Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
File:                     5DMXblmum0dk6179BKQ2hWKrXiE.mft (raw, json)
Hash identifier:          kiJzqQ7xmOJrix9ocyeD17hMnWiFnkpXsbJ8VjVV18s=
Subject key identifier:   7D:3F:DB:9A:79:99:32:C0:01:63:7A:F0:62:46:56:A3:46:90:8E:EC
Authority key identifier: E4:33:17:6E:59:AE:9B:47:64:EB:5E:FD:04:A4:36:85:62:AB:5E:21
Certificate issuer:       /CN=A9180318/serialNumber=E433176E59AE9B4764EB5EFD04A4368562AB5E21
Certificate serial:       35A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
Manifest number:          359D
Signing time:             Sun 08 Nov 2026 14:40:30 +0000
Manifest this update:     Sun 08 Nov 2026 14:40:29 +0000
Manifest next update:     Sun 15 Nov 2026 14:40:29 +0000
Files and hashes:         1: 5DMXblmum0dk6179BKQ2hWKrXiE.crl (hash: qcY6WItSoFHCLlqNU/Ll43Q9TIVymi82C4TuVjUw0fg=)
                          2: lbI3LKiuMO1DzS2cXRakMPq9YWA.asa (hash: 5hom5fpH9GuHQNVEXUcJLq7F3Pthu4dI0HGS8eiaFqc=)
                          3: 0D1729E264AA11F189ECB4C08F47A888.roa (hash: 155WPnU1Tdj5XYOx03K5ehKGfW7wOh/lahNdk39EN4o=)
                          4: 0C8AD31664AA11F189ECB4C08F47A888.roa (hash: /Wy2qPTE6WfGUPhUYPbYqfCwL9kdQFHUmC0zRjD/GhI=)
                          5: 0D982F1A64AA11F189ECB4C08F47A888.roa (hash: RJDowkvQj21DAoDtlHXiHBFKbgMG1RN2lMIdKoUjxS8=)
                          6: xCBtiXoxEeBwLdrIBRXRfhp0KUo.asa (hash: f6F1TU2tpXxcNhbqJ4LaG2B43xkhI847rDGuIYNAJjo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.crl
                          rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Nov 2026 14:40:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13731 (0x35a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180318, serialNumber=E433176E59AE9B4764EB5EFD04A4368562AB5E21
        Validity
            Not Before: Nov  8 14:40:29 2026 GMT
            Not After : Nov 15 14:40:29 2026 GMT
        Subject: CN=6af089dd-99b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:46:5b:34:ed:f6:ea:26:3e:90:4f:b0:bb:fc:
                    52:c0:dd:95:a7:be:79:6b:d9:07:44:d3:12:e0:48:
                    e9:4f:18:df:65:25:d3:d6:9a:72:f7:ab:eb:14:b2:
                    66:6a:95:a4:5e:b4:4f:5e:60:b5:f1:07:b9:d4:e2:
                    67:09:33:82:6f:4e:e0:94:43:61:da:71:d7:33:06:
                    b4:9f:61:28:53:77:a6:c3:c4:9b:cf:52:86:95:86:
                    e5:e5:1c:22:06:34:b4:03:a1:64:32:8e:88:ce:46:
                    ab:80:7c:39:51:d9:29:24:c0:a7:b4:37:c9:30:c1:
                    c6:47:e2:9d:a3:07:6c:02:e4:5c:84:7d:6c:8c:f0:
                    e3:f1:5a:2d:a7:43:8c:e4:f1:be:d7:38:d4:51:08:
                    a9:0e:26:8f:3d:cd:90:2a:75:43:90:ac:92:39:e3:
                    01:94:76:ba:a0:9c:10:d3:48:ec:be:18:6e:3f:4b:
                    28:42:4d:df:71:14:33:7e:56:33:b0:1d:eb:a7:97:
                    0c:68:83:55:e2:aa:ce:82:48:b8:cf:b5:8f:2b:0e:
                    32:eb:fd:8f:91:55:11:85:e0:d4:98:f6:45:88:3b:
                    63:92:64:fb:72:bd:85:3e:8d:d4:01:ec:97:4f:66:
                    09:0f:7e:98:08:97:5b:bb:e4:61:73:e7:f7:80:22:
                    f8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:3F:DB:9A:79:99:32:C0:01:63:7A:F0:62:46:56:A3:46:90:8E:EC
            X509v3 Authority Key Identifier:
                keyid:E4:33:17:6E:59:AE:9B:47:64:EB:5E:FD:04:A4:36:85:62:AB:5E:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:00:01:f7:fa:c0:c9:e2:9c:b1:0a:1e:a9:12:0b:a8:7d:f8:
         40:0e:5b:dd:d5:b6:a7:5d:38:eb:c1:ca:b4:ca:47:d4:0b:17:
         cd:47:e0:79:68:55:b5:cf:80:4c:31:8e:c6:86:29:8b:cf:c5:
         b3:08:2a:af:8e:d6:26:50:92:c5:a7:bd:78:36:0b:5f:ba:2d:
         c3:66:4f:9c:fa:7f:d9:32:38:01:52:6a:cc:f1:37:25:b0:78:
         7b:77:49:48:a0:b7:eb:d9:00:a5:df:76:1d:15:b6:54:a4:90:
         42:97:16:56:dc:df:19:23:bf:65:1a:b8:0c:3c:79:d4:be:ec:
         82:6f:88:67:54:52:0e:72:63:04:b6:a4:02:48:25:b2:7d:a5:
         7f:cc:c1:c9:6c:c8:0f:d3:97:90:a5:d2:96:52:9b:ab:52:97:
         a3:12:ac:29:ac:00:fe:fd:e6:63:15:51:41:8a:d8:38:d1:f2:
         b5:99:96:97:78:ed:d2:54:9f:be:c3:b1:7e:73:4b:ac:58:3b:
         14:16:68:aa:e7:aa:4a:35:de:7e:62:19:d3:6f:4e:42:eb:66:
         bf:ed:f2:ec:e6:a0:6e:4e:c3:7a:a1:40:17:a9:0a:2f:4f:19:
         38:f9:6f:78:9d:e2:c5:3f:8e:db:0f:cc:bf:88:58:28:8b:3a:
         e8:fc:8c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 10:10:49 2026 by rpki-client