Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft
File:                     uRM0fmudd6kbsHSCrkXNdBFrAi0.mft (raw, json)
Hash identifier:          cRA7kmXxL4uzZ7jGlNDudE6flkhZ1ycw7AjsuuveGFU=
Subject key identifier:   1C:7B:60:04:AF:65:BA:8A:D3:A6:1C:73:69:08:A9:2D:2D:E1:83:9C
Authority key identifier: B9:13:34:7E:6B:9D:77:A9:1B:B0:74:82:AE:45:CD:74:11:6B:02:2D
Certificate issuer:       /CN=A919FBF3/serialNumber=B913347E6B9D77A91BB07482AE45CD74116B022D
Certificate serial:       A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRM0fmudd6kbsHSCrkXNdBFrAi0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft
Manifest number:          A0
Signing time:             Thu 01 Oct 2026 08:46:18 +0000
Manifest this update:     Thu 01 Oct 2026 08:46:17 +0000
Manifest next update:     Thu 08 Oct 2026 08:46:17 +0000
Files and hashes:         1: uRM0fmudd6kbsHSCrkXNdBFrAi0.crl (hash: UatVwS4BAV5JWXRHwGrci0fz8ee/ELRKyY0wBXgodJo=)
                          2: 670B99448DD911F1843D5C1C5311F970.roa (hash: 7mgCpKMqeBXQIoSnmIOvCGihzUbiwKzPjz5fyITalUE=)
                          3: BDCEEAE6843411F183C1FD4067A30FBC.roa (hash: UPATNGlHXmJqHIJuyFnrs3+A/CO0YHg7jQZSNo968UQ=)
                          4: Z4VeneWvltMtLHLJ13_egEXCJEk.asa (hash: 7ccgK2Od6MtvcE1QijoYRN1HpuNFv5U+MM2vchx3PVE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.crl
                          rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRM0fmudd6kbsHSCrkXNdBFrAi0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Oct 2026 08:46:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FBF3, serialNumber=B913347E6B9D77A91BB07482AE45CD74116B022D
        Validity
            Not Before: Oct  1 08:46:17 2026 GMT
            Not After : Oct  8 08:46:17 2026 GMT
        Subject: CN=6abe1dda-6220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2e:af:fe:1e:38:18:80:aa:8e:af:97:e8:69:
                    54:af:08:c7:8d:27:a5:13:92:7b:99:27:02:a5:de:
                    74:8d:dc:17:a6:a4:4b:37:91:ce:e0:b5:c1:73:87:
                    c2:2f:7a:38:3d:c0:82:48:07:17:6f:fc:53:5b:f4:
                    55:b9:40:80:14:45:d6:f3:ec:d1:c2:8f:92:6e:2e:
                    1e:11:74:0c:13:50:1e:78:2c:a9:f7:db:67:2a:0c:
                    72:ea:60:c4:5d:ef:4f:3d:40:11:db:54:b9:35:0f:
                    e5:5b:8b:06:3a:dc:ec:3d:3d:b5:c3:33:ab:77:22:
                    d5:81:92:89:2f:26:5b:57:23:3e:c0:ea:de:9a:16:
                    1f:c9:73:0c:cb:6c:28:cb:58:39:e4:0c:7a:6e:e7:
                    87:94:6f:ab:79:30:18:79:ba:6f:c9:94:11:af:d8:
                    35:e5:bd:fa:b3:1b:02:f1:1a:c4:00:28:0e:2a:49:
                    e0:34:0e:7b:62:11:22:29:0b:08:0a:88:ca:cf:f9:
                    fe:a2:02:4d:1e:87:f8:5d:fe:f6:be:91:75:a7:eb:
                    11:80:b1:66:fb:79:5c:b4:6a:2b:bc:61:bf:90:06:
                    1d:e8:ff:06:c2:62:1a:d9:11:d4:5c:50:50:1f:bf:
                    55:47:c9:d7:2d:2c:a4:4c:20:9e:50:ea:9f:d6:59:
                    cb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:7B:60:04:AF:65:BA:8A:D3:A6:1C:73:69:08:A9:2D:2D:E1:83:9C
            X509v3 Authority Key Identifier:
                keyid:B9:13:34:7E:6B:9D:77:A9:1B:B0:74:82:AE:45:CD:74:11:6B:02:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRM0fmudd6kbsHSCrkXNdBFrAi0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:dd:f9:f2:ae:36:64:61:12:7d:a8:2d:99:e5:f1:ae:89:ae:
         d5:42:b3:27:09:82:f3:89:2b:88:8d:e6:0b:45:23:f1:9e:0c:
         c7:7c:16:6f:a1:58:59:5f:57:91:67:17:23:95:13:76:83:96:
         0d:6a:77:bd:f8:1d:9a:22:37:36:12:72:7f:1b:3c:6b:06:b8:
         a1:03:d3:ce:b2:e9:9f:ca:14:89:63:c3:87:a5:2b:f7:fa:d9:
         bf:00:99:d8:09:81:34:10:38:db:79:1a:1c:f0:b2:9a:80:15:
         0e:56:cc:02:7b:1a:34:ef:86:47:fa:b3:31:32:ea:9b:a4:8e:
         22:51:7e:86:f9:ae:4f:31:8e:37:58:ed:09:80:fd:98:d9:bb:
         85:d6:dd:2f:6d:2c:2f:53:eb:4f:9c:b4:d3:80:63:d7:d2:7f:
         7b:eb:2c:ae:79:30:b7:96:7f:66:b5:7a:de:5b:a0:30:7e:be:
         99:ab:32:11:8f:24:79:28:77:89:76:24:43:53:7a:04:90:f1:
         7f:63:53:9a:3e:fb:60:53:e8:f5:da:d6:be:30:3e:5a:4f:56:
         e6:af:81:75:81:54:87:72:c6:67:ad:75:d4:98:95:69:27:fb:
         2b:3d:37:76:a1:3f:2c:04:ff:e6:15:fa:a8:f0:7f:86:d0:51:
         42:cc:ae:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 13:25:41 2026 by rpki-client