Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft
File:                     uRM0fmudd6kbsHSCrkXNdBFrAi0.mft (raw, json)
Hash identifier:          nolxzry6DZZrCG+MKG4GoRPRidcPMpEIB9n3KMmZE0M=
Subject key identifier:   84:54:49:47:AF:EE:7E:D8:AC:BC:A8:CC:4F:04:AE:B6:4B:40:29:4D
Authority key identifier: B9:13:34:7E:6B:9D:77:A9:1B:B0:74:82:AE:45:CD:74:11:6B:02:2D
Certificate issuer:       /CN=A919FBF3/serialNumber=B913347E6B9D77A91BB07482AE45CD74116B022D
Certificate serial:       64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRM0fmudd6kbsHSCrkXNdBFrAi0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft
Manifest number:          60
Signing time:             Thu 11 Jun 2026 10:24:02 +0000
Manifest this update:     Thu 11 Jun 2026 10:24:01 +0000
Manifest next update:     Thu 18 Jun 2026 10:24:01 +0000
Files and hashes:         1: uRM0fmudd6kbsHSCrkXNdBFrAi0.crl (hash: Ylscs3XjXktPL1eu9cPQc6svxbSEK5T8BDxvbTB8Ieg=)
                          2: 8F11CB5CDF1511F0B37EABD4606F56BC.roa (hash: a7XG21OzlLkH67XaDgIrUzNocp3sS2ISxq1DVxvGiPI=)
                          3: 8F8FBABCDF1511F0B37EABD4606F56BC.roa (hash: PwN2gSK20w/Pz7qRbG5vVVSpGtOH+yYiveWXPy/+Clg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.crl
                          rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRM0fmudd6kbsHSCrkXNdBFrAi0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 10:24:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FBF3, serialNumber=B913347E6B9D77A91BB07482AE45CD74116B022D
        Validity
            Not Before: Jun 11 10:24:01 2026 GMT
            Not After : Jun 18 10:24:01 2026 GMT
        Subject: CN=6a2a8cc2-acf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:de:6d:f4:f2:ad:ba:6f:00:29:4f:19:0f:7a:
                    47:3a:6a:44:ed:bf:ad:6f:0a:f8:7e:3f:16:63:a6:
                    35:e9:a8:83:05:b3:b1:18:b3:06:01:32:ae:e0:b9:
                    e8:b5:17:66:7f:1e:d3:42:70:db:42:15:ae:06:0e:
                    e6:fe:8f:c8:1a:5d:59:a3:9d:70:7f:5b:f4:df:df:
                    62:e1:d2:1c:c7:d2:54:0e:76:71:28:00:0e:6c:13:
                    04:88:cf:c7:07:3b:42:9c:ed:74:42:a4:51:9b:8d:
                    f9:6d:42:0d:09:18:13:93:bc:6d:53:4b:9b:71:5d:
                    22:c4:6f:c5:75:29:83:c8:f8:8b:28:83:bb:23:9d:
                    f3:04:39:fe:06:67:a7:80:25:a4:05:66:c6:11:61:
                    07:d9:06:31:37:be:de:ae:41:5f:ca:d1:e0:66:fd:
                    5e:ed:20:54:dd:c8:07:5c:5b:ac:18:10:dd:b3:fc:
                    c4:93:88:47:02:21:e1:24:cf:d0:d4:c7:ec:f3:e5:
                    93:31:92:1d:f9:56:67:7c:54:de:ee:5b:ec:30:de:
                    74:77:e1:9f:72:0b:b7:6e:ba:47:c5:9c:59:fb:68:
                    99:e4:c6:c4:5c:60:3a:94:16:fc:97:60:08:57:1a:
                    20:63:16:79:45:4f:7f:e2:99:be:8d:86:d7:0a:2a:
                    2c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:54:49:47:AF:EE:7E:D8:AC:BC:A8:CC:4F:04:AE:B6:4B:40:29:4D
            X509v3 Authority Key Identifier:
                keyid:B9:13:34:7E:6B:9D:77:A9:1B:B0:74:82:AE:45:CD:74:11:6B:02:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRM0fmudd6kbsHSCrkXNdBFrAi0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:a9:ab:de:b7:ab:a1:f4:dd:cc:6d:6c:b8:0b:5f:f4:e0:07:
         01:3f:ef:39:c0:68:08:06:da:a0:43:04:57:e0:64:74:21:56:
         78:8d:ee:89:1e:cf:67:43:3c:73:7d:da:25:a8:bc:27:e5:2c:
         a9:0a:71:7a:82:dc:87:75:80:55:ed:e0:04:36:18:54:f2:56:
         f3:69:14:2a:64:b9:ac:1b:45:ba:bc:19:14:12:92:84:ed:a1:
         0d:10:bd:f6:dc:02:27:1c:27:cc:3a:99:ed:3a:a0:e4:29:32:
         08:c8:8b:65:c5:2d:d7:fe:66:76:e3:de:8a:e6:b8:14:52:13:
         eb:9e:f9:33:43:d0:d3:a7:9c:ec:f9:32:a7:27:95:05:dc:76:
         42:86:30:37:89:a3:5a:26:40:05:73:89:dc:9b:b4:fd:c4:24:
         46:0f:61:f2:aa:53:80:63:5b:59:a4:25:7a:03:8a:b8:07:6e:
         ac:aa:a3:ff:b4:ed:87:a5:40:76:5c:91:a6:db:ce:74:42:92:
         4a:ce:3e:7b:9e:80:53:16:07:73:7b:9e:35:7a:64:2f:91:5a:
         b5:c6:da:e5:99:cf:44:97:bf:b5:5d:91:fc:55:60:f8:b4:bf:
         29:02:4f:ab:f3:b9:ac:fa:03:d8:95:40:6e:78:c6:a8:8a:7b:
         eb:c9:ce:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:53:30 2026 by rpki-client