Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft
File:                     uRM0fmudd6kbsHSCrkXNdBFrAi0.mft (raw, json)
Hash identifier:          QJp8oK5WBJe5kIePlYTGHy3UkdFhTX1Qf74zA7z3wrc=
Subject key identifier:   35:AB:B9:5C:26:2F:C4:0B:EE:61:BE:BF:F9:17:82:62:98:69:8C:C3
Authority key identifier: B9:13:34:7E:6B:9D:77:A9:1B:B0:74:82:AE:45:CD:74:11:6B:02:2D
Certificate issuer:       /CN=A919FBF3/serialNumber=B913347E6B9D77A91BB07482AE45CD74116B022D
Certificate serial:       7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRM0fmudd6kbsHSCrkXNdBFrAi0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft
Manifest number:          79
Signing time:             Thu 23 Jul 2026 09:45:47 +0000
Manifest this update:     Thu 23 Jul 2026 09:45:46 +0000
Manifest next update:     Thu 30 Jul 2026 09:45:46 +0000
Files and hashes:         1: uRM0fmudd6kbsHSCrkXNdBFrAi0.crl (hash: owgSXNASrprIwzr9F/5zw1K1CehjEuNzaIWrv/sTwHQ=)
                          2: BDCEEAE6843411F183C1FD4067A30FBC.roa (hash: UPATNGlHXmJqHIJuyFnrs3+A/CO0YHg7jQZSNo968UQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.crl
                          rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRM0fmudd6kbsHSCrkXNdBFrAi0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:45:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FBF3, serialNumber=B913347E6B9D77A91BB07482AE45CD74116B022D
        Validity
            Not Before: Jul 23 09:45:46 2026 GMT
            Not After : Jul 30 09:45:46 2026 GMT
        Subject: CN=6a61e2cb-b76e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f6:94:d8:3b:d0:2b:ca:02:e4:e9:fa:80:a1:
                    ed:3e:b4:03:c3:35:06:f9:14:ab:03:f7:55:ca:fa:
                    49:64:37:ab:3c:8d:d4:b5:3d:d3:05:f0:94:0f:c5:
                    17:b5:c4:42:9e:8b:dc:59:10:8d:3e:b6:dd:be:1c:
                    a3:3c:ea:9b:9f:dd:8a:a0:26:f1:e5:08:c6:9b:d7:
                    84:34:10:99:c5:db:a0:e6:d1:f5:39:bd:86:92:a5:
                    6d:4f:6d:53:db:e2:e4:38:9f:68:18:5d:1d:d0:8a:
                    0b:d8:e0:ea:39:2b:aa:9c:a1:23:1f:54:d6:04:4c:
                    81:e0:90:9e:d9:14:42:c9:de:5c:c3:3d:a0:c8:ea:
                    aa:cc:f8:ef:c2:3c:75:40:e8:da:eb:62:16:f1:03:
                    7f:c8:1d:2c:ca:48:49:cc:45:7e:b4:ed:32:f6:14:
                    14:bd:95:9b:70:ed:0d:47:89:80:2a:3e:23:6e:48:
                    9e:d5:c1:3e:e2:25:b3:54:18:d8:04:21:27:68:08:
                    26:72:a8:dd:84:8d:6c:bd:3a:34:ad:c7:ee:97:70:
                    b6:92:64:40:00:c1:03:f1:43:60:63:44:b6:4d:3c:
                    02:ac:37:30:d3:da:43:cd:4c:1d:b6:75:2b:48:25:
                    f7:b1:6e:6d:26:21:3a:6b:1d:2f:de:a0:8d:8f:ab:
                    cc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:AB:B9:5C:26:2F:C4:0B:EE:61:BE:BF:F9:17:82:62:98:69:8C:C3
            X509v3 Authority Key Identifier:
                keyid:B9:13:34:7E:6B:9D:77:A9:1B:B0:74:82:AE:45:CD:74:11:6B:02:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRM0fmudd6kbsHSCrkXNdBFrAi0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:a8:93:6d:07:d2:01:9e:b3:7c:d1:dc:a0:6e:8c:25:b7:42:
         83:4f:0b:eb:a4:2c:67:34:7a:48:47:f2:ca:b4:5f:83:70:40:
         1c:cd:61:fe:23:7e:b0:e6:66:fe:ed:20:31:1a:58:16:9c:ad:
         cc:9f:b1:3d:5f:65:f5:21:3f:cd:fc:77:26:b9:66:04:8b:f3:
         bd:95:26:29:4f:54:ab:9d:cc:b2:9b:3e:d2:a1:04:99:a2:ad:
         e6:e9:62:9d:5f:17:89:26:9b:24:c7:1a:99:c6:94:5f:95:25:
         e5:9b:6f:ee:2c:b2:f4:f7:e6:35:a5:f3:78:47:f0:14:f0:db:
         19:fb:05:30:c6:04:36:45:c8:ea:83:ee:c9:e0:96:f5:74:15:
         cf:24:ac:39:c5:07:f7:da:d4:ba:dc:0f:65:eb:3c:a0:b8:06:
         b9:6e:04:1d:93:51:12:38:29:53:95:93:c3:53:33:c7:d2:1b:
         c4:a5:6a:65:ba:37:3f:b0:ea:87:24:29:a8:fb:f2:a4:b7:1c:
         67:bc:dc:34:04:49:a2:3d:17:cd:5c:e9:35:95:97:9c:2f:51:
         03:3c:e3:d0:7c:74:dd:aa:ac:af:ca:db:36:62:e1:f5:f9:73:
         11:cf:75:e0:1c:15:54:6a:a9:37:3e:c6:b9:aa:6a:38:31:7c:
         e1:d1:0b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:45:37 2026 by rpki-client