Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft
File:                     XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft (raw, json)
Hash identifier:          MU/awDuJQpkCMK9nEr+83z7iRqhQmhop7+ToFv/aLU0=
Subject key identifier:   61:D3:EC:96:52:AC:CB:6C:A2:A2:7A:B4:0A:BE:D5:B5:5B:A1:B4:76
Authority key identifier: 5C:C9:1A:FD:5B:8B:37:ED:8C:50:9F:61:18:9F:44:8E:73:12:1F:97
Certificate issuer:       /CN=A913B3F2/serialNumber=5CC91AFD5B8B37ED8C509F61189F448E73121F97
Certificate serial:       0166
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft
Manifest number:          0160
Signing time:             Sun 19 Oct 2025 06:47:59 +0000
Manifest this update:     Sun 19 Oct 2025 06:47:58 +0000
Manifest next update:     Sun 26 Oct 2025 06:47:58 +0000
Files and hashes:         1: XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl (hash: zA2kEIWNEue65gKSJk5G/8TGSEgvYDypPxlYf0+X9CU=)
                          2: 16083E10A95E11EEBC0A7E5BC4F9AE02.roa (hash: oApvSZT8Sv3uSmM9SxIKbWqw6D6WWZsa1SWpMmDS0a4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl
                          rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:47:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B3F2, serialNumber=5CC91AFD5B8B37ED8C509F61189F448E73121F97
        Validity
            Not Before: Oct 19 06:47:58 2025 GMT
            Not After : Oct 26 06:47:58 2025 GMT
        Subject: CN=68f4899f-5131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:62:21:97:4e:83:20:5f:72:4d:8d:27:ba:fd:
                    7a:4a:0b:72:b8:b2:a9:6e:10:ff:0f:d9:0f:94:6c:
                    8e:2d:31:ca:6f:2e:e7:04:dc:94:dc:fe:f5:dc:49:
                    a6:01:01:25:c2:dd:c8:ba:dd:bc:3e:19:4a:50:3d:
                    0c:bb:94:4e:02:63:76:d7:fd:25:a2:f8:0c:87:03:
                    5e:46:64:c8:44:70:52:dd:67:41:de:b2:79:61:e2:
                    ec:52:0c:ca:9e:37:e2:7c:f4:8f:21:23:e1:2f:df:
                    12:c8:c6:47:e2:30:c6:89:53:3d:38:f7:d5:6c:b1:
                    c2:e9:7a:ae:1d:50:6b:2f:f2:8c:3a:12:f7:fe:7b:
                    bc:e5:ae:73:93:9b:8b:ce:a6:19:4c:d7:08:af:38:
                    7f:6f:64:d6:f4:bd:91:9d:dc:31:d0:e3:2d:94:b4:
                    ff:ec:4b:81:b6:95:eb:56:7c:96:21:a5:b0:57:1d:
                    0d:14:52:48:85:55:68:0a:da:4b:56:22:b9:45:09:
                    db:6c:a4:70:c4:0a:26:5d:38:f3:94:a3:03:37:1f:
                    2c:fd:19:05:0e:61:fd:be:83:d9:02:48:90:8b:17:
                    77:e7:7f:15:12:57:3f:04:28:a8:cf:fd:d8:6d:c1:
                    13:5e:8b:3e:c1:87:80:15:b2:c7:3a:e3:0f:d6:b2:
                    e4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D3:EC:96:52:AC:CB:6C:A2:A2:7A:B4:0A:BE:D5:B5:5B:A1:B4:76
