Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          dj7WqiXtq21qScxpVhWBvFltHxkWF2zYtXbTaXeuuEw=
Subject key identifier:   3F:6B:C7:52:C3:0B:D7:3A:82:72:30:D8:30:54:C1:F3:6B:EB:F2:53
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       04CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          0400
Signing time:             Sat 23 Aug 2025 01:24:48 +0000
Manifest this update:     Sat 23 Aug 2025 01:24:48 +0000
Manifest next update:     Sat 30 Aug 2025 01:24:48 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: h5Kk2/u9K00wGWi9ytbpiBA0G2bDVH1JEi/u1x/CG6c=)
                          2: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: pE0TeYdIKCgc/QwPZRV1/6gtn2PDxZWuZWypXfqUCBk=)
                          3: FC458FFABD2F11EFACAEDF48C4F9AE02.roa (hash: zB6o1ufSPR15qZaXVJkiDWkGqSq/IwuqWXWe0bUcf1Y=)
                          4: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: 3+hYQrTmF+e7jJciHHC9Syz1XLKiAuOCDuMHFEIoOO8=)
                          5: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: yoHxToNdVsEl2/mlXGoTSTZxsnICbltZ8OX7V22JdbQ=)
                          6: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: xMiHMYItwXrD425Qd67NbjvjX4HrJ3EnpnA8c/QF/4k=)
                          7: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: SilbnDSMyvFBaNxXZnHVsn7YIdcJKbT+9vzuxU+MumM=)
                          8: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: A8LP0mnaTBBKppNqPSMaDhPFCk6GGBkjSaBDc8dCjBI=)
                          9: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: GEOmMPHt+G2/MbW4UDY6/tPaY4MdJDx+hT+IJOD6OI0=)
                          10: B97703967D5211F0A441E970C4F9AE02.roa (hash: GaALGIK/a9p5lApP+qC0JDNjMvW/jhDMhJJ0jOA0Itw=)
                          11: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: 9J2iOFdXW0WTaVQoSkjTpRubYQV1uYwslH5WX54SWS8=)
                          12: B6E083D46E2F11EEB9C12A34C4F9AE02.roa (hash: cEUErhxJhRs9Ayd1OjEDxa3aUEaS/H1Cn1wGLQy/Hdo=)
                          13: A8B7D7567D5211F09C93DD70C4F9AE02.roa (hash: FbjN4dnguZO3w4higjYMr5q5ehUNU/NaKQb8NUscA34=)
                          14: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: OKC561ca7ASLfOkgXrHgKbplp4PP/4v4yOXE3sio9JA=)
                          15: DD12F48AEC2611EF94F85F09C4F9AE02.roa (hash: 5x3hwbD6OKSIDNRFPjnTH18AkwSHTg00pMz0FKOos+E=)
                          16: D3A8EA649F0911EE98065E23C4F9AE02.roa (hash: R2/WUKzxoHuFFd/QsgqeEUvYq+HCK78+7w9Z8fUIsWc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 01:24:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1227 (0x4cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Aug 23 01:24:48 2025 GMT
            Not After : Aug 30 01:24:48 2025 GMT
        Subject: CN=68a91860-2627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2c:28:b9:cd:62:d1:68:89:13:c0:06:a3:a9:
                    fe:7a:de:9f:4d:5e:14:c3:8e:cb:21:7b:98:df:34:
                    5e:74:af:6f:f6:e7:12:55:6a:f7:64:ea:fd:55:de:
                    a1:97:f3:57:56:a9:8b:a4:32:73:72:d0:3f:f0:dc:
                    f5:91:db:26:54:7a:33:e3:50:07:67:14:90:67:2a:
                    21:35:dc:78:f9:63:74:e1:5b:fc:a4:b8:83:c3:0b:
                    a5:a1:aa:54:02:28:38:59:26:96:fc:2c:53:47:e2:
                    3a:a0:db:9e:e3:ad:73:35:0d:7b:ff:ee:cc:14:1b:
                    7c:28:67:6e:08:1f:2f:96:4d:c9:d6:87:5e:ac:1c:
                    a8:10:ac:f3:49:9f:e4:fb:37:88:d3:31:d9:07:4e:
                    ff:30:59:b8:ed:8a:5e:92:cd:c1:a0:4f:3a:77:77:
                    0c:80:62:57:13:79:61:88:77:45:60:18:16:fb:0f:
                    27:a4:11:a7:cf:4a:ed:ca:a3:8c:b3:b9:e1:bd:de:
                    3b:b4:b5:7c:ec:3c:f0:59:ec:a3:81:cb:4c:f4:fe:
                    1f:60:af:c2:4b:8b:28:bd:eb:4f:ce:b3:ae:93:5d:
                    9c:dd:63:80:87:e5:02:30:99:7d:58:70:af:7f:0f:
                    81:44:4c:e2:ae:e1:a2:94:62:e4:60:73:c6:88:89:
                    5b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:6B:C7:52:C3:0B:D7:3A:82:72:30:D8:30:54:C1:F3:6B:EB:F2:53
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:23:7d:eb:fa:35:c8:f8:f9:79:bc:ee:67:dc:aa:db:9e:6d:
         36:08:41:1c:8c:3c:12:de:fe:9a:0e:9e:0c:70:7a:b3:01:82:
         d6:2a:b0:3f:1a:40:03:d9:8f:5f:fa:df:a8:07:50:dd:ed:0c:
         c1:6b:4a:cc:53:70:09:d4:d6:01:64:15:d5:63:74:2c:32:63:
         81:fa:63:a0:64:59:83:69:b0:87:eb:67:8f:07:ef:6f:b6:82:
         b4:6a:ed:db:be:f9:fb:0c:fa:0b:95:e6:64:ba:4e:6b:00:de:
         ce:2d:68:14:7d:f2:e2:aa:20:dd:5a:59:dd:c6:a7:eb:7b:23:
         56:c7:62:47:67:cc:72:f8:e6:5b:79:9a:0b:ab:c4:99:6e:5d:
         3c:e1:08:a6:53:b8:48:ac:90:d0:fb:5f:99:49:05:7f:ab:d2:
         22:8a:99:dd:d8:3e:b0:47:c8:38:4d:38:c8:73:60:a0:68:6f:
         24:1d:ed:c4:bb:4c:6a:4b:60:5d:29:bf:fc:d1:08:1d:53:4e:
         ee:cc:07:d0:a3:02:3c:67:c9:51:09:64:57:fa:b7:e0:af:6c:
         3e:96:25:9d:7b:e2:9b:e0:f9:c1:5a:af:14:87:54:b9:2c:15:
         c8:a0:71:a4:46:cc:94:1f:60:32:fd:db:fb:d9:6c:6b:ab:89:
         13:bc:cf:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:16 2025 by rpki-client