Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft
File:                     XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft (raw, json)
Hash identifier:          eivwXQgqAgeRP+3NWGLUOS95tBiBBuLfaH7XYPYIZJ8=
Subject key identifier:   9B:ED:EF:4F:63:42:B5:2A:36:8C:8E:55:4D:7B:16:20:50:E7:24:DF
Authority key identifier: 5C:C9:1A:FD:5B:8B:37:ED:8C:50:9F:61:18:9F:44:8E:73:12:1F:97
Certificate issuer:       /CN=A913B3F2/serialNumber=5CC91AFD5B8B37ED8C509F61189F448E73121F97
Certificate serial:       01AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft
Manifest number:          01A8
Signing time:             Sun 01 Mar 2026 04:59:54 +0000
Manifest this update:     Sun 01 Mar 2026 04:59:53 +0000
Manifest next update:     Sun 08 Mar 2026 04:59:53 +0000
Files and hashes:         1: XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl (hash: QTXo3lJxJKgTJ6D/eppPKfaQOoHF2HFJXZtP+L8S1+w=)
                          2: 16083E10A95E11EEBC0A7E5BC4F9AE02.roa (hash: amqr6XOc8WGJeOSVJZCKADWGQThdq0cXOHfWqz7N/go=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl
                          rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 04:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 431 (0x1af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B3F2, serialNumber=5CC91AFD5B8B37ED8C509F61189F448E73121F97
        Validity
            Not Before: Mar  1 04:59:53 2026 GMT
            Not After : Mar  8 04:59:53 2026 GMT
        Subject: CN=69a3c7ca-fbc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ed:33:15:f0:45:5a:6f:d0:b0:c2:7a:d2:7f:
                    4c:e5:67:52:4a:f3:9d:bc:69:c7:b3:73:fd:cd:51:
                    39:29:f4:ec:a0:3c:aa:78:eb:7b:13:3e:f8:ca:24:
                    79:13:14:d8:04:4a:ef:d6:a9:e1:5a:e0:85:33:a7:
                    77:ce:0f:5e:31:1d:a1:5d:76:d1:11:07:29:f6:36:
                    e8:39:49:46:6f:99:c2:00:43:2d:12:f1:6f:77:05:
                    d9:18:d1:04:c1:6f:4f:12:53:90:bb:2a:9a:94:ff:
                    a4:28:26:71:22:53:25:ab:ff:75:54:19:4c:41:08:
                    0b:02:dc:ff:44:64:cb:d7:05:6a:83:b1:eb:c1:57:
                    ac:0e:f7:78:aa:93:6e:3a:c0:98:89:96:f0:b9:11:
                    25:27:d7:87:e0:5d:13:ad:7b:c1:b8:f3:cf:d0:b1:
                    67:3b:83:a8:c0:f9:66:82:35:3d:ad:22:7c:b3:09:
                    96:56:35:14:2e:ca:7a:46:47:77:88:ea:d9:8d:5d:
                    34:f5:f3:f7:37:37:95:d1:4f:75:5a:23:4d:2a:c0:
                    19:4c:53:2d:20:5c:71:f4:ec:9c:1c:8e:13:5f:ea:
                    8c:9c:c3:ec:3d:9e:9d:b4:23:32:b6:9c:3e:2d:23:
                    7c:d6:73:b6:35:dd:41:92:2c:ba:d3:91:f5:f2:45:
                    79:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:ED:EF:4F:63:42:B5:2A:36:8C:8E:55:4D:7B:16:20:50:E7:24:DF
            X509v3 Authority Key Identifier:
                keyid:5C:C9:1A:FD:5B:8B:37:ED:8C:50:9F:61:18:9F:44:8E:73:12:1F:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:56:d7:4e:f4:b0:74:90:6c:bd:91:23:c4:a8:de:49:ca:49:
         12:6a:be:fb:34:85:51:f7:75:44:28:68:b4:23:b2:36:96:a1:
         65:0f:f9:f6:c2:a3:5f:cb:b1:16:a9:5e:01:c9:2d:43:3c:ad:
         b0:6d:de:b3:eb:fb:e7:c5:ec:ef:1f:40:a5:bb:0e:17:26:af:
         58:e6:6b:ae:05:3b:b0:6a:3b:a1:5b:fc:4d:82:95:1f:70:86:
         eb:9f:03:01:35:0b:92:f8:89:c2:b2:01:d8:1e:b5:65:96:4c:
         f8:01:2e:e5:81:92:e1:cc:69:a8:59:fa:71:eb:97:8b:53:a0:
         cd:d9:f3:da:f5:09:e3:df:2b:02:50:eb:5c:16:c2:cc:21:85:
         a4:0b:d6:3c:dc:98:67:90:ce:5b:89:86:c5:8d:b1:ac:50:b1:
         9e:f5:6c:e2:80:0d:c5:c3:56:d6:49:e1:98:26:a0:71:75:48:
         b3:3b:17:6e:b2:86:0d:ef:05:32:33:b8:90:53:77:9e:e7:87:
         ed:43:cf:45:c0:f2:7b:60:f3:2d:52:5c:b4:01:7a:d8:66:db:
         d2:31:58:68:2b:0f:9d:cd:e2:11:6d:5d:1c:02:22:88:f9:d6:
         75:96:48:0f:f5:8c:7f:96:a7:1c:42:47:16:67:39:ad:e1:1d:
         e1:15:5b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:51:41 2026 by rpki-client