Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
File:                     5DMXblmum0dk6179BKQ2hWKrXiE.mft (raw, json)
Hash identifier:          ale6tBhpfye9IdYMBMokSMtZv+bqkQsfrDxkRn4WkEo=
Subject key identifier:   16:B6:55:EF:7C:22:A0:BA:2C:D2:26:63:3E:52:8E:F9:CE:B6:0F:20
Authority key identifier: E4:33:17:6E:59:AE:9B:47:64:EB:5E:FD:04:A4:36:85:62:AB:5E:21
Certificate issuer:       /CN=A9180318/serialNumber=E433176E59AE9B4764EB5EFD04A4368562AB5E21
Certificate serial:       3585
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
Manifest number:          3581
Signing time:             Fri 18 Sep 2026 14:40:10 +0000
Manifest this update:     Fri 18 Sep 2026 14:40:10 +0000
Manifest next update:     Fri 25 Sep 2026 14:40:10 +0000
Files and hashes:         1: 5DMXblmum0dk6179BKQ2hWKrXiE.crl (hash: vKChDciacOlxNEW/2a6708YhMfGihc6ZwDakbB5Yd5g=)
                          2: 0C8AD31664AA11F189ECB4C08F47A888.roa (hash: /Wy2qPTE6WfGUPhUYPbYqfCwL9kdQFHUmC0zRjD/GhI=)
                          3: 0D982F1A64AA11F189ECB4C08F47A888.roa (hash: RJDowkvQj21DAoDtlHXiHBFKbgMG1RN2lMIdKoUjxS8=)
                          4: 0D1729E264AA11F189ECB4C08F47A888.roa (hash: 155WPnU1Tdj5XYOx03K5ehKGfW7wOh/lahNdk39EN4o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.crl
                          rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13701 (0x3585)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180318, serialNumber=E433176E59AE9B4764EB5EFD04A4368562AB5E21
        Validity
            Not Before: Sep 18 14:40:10 2026 GMT
            Not After : Sep 25 14:40:10 2026 GMT
        Subject: CN=6aad4d4a-829b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c8:1c:02:d2:de:1f:e0:cb:d1:42:75:43:a8:
                    0c:89:53:5d:7a:ed:a8:0f:36:9a:92:4c:18:73:38:
                    7e:d6:c5:f0:d3:08:23:d9:8d:4f:76:57:de:6f:69:
                    bc:ce:9b:01:05:39:eb:e7:3c:c4:3b:41:00:7e:45:
                    51:bf:3f:f2:0d:30:b2:02:bb:34:00:b5:b2:7f:5c:
                    f1:12:6c:02:a9:8c:05:2a:86:3b:7e:37:11:07:1c:
                    ac:bf:43:7f:3a:97:77:50:b1:a5:80:d5:9d:a9:ce:
                    04:73:4c:3a:15:46:69:8a:66:d5:24:8f:9d:27:9f:
                    9d:aa:16:34:36:1e:c0:42:04:8a:e8:e3:03:f2:28:
                    b4:44:b8:2f:d2:4a:96:85:68:f3:75:3e:cd:d3:41:
                    dc:5f:09:76:fe:72:8a:c0:a9:2c:5b:2f:0b:c2:79:
                    6c:a9:ee:6a:3e:8b:51:d3:4a:79:b0:ec:1d:eb:d0:
                    2b:5e:66:41:27:da:c2:10:83:77:6c:ae:38:3d:89:
                    cd:ab:4b:d6:34:39:bd:77:e3:47:76:33:30:83:7a:
                    be:8e:4c:2a:76:76:a7:f1:fd:6c:b9:50:1a:d1:b2:
                    b8:8a:21:f8:56:34:6b:49:dd:6e:3f:ba:9e:b2:a0:
                    0c:b0:05:10:54:9c:c0:0c:42:af:65:e2:cb:7d:eb:
                    ba:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B6:55:EF:7C:22:A0:BA:2C:D2:26:63:3E:52:8E:F9:CE:B6:0F:20
            X509v3 Authority Key Identifier:
                keyid:E4:33:17:6E:59:AE:9B:47:64:EB:5E:FD:04:A4:36:85:62:AB:5E:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:3d:45:8d:d1:34:fb:f0:6a:c6:04:75:6c:27:5c:70:a7:37:
         58:9b:04:fa:20:d7:ec:46:d2:a2:8f:93:ea:df:0d:8e:e5:76:
         86:8f:97:ed:ed:1f:e6:cc:2b:af:cb:5b:85:82:2a:4f:16:a0:
         7f:00:92:f7:ff:fc:5b:e9:4f:65:4d:fc:3d:68:7b:c8:6f:28:
         b1:90:fc:c1:9d:25:60:d8:99:ae:ab:ac:29:4a:15:d7:18:7f:
         ee:22:41:65:15:8a:7a:42:be:82:27:34:5c:89:48:30:a6:a7:
         1f:1a:ce:81:bc:37:f4:64:1d:09:d6:f4:27:52:a8:b0:44:5d:
         06:a3:ae:26:82:49:f5:31:b2:ea:d1:17:b3:bd:4f:5b:4d:3a:
         ec:e0:e4:4b:bd:b2:7f:7e:41:31:98:b1:7b:ca:1b:49:cb:12:
         a5:c9:b9:23:5f:46:11:ab:25:29:ac:a5:52:71:5b:f8:7f:cc:
         51:68:f2:fd:aa:2d:7b:a9:be:c8:51:04:47:b9:39:d3:82:11:
         54:a2:51:19:fa:f2:c7:74:53:b3:eb:04:e1:ce:dc:53:42:bf:
         49:85:76:ef:e2:9d:61:82:84:28:23:79:52:81:5c:9e:3b:e4:
         ba:7a:b3:6f:51:ae:bb:92:43:1f:fd:2a:ea:02:de:fd:e1:6b:
         85:0a:a8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 04:47:21 2026 by rpki-client