Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft
File:                     2DPFFS4_LSebiQT4PQDdkKymK9U.mft (raw, json)
Hash identifier:          1yVqQY4gaVBsPeGMVz60RiRrFPFRf7i0yx0d4ZTWKgI=
Subject key identifier:   45:2A:93:6D:CC:A2:70:77:5E:C6:B7:8C:14:6C:76:DB:1D:0B:16:D1
Authority key identifier: D8:33:C5:15:2E:3F:2D:27:9B:89:04:F8:3D:00:DD:90:AC:A6:2B:D5
Certificate issuer:       /CN=A9186D9F/serialNumber=D833C5152E3F2D279B8904F83D00DD90ACA62BD5
Certificate serial:       0189
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DPFFS4_LSebiQT4PQDdkKymK9U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft
Manifest number:          0189
Signing time:             Thu 23 Jul 2026 05:52:49 +0000
Manifest this update:     Thu 23 Jul 2026 05:52:49 +0000
Manifest next update:     Thu 30 Jul 2026 05:52:49 +0000
Files and hashes:         1: 2DPFFS4_LSebiQT4PQDdkKymK9U.crl (hash: 2NFzGkErxPFbz7UMlnM2g+MzyKQsz2whNDd/pCzGRZM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.crl
                          rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DPFFS4_LSebiQT4PQDdkKymK9U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:52:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186D9F, serialNumber=D833C5152E3F2D279B8904F83D00DD90ACA62BD5
        Validity
            Not Before: Jul 23 05:52:49 2026 GMT
            Not After : Jul 30 05:52:49 2026 GMT
        Subject: CN=6a61ac31-b88a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5c:50:4a:8d:da:95:3c:0a:31:43:3b:38:65:
                    6a:37:78:03:18:cc:4a:78:a5:5d:88:f0:4b:59:e1:
                    46:0d:50:b8:08:49:9e:22:ac:a5:86:6b:64:e8:4a:
                    ea:c5:2f:e7:75:2c:48:01:35:d9:1e:f5:f4:0c:3f:
                    97:c1:2f:4b:23:f0:ca:00:74:e1:b2:70:04:53:60:
                    bf:21:70:6e:01:e8:e9:70:7d:e1:cf:c8:95:0d:86:
                    93:29:19:b9:ef:47:c5:22:66:69:c5:33:10:73:a1:
                    63:fe:6f:64:a8:f2:03:df:59:4f:a5:4b:1c:36:a9:
                    99:17:d3:05:07:02:5c:10:9b:c6:78:91:b6:ce:39:
                    4d:74:84:ef:c8:a7:10:35:36:35:c4:47:e0:c6:8f:
                    10:05:c6:00:56:be:01:28:1f:27:63:35:bc:cc:21:
                    1b:45:72:e2:0d:50:a5:c1:2f:5e:89:ad:bb:26:4c:
                    c2:ad:75:fe:41:45:c3:57:f3:06:20:08:ce:11:9f:
                    7e:00:fa:e5:f0:d5:f5:1a:6f:ae:3d:ab:5b:15:af:
                    97:31:0a:4f:d9:9f:63:f2:cc:90:40:53:da:4a:cb:
                    e1:1d:9b:44:34:8f:d6:74:d7:86:a5:4b:c6:c8:2c:
                    89:e8:6a:1b:a3:bf:0c:ff:ba:cc:b9:36:53:25:26:
                    9a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:2A:93:6D:CC:A2:70:77:5E:C6:B7:8C:14:6C:76:DB:1D:0B:16:D1
            X509v3 Authority Key Identifier:
                keyid:D8:33:C5:15:2E:3F:2D:27:9B:89:04:F8:3D:00:DD:90:AC:A6:2B:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DPFFS4_LSebiQT4PQDdkKymK9U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:55:a7:ee:ae:44:59:6f:9c:30:7e:ae:1f:70:f6:11:f0:bf:
         a3:53:5b:0a:b0:63:6c:62:de:f9:7c:b4:74:fb:8f:92:6f:60:
         9e:c6:0f:d5:47:d2:bb:6c:62:50:1f:4c:a6:6a:4b:25:d6:10:
         76:08:3b:93:dd:c0:e0:db:6e:c6:47:51:40:cd:77:2a:ff:8e:
         da:37:dd:87:6d:60:7e:c5:03:92:47:d4:f3:73:d1:c8:b6:39:
         73:40:fe:d2:f7:31:80:3a:1f:24:bb:91:0f:14:cb:b3:99:e3:
         06:06:58:36:ca:29:49:9d:05:19:82:60:22:da:e7:68:ee:c8:
         e0:6e:a4:52:7a:8e:19:47:db:41:c1:eb:a1:07:3b:78:6a:69:
         6f:72:8a:d2:5f:df:ed:cd:a7:99:bf:1f:59:6c:65:c3:12:a2:
         79:b8:d6:22:1b:6d:2b:f5:3b:14:f3:7f:0f:8e:f7:69:3d:05:
         7a:8e:18:67:bc:b0:76:f2:4c:e9:76:81:1c:af:d8:18:ab:5c:
         f5:a7:a6:e3:82:5f:7a:da:fd:2b:14:8f:eb:81:bd:ad:26:53:
         5c:31:ce:f7:56:9d:71:58:9d:fd:e4:2e:11:e7:15:ea:15:9d:
         e0:27:52:94:66:0d:d9:ea:72:5f:27:86:aa:6d:9d:10:25:71:
         e6:d1:37:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:42:34 2026 by rpki-client