Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft
File:                     XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft (raw, json)
Hash identifier:          KmBQGGnRrOeJv2/pH/dktbEhCkpWNQOkqAj+D7kJ0Do=
Subject key identifier:   8D:74:2E:C1:B4:41:74:8C:0D:ED:2C:4B:D7:CB:56:13:DF:C5:77:68
Authority key identifier: 5C:C9:1A:FD:5B:8B:37:ED:8C:50:9F:61:18:9F:44:8E:73:12:1F:97
Certificate issuer:       /CN=A913B3F2/serialNumber=5CC91AFD5B8B37ED8C509F61189F448E73121F97
Certificate serial:       0209
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft
Manifest number:          0200
Signing time:             Wed 19 Aug 2026 03:50:22 +0000
Manifest this update:     Wed 19 Aug 2026 03:50:22 +0000
Manifest next update:     Wed 26 Aug 2026 03:50:22 +0000
Files and hashes:         1: XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl (hash: xX94PqINVRTYPSsrlXerhbASW2y1Z1fRe/o8hnYbOE8=)
                          2: 16083E10A95E11EEBC0A7E5BC4F9AE02.roa (hash: xotN2+0EZ6ouw9AZf08dpJO1PPBAAQ3hAa1HQQFiN7Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl
                          rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 03:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 521 (0x209)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B3F2, serialNumber=5CC91AFD5B8B37ED8C509F61189F448E73121F97
        Validity
            Not Before: Aug 19 03:50:22 2026 GMT
            Not After : Aug 26 03:50:22 2026 GMT
        Subject: CN=6a8527fe-66cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a5:09:63:a9:f1:cb:97:b7:82:ee:95:67:cf:
                    0c:80:99:9e:18:23:b7:d8:cd:2a:89:01:1b:d7:e3:
                    ff:19:1c:e9:8e:eb:56:18:f8:c7:f3:2c:e5:ba:d7:
                    52:85:9d:bb:81:0a:92:ba:ba:0e:35:9d:6c:06:e6:
                    9f:67:f2:03:b0:2f:a2:35:92:b6:f4:45:26:2d:f4:
                    bf:24:80:2a:3d:ec:e3:5c:b3:69:6e:46:fe:61:96:
                    3b:73:12:51:12:31:19:c2:d2:30:fc:e5:21:a5:ed:
                    22:a2:ea:2d:e0:fc:d0:e0:e4:c9:58:cd:de:5a:58:
                    4b:bd:64:b2:cb:f7:3b:1a:48:7f:8b:36:70:29:e9:
                    e9:54:f5:b8:5a:59:ed:90:29:9b:ee:9f:a7:00:41:
                    f7:8b:fd:2d:11:16:4b:db:9f:73:7e:a2:6b:68:35:
                    dc:28:be:0a:3a:cb:b3:63:fd:ae:8e:88:28:85:dd:
                    fd:42:22:9c:d8:a8:45:ee:99:f0:b6:69:f3:d1:e8:
                    75:cf:36:aa:16:5e:0a:72:35:0d:ee:f0:9f:69:10:
                    14:46:04:bf:81:cf:4a:1a:b7:a8:78:1e:41:d1:14:
                    b4:fa:7c:ea:30:e2:ac:4b:b8:ca:7a:ca:cd:aa:a9:
                    87:e9:70:ca:99:e8:02:d6:10:58:ea:c1:de:8d:64:
                    47:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:74:2E:C1:B4:41:74:8C:0D:ED:2C:4B:D7:CB:56:13:DF:C5:77:68
            X509v3 Authority Key Identifier:
                keyid:5C:C9:1A:FD:5B:8B:37:ED:8C:50:9F:61:18:9F:44:8E:73:12:1F:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:5d:fb:47:45:a3:76:57:22:5c:e5:0f:08:3d:56:9f:c0:e7:
         f0:2e:5e:15:30:64:97:43:49:3d:3f:53:13:5b:e1:c7:3b:22:
         6a:f1:89:bf:87:44:ff:ca:43:a9:c5:75:ff:ef:74:97:a8:42:
         ea:5d:27:f4:71:29:d4:1d:78:89:a7:dd:cf:fa:5c:f7:34:33:
         48:53:4c:b0:a5:32:20:b2:ab:f4:75:ea:97:e9:4f:c2:5c:89:
         a8:2f:af:c5:d8:54:be:39:e6:71:2d:dc:b6:06:f3:82:5a:2a:
         5b:11:ca:f3:2c:2b:72:40:0e:31:d5:0a:bb:ce:07:3e:bb:80:
         a7:62:10:db:4a:6f:17:50:23:d6:f3:f5:80:63:9b:48:f0:cd:
         7c:6e:34:a2:ff:3b:cf:19:c8:0f:94:33:54:e5:8f:6b:d7:1f:
         81:52:e1:bd:01:0d:7f:4f:31:d8:4d:8a:c6:a1:09:88:11:ef:
         1b:ed:8e:ac:a9:70:fa:6c:b8:80:cd:7c:da:6b:17:46:7c:e2:
         76:d5:83:2e:38:d3:16:7e:a0:13:f5:b9:87:97:51:05:3c:16:
         bf:49:c4:69:90:2e:da:87:f8:b8:e9:2b:90:9e:96:b9:cc:bc:
         c5:f8:53:a5:8d:1b:22:f7:85:45:76:bb:ac:d9:e8:22:f1:84:
         6d:66:f7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:40:25 2026 by rpki-client