Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
File:                     5DMXblmum0dk6179BKQ2hWKrXiE.mft (raw, json)
Hash identifier:          XaRI+7CTN9WJQlqzQmBMVZ7mxpMBQZCOzJ5J8iUGZKU=
Subject key identifier:   06:F2:45:7C:8F:93:93:57:44:66:A6:8A:7A:BD:DE:62:43:62:0C:83
Authority key identifier: E4:33:17:6E:59:AE:9B:47:64:EB:5E:FD:04:A4:36:85:62:AB:5E:21
Certificate issuer:       /CN=A9180318/serialNumber=E433176E59AE9B4764EB5EFD04A4368562AB5E21
Certificate serial:       3586
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
Manifest number:          3582
Signing time:             Sun 20 Sep 2026 14:39:46 +0000
Manifest this update:     Sun 20 Sep 2026 14:39:46 +0000
Manifest next update:     Sun 27 Sep 2026 14:39:46 +0000
Files and hashes:         1: 5DMXblmum0dk6179BKQ2hWKrXiE.crl (hash: Vt/nwNgLco5wotDPJYf4kWsCArFDzxYV1FHBzijGytU=)
                          2: 0D982F1A64AA11F189ECB4C08F47A888.roa (hash: RJDowkvQj21DAoDtlHXiHBFKbgMG1RN2lMIdKoUjxS8=)
                          3: 0C8AD31664AA11F189ECB4C08F47A888.roa (hash: /Wy2qPTE6WfGUPhUYPbYqfCwL9kdQFHUmC0zRjD/GhI=)
                          4: 0D1729E264AA11F189ECB4C08F47A888.roa (hash: 155WPnU1Tdj5XYOx03K5ehKGfW7wOh/lahNdk39EN4o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.crl
                          rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 14:39:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13702 (0x3586)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180318, serialNumber=E433176E59AE9B4764EB5EFD04A4368562AB5E21
        Validity
            Not Before: Sep 20 14:39:46 2026 GMT
            Not After : Sep 27 14:39:46 2026 GMT
        Subject: CN=6aaff032-4746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3b:1a:9f:f8:35:98:43:34:75:63:6f:9e:b6:
                    4d:7e:9a:f7:54:77:f4:49:cf:36:6e:a5:e3:0c:ff:
                    f3:4c:45:93:80:21:b1:c4:c5:10:b4:95:6e:0c:ae:
                    33:65:1e:27:1e:9c:da:16:02:be:e5:87:3e:d3:14:
                    56:49:c8:5f:d4:71:d3:c9:50:36:96:7f:da:a2:ed:
                    00:f2:d9:35:e5:de:34:05:e4:6e:ae:1a:c2:8f:05:
                    7d:5b:88:be:e4:8c:60:cf:dc:8f:94:17:72:79:fb:
                    04:91:45:a7:ba:b0:6f:30:e1:23:4d:79:24:65:d4:
                    69:b2:0b:c4:51:d7:0e:a0:0f:9f:0a:06:3c:47:31:
                    ee:30:78:1e:53:3b:8f:57:74:1c:3d:c4:39:d7:08:
                    e9:c8:2a:56:97:85:a8:7d:17:64:e8:6c:75:c4:17:
                    d5:02:ce:70:d6:64:7a:2e:47:bf:dc:b2:0e:03:6a:
                    1c:bb:ac:37:18:f4:f7:ea:b2:e6:1b:2c:93:4d:37:
                    70:34:b3:5a:ea:51:a3:b1:9c:66:39:3b:05:ec:c3:
                    5c:93:13:84:ab:2a:d2:83:67:7f:63:a8:af:a7:be:
                    da:28:59:cc:51:94:96:ad:8e:17:e2:7a:af:85:2a:
                    dd:42:15:2c:41:96:31:ec:45:32:d5:dc:e9:50:5b:
                    40:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F2:45:7C:8F:93:93:57:44:66:A6:8A:7A:BD:DE:62:43:62:0C:83
            X509v3 Authority Key Identifier:
                keyid:E4:33:17:6E:59:AE:9B:47:64:EB:5E:FD:04:A4:36:85:62:AB:5E:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:44:fe:10:f1:58:10:78:23:18:88:c6:c1:7e:7b:d8:fe:60:
         c7:66:c2:62:5e:e1:2a:13:a7:77:31:8c:f2:6a:21:c1:d2:e0:
         10:0c:7f:43:5a:5f:e4:d7:7e:18:d7:47:3b:2c:41:36:2a:8f:
         5a:d9:50:8b:ba:cd:cc:79:05:85:c1:27:b4:7b:61:d3:3d:72:
         6e:3f:95:3b:77:47:7b:82:0d:20:88:6f:bb:61:ff:c8:f5:71:
         f1:5f:6e:df:34:f5:b6:10:56:a3:9d:ce:27:94:58:43:30:76:
         03:dd:35:bb:35:4c:43:34:64:ac:70:f7:e8:f8:02:f0:40:e8:
         b4:49:03:61:1d:05:99:6f:ea:f3:6f:29:c7:6a:9b:a1:f2:d7:
         8e:d8:49:09:8b:4e:51:35:bc:0a:b1:28:cf:d7:69:12:a6:78:
         97:a3:74:d4:1a:5f:72:f6:0e:53:2f:61:1b:51:e3:a0:70:9d:
         f2:9f:57:a9:d0:a3:0c:7b:a3:97:11:f8:9f:85:c0:b5:a9:3b:
         97:e6:f1:11:78:d4:30:76:ae:66:26:7c:04:68:03:2f:00:aa:
         92:60:58:89:e4:1b:55:7a:da:04:bb:9c:31:48:2b:5f:7a:76:
         61:4c:ba:c8:9c:4c:6d:82:02:de:d6:da:a5:d9:d6:c4:92:9a:
         40:62:e8:e4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODAzMTgxMTAvBgNVBAUTKEU0MzMxNzZFNTlBRTlCNDc2NEVCNUVGRDA0QTQzNjg1
NjJBQjVFMjEwHhcNMjYwOTIwMTQzOTQ2WhcNMjYwOTI3MTQzOTQ2WjAYMRYwFAYD
VQQDEw02YWFmZjAzMi00NzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtDsan/g1mEM0dWNvnrZNfpr3VHf0Sc82bqXjDP/zTEWTgCGxxMUQtJVuDK4z
ZR4nHpzaFgK+5Yc+0xRWSchf1HHTyVA2ln/aou0A8tk15d40BeRurhrCjwV9W4i+
5Ixgz9yPlBdyefsEkUWnurBvMOEjTXkkZdRpsgvEUdcOoA+fCgY8RzHuMHgeUzuP
V3QcPcQ51wjpyCpWl4WofRdk6Gx1xBfVAs5w1mR6Lke/3LIOA2ocu6w3GPT36rLm
GyyTTTdwNLNa6lGjsZxmOTsF7MNckxOEqyrSg2d/Y6ivp77aKFnMUZSWrY4X4nqv
hSrdQhUsQZYx7EUy1dzpUFtAYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAbyRXyP
k5NXRGaminq93mJDYgyDMB8GA1UdIwQYMBaAFOQzF25ZrptHZOte/QSkNoViq14h
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDMxOC9CNTcxOUREMjFE
OEYxMUUyQjA1NzA3RUYwOEIwMkNEMi81RE1YYmxtdW0wZGs2MTc5QktRMmhXS3JY
aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVETVhibG11bTBkazYxNzlCS1EyaFdLclhpRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MDMxOC9CNTcxOUREMjFEOEYxMUUyQjA1NzA3RUYwOEIwMkNEMi81RE1YYmxtdW0w
ZGs2MTc5QktRMmhXS3JYaUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALET+EPFYEHgjGIjGwX572P5gx2bCYl7hKhOndzGM8mohwdLgEAx/Q1pf5Nd+
GNdHOyxBNiqPWtlQi7rNzHkFhcEntHth0z1ybj+VO3dHe4INIIhvu2H/yPVx8V9u
3zT1thBWo53OJ5RYQzB2A901uzVMQzRkrHD36PgC8EDotEkDYR0FmW/q828px2qb
ofLXjthJCYtOUTW8CrEoz9dpEqZ4l6N01BpfcvYOUy9hG1HjoHCd8p9XqdCjDHuj
lxH4n4XAtak7l+bxEXjUMHauZiZ8BGgDLwCqkmBYieQbVXraBLucMUgrX3p2YUy6
yJxMbYIC3tbapdnWxJKaQGLo5A==
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:50:46 2026 by rpki-client