Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft
File:                     uRM0fmudd6kbsHSCrkXNdBFrAi0.mft (raw, json)
Hash identifier:          hWCUa47oUfTR5wTsOh3J4EMN5/qmuwO5l5InwwSWJSg=
Subject key identifier:   D9:82:A5:4E:F0:71:30:66:4E:4D:93:04:1D:17:1D:AA:39:A0:A2:BD
Authority key identifier: B9:13:34:7E:6B:9D:77:A9:1B:B0:74:82:AE:45:CD:74:11:6B:02:2D
Certificate issuer:       /CN=A919FBF3/serialNumber=B913347E6B9D77A91BB07482AE45CD74116B022D
Certificate serial:       31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRM0fmudd6kbsHSCrkXNdBFrAi0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft
Manifest number:          2D
Signing time:             Sun 01 Mar 2026 10:09:48 +0000
Manifest this update:     Sun 01 Mar 2026 10:09:48 +0000
Manifest next update:     Sun 08 Mar 2026 10:09:48 +0000
Files and hashes:         1: uRM0fmudd6kbsHSCrkXNdBFrAi0.crl (hash: gFXzRR2Y+Kv4eYyuNyqNAxz1sqtX6b1WYHqVlVBdS/I=)
                          2: 8F11CB5CDF1511F0B37EABD4606F56BC.roa (hash: a7XG21OzlLkH67XaDgIrUzNocp3sS2ISxq1DVxvGiPI=)
                          3: 8F8FBABCDF1511F0B37EABD4606F56BC.roa (hash: PwN2gSK20w/Pz7qRbG5vVVSpGtOH+yYiveWXPy/+Clg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.crl
                          rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRM0fmudd6kbsHSCrkXNdBFrAi0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:09:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FBF3, serialNumber=B913347E6B9D77A91BB07482AE45CD74116B022D
        Validity
            Not Before: Mar  1 10:09:48 2026 GMT
            Not After : Mar  8 10:09:48 2026 GMT
        Subject: CN=69a4106c-0198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:11:23:7b:dc:4b:8f:dc:b8:e4:b2:68:89:35:
                    c9:95:fd:9f:9f:19:5c:92:fe:83:3d:8b:58:99:72:
                    78:f7:2f:fc:49:ef:83:8f:d4:7a:f5:eb:54:91:7e:
                    4f:d3:0d:7e:97:86:41:cd:ea:af:29:0d:89:11:02:
                    28:ab:d5:1f:66:e6:ae:12:0b:2d:eb:f1:e5:9f:dd:
                    51:e0:01:13:b8:62:b5:ef:4a:73:70:f8:18:02:0f:
                    04:e9:31:7a:1a:8c:67:a7:be:9c:e3:01:6c:97:87:
                    99:e7:c0:96:aa:29:5f:72:81:3f:a7:69:77:65:10:
                    d8:55:88:f3:c7:16:6e:d0:0f:d1:6f:0e:d7:a5:2f:
                    fd:61:a9:2e:d8:32:42:3a:9a:dc:19:74:9c:ef:cb:
                    bc:8f:2b:28:dd:fe:0d:9b:aa:ab:0d:18:57:71:fa:
                    42:20:a0:7f:2d:34:84:cf:88:e2:6d:49:1a:1f:54:
                    7c:b6:70:5b:9e:07:42:a3:7f:b9:ec:81:39:4d:1b:
                    ab:13:40:f6:37:4a:c9:04:ac:b1:1d:90:1e:6b:6e:
                    78:13:5b:34:3c:45:3c:3d:25:8d:ce:dc:34:ae:a6:
                    1b:4f:2b:e0:99:40:ab:60:02:76:ab:08:8f:c6:5e:
                    8c:e4:cf:db:f1:2b:50:7f:55:01:2a:bf:b4:be:0e:
                    95:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:82:A5:4E:F0:71:30:66:4E:4D:93:04:1D:17:1D:AA:39:A0:A2:BD
            X509v3 Authority Key Identifier:
                keyid:B9:13:34:7E:6B:9D:77:A9:1B:B0:74:82:AE:45:CD:74:11:6B:02:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRM0fmudd6kbsHSCrkXNdBFrAi0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:43:8b:cc:72:68:46:5d:02:e5:db:ed:bc:ea:c8:3e:7c:0f:
         13:e1:37:19:f1:ce:8a:f8:5f:46:36:83:7c:12:ed:c9:4b:7f:
         b4:fd:f6:5d:ba:b8:65:e3:e2:7b:d1:8d:72:db:ab:27:a3:8e:
         c2:c9:a3:65:79:b8:da:4a:11:88:4e:69:76:7f:d0:81:5d:96:
         7c:11:dd:6b:60:43:0d:9b:3c:e0:d0:ed:ed:d2:b9:41:ad:b2:
         ef:50:0e:58:0d:71:eb:9c:f8:f4:b5:8b:52:5d:26:52:f4:41:
         60:26:a7:de:bd:a8:15:51:97:67:d1:af:70:72:1a:f5:4d:61:
         af:fb:6d:30:e4:29:b0:1a:51:a2:7a:6e:e2:11:0f:fb:40:b1:
         5f:e4:70:29:6a:c5:b3:a1:c0:26:c5:8b:58:2f:75:2f:72:89:
         c0:35:d7:e7:10:ed:b4:00:6a:8f:f2:d8:09:a7:24:75:46:b1:
         6e:c9:34:55:ab:ec:7d:b1:b2:0a:cf:c9:5f:9c:20:79:e4:d6:
         4c:2f:47:1e:35:9b:12:95:97:3e:43:8b:97:e2:58:93:2f:10:
         c9:19:f8:dd:ff:70:d7:75:a0:2c:81:14:c0:dd:26:70:83:d5:
         13:5d:57:d4:ff:fa:23:86:9a:b6:b5:ed:81:51:dd:57:94:08:
         23:37:27:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:33:20 2026 by rpki-client