Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft
File:                     XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft (raw, json)
Hash identifier:          ybb/v7JupPFIknBmEh2Ehxz0KDwa2GAqCKy29vjzZ9M=
Subject key identifier:   EC:4A:EC:16:41:C3:0C:89:FF:85:72:3E:A4:1D:6A:11:0D:11:0D:29
Authority key identifier: 5C:C9:1A:FD:5B:8B:37:ED:8C:50:9F:61:18:9F:44:8E:73:12:1F:97
Certificate issuer:       /CN=A913B3F2/serialNumber=5CC91AFD5B8B37ED8C509F61189F448E73121F97
Certificate serial:       01EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft
Manifest number:          01E3
Signing time:             Tue 23 Jun 2026 03:44:09 +0000
Manifest this update:     Tue 23 Jun 2026 03:44:08 +0000
Manifest next update:     Tue 30 Jun 2026 03:44:08 +0000
Files and hashes:         1: XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl (hash: 8dcvOhOadODybsnY3a/gZEmtel8GmgExmxVzWosQN7s=)
                          2: 16083E10A95E11EEBC0A7E5BC4F9AE02.roa (hash: xotN2+0EZ6ouw9AZf08dpJO1PPBAAQ3hAa1HQQFiN7Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl
                          rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 03:44:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 492 (0x1ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B3F2, serialNumber=5CC91AFD5B8B37ED8C509F61189F448E73121F97
        Validity
            Not Before: Jun 23 03:44:08 2026 GMT
            Not After : Jun 30 03:44:08 2026 GMT
        Subject: CN=6a3a0109-ebf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ba:5b:55:a5:b9:68:fb:c5:18:1f:0e:f9:75:
                    45:db:c2:23:9a:2e:d8:5f:b3:d2:57:de:8b:5a:b2:
                    51:b5:da:f6:fa:ce:9d:b1:fb:80:7c:4d:9a:5f:41:
                    23:5f:eb:5c:c3:21:29:a5:7c:f1:cc:d6:0c:b8:8b:
                    a9:ca:ba:67:af:fd:9c:2a:98:7b:ff:67:67:10:48:
                    7a:de:c8:49:7c:94:d5:35:c7:6c:1c:fe:f8:87:33:
                    e6:83:8c:d1:b2:ef:4d:2f:3b:53:c0:93:c9:35:85:
                    07:c9:2d:5c:db:27:60:81:a5:0b:ac:cc:9b:c4:15:
                    89:bf:b2:9c:a2:e9:98:e1:0c:89:c7:19:b0:e1:1d:
                    65:24:9b:14:00:34:4c:be:29:4f:7a:2e:e6:72:aa:
                    d7:92:9a:e9:70:73:00:8c:bc:4c:e3:31:89:49:9c:
                    3e:b0:71:9e:6a:10:d4:f6:e7:0e:d5:ce:dc:44:e4:
                    dc:a6:72:05:82:ba:a9:95:89:53:85:d4:85:71:c9:
                    f4:4c:e1:38:d2:f0:ec:7b:47:ed:0c:a9:cd:da:69:
                    05:27:a6:7b:34:d2:7b:3b:d9:fd:9e:db:8d:70:cc:
                    3f:85:6e:ba:b6:27:a3:a8:11:aa:cf:c4:e9:8f:3a:
                    1e:16:67:45:bf:4f:2c:47:f9:22:27:3b:4a:10:ba:
                    5a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:4A:EC:16:41:C3:0C:89:FF:85:72:3E:A4:1D:6A:11:0D:11:0D:29
