Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft
File:                     uRM0fmudd6kbsHSCrkXNdBFrAi0.mft (raw, json)
Hash identifier:          jTIxcQwS1VO/qlVq0OM9dB0CScIeSJeRH8CEcBVHYYI=
Subject key identifier:   79:64:30:C0:F7:2A:48:1E:14:93:46:6C:81:A6:A5:C9:22:A8:57:CA
Authority key identifier: B9:13:34:7E:6B:9D:77:A9:1B:B0:74:82:AE:45:CD:74:11:6B:02:2D
Certificate issuer:       /CN=A919FBF3/serialNumber=B913347E6B9D77A91BB07482AE45CD74116B022D
Certificate serial:       49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRM0fmudd6kbsHSCrkXNdBFrAi0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft
Manifest number:          45
Signing time:             Fri 17 Apr 2026 08:06:39 +0000
Manifest this update:     Fri 17 Apr 2026 08:06:39 +0000
Manifest next update:     Fri 24 Apr 2026 08:06:39 +0000
Files and hashes:         1: uRM0fmudd6kbsHSCrkXNdBFrAi0.crl (hash: wxfZKl5AnkLVZ1KtuTa9dWqyxo+e1dTa8d4jzH5R9SY=)
                          2: 8F11CB5CDF1511F0B37EABD4606F56BC.roa (hash: a7XG21OzlLkH67XaDgIrUzNocp3sS2ISxq1DVxvGiPI=)
                          3: 8F8FBABCDF1511F0B37EABD4606F56BC.roa (hash: PwN2gSK20w/Pz7qRbG5vVVSpGtOH+yYiveWXPy/+Clg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.crl
                          rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRM0fmudd6kbsHSCrkXNdBFrAi0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FBF3, serialNumber=B913347E6B9D77A91BB07482AE45CD74116B022D
        Validity
            Not Before: Apr 17 08:06:39 2026 GMT
            Not After : Apr 24 08:06:39 2026 GMT
        Subject: CN=69e1ea0f-b346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:40:1b:0b:f1:70:5e:78:9b:1d:fd:9e:5a:d9:
                    cb:9f:8a:e0:3b:5e:fb:61:7b:a2:d6:84:54:f8:f1:
                    18:c7:9f:28:b9:3e:30:a7:f5:1a:fa:6f:23:1b:5a:
                    48:5a:05:97:6e:2a:1a:50:27:c6:17:ed:77:9f:94:
                    5f:1c:ab:b8:90:ce:94:31:bc:6b:48:98:3b:9c:a0:
                    aa:c5:2b:5c:83:af:e8:00:24:3a:96:02:55:f2:e0:
                    99:1c:f0:2a:8a:ac:89:bd:8a:e9:0e:d5:e1:e0:23:
                    e8:fa:06:ce:ab:93:b3:74:8a:4a:a1:8b:98:b5:17:
                    5a:d9:e0:c1:90:c0:c8:29:a5:7a:d0:b4:51:e3:08:
                    85:39:31:31:8b:7e:6b:2f:ad:51:04:97:b1:d3:e3:
                    13:67:b9:df:c3:9a:9b:e5:d1:14:36:ce:65:ca:ae:
                    19:17:7a:3d:99:48:26:d0:7f:8d:01:9b:a2:bd:56:
                    46:f9:89:f0:b1:34:65:1c:87:c7:78:11:88:c4:0b:
                    ea:f0:65:fb:3d:b8:42:cb:52:0a:96:c4:e5:d3:a2:
                    9e:0f:6e:8e:f0:80:ee:c4:97:8e:2e:ec:de:bc:df:
                    74:22:13:ae:62:65:f0:9c:5e:29:58:9a:05:24:14:
                    7f:1f:7f:b7:ce:83:76:72:d7:af:4a:a2:0e:0d:93:
