Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
File:                     5DMXblmum0dk6179BKQ2hWKrXiE.mft (raw, json)
Hash identifier:          wH89tSmo/ShFeRrVyUX/CE/tQYv/OCFOQpMM7WOR9VQ=
Subject key identifier:   E1:FD:5E:83:3E:77:B3:18:2D:B0:38:40:5A:28:2A:92:97:C0:13:93
Authority key identifier: E4:33:17:6E:59:AE:9B:47:64:EB:5E:FD:04:A4:36:85:62:AB:5E:21
Certificate issuer:       /CN=A9180318/serialNumber=E433176E59AE9B4764EB5EFD04A4368562AB5E21
Certificate serial:       34B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
Manifest number:          34B2
Signing time:             Fri 22 Aug 2025 14:41:42 +0000
Manifest this update:     Fri 22 Aug 2025 14:41:42 +0000
Manifest next update:     Fri 29 Aug 2025 14:41:42 +0000
Files and hashes:         1: 5DMXblmum0dk6179BKQ2hWKrXiE.crl (hash: 0JW+hLplwTA1+aWY6NbPGad3CPnKyOtQBbfI0XQhjdw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.crl
                          rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 14:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13490 (0x34b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180318, serialNumber=E433176E59AE9B4764EB5EFD04A4368562AB5E21
        Validity
            Not Before: Aug 22 14:41:42 2025 GMT
            Not After : Aug 29 14:41:42 2025 GMT
        Subject: CN=68a881a6-9f86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:0e:64:b7:20:40:19:7d:02:86:37:b6:dc:9f:
                    f3:0f:e5:ba:1e:a4:1a:8f:29:64:11:66:b7:1b:90:
                    c8:bb:34:cc:76:f1:57:9d:1b:37:12:77:f7:19:e5:
                    43:d5:e9:93:6b:a8:79:64:8a:c6:92:fb:43:7f:f6:
                    ca:82:52:e9:2f:51:63:7b:3f:82:f6:96:a6:fd:d7:
                    5d:0e:cd:80:eb:71:b5:b9:49:ff:e9:65:8a:7b:9d:
                    f2:ec:ea:c7:32:7b:89:6d:f0:78:eb:97:2f:83:21:
                    f3:62:93:f5:7b:3c:c4:c2:17:e0:34:cf:c4:e5:85:
                    e9:15:b5:9a:fb:db:1c:c8:26:4c:26:0c:67:64:59:
                    38:75:cb:98:1b:54:a9:2c:5d:a5:36:b7:55:27:52:
                    8e:16:5f:fb:ff:0f:af:69:84:f6:0d:e6:14:b5:60:
                    37:f4:dc:7a:f7:63:3e:a4:61:c4:d8:92:0e:5e:72:
                    f2:5c:57:49:04:f0:4e:9d:3d:96:b7:69:24:cf:a3:
                    b5:13:3e:20:72:2f:37:26:65:0b:b6:a9:f4:f6:78:
                    4c:4d:9b:72:15:85:ee:43:15:99:e3:b8:3d:bb:11:
                    7b:04:86:ca:e4:c8:1b:ee:5f:24:f1:10:08:2a:46:
                    bb:6c:40:42:f9:1a:03:4b:34:5f:f8:28:13:08:44:
                    13:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:FD:5E:83:3E:77:B3:18:2D:B0:38:40:5A:28:2A:92:97:C0:13:93
            X509v3 Authority Key Identifier:
                keyid:E4:33:17:6E:59:AE:9B:47:64:EB:5E:FD:04:A4:36:85:62:AB:5E:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:82:81:0b:55:ea:ad:48:ac:06:8e:ce:e2:f3:c1:20:4b:2b:
         e4:59:aa:b9:d5:d4:b7:98:00:e0:82:fa:b2:06:26:f3:21:46:
         ce:f1:2e:92:a7:f7:25:ad:02:44:6b:cf:2d:77:5e:c0:bd:d9:
         6f:84:87:7b:bf:2c:d7:be:16:08:ce:89:f8:38:ec:90:21:dc:
         1a:4c:88:ff:8f:df:21:27:94:7d:a8:56:83:d7:0d:38:40:de:
         ad:57:ba:27:56:b7:87:49:7c:ad:43:78:1c:5e:1f:2b:14:b1:
         b4:46:61:c5:3d:51:b1:71:d9:54:55:19:eb:20:22:7c:dd:9c:
         a8:44:fe:4c:16:45:2c:fb:f5:84:78:d7:cb:b4:4d:d3:03:22:
         28:ef:d1:97:55:14:72:dc:fa:c3:f4:e4:b8:c5:e8:af:2f:62:
         92:81:09:ec:3a:63:02:c1:33:4a:3e:fa:eb:52:e9:bc:20:d9:
         a5:b1:c3:53:e0:84:0c:54:21:82:88:d7:dd:84:f6:54:c6:ad:
         b4:c9:9c:50:d7:6b:ef:c8:96:d3:c7:70:47:62:e8:df:68:b4:
         b0:59:fa:73:db:67:35:3f:91:16:86:50:7f:48:ed:48:cb:98:
         d3:80:48:ab:4d:7d:c4:3f:28:c6:b5:86:46:ef:70:41:51:9d:
         30:5b:db:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:39:10 2025 by rpki-client