Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
File:                     peb1x0u860AJxV7qaJcDSZcf9jo.mft (raw, json)
Hash identifier:          XtaGCWZrxYns4SiovMoguy8ZmjxMILRQWpznKsKSu9M=
Subject key identifier:   3B:9F:11:6F:EA:38:5D:EF:F5:43:72:33:51:F3:0F:8D:2F:4A:5B:04
Authority key identifier: A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A
Certificate issuer:       /CN=A91684D0/serialNumber=A5E6F5C74BBCEB4009C55EEA68970349971FF63A
Certificate serial:       02A9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
Manifest number:          02A2
Signing time:             Sat 13 Jun 2026 01:33:46 +0000
Manifest this update:     Sat 13 Jun 2026 01:33:46 +0000
Manifest next update:     Sat 20 Jun 2026 01:33:46 +0000
Files and hashes:         1: peb1x0u860AJxV7qaJcDSZcf9jo.crl (hash: KvKvhRbSwqWS8IgtJibe+cfx9hVoJSxiktjwXQFSQsk=)
                          2: DFB66DA85E9211ED83D40E65C4F9AE02.roa (hash: ivTW0Fo1wkmwXRc6syZMFMsxEz+/+R5DvemCPq4YiTQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.crl
                          rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 01:33:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 681 (0x2a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91684D0, serialNumber=A5E6F5C74BBCEB4009C55EEA68970349971FF63A
        Validity
            Not Before: Jun 13 01:33:46 2026 GMT
            Not After : Jun 20 01:33:46 2026 GMT
        Subject: CN=6a2cb37a-d050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:28:ee:c7:4a:6f:22:aa:38:d6:e9:62:f9:a6:
                    e2:d3:9a:f6:f4:36:8c:b9:a1:5d:53:b7:e2:2c:e7:
                    dc:68:45:18:2b:59:14:c8:b4:e7:f7:72:c7:78:fa:
                    1c:af:cd:43:d9:94:17:f6:21:f0:3b:d9:83:2d:10:
                    99:7e:49:1d:3e:01:92:9d:25:c5:52:9b:3c:d0:e0:
                    9c:f8:58:84:e9:91:a0:bd:1a:45:90:df:4f:0b:b0:
                    70:d3:c8:53:d4:33:bb:b3:4d:52:91:50:01:7b:59:
                    8b:2a:83:0f:ba:26:8a:da:b2:76:67:7a:87:86:35:
                    fa:3f:09:78:5f:21:f6:5a:5e:a4:1f:c3:70:a3:5e:
                    6e:82:68:a2:6e:c1:50:b4:ac:f0:d0:e2:5d:69:25:
                    5c:7a:63:26:3c:ce:e2:26:12:cf:f5:a6:05:b7:6f:
                    88:cd:9d:e9:62:82:de:6d:ac:8a:d8:6b:32:57:34:
                    de:81:0b:7d:a0:5c:29:b5:7e:66:11:14:fb:b0:70:
                    cc:34:86:49:ed:16:3a:27:59:8a:3c:59:5b:9d:ba:
                    b9:21:8e:ba:05:fa:ac:fe:27:a0:21:bb:79:e0:c5:
                    27:54:03:f8:93:e4:c3:3d:02:88:40:55:08:5d:be:
                    a7:3a:c1:9e:59:73:a8:7e:67:24:d8:b3:8f:ec:6e:
                    91:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:9F:11:6F:EA:38:5D:EF:F5:43:72:33:51:F3:0F:8D:2F:4A:5B:04
            X509v3 Authority Key Identifier:
                keyid:A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:ba:ce:ee:7b:4d:1c:1d:9a:4d:d9:77:ae:a1:fe:05:1d:49:
         05:9e:eb:49:6d:9b:a9:38:3e:05:e3:b3:e1:f7:16:b7:96:8a:
         d1:0f:5d:b3:b3:cb:92:2d:29:c5:20:dd:79:2a:f1:31:ce:1d:
         b1:38:45:8c:d2:8e:8d:d9:fb:86:fb:48:87:eb:98:6f:0f:e1:
         46:78:23:74:e9:a7:ca:da:84:3a:ce:13:08:6e:c3:d7:1b:40:
         76:20:57:c5:2a:e5:3c:ea:3f:66:98:e3:ac:92:82:83:5e:7f:
         eb:92:49:99:b8:64:bc:b5:c8:ea:5e:b9:17:fb:b1:98:a0:ef:
         6b:3d:ea:58:5a:73:7b:6c:45:80:3b:69:ea:c6:27:c8:75:44:
         6c:f9:2f:e1:c8:e0:27:5c:08:b4:ee:09:05:9d:68:e1:cf:f4:
         fe:26:7d:e3:bb:9d:a0:a9:d6:29:43:47:66:cb:1e:a1:cc:eb:
         1d:79:e5:ed:51:7a:40:61:82:64:61:cf:28:56:fc:74:f6:a2:
         71:58:50:a3:80:26:b5:87:8b:80:2c:6b:0d:c9:17:0b:42:c3:
         30:ec:b6:cf:11:bd:fd:8c:bd:3f:3b:45:f6:24:0b:71:e4:39:
         2d:4d:ef:82:cf:55:f5:df:bd:d3:17:97:e1:ad:18:d7:d2:68:
         81:61:82:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:28:56 2026 by rpki-client