Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
File:                     peb1x0u860AJxV7qaJcDSZcf9jo.mft (raw, json)
Hash identifier:          lcUiyIE5QZMP1hLuQyaLTYg500lzdfUskI2Kwy5he+w=
Subject key identifier:   55:6A:DD:A7:77:43:04:ED:4C:EE:46:C0:77:DD:0D:07:4C:D6:57:35
Authority key identifier: A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A
Certificate issuer:       /CN=A91684D0/serialNumber=A5E6F5C74BBCEB4009C55EEA68970349971FF63A
Certificate serial:       02DC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
Manifest number:          02D5
Signing time:             Mon 21 Sep 2026 01:07:43 +0000
Manifest this update:     Mon 21 Sep 2026 01:07:43 +0000
Manifest next update:     Mon 28 Sep 2026 01:07:43 +0000
Files and hashes:         1: peb1x0u860AJxV7qaJcDSZcf9jo.crl (hash: hZNZfmMuHXu9vnqP7PMNal4vcKKnY+HPwJ45RebPrXo=)
                          2: DFB66DA85E9211ED83D40E65C4F9AE02.roa (hash: ivTW0Fo1wkmwXRc6syZMFMsxEz+/+R5DvemCPq4YiTQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.crl
                          rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 01:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 732 (0x2dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91684D0, serialNumber=A5E6F5C74BBCEB4009C55EEA68970349971FF63A
        Validity
            Not Before: Sep 21 01:07:43 2026 GMT
            Not After : Sep 28 01:07:43 2026 GMT
        Subject: CN=6ab0835f-900d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:87:49:a0:e5:06:53:f2:19:b8:3d:54:c8:e5:
                    1d:9f:59:b0:46:9f:30:96:25:cd:2e:3a:f9:e2:70:
                    e9:01:f7:e5:25:31:e2:f4:41:91:90:60:1a:35:e3:
                    b1:42:b9:ff:05:d2:1b:31:31:b6:3f:ea:72:6f:01:
                    e6:f5:66:93:76:a8:3a:be:95:21:3c:a8:12:56:16:
                    f4:2a:5a:93:93:e5:54:38:c5:b1:02:37:8e:be:b5:
                    bb:af:db:07:d8:a0:91:c3:c9:36:02:a2:f8:d0:39:
                    af:fe:33:6d:c5:43:5a:f1:af:2c:b3:c0:a6:06:56:
                    c9:2d:ef:7b:0e:79:e3:72:7d:91:c4:1c:96:12:fc:
                    46:1a:86:e9:1f:22:f2:53:af:a0:99:e3:65:72:45:
                    c6:80:a2:f4:e8:dd:84:ed:1a:f6:5e:58:ca:f0:8c:
                    ae:93:16:65:ff:99:65:b6:1c:ad:31:54:a4:c7:e5:
                    b7:ba:2c:88:3a:11:2b:8c:91:d5:2b:d6:76:5f:bd:
                    b4:10:21:29:94:c7:c2:77:a5:b1:3b:27:ca:34:45:
                    84:9a:94:e0:57:b8:77:ec:9e:76:3a:03:9f:5e:6f:
                    c7:29:50:a8:fd:94:69:f3:ca:e3:0e:af:c1:bc:2b:
                    66:64:2e:3c:db:a7:a6:0a:e8:da:7e:49:4e:b8:b3:
                    58:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:6A:DD:A7:77:43:04:ED:4C:EE:46:C0:77:DD:0D:07:4C:D6:57:35
            X509v3 Authority Key Identifier:
                keyid:A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:b3:d4:5c:1a:9c:aa:ac:a3:fc:bc:83:39:23:e5:f6:bf:84:
         80:92:4e:e2:39:71:f5:91:c3:1b:f7:96:de:0d:e3:cf:44:18:
         57:2b:07:27:90:1c:c7:7e:06:70:1d:f1:1e:5e:04:83:0f:27:
         8b:09:ba:23:da:af:01:db:ba:d4:23:04:71:84:27:86:50:02:
         a0:25:bb:d5:37:0e:b3:5b:0d:b5:a9:89:6a:44:79:3b:a3:45:
         c1:43:f8:70:20:0e:c6:da:3a:db:f6:9c:19:8e:1a:e5:46:24:
         fc:1a:48:3e:6b:73:33:60:ab:69:cf:4e:79:7f:5a:93:76:53:
         d0:e3:81:22:fa:89:89:b4:bb:5d:2d:57:0b:a2:85:23:3f:05:
         fa:67:09:61:5e:6a:c0:18:64:39:fb:f7:fd:92:fa:15:3e:79:
         ab:3c:b5:a4:05:19:e5:01:ff:5a:d9:6c:ec:e0:6f:48:e6:70:
         35:69:11:d2:ee:b9:6a:ad:30:f5:e5:8f:22:8e:4f:e7:0d:a0:
         5d:cb:b2:ba:dd:4f:b9:bc:8f:dd:9a:f1:2b:dd:2c:f5:14:6d:
         30:b5:68:f7:d9:3f:5a:b9:dc:03:97:34:d4:17:90:6d:e4:79:
         b3:e6:c7:70:44:77:2a:07:0f:99:c7:9f:60:f4:c6:fe:06:1a:
         ec:73:c7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:35:01 2026 by rpki-client