Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft
File:                     2DPFFS4_LSebiQT4PQDdkKymK9U.mft (raw, json)
Hash identifier:          /8w6tWt/2AZEGl4p/4Q/vJBx8R9WsZGzVxOfxL1s5NM=
Subject key identifier:   D0:14:62:3F:A2:A1:72:9A:4A:10:C6:1B:C6:F5:74:66:8B:69:99:B7
Authority key identifier: D8:33:C5:15:2E:3F:2D:27:9B:89:04:F8:3D:00:DD:90:AC:A6:2B:D5
Certificate issuer:       /CN=A9186D9F/serialNumber=D833C5152E3F2D279B8904F83D00DD90ACA62BD5
Certificate serial:       014A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DPFFS4_LSebiQT4PQDdkKymK9U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft
Manifest number:          014A
Signing time:             Wed 25 Mar 2026 04:22:50 +0000
Manifest this update:     Wed 25 Mar 2026 04:22:50 +0000
Manifest next update:     Wed 01 Apr 2026 04:22:50 +0000
Files and hashes:         1: 2DPFFS4_LSebiQT4PQDdkKymK9U.crl (hash: Nn0v+ZxTF50ZF1qQHtYw6DZOBXbs4lbaJeM5gkZOVFs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.crl
                          rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DPFFS4_LSebiQT4PQDdkKymK9U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 330 (0x14a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186D9F, serialNumber=D833C5152E3F2D279B8904F83D00DD90ACA62BD5
        Validity
            Not Before: Mar 25 04:22:50 2026 GMT
            Not After : Apr  1 04:22:50 2026 GMT
        Subject: CN=69c3631a-5e2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:b7:7a:58:39:c5:8d:e6:ef:6a:ef:20:f5:1e:
                    4c:f3:9b:ae:1d:89:04:d6:b9:77:cc:fa:9b:60:0f:
                    67:b4:9f:c7:2e:5b:8f:bc:48:9d:80:18:56:b5:d6:
                    cc:7c:a6:8d:5e:b0:21:b9:77:0e:e8:1d:4c:2f:42:
                    6a:18:1e:39:da:9d:d9:fc:29:9b:4e:85:63:b3:91:
                    d1:19:2e:f5:29:5f:5f:2d:37:e9:2c:cd:53:81:81:
                    51:da:2e:02:b7:a5:33:af:a6:c0:8a:fd:25:2d:c0:
                    ad:a2:03:84:a9:63:9c:49:f8:71:5e:7b:f0:31:1c:
                    ea:93:df:d4:76:65:ec:b4:4d:15:bf:b6:a6:f9:ab:
                    62:d7:cd:09:a7:94:19:5c:6a:11:6e:c2:ff:42:b4:
                    7d:44:68:87:f3:75:1b:ec:20:23:ae:3c:b5:02:4e:
                    18:fb:14:08:c1:7a:84:1a:60:f8:11:79:ff:d5:45:
                    a2:19:13:81:30:29:46:61:a7:21:b2:8f:a6:37:3a:
                    94:55:eb:c2:dd:e1:3e:ee:d8:c6:3e:0d:1f:77:1b:
                    5b:4e:cc:10:59:67:6a:0e:a0:fc:21:1f:8d:20:d7:
                    eb:cf:3f:c7:8d:1a:f8:39:78:18:24:e4:64:3b:83:
                    9c:19:9c:98:28:a8:36:59:75:e2:83:1e:f7:71:1c:
                    88:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:14:62:3F:A2:A1:72:9A:4A:10:C6:1B:C6:F5:74:66:8B:69:99:B7
