Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft
File:                     uRM0fmudd6kbsHSCrkXNdBFrAi0.mft (raw, json)
Hash identifier:          DqaqmdDaKlSmxJudl9Xm2l7prlkhBZERGaLoanlbNr0=
Subject key identifier:   76:86:3E:ED:D9:E8:35:99:19:D0:B2:46:E3:AD:70:7D:9C:47:81:22
Authority key identifier: B9:13:34:7E:6B:9D:77:A9:1B:B0:74:82:AE:45:CD:74:11:6B:02:2D
Certificate issuer:       /CN=A919FBF3/serialNumber=B913347E6B9D77A91BB07482AE45CD74116B022D
Certificate serial:       43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRM0fmudd6kbsHSCrkXNdBFrAi0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft
Manifest number:          3F
Signing time:             Sun 05 Apr 2026 07:49:24 +0000
Manifest this update:     Sun 05 Apr 2026 07:49:24 +0000
Manifest next update:     Sun 12 Apr 2026 07:49:24 +0000
Files and hashes:         1: uRM0fmudd6kbsHSCrkXNdBFrAi0.crl (hash: S0EjDmog3Y3uygCCxqlfTzOg/evRCnVO48Qhb7b2vxs=)
                          2: 8F11CB5CDF1511F0B37EABD4606F56BC.roa (hash: a7XG21OzlLkH67XaDgIrUzNocp3sS2ISxq1DVxvGiPI=)
                          3: 8F8FBABCDF1511F0B37EABD4606F56BC.roa (hash: PwN2gSK20w/Pz7qRbG5vVVSpGtOH+yYiveWXPy/+Clg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.crl
                          rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRM0fmudd6kbsHSCrkXNdBFrAi0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:49:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FBF3, serialNumber=B913347E6B9D77A91BB07482AE45CD74116B022D
        Validity
            Not Before: Apr  5 07:49:24 2026 GMT
            Not After : Apr 12 07:49:24 2026 GMT
        Subject: CN=69d21404-4e33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:af:02:3b:3b:18:6d:4c:ed:b9:a9:f7:c5:80:
                    62:3c:da:7d:7f:e2:c9:5a:06:bc:e4:04:55:60:43:
                    9a:05:22:0b:83:2c:94:e8:a9:02:4f:ab:1f:c5:f5:
                    4c:22:9a:9b:9c:e3:84:ba:09:19:ca:5f:ca:38:a7:
                    e1:5f:85:d6:bc:09:9c:1c:65:18:e5:2f:e5:29:02:
                    0b:c0:6b:e0:09:95:27:0a:ef:be:f8:ef:4a:c6:67:
                    ea:26:f6:90:f0:35:a5:dd:53:d8:67:aa:92:a7:10:
                    04:95:f4:31:90:b0:3c:cb:f9:e2:88:87:6b:b7:98:
                    04:41:fb:bb:d0:90:82:fe:d8:84:1c:d8:86:74:33:
                    3b:35:71:02:f6:5e:8a:3b:2f:f9:68:4a:0d:2d:24:
                    03:a5:28:15:b9:e9:e3:e0:31:d8:5d:53:61:4e:da:
                    d5:99:53:6e:db:94:a4:ef:24:7f:91:6b:e3:a1:da:
                    dc:40:1a:f2:53:55:d8:69:91:dd:1e:c2:8a:e8:55:
                    78:c6:c2:bd:7e:e2:34:30:ed:16:cf:e4:20:2f:4d:
                    1b:90:50:65:65:a5:38:9e:70:ab:63:b4:07:31:04:
                    44:c8:4b:e5:49:52:3a:4e:b4:af:6e:1b:c9:d0:4d:
                    f1:a1:e3:7e:26:e5:e0:39:d0:41:49:53:29:f9:cb:
                    4b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:86:3E:ED:D9:E8:35:99:19:D0:B2:46:E3:AD:70:7D:9C:47:81:22
            X509v3 Authority Key Identifier:
                keyid:B9:13:34:7E:6B:9D:77:A9:1B:B0:74:82:AE:45:CD:74:11:6B:02:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRM0fmudd6kbsHSCrkXNdBFrAi0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:f1:51:88:e4:f2:9a:da:c0:eb:50:00:6f:e5:03:fb:31:94:
         aa:db:42:5c:94:20:3d:2c:4b:d7:cf:e6:ec:85:56:3c:bc:0f:
         f6:3d:d4:e3:e0:ce:f6:a0:f9:bd:03:89:b5:de:ea:50:24:e7:
         a2:5d:77:14:45:fc:76:83:25:bb:12:5c:72:e0:cb:66:c1:48:
         3b:84:60:97:16:0e:9d:31:23:4a:b9:5c:60:41:3f:d4:02:b3:
         3c:d0:62:9d:e7:ce:de:bc:b3:6e:8d:81:f3:b5:fe:51:79:76:
         b8:83:1e:bb:d6:36:ef:95:a5:e9:39:15:0d:75:bc:c5:db:81:
         88:64:16:86:60:5c:f5:b9:54:97:3e:69:89:d2:13:81:8d:72:
         58:29:c9:fc:64:24:37:3c:c0:52:4b:3a:5a:e4:15:b3:0f:42:
         2c:b8:87:9e:1e:35:4e:3a:22:e6:cf:74:f8:15:ee:75:30:9e:
         31:7a:0e:4a:05:ac:03:f7:bc:f5:ee:fc:e2:ee:99:6e:73:9f:
         7b:ad:d4:93:1e:9e:96:78:95:94:8d:69:39:d3:64:85:77:67:
         04:ac:dc:4f:41:d2:04:a9:af:7d:35:99:5a:97:7e:50:6f:03:
         2c:75:27:97:8a:42:d6:b0:3d:73:8e:8c:6e:bc:ba:0b:2d:56:
         31:cf:bb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 21:10:25 2026 by rpki-client