Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
File:                     peb1x0u860AJxV7qaJcDSZcf9jo.mft (raw, json)
Hash identifier:          pTpZKbQZ4N5lPNPHZn0ap6DWXvae74o+JHHCREkanRA=
Subject key identifier:   16:AC:4A:22:CF:A9:B2:66:33:44:9B:08:82:BD:E6:17:0D:44:8D:0E
Authority key identifier: A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A
Certificate issuer:       /CN=A91684D0/serialNumber=A5E6F5C74BBCEB4009C55EEA68970349971FF63A
Certificate serial:       0235
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
Manifest number:          0230
Signing time:             Mon 03 Nov 2025 01:52:23 +0000
Manifest this update:     Mon 03 Nov 2025 01:52:23 +0000
Manifest next update:     Mon 10 Nov 2025 01:52:23 +0000
Files and hashes:         1: peb1x0u860AJxV7qaJcDSZcf9jo.crl (hash: DmHsKJqHhjgPwSCTXDkrnJN9fmSPxsHy3m/TUZxK5Jk=)
                          2: DFB66DA85E9211ED83D40E65C4F9AE02.roa (hash: vYjDKJoL/LVvPBznc+DyGkQ1jp9r0XRmWXYGOVlx3uA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.crl
                          rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 01:52:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 565 (0x235)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91684D0, serialNumber=A5E6F5C74BBCEB4009C55EEA68970349971FF63A
        Validity
            Not Before: Nov  3 01:52:23 2025 GMT
            Not After : Nov 10 01:52:23 2025 GMT
        Subject: CN=69080ad7-64b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5c:48:ab:75:9d:e7:3a:1c:12:a8:39:79:12:
                    26:d9:7f:1b:b1:5f:7d:cb:46:73:07:e4:31:a4:b3:
                    d4:8a:44:ce:19:bb:a5:21:88:be:c8:c7:26:e2:88:
                    53:99:64:cc:6f:3e:81:3c:54:5c:41:99:85:88:7b:
                    d2:17:a4:6c:76:58:85:9e:99:f9:ac:89:8f:64:55:
                    2b:8f:53:42:1a:f1:54:bb:d1:11:46:17:1b:fe:03:
                    6a:79:08:aa:08:8b:15:0d:42:5d:bf:b2:cc:b2:53:
                    83:6c:98:41:ce:ad:a1:14:39:e3:b9:17:92:8f:c8:
                    c1:a0:24:15:ba:17:ca:33:41:7b:6b:64:d9:28:ca:
                    a3:ba:1b:7c:ab:90:28:20:ea:71:11:2e:4b:05:30:
                    eb:4a:3b:67:5d:9e:81:92:f0:63:51:c5:0d:3b:e3:
                    d3:82:72:cd:ef:29:49:3c:98:20:b6:d9:d9:14:0a:
                    48:0f:a4:06:bc:f8:c5:54:89:8a:77:49:6b:3b:0c:
                    ba:39:cf:f0:f6:19:92:1a:41:90:aa:85:de:ad:a9:
                    f1:98:25:7c:00:fa:4e:5d:1a:c0:f0:c8:77:13:51:
                    93:44:ea:7a:20:28:73:d3:d6:53:87:f2:15:17:00:
                    c8:49:0f:fc:b8:d8:91:ca:38:47:14:8f:d0:6a:cc:
                    6f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:AC:4A:22:CF:A9:B2:66:33:44:9B:08:82:BD:E6:17:0D:44:8D:0E
            X509v3 Authority Key Identifier:
                keyid:A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:dc:5b:10:35:09:25:4c:f2:df:e1:87:11:3e:f9:74:1b:0d:
         0a:e6:fe:0f:73:2f:c9:16:0f:67:c6:83:51:15:12:39:aa:72:
         e7:fe:a6:18:d1:6b:81:47:cb:55:74:e5:ab:5f:b2:03:23:4e:
         b0:af:a9:65:82:31:40:bc:c3:d0:72:f0:11:14:70:8d:91:d5:
         3d:d6:77:30:c1:29:42:c9:27:37:e6:4e:2b:7a:f9:62:18:91:
         6d:23:74:14:0b:ff:8d:e8:d1:52:19:0f:d0:02:8f:6d:1e:60:
         0b:e0:1c:2d:82:cb:49:d7:8a:ce:02:15:3b:ff:f1:85:5c:41:
         41:b7:e6:ee:34:35:5e:3c:61:5a:7f:a7:b6:29:f2:e3:a5:a6:
         7c:bd:d8:f3:35:1e:56:f3:cf:b9:85:b1:99:c7:59:29:2a:6e:
         86:89:55:db:49:7f:2d:8e:1a:65:68:ca:47:26:5e:c4:84:e8:
         a9:a6:ab:f2:f2:a4:ca:b9:b8:09:39:c5:de:ec:dd:b3:38:5f:
         d2:96:c4:00:ec:26:f8:00:51:46:26:92:73:7e:73:67:7c:2c:
         f8:d2:ee:a9:6d:d5:c5:21:22:d9:5c:04:2d:43:ac:80:2d:47:
         37:83:17:d1:1c:56:b9:a0:1e:c5:8c:43:92:0f:1f:55:81:09:
         48:0c:ae:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:28:56 2025 by rpki-client