Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          TdGvWLboNQAc/EP8I+I6hcVxf6AuoMtGGdezdYiOvsU=
Subject key identifier:   74:4C:21:48:2C:D0:40:2F:8A:9E:93:C5:13:80:8C:9E:8D:C4:9D:FC
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       05B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          04C2
Signing time:             Mon 27 Jul 2026 01:40:03 +0000
Manifest this update:     Mon 27 Jul 2026 01:40:03 +0000
Manifest next update:     Mon 03 Aug 2026 01:40:03 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: h24KudZOiobm6z/WSxPMOJ4YoBpyti6Cqo7vU31IkWk=)
                          2: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: GfVyeK1u4sYQdScjmEZa/TgSrlbpkVV/b2NL/9s4N4g=)
                          3: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: W828W0l0bTgnpTlS9/sHF0lVKlK0jtphre/w8R0LrXg=)
                          4: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: 6mq5bZQGJ64qqRG9rU+13rtax05sI2Ele52oI5PPSIM=)
                          5: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: 6BPjWf3PRrYbjxHXmcTYFTcq9mEbXJz5EDwd+WrDRUk=)
                          6: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: Xv/wQAgGQuRKdOuR7b3JljTxpd1z5U1GoeLFF2m7jXc=)
                          7: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: FoSzwvvgDPOGghYrGRoNT/3F/hsXOUjc7S8nBc84FDI=)
                          8: 39D293CC61A311F184335DAE8747A888.roa (hash: jedw50TUWq7AyJ3VTKcKZQQqP8Wlj4F5zK+M/tpfaYU=)
                          9: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: jKcbK4IEw6IX5DBWAj2PfbXbqhFpVe65Ce73aszMZHQ=)
                          10: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: 92wRIZw680AyP/v/OZd/w9DgRsgSI6ONdeqJ58u9NjE=)
                          11: 48421E1E61A311F1AD9134E08747A888.roa (hash: 0L5T+62/+LuV8AB9j6gcu/g9GsKvWn9orUiZH54FdP4=)
                          12: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: oFCRKJ2F0EfbbPkmQz5K49dGmf/1cMbEIIfSRomsCOA=)
                          13: D3A8EA649F0911EE98065E23C4F9AE02.roa (hash: vmvv3bajE/r0eTCiEw69x6M9NsL+S+IX+coP+B6z88E=)
                          14: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: g3/xtOL31AkLVTBnIUdXCHbVSuqpwrEw296Y7D5oHRk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 01:40:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1463 (0x5b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Jul 27 01:40:03 2026 GMT
            Not After : Aug  3 01:40:03 2026 GMT
        Subject: CN=6a66b6f3-5f2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:66:43:9c:57:96:3c:7e:ec:67:a4:96:02:a1:
                    8c:b3:9b:16:f0:cd:79:47:15:0c:60:da:63:54:93:
                    e2:58:4f:01:74:ac:31:30:a1:68:7a:94:6c:8f:79:
                    37:57:91:c5:70:57:a8:05:d3:30:e7:33:8b:e9:4b:
                    1c:c7:c3:17:ac:5f:a7:c3:c3:1f:5f:37:1b:bb:ed:
                    74:4f:7b:aa:12:a5:2f:a5:5d:39:bf:3d:a2:75:6e:
                    2c:b9:c8:c0:24:65:e9:8a:05:81:c8:a9:fa:e6:c4:
                    f7:78:5d:76:d5:55:5c:6e:ed:5a:3c:93:22:ef:3b:
                    68:dc:bd:c9:1e:47:d3:dc:96:66:3e:24:df:ab:cc:
                    b9:0e:1e:65:a6:e0:83:3e:4a:ce:4f:48:d8:a0:dc:
                    76:70:ec:ab:6a:b5:09:98:a8:7e:43:1d:01:69:4c:
                    94:55:78:ab:e0:cc:c0:95:19:3c:45:5a:06:20:7a:
                    5e:42:01:b5:37:97:8e:27:b6:c5:5c:dc:c9:b4:a3:
                    da:0d:d5:4a:11:34:95:91:d6:bc:60:ac:4d:a1:ee:
                    e9:6d:92:35:9b:f8:24:8d:23:79:74:fc:d9:bf:88:
                    da:e1:b1:03:4b:9e:22:7a:11:5f:ba:99:32:b9:2e:
                    8f:0f:7b:75:b2:54:97:a3:72:7e:ae:b3:58:be:f8:
                    bc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:4C:21:48:2C:D0:40:2F:8A:9E:93:C5:13:80:8C:9E:8D:C4:9D:FC
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:1c:9a:32:3a:d7:7e:6d:b5:ac:ff:bd:9e:92:a5:5b:4d:72:
         55:76:c0:5b:74:b5:50:e1:ef:88:c3:52:f3:a1:c7:75:41:cc:
         a6:fc:f5:df:e0:e8:25:ef:d4:0f:0e:43:d8:09:8a:cc:df:08:
         d9:8a:4b:e7:04:ea:15:a2:fe:80:2e:ff:96:19:8b:7f:00:b4:
         89:6c:4c:dd:23:f2:ba:14:81:03:a5:86:4b:e7:a2:fb:2b:92:
         a6:c9:f5:94:f4:db:8b:c1:bc:e9:8d:a1:19:30:89:0f:28:53:
         53:b3:d9:ae:4b:22:37:53:b6:fb:21:1d:4f:43:2f:40:db:9f:
         79:26:12:a2:16:f6:a2:72:14:13:17:73:e9:13:57:a7:39:c8:
         85:ac:b5:4c:f3:ea:0c:c0:c7:8e:1e:cc:6a:9d:81:83:46:42:
         5d:83:08:e7:53:da:38:1b:90:81:40:fe:79:70:76:d5:a8:d2:
         a1:7e:9d:32:34:46:ab:5f:79:ed:da:cc:47:d3:65:41:21:e7:
         44:98:32:47:4f:0b:a5:5c:5a:74:f7:d1:94:7a:94:14:fa:6e:
         31:4f:a6:d3:5c:c1:5c:37:00:4b:e0:dc:c6:45:a0:c3:39:88:
         e6:58:3e:f5:9b:0f:a5:30:fb:c9:fa:0f:cb:00:67:95:da:0e:
         17:45:77:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:53:46 2026 by rpki-client