Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
File:                     peb1x0u860AJxV7qaJcDSZcf9jo.mft (raw, json)
Hash identifier:          OjMx7LPWbobq92JKOSVDSMw/OZHoX5/1wsEu19GSlc4=
Subject key identifier:   81:A3:94:57:2D:93:34:EA:F0:C2:30:71:4B:AF:83:38:6D:D8:CF:02
Authority key identifier: A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A
Certificate issuer:       /CN=A91684D0/serialNumber=A5E6F5C74BBCEB4009C55EEA68970349971FF63A
Certificate serial:       02BF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
Manifest number:          02B8
Signing time:             Mon 27 Jul 2026 02:39:13 +0000
Manifest this update:     Mon 27 Jul 2026 02:39:13 +0000
Manifest next update:     Mon 03 Aug 2026 02:39:13 +0000
Files and hashes:         1: peb1x0u860AJxV7qaJcDSZcf9jo.crl (hash: iJKAqhH/soD1WlaqUW3mdv6v6sCeQDlWMQwXoLc57M4=)
                          2: DFB66DA85E9211ED83D40E65C4F9AE02.roa (hash: ivTW0Fo1wkmwXRc6syZMFMsxEz+/+R5DvemCPq4YiTQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.crl
                          rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:39:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 703 (0x2bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91684D0, serialNumber=A5E6F5C74BBCEB4009C55EEA68970349971FF63A
        Validity
            Not Before: Jul 27 02:39:13 2026 GMT
            Not After : Aug  3 02:39:13 2026 GMT
        Subject: CN=6a66c4d1-8e50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8b:58:6e:ac:1d:ea:c7:c1:f5:a6:e2:e5:b8:
                    8c:81:65:2a:ad:6c:8d:6b:fe:e5:22:80:b4:4e:02:
                    9d:07:09:fb:78:40:0d:4b:25:83:4b:a5:35:6c:7e:
                    69:ed:22:b7:54:8b:6d:92:bc:19:4e:b9:34:6a:9d:
                    f4:1a:d8:d9:69:3a:68:ea:99:7a:3c:b1:11:62:62:
                    32:2d:ea:49:d7:72:c9:a7:7c:12:12:6f:cd:b5:02:
                    dc:cf:41:27:e7:be:a7:a8:28:89:98:7a:79:e6:08:
                    2a:2a:d4:3a:ff:de:a5:a0:8c:7d:8a:39:49:74:82:
                    3b:d6:3c:b9:82:bc:81:f0:df:39:28:5e:58:a3:e5:
                    05:7a:9b:c5:ec:46:41:fb:cd:5d:2e:d0:41:00:75:
                    ed:bc:fa:3c:ab:6d:40:f0:aa:a8:d6:7b:c9:30:58:
                    5c:73:97:67:40:0e:32:3c:0e:ed:fa:c6:ef:3f:7b:
                    25:cf:fe:ed:62:fa:4c:53:7e:cf:60:55:f9:5f:1d:
                    2f:29:96:21:6a:69:dc:db:55:20:7d:f6:84:80:f2:
                    e8:a2:21:e9:bf:b5:5b:30:8f:52:54:5d:db:8a:26:
                    e6:b2:95:17:66:19:76:ef:4a:f4:18:cd:68:18:60:
                    42:44:47:2a:dc:2b:e0:a6:bd:3a:6c:46:6a:8d:66:
                    68:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A3:94:57:2D:93:34:EA:F0:C2:30:71:4B:AF:83:38:6D:D8:CF:02
            X509v3 Authority Key Identifier:
                keyid:A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:e3:16:88:87:59:fe:88:01:a9:c7:66:fe:64:77:e0:7a:a5:
         79:1d:89:ad:41:ab:2b:bc:3e:2b:ad:a5:5c:a2:a6:72:83:b2:
         83:02:73:b7:f5:8a:de:fc:58:f6:bb:96:6a:de:01:bd:cb:12:
         23:71:89:b1:85:33:56:52:01:dd:eb:4d:fb:d9:76:0b:f3:a8:
         56:d4:36:72:ec:c0:cb:4b:dc:a2:d9:6c:b7:4f:64:a4:08:66:
         c5:e8:26:c8:b0:38:65:66:c8:d9:c9:7d:aa:8c:53:29:09:db:
         ca:03:ab:0c:53:d4:f4:ef:b7:26:59:1a:e3:89:bb:81:ee:3c:
         b1:bc:5a:a5:b4:30:bd:3e:4e:7c:7b:21:3d:96:b7:82:6f:f0:
         97:ef:05:65:c0:d3:12:df:89:bc:02:bf:a4:87:36:f9:00:37:
         db:b6:36:28:6c:bb:f7:7b:a4:54:c9:69:26:a1:08:09:23:be:
         32:07:c1:91:d1:4b:e4:db:13:36:3f:06:c3:3b:f3:41:bd:c8:
         d0:06:80:79:68:12:03:0c:73:5b:60:69:c4:11:35:b5:6d:6d:
         7e:3d:8a:35:34:7e:04:33:36:53:f3:29:5a:65:cc:66:ce:94:
         82:8f:f0:5b:6e:58:49:1d:2c:6c:ce:54:d5:37:f1:d4:2a:1a:
         61:53:66:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:03:51 2026 by rpki-client