            X509v3 Authority Key Identifier:
                keyid:5C:C9:1A:FD:5B:8B:37:ED:8C:50:9F:61:18:9F:44:8E:73:12:1F:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:4f:6e:90:00:b9:9f:c9:15:c1:9a:4e:d7:8b:1e:a0:0d:80:
         fa:bf:1b:bf:44:02:86:e3:1a:2d:f4:0a:88:f9:13:36:95:f1:
         cc:46:f6:6e:ac:88:d7:07:96:b9:8a:14:b6:f3:6f:91:35:23:
         9c:7b:27:03:fb:3a:fa:d7:2f:5d:1c:f1:c6:ee:89:f3:90:04:
         a7:25:b6:c9:5d:45:72:f3:d2:a4:10:8e:b9:13:ca:67:a2:43:
         23:ac:e4:1c:94:01:6e:9a:70:6a:fe:b2:22:45:97:d2:4a:df:
         37:eb:0a:23:bd:63:82:96:70:4b:7b:c5:1c:7f:de:fe:55:b2:
         a2:a1:7e:b3:b9:2a:7d:39:43:25:c2:fb:c4:d1:91:6f:b7:53:
         b4:ed:27:7a:d7:a9:ef:51:03:2a:d1:10:22:38:3d:6b:27:ac:
         19:c7:19:a5:2b:8b:4c:72:6e:a0:d5:71:01:0a:45:74:44:b9:
         9e:61:6d:63:72:53:84:c7:19:c1:59:d4:66:ce:ea:21:f6:40:
         60:53:df:67:20:55:a2:47:5b:9f:5f:8c:4c:be:c7:fa:88:d8:
         94:a4:cc:a5:bd:03:0b:8b:d2:70:f7:19:a6:47:3a:e9:19:4e:
         db:94:49:13:09:bd:ad:dc:b2:aa:c0:47:2a:58:53:12:77:35:
         ca:88:93:75
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0IzRjIxMTAvBgNVBAUTKDVDQzkxQUZENUI4QjM3RUQ4QzUwOUY2MTE4OUY0NDhF
NzMxMjFGOTcwHhcNMjYwNjIzMDM0NDA4WhcNMjYwNjMwMDM0NDA4WjAYMRYwFAYD
VQQDEw02YTNhMDEwOS1lYmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqLpbVaW5aPvFGB8O+XVF28Ijmi7YX7PSV96LWrJRtdr2+s6dsfuAfE2aX0Ej
X+tcwyEppXzxzNYMuIupyrpnr/2cKph7/2dnEEh63shJfJTVNcdsHP74hzPmg4zR
su9NLztTwJPJNYUHyS1c2ydggaULrMybxBWJv7KcoumY4QyJxxmw4R1lJJsUADRM
vilPei7mcqrXkprpcHMAjLxM4zGJSZw+sHGeahDU9ucO1c7cROTcpnIFgrqplYlT
hdSFccn0TOE40vDse0ftDKnN2mkFJ6Z7NNJ7O9n9ntuNcMw/hW66tiejqBGqz8Tp
jzoeFmdFv08sR/kiJztKELpa4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOxK7BZB
wwyJ/4VyPqQdahENEQ0pMB8GA1UdIwQYMBaAFFzJGv1bizftjFCfYRifRI5zEh+X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjNGMi8wMDUxREJDQzk3
RTIxMUVFODk4MTNEMjNDNEY5QUUwMi9YTWthX1Z1TE4tMk1VSjloR0o5RWpuTVNI
NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hNa2FfVnVMTi0yTVVKOWhHSjlFam5NU0g1Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QjNGMi8wMDUxREJDQzk3RTIxMUVFODk4MTNEMjNDNEY5QUUwMi9YTWthX1Z1TE4t
Mk1VSjloR0o5RWpuTVNINWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAh09ukAC5n8kVwZpO14seoA2A+r8bv0QChuMaLfQKiPkTNpXxzEb2bqyI1weW
uYoUtvNvkTUjnHsnA/s6+tcvXRzxxu6J85AEpyW2yV1FcvPSpBCOuRPKZ6JDI6zk
HJQBbppwav6yIkWX0krfN+sKI71jgpZwS3vFHH/e/lWyoqF+s7kqfTlDJcL7xNGR
b7dTtO0netep71EDKtEQIjg9ayesGccZpSuLTHJuoNVxAQpFdES5nmFtY3JThMcZ
wVnUZs7qIfZAYFPfZyBVokdbn1+MTL7H+ojYlKTMpb0DC4vScPcZpkc66RlO25RJ
Ewm9rdyyqsBHKlhTEnc1yoiTdQ==
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:25:16 2026 by rpki-client