Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
File:                     5DMXblmum0dk6179BKQ2hWKrXiE.mft (raw, json)
Hash identifier:          NK4W3hUGCax5bwgmW7AnZItX3NIJCT7IMETnecplHjI=
Subject key identifier:   09:54:26:49:D8:7F:B2:93:48:84:C5:81:EC:44:62:5C:AD:3B:41:0A
Authority key identifier: E4:33:17:6E:59:AE:9B:47:64:EB:5E:FD:04:A4:36:85:62:AB:5E:21
Certificate issuer:       /CN=A9180318/serialNumber=E433176E59AE9B4764EB5EFD04A4368562AB5E21
Certificate serial:       353D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
Manifest number:          353D
Signing time:             Tue 12 May 2026 14:41:47 +0000
Manifest this update:     Tue 12 May 2026 14:41:46 +0000
Manifest next update:     Tue 19 May 2026 14:41:46 +0000
Files and hashes:         1: 5DMXblmum0dk6179BKQ2hWKrXiE.crl (hash: 24YNDX8pY3WYSv164n4eDA1H1huzaFYQ5NEn3TLobHo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.crl
                          rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:41:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13629 (0x353d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180318, serialNumber=E433176E59AE9B4764EB5EFD04A4368562AB5E21
        Validity
            Not Before: May 12 14:41:46 2026 GMT
            Not After : May 19 14:41:46 2026 GMT
        Subject: CN=6a033c2b-168d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:01:d7:5b:8f:22:b7:4b:9e:27:38:da:0d:73:
                    5d:f9:62:46:61:19:ee:62:f4:bc:27:8f:33:a6:94:
                    c1:40:df:af:25:0a:04:c2:57:ac:7e:25:6c:b1:a4:
                    a0:9b:68:13:43:b9:11:f2:a8:35:89:31:ba:b6:2a:
                    19:c1:11:3e:07:05:80:7c:a7:7c:d2:a4:03:0e:42:
                    e7:7c:cf:11:d2:4d:6b:7a:6c:47:24:49:95:cc:b3:
                    0d:68:df:4f:0a:5e:99:61:82:14:30:57:ee:18:63:
                    d1:09:48:d7:4d:eb:5d:22:90:96:40:05:68:5f:9e:
                    90:5d:42:1f:1b:71:80:e9:38:f1:81:7a:c6:f2:bf:
                    cd:08:5e:97:f7:48:d1:99:75:fd:43:dd:62:32:3b:
                    f9:8a:71:fa:19:85:ed:ce:19:8f:71:96:a7:93:d0:
                    86:be:ae:23:7f:bb:21:22:3c:a6:a9:3c:c8:b3:61:
                    28:13:51:93:d0:87:e9:2e:90:e9:fb:45:b2:61:ed:
                    a2:e8:b1:7a:52:96:ee:f5:c1:ae:58:3d:02:f8:9c:
                    37:5f:a3:ba:21:0a:49:0b:46:7a:99:c9:96:89:b9:
                    39:2f:a6:ff:b4:67:f8:c2:74:a8:47:df:32:d2:43:
                    97:9c:5e:a2:08:8e:ca:61:c5:bf:62:67:b6:0e:ad:
                    92:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:54:26:49:D8:7F:B2:93:48:84:C5:81:EC:44:62:5C:AD:3B:41:0A
            X509v3 Authority Key Identifier:
                keyid:E4:33:17:6E:59:AE:9B:47:64:EB:5E:FD:04:A4:36:85:62:AB:5E:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:1e:ba:48:62:a0:2b:96:88:5f:70:69:80:ab:0a:7e:08:c3:
         db:74:c2:2e:3e:66:86:98:d5:68:66:ba:bf:27:35:f3:c9:93:
         02:4c:d6:31:87:52:bc:4e:c7:08:ff:65:06:a1:3a:3e:08:41:
         18:b2:8e:49:69:e9:f5:85:26:90:37:04:fa:77:b2:8c:f1:12:
         38:f9:0b:af:17:cf:3a:af:8c:2e:25:c7:e8:d3:10:d1:a2:51:
         e1:a2:0c:26:27:9f:4c:da:52:48:a3:bb:1b:35:c1:44:fe:15:
         3e:83:9b:e5:c4:51:36:b8:f1:25:45:2b:5d:50:03:bb:77:16:
         cd:bf:85:70:c5:23:d6:b4:59:00:77:2c:6d:6a:ad:6c:14:14:
         35:99:05:33:f0:a5:d6:03:b1:44:3d:21:4b:f4:9c:59:f2:27:
         fc:cc:b8:ac:37:0a:e9:e1:e5:b0:4e:ba:ee:d7:5f:a6:2f:45:
         d9:2a:46:04:6b:ab:f3:26:3e:ff:dc:ef:06:c3:29:83:fe:2c:
         d5:45:26:c5:e8:bb:14:01:ef:7f:89:30:e4:15:68:8c:5b:e7:
         f7:74:49:e2:44:53:61:3e:96:2f:3a:a1:f3:0a:c6:46:1d:33:
         51:c8:13:2e:6e:b9:94:b7:7e:02:73:8e:42:f9:d1:4e:77:ff:
         d9:9b:de:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:07:01 2026 by rpki-client