuxzwBMowkkOloasdXHXgZJRNUiRPlt0tnI=)
                          5: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: vsM3lJioCOwfp3LZZpdveH83fo62+Y9urJ8LtwiCnMw=)
                          6: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: VkKyUkZvufLeqNWH4XS4MFj5LEClAP479cUeOm9p8S8=)
                          7: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: tnJ/yjknRBuc7UcBwzOHFJo2tnhzqFgevM34YS5rTmY=)
                          8: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: 3zeR3y4ThnqjrUYK2B2lRbeCm3UuFhf7qDtePwaC2RU=)
                          9: E984676EB5E611F0BCCCFA59C4F9AE02.roa (hash: RcSedgyQP0f/Mx0R7YzTVV6LUvz5MpJuolu8SeEYtAY=)
                          10: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: mwjCND/hb5mcBVM5huPhi5+mLyWxYoFCwlwxmeL4yts=)
                          11: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: WLbihB2PWZ1o++RM42EGDbLREOZKJSeaYxV3v/0bXwE=)
                          12: B6E083D46E2F11EEB9C12A34C4F9AE02.roa (hash: n7XrDdLRgIOzlZQtMfnZ1wiO99lQrB5PrhvdGG1ja78=)
                          13: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: awi/D8lHc6L4dnToUMe+Br+mJLk9zICL465IydEzQlc=)
                          14: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: /JQTTMGxpG1rEnJAGVjqQn7ENfIeEQm+h8FaXqx7IVA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 00:36:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1388 (0x56c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Apr 15 00:36:13 2026 GMT
            Not After : Apr 22 00:36:13 2026 GMT
        Subject: CN=69dedd7d-14ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0d:2a:52:c5:37:19:b8:5d:e2:00:1e:23:8b:
                    59:f9:ff:a7:11:fb:2d:09:b0:0d:05:71:27:bb:aa:
                    e0:5f:62:e8:3a:d5:08:91:f4:71:68:09:1d:67:55:
                    98:8b:c0:2d:51:86:88:49:b3:e3:42:f6:2c:5e:31:
                    06:a3:41:0a:cc:ee:ed:f6:37:ce:d4:a9:a7:db:35:
                    4d:db:ec:fb:7b:a3:d8:87:4e:93:cd:d5:a7:e8:33:
                    b0:dd:a8:cc:91:02:b8:cc:a5:f3:ea:0b:e6:da:06:
                    3c:49:87:46:7e:de:75:30:34:a2:1f:8c:7a:5f:e7:
                    14:28:d8:cb:83:f5:f6:eb:f8:5e:dd:51:94:d6:de:
                    56:28:35:8a:38:4b:3a:fc:87:76:60:95:38:1a:6c:
                    25:ea:ad:72:f6:73:8f:f1:ae:98:fa:84:b4:d8:1e:
                    ad:3f:53:4f:d3:f4:4d:95:01:1b:5b:59:b9:4b:f3:
                    30:c2:4d:1a:05:0f:0f:3a:c4:06:19:2c:20:79:94:
                    9e:c9:a6:3c:12:9c:17:26:c5:b6:2e:74:ff:4e:43:
                    21:9c:bf:bf:02:38:1b:10:5f:da:e9:e4:65:b2:6d:
                    ed:72:42:d0:48:f3:ca:3b:75:27:ab:d0:39:dd:24:
                    00:56:ac:4d:d0:5f:45:25:4d:59:5d:25:94:e5:75:
                    d9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:15:C6:0D:A4:AB:28:85:16:EC:73:11:FA:CC:89:E9:01:F7:87:30
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:98:25:e4:d8:50:d6:4f:b5:c9:23:ac:54:7a:ea:c5:1f:8e:
         9c:2a:f0:00:a4:96:54:b7:f8:fc:4e:ec:ae:fe:2d:c9:73:13:
         ea:a7:86:9f:f0:a5:a9:d6:3e:8d:0f:9e:9b:73:cc:5b:61:17:
         08:cc:56:52:5c:e6:d0:99:db:69:5d:47:f5:da:f8:99:c0:cc:
         ee:1f:6e:54:51:41:6d:41:52:b0:cf:30:41:90:5e:a3:8a:a9:
         f5:35:9d:c8:97:97:d7:82:0b:9e:7c:01:4d:07:50:89:2e:67:
         7e:2c:07:f3:9b:de:b8:ed:69:ba:b4:f2:d6:cf:b0:46:1c:26:
         72:ff:36:e4:b7:60:6c:a3:4d:cd:36:e3:22:25:cd:98:8a:c1:
         08:3a:f8:8b:25:4b:10:7c:78:ec:6f:3d:0d:f5:74:42:a6:58:
         d8:c9:28:a8:a8:3b:0e:da:d1:75:08:c2:db:38:57:b1:95:6f:
         1a:3a:42:e9:9b:a8:5e:42:b6:97:9e:1c:a9:ed:1e:f4:80:c8:
         ba:4f:65:bb:bd:b1:ff:81:ee:1d:4f:cb:77:fa:dd:f2:7c:18:
         61:7a:f6:7e:ea:ba:bf:be:4b:3b:a3:6c:09:5d:1f:22:28:01:
         16:c1:e7:63:57:3d:69:1b:24:fb:04:63:d8:22:95:9c:5d:9b:
         fb:3c:29:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 09:49:16 2026 by rpki-client