Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
File:                     5DMXblmum0dk6179BKQ2hWKrXiE.mft (raw, json)
Hash identifier:          Z+rTZeSx5/n8ff11Ny+5aIR1NYuwtKKPQvPaVPLiEC8=
Subject key identifier:   9B:88:C0:68:5E:18:69:78:43:9C:35:E7:3C:99:CC:65:26:D4:8D:AD
Authority key identifier: E4:33:17:6E:59:AE:9B:47:64:EB:5E:FD:04:A4:36:85:62:AB:5E:21
Certificate issuer:       /CN=A9180318/serialNumber=E433176E59AE9B4764EB5EFD04A4368562AB5E21
Certificate serial:       3517
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
Manifest number:          3517
Signing time:             Sat 28 Feb 2026 14:42:16 +0000
Manifest this update:     Sat 28 Feb 2026 14:42:16 +0000
Manifest next update:     Sat 07 Mar 2026 14:42:16 +0000
Files and hashes:         1: 5DMXblmum0dk6179BKQ2hWKrXiE.crl (hash: m5BY6jw42uN/I/U5HdJFprwGvusyS9wPfc0P+hSHq0Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.crl
                          rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 14:42:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13591 (0x3517)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180318, serialNumber=E433176E59AE9B4764EB5EFD04A4368562AB5E21
        Validity
            Not Before: Feb 28 14:42:16 2026 GMT
            Not After : Mar  7 14:42:16 2026 GMT
        Subject: CN=69a2fec8-bc9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:af:85:18:b9:14:1d:4f:fa:2f:78:75:fe:22:
                    f1:4d:04:8b:eb:d7:b8:e3:69:ae:da:39:9a:3f:4c:
                    5e:30:c8:e0:b1:8a:6d:d0:4b:9b:1a:fa:28:6c:69:
                    9a:b6:5a:ff:48:51:b9:81:59:df:f0:53:c9:94:f1:
                    fb:b8:bd:b8:27:9d:e4:f1:7d:b7:64:44:dd:ff:56:
                    df:b2:23:03:2b:87:30:f0:70:45:ec:04:9a:94:3a:
                    03:cb:2e:0d:9b:02:a0:e7:62:38:50:06:ce:0f:a0:
                    02:3d:42:1c:21:79:dd:b7:be:94:6e:ce:6f:74:43:
                    b6:7f:d6:ba:a0:0e:e4:bc:8a:45:67:f1:e9:7f:6e:
                    a2:1c:7c:80:b7:e3:86:5f:0d:d4:ca:81:00:d9:fd:
                    22:d4:d8:1a:3f:b9:0a:1c:b1:d9:86:35:a9:45:12:
                    b5:9f:7e:54:42:78:f8:9f:53:fd:36:b2:de:22:db:
                    be:11:d4:b4:75:cf:c1:11:b2:d3:72:01:7e:2e:89:
                    40:dd:15:f2:2b:70:8e:da:50:6d:81:d8:14:62:fd:
                    b7:3b:de:a1:2d:0a:6d:33:9c:f6:9b:9c:bc:78:c0:
                    de:37:9c:a8:fb:0c:38:2a:13:14:24:33:0f:64:83:
                    5c:67:63:7a:c7:c9:7f:22:35:86:18:e5:9a:9a:bc:
                    df:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:88:C0:68:5E:18:69:78:43:9C:35:E7:3C:99:CC:65:26:D4:8D:AD
            X509v3 Authority Key Identifier:
                keyid:E4:33:17:6E:59:AE:9B:47:64:EB:5E:FD:04:A4:36:85:62:AB:5E:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:e7:28:04:c7:ea:14:d2:e9:46:ba:5f:cd:5a:a2:6d:40:67:
         bb:6a:e6:b3:89:55:f2:c6:fd:46:94:42:71:8e:d8:81:df:56:
         11:64:ac:be:6b:2c:5e:e3:51:5e:c2:a8:fd:d6:2d:d2:3f:7b:
         d9:59:e9:28:4c:ac:68:60:24:62:8d:60:12:e3:61:cc:e7:0f:
         1a:89:a6:36:31:fa:1b:f0:32:9e:01:62:54:2d:56:f9:69:c4:
         4f:bd:0c:0f:14:74:39:f6:52:02:a3:b8:1a:a7:e3:21:20:7b:
         08:0b:a6:52:48:86:09:5e:49:de:d6:93:2b:ab:4a:6e:fc:01:
         14:9a:02:1e:11:fa:74:3b:8d:1f:d4:b0:5b:08:61:ab:76:6d:
         f9:05:e5:ba:40:0e:b4:08:5c:ce:1f:35:f6:64:90:7a:45:04:
         32:e6:77:1e:29:79:54:a1:3b:3d:c9:4f:a7:3f:f9:51:82:82:
         45:e8:12:32:74:22:72:f1:8c:c5:3f:18:17:e0:fa:b9:f3:e4:
         07:24:08:aa:74:34:8f:26:04:ab:62:7a:4c:d4:37:40:42:aa:
         2a:c2:16:f6:9e:77:3b:70:7c:76:29:00:0b:07:95:da:87:d6:
         fa:fa:51:d9:ab:4e:dc:6a:2d:27:65:f7:2f:62:27:96:cb:f4:
         94:13:a0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:17:02 2026 by rpki-client