Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft
File:                     2DPFFS4_LSebiQT4PQDdkKymK9U.mft (raw, json)
Hash identifier:          LlYBqyjWez/ilM/DM7wsv/kqgKFA5Euuwo6LCF2ayto=
Subject key identifier:   7D:5F:01:1B:5F:3B:5B:BC:AD:27:01:2A:BD:6B:24:F3:C8:3B:86:BC
Authority key identifier: D8:33:C5:15:2E:3F:2D:27:9B:89:04:F8:3D:00:DD:90:AC:A6:2B:D5
Certificate issuer:       /CN=A9186D9F/serialNumber=D833C5152E3F2D279B8904F83D00DD90ACA62BD5
Certificate serial:       0180
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DPFFS4_LSebiQT4PQDdkKymK9U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft
Manifest number:          0180
Signing time:             Sun 05 Jul 2026 05:09:04 +0000
Manifest this update:     Sun 05 Jul 2026 05:09:03 +0000
Manifest next update:     Sun 12 Jul 2026 05:09:03 +0000
Files and hashes:         1: 2DPFFS4_LSebiQT4PQDdkKymK9U.crl (hash: kyT0P90+eVT7Krm4QN71FHT/9SJ39XEsnqqaF0x6PSc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.crl
                          rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DPFFS4_LSebiQT4PQDdkKymK9U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 05:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384 (0x180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186D9F, serialNumber=D833C5152E3F2D279B8904F83D00DD90ACA62BD5
        Validity
            Not Before: Jul  5 05:09:03 2026 GMT
            Not After : Jul 12 05:09:03 2026 GMT
        Subject: CN=6a49e6f0-1344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c6:60:b7:90:d5:e1:32:74:15:58:42:70:98:
                    77:34:12:1e:8f:0c:c9:3b:cd:2b:fa:bd:33:35:f2:
                    88:48:01:02:37:1e:78:2c:62:30:bd:e5:37:fb:94:
                    20:b4:7c:e1:8e:eb:51:de:5e:22:e3:1b:2a:8f:b8:
                    4d:8f:1d:ce:92:93:be:eb:b0:fb:2a:02:7c:52:a9:
                    60:50:bb:45:ed:2a:ae:33:e8:f5:df:21:b6:9d:24:
                    2f:f7:be:f8:62:e2:9d:a2:61:ba:d1:49:c2:50:b9:
                    44:a1:01:25:9b:55:31:69:aa:50:48:0d:af:5c:1e:
                    d3:3f:5a:27:15:95:c5:27:4a:3d:a8:c1:85:03:3a:
                    b6:bc:60:28:22:6f:d8:ff:a6:8e:8c:02:6b:b6:9c:
                    fe:06:1d:68:c2:a8:49:fc:0b:ac:25:a0:93:76:a7:
                    b5:b1:51:eb:4a:f8:c8:de:4c:22:23:68:84:46:05:
                    99:cc:8d:b2:5d:c7:8f:50:77:17:e6:e8:e1:8c:4b:
                    cf:29:15:d2:f2:67:b9:1d:b7:89:9e:4c:46:86:74:
                    5d:9e:fa:f4:04:da:aa:46:27:11:ef:00:67:a0:fa:
                    4c:0e:03:a8:19:d1:ab:c4:63:16:04:dc:e9:09:4a:
                    a8:2b:b2:6b:ea:3e:31:9b:5d:8d:ef:cd:d8:30:06:
                    59:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5F:01:1B:5F:3B:5B:BC:AD:27:01:2A:BD:6B:24:F3:C8:3B:86:BC
            X509v3 Authority Key Identifier:
                keyid:D8:33:C5:15:2E:3F:2D:27:9B:89:04:F8:3D:00:DD:90:AC:A6:2B:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DPFFS4_LSebiQT4PQDdkKymK9U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:5a:0e:26:af:ec:7c:9c:8a:00:e1:77:1e:16:be:1d:26:dd:
         7f:55:87:76:81:7a:94:53:45:d0:d8:91:44:d4:ae:72:23:37:
         d3:75:ae:1b:89:97:e7:1b:95:47:98:32:87:f9:26:6d:36:e1:
         11:3d:4e:db:c1:f1:08:6e:0d:7f:a3:23:ab:91:7c:bf:d3:ab:
         de:08:3a:4d:6b:89:68:97:98:ce:5d:89:f6:38:d8:b5:2d:86:
         40:e1:4b:a3:a7:c1:61:72:70:95:2a:19:37:c4:83:ae:bd:37:
         55:e2:22:d0:98:e2:80:a8:cf:9b:1a:82:9c:71:d3:ce:b2:61:
         e7:67:ab:d4:c6:da:a3:48:4d:b5:61:15:3e:5d:8a:29:17:4c:
         cf:eb:4a:ff:32:e9:31:68:26:89:14:20:51:bc:c7:54:ef:93:
         17:5f:a0:2f:fb:bf:bf:44:fa:2d:7b:c5:1c:51:64:85:e6:24:
         0a:12:be:e6:6d:24:5b:8d:b3:29:07:d5:dd:fa:0f:38:c7:f4:
         a1:f1:79:75:9b:ca:f2:ae:f4:87:12:a0:ea:d2:05:2b:44:af:
         7b:94:11:49:bc:b0:44:76:96:e6:8d:a2:4e:3c:57:99:96:c7:
         af:bc:1c:ff:f6:5a:fc:05:e6:d3:dc:36:09:a8:70:82:9e:ac:
         38:fb:be:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:37:26 2026 by rpki-client