Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft
File:                     uRM0fmudd6kbsHSCrkXNdBFrAi0.mft (raw, json)
Hash identifier:          eJy5wRB8lNaV6tut9ErqT6xcA8O3X2EOxgV0UVb8i7Q=
Subject key identifier:   93:0C:B8:0D:13:55:AB:69:94:63:6D:7C:93:82:37:7A:9B:37:70:E9
Authority key identifier: B9:13:34:7E:6B:9D:77:A9:1B:B0:74:82:AE:45:CD:74:11:6B:02:2D
Certificate issuer:       /CN=A919FBF3/serialNumber=B913347E6B9D77A91BB07482AE45CD74116B022D
Certificate serial:       81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRM0fmudd6kbsHSCrkXNdBFrAi0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft
Manifest number:          7B
Signing time:             Mon 27 Jul 2026 10:03:02 +0000
Manifest this update:     Mon 27 Jul 2026 10:03:01 +0000
Manifest next update:     Mon 03 Aug 2026 10:03:01 +0000
Files and hashes:         1: uRM0fmudd6kbsHSCrkXNdBFrAi0.crl (hash: lKidyvSgzRz6uG99UFU5It+1Ai1jyQKfI8mRJVqS+C8=)
                          2: BDCEEAE6843411F183C1FD4067A30FBC.roa (hash: UPATNGlHXmJqHIJuyFnrs3+A/CO0YHg7jQZSNo968UQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.crl
                          rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRM0fmudd6kbsHSCrkXNdBFrAi0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:03:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FBF3, serialNumber=B913347E6B9D77A91BB07482AE45CD74116B022D
        Validity
            Not Before: Jul 27 10:03:01 2026 GMT
            Not After : Aug  3 10:03:01 2026 GMT
        Subject: CN=6a672cd6-476f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d0:63:01:b7:d5:ee:ea:6b:11:9f:a4:26:c2:
                    cb:76:85:1f:38:54:b4:fe:9d:bf:36:64:bc:4a:71:
                    c7:f1:df:8b:1a:ac:5d:8d:06:ef:51:97:d3:3d:63:
                    03:bf:9a:76:55:cd:94:c6:80:c6:42:70:57:a8:63:
                    c7:e6:44:2a:18:40:37:e9:f7:2e:6a:83:df:ac:68:
                    9d:d9:46:ec:52:6d:55:28:d8:04:04:f2:d0:25:2c:
                    31:e2:a6:fe:df:c5:28:3c:7e:38:3c:56:cf:d3:e2:
                    6c:1b:be:ec:4f:eb:48:63:41:98:12:3b:81:be:d5:
                    f1:f6:02:8e:44:8e:db:2e:d5:03:1f:62:26:ba:5d:
                    0c:5d:9c:24:4c:aa:e3:9d:af:3c:f4:cd:d0:94:c9:
                    c0:f3:a1:6d:ee:75:dd:8d:8e:45:0a:78:eb:f3:68:
                    0a:ea:5f:1a:04:d7:14:53:e0:01:65:c8:69:4e:4f:
                    d6:5f:6f:70:0a:21:31:a9:74:00:3c:44:1b:97:22:
                    65:e7:a3:e6:da:73:45:69:75:f3:b1:e1:01:40:f9:
                    b9:16:d7:f7:b4:82:e1:75:5f:2b:29:a0:a4:83:98:
                    37:b9:78:ad:ef:1d:5a:bd:9f:d5:a4:a3:06:9b:6e:
                    48:de:77:88:45:d7:e8:a5:0a:a2:c1:35:8b:c5:f4:
                    2e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:0C:B8:0D:13:55:AB:69:94:63:6D:7C:93:82:37:7A:9B:37:70:E9
            X509v3 Authority Key Identifier:
                keyid:B9:13:34:7E:6B:9D:77:A9:1B:B0:74:82:AE:45:CD:74:11:6B:02:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRM0fmudd6kbsHSCrkXNdBFrAi0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:e5:fe:df:46:29:34:78:2c:da:bc:ed:27:48:d3:08:df:fe:
         b5:ab:f9:d5:ff:16:e0:03:98:3d:7c:3d:3e:7a:2f:32:b0:e0:
         1d:e4:c5:99:8a:a4:d9:ec:3f:ec:2e:1f:c1:81:b8:b6:b1:7f:
         cc:4d:fd:1e:ab:56:76:f4:4f:d3:bb:a5:33:f7:51:7e:4d:25:
         c8:d0:7f:c8:2f:fc:c3:33:66:9b:de:f9:ac:c8:9a:7a:b2:6e:
         19:31:ea:ce:e4:6f:60:25:4c:d3:33:49:6b:f7:6e:b8:4c:97:
         d3:a2:59:31:8d:6d:14:b4:22:5a:3e:ea:69:42:d9:97:13:07:
         80:ea:a6:cc:b1:21:5f:15:5b:c7:33:31:80:f9:ee:0a:7e:47:
         73:81:eb:86:01:b6:1f:db:22:2f:d6:6d:bf:92:50:87:b0:34:
         6b:f3:bf:30:a2:20:53:f4:70:52:f8:81:f3:c2:cf:ed:b3:ac:
         cc:4b:c0:5e:5d:94:0f:ca:9d:cc:70:1a:b6:7c:f9:5e:36:ab:
         0e:ee:f8:8e:d1:08:1b:20:54:5f:2e:9d:9e:80:68:08:b1:b3:
         d3:af:57:50:fa:80:46:83:a4:73:4a:22:b7:35:38:e7:31:b5:
         ca:5f:9c:c2:79:c1:de:fa:bd:a3:63:09:f2:2e:ea:c1:1e:f6:
         80:74:67:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:41:16 2026 by rpki-client