            X509v3 Authority Key Identifier:
                keyid:5C:C9:1A:FD:5B:8B:37:ED:8C:50:9F:61:18:9F:44:8E:73:12:1F:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:02:0a:cb:c6:c6:8a:63:3e:18:0b:97:a5:7d:66:db:20:eb:
         2b:ec:22:8a:e4:39:7b:3f:a5:d6:00:b7:98:34:d1:a1:24:ab:
         98:57:86:28:16:ed:a9:72:cf:43:62:13:62:24:b8:8b:ba:48:
         97:c1:8b:23:b3:a0:8b:3a:b5:e2:ac:c2:40:3d:25:c7:cd:a9:
         2f:a1:79:73:be:6b:a8:77:1f:ed:b2:fb:8f:07:1c:57:a2:04:
         1b:d1:82:99:bc:07:08:26:28:81:68:94:2e:88:68:fc:e4:d8:
         d1:d5:f5:94:b3:1b:ab:8e:25:94:8e:31:e5:ee:51:df:c2:e0:
         ce:8a:27:f4:82:2a:f8:ca:90:d6:9e:97:9f:06:fc:74:6d:da:
         5c:e7:d3:f3:c5:e6:12:01:85:51:01:dc:59:c7:5d:c5:d6:fa:
         d0:7f:65:ca:2d:0c:13:41:8e:28:4a:20:8d:e0:38:14:fa:59:
         28:39:13:6e:d8:6e:5b:75:4c:2c:3b:2b:9f:89:76:0d:c3:96:
         fb:5d:0a:a2:55:af:e5:3b:d3:d8:22:3d:67:46:f4:dc:fe:ca:
         a4:75:5b:33:7f:0b:5c:8c:26:7d:e2:b7:6d:14:12:e2:f4:f7:
         ac:e9:f5:d3:0c:48:f7:48:df:3d:8a:60:a8:b9:c4:e4:d3:e7:
         1f:6e:2f:27
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0IzRjIxMTAvBgNVBAUTKDVDQzkxQUZENUI4QjM3RUQ4QzUwOUY2MTE4OUY0NDhF
NzMxMjFGOTcwHhcNMjUxMDE5MDY0NzU4WhcNMjUxMDI2MDY0NzU4WjAYMRYwFAYD
VQQDEw02OGY0ODk5Zi01MTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo2Ihl06DIF9yTY0nuv16SgtyuLKpbhD/D9kPlGyOLTHKby7nBNyU3P713Emm
AQElwt3Iut28PhlKUD0Mu5ROAmN21/0lovgMhwNeRmTIRHBS3WdB3rJ5YeLsUgzK
njfifPSPISPhL98SyMZH4jDGiVM9OPfVbLHC6XquHVBrL/KMOhL3/nu85a5zk5uL
zqYZTNcIrzh/b2TW9L2Rndwx0OMtlLT/7EuBtpXrVnyWIaWwVx0NFFJIhVVoCtpL
ViK5RQnbbKRwxAomXTjzlKMDNx8s/RkFDmH9voPZAkiQixd3538VElc/BCioz/3Y
bcETXos+wYeAFbLHOuMP1rLkIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGHT7JZS
rMtsoqJ6tAq+1bVbobR2MB8GA1UdIwQYMBaAFFzJGv1bizftjFCfYRifRI5zEh+X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjNGMi8wMDUxREJDQzk3
RTIxMUVFODk4MTNEMjNDNEY5QUUwMi9YTWthX1Z1TE4tMk1VSjloR0o5RWpuTVNI
NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hNa2FfVnVMTi0yTVVKOWhHSjlFam5NU0g1Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QjNGMi8wMDUxREJDQzk3RTIxMUVFODk4MTNEMjNDNEY5QUUwMi9YTWthX1Z1TE4t
Mk1VSjloR0o5RWpuTVNINWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBXAgrLxsaKYz4YC5elfWbbIOsr7CKK5Dl7P6XWALeYNNGhJKuYV4Yo
Fu2pcs9DYhNiJLiLukiXwYsjs6CLOrXirMJAPSXHzakvoXlzvmuodx/tsvuPBxxX
ogQb0YKZvAcIJiiBaJQuiGj85NjR1fWUsxurjiWUjjHl7lHfwuDOiif0gir4ypDW
npefBvx0bdpc59PzxeYSAYVRAdxZx13F1vrQf2XKLQwTQY4oSiCN4DgU+lkoORNu
2G5bdUwsOyufiXYNw5b7XQqiVa/lO9PYIj1nRvTc/sqkdVszfwtcjCZ94rdtFBLi
9Pes6fXTDEj3SN89imCoucTk0+cfbi8n
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:45:10 2025 by rpki-client