Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.mft
File:                     peado7v7jl3TlkjmpD4A-nI95lg.mft (raw, json)
Hash identifier:          Do21z5KXSKzoYluK1GV3mM06xi09ykRQ1DMgLmagJ2s=
Subject key identifier:   56:FB:8E:AD:A6:18:D1:A9:4F:55:37:3B:31:83:81:8C:04:75:0E:62
Authority key identifier: A5:E6:9D:A3:BB:FB:8E:5D:D3:96:48:E6:A4:3E:00:FA:72:3D:E6:58
Certificate issuer:       /CN=A91190B4/serialNumber=A5E69DA3BBFB8E5DD39648E6A43E00FA723DE658
Certificate serial:       0B3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peado7v7jl3TlkjmpD4A-nI95lg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.mft
Manifest number:          0B32
Signing time:             Mon 02 Mar 2026 01:16:05 +0000
Manifest this update:     Mon 02 Mar 2026 01:16:04 +0000
Manifest next update:     Mon 09 Mar 2026 01:16:04 +0000
Files and hashes:         1: peado7v7jl3TlkjmpD4A-nI95lg.crl (hash: sCsNc6X1eJ98IZJgib/VEYRr4nDRYAVph42lIEcbQ70=)
                          2: 55BC5674573F11EAA8901D3EC4F9AE02.roa (hash: cOhoUIQZix/btAsubA+Ysc2KixqhxVjFMWCCCLIARVY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.crl
                          rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peado7v7jl3TlkjmpD4A-nI95lg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2875 (0xb3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91190B4, serialNumber=A5E69DA3BBFB8E5DD39648E6A43E00FA723DE658
        Validity
            Not Before: Mar  2 01:16:04 2026 GMT
            Not After : Mar  9 01:16:04 2026 GMT
        Subject: CN=69a4e4d5-56d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:af:13:25:38:6b:87:fe:30:17:9c:5c:04:29:
                    b1:82:2d:92:68:61:12:10:65:87:27:2c:db:ab:07:
                    22:9f:fe:73:22:d1:22:b9:79:89:a5:60:32:ce:11:
                    1b:02:98:d3:1d:36:c2:f7:c8:2c:32:ba:a1:99:59:
                    75:24:99:f7:55:37:e3:54:4f:ad:7d:ac:96:9b:14:
                    3c:5f:43:a7:55:25:9c:5e:b2:50:f5:50:e7:4d:84:
                    3b:a2:1a:05:f3:eb:3c:b6:be:4b:58:14:d7:fc:75:
                    a8:f5:5c:42:90:9d:04:c0:4e:b0:50:43:ed:51:d8:
                    c5:dd:5b:23:60:50:71:0c:be:79:26:9a:ab:85:62:
                    54:6c:d5:5c:08:5f:d9:a2:4a:89:be:7e:c5:64:6a:
                    40:d0:c8:04:67:b1:2b:62:66:53:31:58:af:09:9c:
                    cd:4c:54:e1:2d:8a:87:7f:eb:a9:6b:4d:b6:a9:37:
                    83:08:27:1e:5b:f2:2c:e2:f1:c1:61:3c:0b:d4:da:
                    fc:2b:88:d1:c1:6a:ba:7c:f2:a9:45:3b:d9:d2:62:
                    47:6f:2a:3b:08:47:ce:0b:6d:06:69:57:86:94:e7:
                    76:39:6c:c2:2b:88:3c:e2:39:63:f3:31:08:47:cd:
                    0d:84:d6:df:4a:01:d3:dd:97:aa:f4:9e:5b:03:73:
                    d5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:FB:8E:AD:A6:18:D1:A9:4F:55:37:3B:31:83:81:8C:04:75:0E:62
            X509v3 Authority Key Identifier:
                keyid:A5:E6:9D:A3:BB:FB:8E:5D:D3:96:48:E6:A4:3E:00:FA:72:3D:E6:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peado7v7jl3TlkjmpD4A-nI95lg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:a1:78:b4:ad:86:5d:96:95:34:1a:bf:12:80:38:82:b0:1b:
         3c:0c:dd:30:63:6f:08:ef:3e:44:35:e4:65:b4:e7:0b:28:bb:
         7b:1e:14:7e:9c:23:42:c6:33:51:ae:d0:6d:51:bf:a8:71:77:
         43:ed:1f:93:0b:61:6e:5b:3d:6d:40:2c:f9:65:a4:f2:77:0d:
         c2:d0:47:a1:6a:15:7b:ba:ba:74:28:bd:3e:21:e8:21:53:64:
         21:3c:2a:8a:83:64:c4:c6:8c:1b:7b:dc:e9:7e:89:6b:aa:64:
         0a:ed:f3:a9:ea:50:99:ec:95:d1:95:ac:1c:bc:fd:6b:c1:3d:
         51:0c:04:5b:c8:51:89:de:e2:45:96:d1:52:4e:0f:8d:66:c4:
         d3:3d:2c:e2:d0:79:e6:68:ee:97:4b:2f:67:f3:38:b8:42:34:
         70:b2:54:8e:c2:c5:f2:e5:a3:5c:7a:67:16:c0:a6:3f:2f:1e:
         e6:b4:fd:7a:96:76:7a:c9:87:05:6c:03:a8:a5:30:04:8d:ee:
         e4:36:17:ee:f1:60:5c:ba:ce:84:3a:98:4c:4b:74:71:1a:ac:
         79:92:5f:35:1e:ba:5a:ce:8a:47:c4:fc:23:98:bb:c0:f1:71:
         e7:84:0e:80:83:32:d2:24:41:61:3b:bb:cd:c2:29:4a:07:d3:
         a5:a2:14:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:31:07 2026 by rpki-client