Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          mLPwu8jyuWp7xrqGy86V7tdHZHjD1NGBT0vHMkLv8IU=
Subject key identifier:   7C:33:9F:66:4D:55:16:62:F0:93:74:9F:35:0B:62:86:2B:92:97:14
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       0561
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          047C
Signing time:             Wed 25 Mar 2026 00:27:06 +0000
Manifest this update:     Wed 25 Mar 2026 00:27:05 +0000
Manifest next update:     Wed 01 Apr 2026 00:27:05 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: nOGoU9ZywN5y6HujJzeIgT3EAUalKbnznYGkIT9/SOI=)
                          2: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: awi/D8lHc6L4dnToUMe+Br+mJLk9zICL465IydEzQlc=)
                          3: E984676EB5E611F0BCCCFA59C4F9AE02.roa (hash: RcSedgyQP0f/Mx0R7YzTVV6LUvz5MpJuolu8SeEYtAY=)
                          4: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: kNZ9kMcIVbL2jK5YIL401eBQNsQQQ0xAhM8Sv/4h4WQ=)
                          5: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: /JQTTMGxpG1rEnJAGVjqQn7ENfIeEQm+h8FaXqx7IVA=)
                          6: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: vsM3lJioCOwfp3LZZpdveH83fo62+Y9urJ8LtwiCnMw=)
                          7: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: 3zeR3y4ThnqjrUYK2B2lRbeCm3UuFhf7qDtePwaC2RU=)
                          8: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: WLbihB2PWZ1o++RM42EGDbLREOZKJSeaYxV3v/0bXwE=)
                          9: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: mwjCND/hb5mcBVM5huPhi5+mLyWxYoFCwlwxmeL4yts=)
                          10: B6E083D46E2F11EEB9C12A34C4F9AE02.roa (hash: n7XrDdLRgIOzlZQtMfnZ1wiO99lQrB5PrhvdGG1ja78=)
                          11: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: tnJ/yjknRBuc7UcBwzOHFJo2tnhzqFgevM34YS5rTmY=)
                          12: D3A8EA649F0911EE98065E23C4F9AE02.roa (hash: Xpp2kFVSkuxzwBMowkkOloasdXHXgZJRNUiRPlt0tnI=)
                          13: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: VkKyUkZvufLeqNWH4XS4MFj5LEClAP479cUeOm9p8S8=)
                          14: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: VpLsJjoOM5TQH3OZEcPzV4PLIS2G8Hn1FrYlhKbie54=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:27:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1377 (0x561)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Mar 25 00:27:05 2026 GMT
            Not After : Apr  1 00:27:05 2026 GMT
        Subject: CN=69c32bda-7454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:89:49:7a:2c:3a:b3:d4:21:86:b1:34:f8:a1:
                    8a:50:0e:c4:17:e0:ea:a6:6b:6b:1b:1d:20:fd:f9:
                    4f:70:5c:3a:e3:7e:91:c0:5f:eb:3c:1b:08:ad:6a:
                    27:02:89:85:18:19:b4:92:73:8b:64:2d:b6:0d:5e:
                    ac:24:62:d4:73:ec:9d:ed:98:fd:4a:db:5a:f8:77:
                    86:a5:90:86:ef:6b:3e:df:b1:95:75:38:22:2f:bf:
                    13:e9:ee:6c:c7:8a:3f:56:2c:04:2f:53:d7:76:ca:
                    be:66:e2:98:3c:9c:78:4e:67:bc:9b:2f:94:3d:5c:
                    bd:9a:3c:47:40:5f:74:ea:75:65:87:2c:17:03:ef:
                    7c:5e:01:41:10:6c:90:fa:9b:b1:f2:1a:3c:11:e9:
                    79:d8:a8:18:e1:00:6f:40:91:9c:54:1a:58:a9:71:
                    ed:53:03:49:73:0d:db:2d:b4:6b:2c:29:d1:ef:15:
                    33:84:51:c2:ad:de:76:3f:f5:a5:e2:e7:e7:da:b8:
                    7b:7b:3d:21:05:9d:63:aa:9a:02:77:af:7f:41:42:
                    cd:1e:91:10:25:0a:d3:23:36:f0:fa:38:93:48:6a:
                    bd:b8:e6:00:01:4d:78:8e:89:8f:a5:61:d3:ce:c0:
                    5f:d6:d6:2a:aa:98:84:bd:b2:1b:77:1b:70:49:ba:
                    fe:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:33:9F:66:4D:55:16:62:F0:93:74:9F:35:0B:62:86:2B:92:97:14
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:69:de:4f:a5:fb:4d:2f:d6:7d:4f:6c:32:4e:7f:da:8e:64:
         b6:b7:46:c0:96:35:a0:ac:33:0a:03:fd:c9:a3:b0:a0:e0:fb:
         82:8a:90:a4:08:c9:c3:c2:4b:3b:01:32:1a:8f:39:39:c8:9d:
         64:47:4d:d0:a3:30:b6:51:c0:93:98:19:98:6a:8e:8a:99:0d:
         18:9f:3f:ac:cc:40:f7:9a:2a:9a:4e:eb:47:d6:0b:bd:46:b1:
         bc:d5:f4:57:ae:ed:ca:45:cb:fd:ae:c7:e4:74:2a:ee:bc:bf:
         28:94:a1:af:d8:bb:78:47:07:2a:2b:7d:8c:8e:51:1f:e2:41:
         ca:0a:ec:57:3d:c9:f9:96:5f:b6:c2:02:3b:d6:e0:37:63:de:
         61:cf:e0:e2:61:61:87:d4:02:fe:c9:3e:06:3f:c3:14:23:98:
         c5:80:8a:ef:19:fd:32:ef:4a:b1:6c:db:3b:24:e3:e2:cd:f5:
         a1:3b:60:fa:a7:a0:09:c7:af:14:62:be:ad:35:7a:80:a5:e9:
         ec:f6:b1:5e:e3:cc:3c:97:cb:e3:ec:b5:79:de:cb:cb:e6:8c:
         1a:74:d6:f6:f8:47:5d:dc:de:0c:24:e8:d3:e4:8d:f0:6c:cd:
         b2:f3:04:3e:40:39:07:b5:b0:7f:58:97:ce:12:76:0d:54:f1:
         a2:9f:2b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:23:03 2026 by rpki-client