                    e3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:64:30:C0:F7:2A:48:1E:14:93:46:6C:81:A6:A5:C9:22:A8:57:CA
            X509v3 Authority Key Identifier:
                keyid:B9:13:34:7E:6B:9D:77:A9:1B:B0:74:82:AE:45:CD:74:11:6B:02:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRM0fmudd6kbsHSCrkXNdBFrAi0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:bb:ac:20:d9:49:ad:d5:44:1a:24:dd:95:bd:96:30:24:f1:
         4e:75:33:b5:4b:93:3a:97:e2:de:54:2b:7a:19:4c:a4:dc:2e:
         e5:51:82:d9:63:82:3e:ff:5e:08:8d:97:08:7e:b5:3c:3d:a4:
         c1:1c:38:9c:22:01:39:8c:5e:21:0a:e1:6b:57:5d:cf:db:d4:
         fb:58:97:92:8d:58:22:47:70:72:8e:d4:d7:e8:73:14:23:9f:
         f1:42:2e:24:be:12:a8:df:9f:b0:e5:d2:c8:5b:81:4a:eb:8d:
         a4:37:8d:f6:b7:1e:95:eb:34:4a:28:97:38:34:db:38:1d:b5:
         61:98:2d:1c:d7:3c:60:33:70:ee:95:5a:2c:3b:84:da:ee:9e:
         b8:4a:a9:94:82:ee:c7:46:a6:6f:1f:2d:1c:a8:d5:dd:f3:77:
         51:97:2e:31:0d:e1:67:e8:79:8e:81:bb:fc:3c:63:3c:15:8a:
         78:78:66:8b:76:d4:c7:00:7c:d4:0d:0f:ec:13:c1:ee:99:15:
         20:9b:cb:44:e7:e5:ba:5a:cc:e1:4f:71:a1:ea:92:46:e2:73:
         36:68:86:41:b6:4b:5a:00:38:f5:f8:5a:41:c6:59:59:17:b9:
         52:10:01:2d:5c:b8:67:3e:07:0f:85:ce:be:39:cd:8b:33:8b:
         6b:34:e2:d1
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
RkJGMzExMC8GA1UEBRMoQjkxMzM0N0U2QjlENzdBOTFCQjA3NDgyQUU0NUNENzQx
MTZCMDIyRDAeFw0yNjA0MTcwODA2MzlaFw0yNjA0MjQwODA2MzlaMBgxFjAUBgNV
BAMTDTY5ZTFlYTBmLWIzNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCsQBsL8XBeeJsd/Z5a2cufiuA7Xvthe6LWhFT48RjHnyi5PjCn9Rr6byMbWkha
BZduKhpQJ8YX7XeflF8cq7iQzpQxvGtImDucoKrFK1yDr+gAJDqWAlXy4Jkc8CqK
rIm9iukO1eHgI+j6Bs6rk7N0ikqhi5i1F1rZ4MGQwMgppXrQtFHjCIU5MTGLfmsv
rVEEl7HT4xNnud/Dmpvl0RQ2zmXKrhkXej2ZSCbQf40Bm6K9Vkb5ifCxNGUch8d4
EYjEC+rwZfs9uELLUgqWxOXTop4Pbo7wgO7El44u7N6833QiE65iZfCcXilYmgUk
FH8ff7fOg3Zy169Kog4Nk+MvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUeWQwwPcq
SB4Uk0ZsgaalySKoV8owHwYDVR0jBBgwFoAUuRM0fmudd6kbsHSCrkXNdBFrAi0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGQkYzL0VFNjI5Njk0RDY2
MDExRjBCMkE1NEI5NTBCQjQzRTEzL3VSTTBmbXVkZDZrYnNIU0Nya1hOZEJGckFp
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdVJNMGZtdWRkNmtic0hTQ3JrWE5kQkZyQWkwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlG
QkYzL0VFNjI5Njk0RDY2MDExRjBCMkE1NEI5NTBCQjQzRTEzL3VSTTBmbXVkZDZr
YnNIU0Nya1hOZEJGckFpMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBJu6wg2Umt1UQaJN2VvZYwJPFOdTO1S5M6l+LeVCt6GUyk3C7lUYLZY4I+/14I
jZcIfrU8PaTBHDicIgE5jF4hCuFrV13P29T7WJeSjVgiR3ByjtTX6HMUI5/xQi4k
vhKo35+w5dLIW4FK642kN432tx6V6zRKKJc4NNs4HbVhmC0c1zxgM3DulVosO4Ta
7p64SqmUgu7HRqZvHy0cqNXd83dRly4xDeFn6HmOgbv8PGM8FYp4eGaLdtTHAHzU
DQ/sE8HumRUgm8tE5+W6WszhT3Gh6pJG4nM2aIZBtktaADj1+FpBxllZF7lSEAEt
XLhnPgcPhc6+Oc2LM4trNOLR
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:42:41 2026 by rpki-client