Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
File:                     5DMXblmum0dk6179BKQ2hWKrXiE.mft (raw, json)
Hash identifier:          vCCJ7CkoR6kjCwq98JS8iB8bfWXWEuRs90Z1JW11nRk=
Subject key identifier:   C4:92:FB:AB:2C:66:94:21:B2:C8:51:80:39:68:9E:81:19:3E:25:1D
Authority key identifier: E4:33:17:6E:59:AE:9B:47:64:EB:5E:FD:04:A4:36:85:62:AB:5E:21
Certificate issuer:       /CN=A9180318/serialNumber=E433176E59AE9B4764EB5EFD04A4368562AB5E21
Certificate serial:       34D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
Manifest number:          34D0
Signing time:             Mon 20 Oct 2025 14:43:55 +0000
Manifest this update:     Mon 20 Oct 2025 14:43:55 +0000
Manifest next update:     Mon 27 Oct 2025 14:43:55 +0000
Files and hashes:         1: 5DMXblmum0dk6179BKQ2hWKrXiE.crl (hash: 8MBfXIH7vVpyNXE8/5aPSG/Synnhk94hN7c7LEEWqxs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.crl
                          rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 14:43:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13520 (0x34d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180318, serialNumber=E433176E59AE9B4764EB5EFD04A4368562AB5E21
        Validity
            Not Before: Oct 20 14:43:55 2025 GMT
            Not After : Oct 27 14:43:55 2025 GMT
        Subject: CN=68f64aab-696e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cd:40:10:ce:4e:b3:a9:fa:a7:d1:73:80:c9:
                    c4:b3:e9:57:4b:af:86:be:0e:59:26:d5:bb:11:92:
                    ef:7b:49:61:e3:1d:24:37:b6:0f:0b:8a:13:52:06:
                    06:ae:66:14:d1:a4:8c:48:38:4a:19:01:9e:e0:d0:
                    01:e8:4d:89:7b:ac:27:f4:34:9d:c8:3b:78:99:82:
                    29:39:d6:0e:82:af:d3:14:99:5e:a7:a7:c4:c4:e0:
                    b3:97:36:11:b7:2e:d5:f1:7c:0d:64:b8:7e:c0:80:
                    d1:fc:59:47:2a:cb:ca:8f:fb:7e:06:c1:8b:e6:0c:
                    9e:6c:f9:39:e4:14:4a:5e:08:2f:96:36:a5:db:5b:
                    4c:4d:ff:70:d2:31:13:29:50:c9:02:91:c5:4d:c7:
                    2c:ae:23:c8:a3:4a:9a:5f:0a:f2:25:1b:97:3a:9f:
                    d5:80:10:ce:77:b1:70:d8:a5:5d:43:25:26:18:bd:
                    c4:d6:2d:8f:78:a5:0a:a6:98:83:5f:c5:3e:28:99:
                    01:2d:4d:41:42:88:6d:ed:18:cd:57:d0:a3:e2:31:
                    d7:ff:94:fc:42:0f:36:17:24:7b:7a:56:f0:6b:ee:
                    1d:c0:22:e5:4b:5e:07:cb:bd:93:dc:06:b6:c9:2b:
                    28:26:5e:74:d0:a6:41:a7:27:22:fe:1b:6d:5e:77:
                    94:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:92:FB:AB:2C:66:94:21:B2:C8:51:80:39:68:9E:81:19:3E:25:1D
            X509v3 Authority Key Identifier:
                keyid:E4:33:17:6E:59:AE:9B:47:64:EB:5E:FD:04:A4:36:85:62:AB:5E:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:3a:3f:e9:e0:66:27:f7:57:42:37:33:ba:8e:d9:84:d2:b2:
         82:c0:b3:6d:1d:6b:88:2b:d5:93:c5:86:a7:7d:0b:b6:df:29:
         ea:9c:01:b1:9e:07:63:b7:6c:5f:93:3e:4e:3c:3c:1f:92:64:
         98:d7:85:19:5c:db:75:e7:b7:be:3b:62:2f:70:b8:5d:3f:fe:
         f4:1b:36:e8:cc:21:d3:f5:ab:19:b0:f4:c7:d9:df:f3:55:d4:
         99:22:02:82:8a:03:cb:33:81:3d:27:58:1c:79:54:0d:5c:9f:
         c2:06:35:df:86:9f:54:30:29:b7:9f:51:e1:6c:5c:f7:f8:a9:
         d4:1d:8a:a2:6d:2c:09:d4:80:50:ea:4f:d4:29:a9:58:3d:9d:
         eb:ff:2a:16:01:f4:61:c7:16:f5:12:ae:1f:22:71:72:a6:6c:
         df:d6:f9:58:72:8e:b3:9d:bd:1b:12:c9:52:17:1f:a9:2a:93:
         b0:87:fa:86:59:4d:3c:6f:4b:c8:18:12:ef:af:44:b1:86:ea:
         4c:06:b1:24:9e:3e:80:66:1e:f2:09:05:e5:59:76:b4:17:96:
         e5:70:66:41:0b:bb:f4:0d:cc:e4:88:28:88:f3:ac:35:9a:01:
         dc:1b:31:91:c8:8c:43:d0:f3:77:44:b2:69:12:db:f1:be:7a:
         47:7e:21:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:35:20 2025 by rpki-client