            X509v3 Authority Key Identifier:
                keyid:D8:33:C5:15:2E:3F:2D:27:9B:89:04:F8:3D:00:DD:90:AC:A6:2B:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DPFFS4_LSebiQT4PQDdkKymK9U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:9d:fc:08:84:ba:78:76:f7:13:5c:1f:a9:44:c4:db:d9:07:
         e1:06:47:b4:14:0a:8d:c2:c0:e1:65:52:20:b5:cc:57:b7:f9:
         98:7c:3e:22:9e:af:98:4d:42:04:5f:a8:b3:8d:0d:19:11:c4:
         57:f4:a8:50:1c:ea:d6:53:5c:5f:24:23:29:53:2b:1a:96:20:
         fb:e1:3d:19:8c:53:e8:81:7f:69:c2:60:66:18:30:7b:10:46:
         99:5f:47:84:f4:a8:f2:bf:e3:63:9a:5f:aa:90:cb:5f:19:f2:
         dc:91:46:83:23:11:b2:8f:a2:8a:16:d3:db:be:78:54:8d:ab:
         b6:3e:9f:70:2a:75:00:81:82:90:22:6d:c0:51:20:ea:c3:f7:
         ca:7e:95:f4:d4:49:c4:56:f5:ea:1e:d4:29:20:34:de:9d:d7:
         92:b6:f7:b8:76:86:27:3e:1b:e6:8a:22:dd:21:ec:01:75:0b:
         22:cf:46:ef:87:30:45:eb:13:32:86:18:2e:d6:bc:14:71:01:
         78:d5:de:ec:c3:d6:09:52:66:78:39:13:45:a8:dc:f9:0c:10:
         e8:1e:ba:f1:70:37:b4:9f:a9:b6:ba:40:54:31:79:ed:e5:76:
         1e:2a:bd:40:44:55:8f:f7:c4:c0:5e:d5:5d:ca:ea:ed:f4:f1:
         a2:fc:1f:97
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODZEOUYxMTAvBgNVBAUTKEQ4MzNDNTE1MkUzRjJEMjc5Qjg5MDRGODNEMDBERDkw
QUNBNjJCRDUwHhcNMjYwMzI1MDQyMjUwWhcNMjYwNDAxMDQyMjUwWjAYMRYwFAYD
VQQDEw02OWMzNjMxYS01ZTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA77d6WDnFjebvau8g9R5M85uuHYkE1rl3zPqbYA9ntJ/HLluPvEidgBhWtdbM
fKaNXrAhuXcO6B1ML0JqGB452p3Z/CmbToVjs5HRGS71KV9fLTfpLM1TgYFR2i4C
t6Uzr6bAiv0lLcCtogOEqWOcSfhxXnvwMRzqk9/UdmXstE0Vv7am+ati180Jp5QZ
XGoRbsL/QrR9RGiH83Ub7CAjrjy1Ak4Y+xQIwXqEGmD4EXn/1UWiGROBMClGYach
so+mNzqUVevC3eE+7tjGPg0fdxtbTswQWWdqDqD8IR+NINfrzz/HjRr4OXgYJORk
O4OcGZyYKKg2WXXigx73cRyIBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNAUYj+i
oXKaShDGG8b1dGaLaZm3MB8GA1UdIwQYMBaAFNgzxRUuPy0nm4kE+D0A3ZCspivV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkQ5Ri9CMjkwQTM0NjJF
MDQxMUVGODZGMjlENzlDNEY5QUUwMi8yRFBGRlM0X0xTZWJpUVQ0UFFEZGtLeW1L
OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJEUEZGUzRfTFNlYmlRVDRQUURka0t5bUs5VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NkQ5Ri9CMjkwQTM0NjJFMDQxMUVGODZGMjlENzlDNEY5QUUwMi8yRFBGRlM0X0xT
ZWJpUVQ0UFFEZGtLeW1LOVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAL538CIS6eHb3E1wfqUTE29kH4QZHtBQKjcLA4WVSILXMV7f5mHw+Ip6vmE1C
BF+os40NGRHEV/SoUBzq1lNcXyQjKVMrGpYg++E9GYxT6IF/acJgZhgwexBGmV9H
hPSo8r/jY5pfqpDLXxny3JFGgyMRso+iihbT2754VI2rtj6fcCp1AIGCkCJtwFEg
6sP3yn6V9NRJxFb16h7UKSA03p3Xkrb3uHaGJz4b5ooi3SHsAXULIs9G74cwResT
MoYYLta8FHEBeNXe7MPWCVJmeDkTRajc+QwQ6B668XA3tJ+ptrpAVDF57eV2Hiq9
QERVj/fEwF7VXcrq7fTxovwflw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:44:13 2026 by rpki-client