Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
File:                     peb1x0u860AJxV7qaJcDSZcf9jo.mft (raw, json)
Hash identifier:          NbKfXj1WmwcW1v5gak14Y+1qp4z1Vb7Te0XxUpBcEbo=
Subject key identifier:   F4:52:BE:48:F9:B4:0C:F7:FF:5E:40:20:F0:AF:C7:6A:6A:53:6E:B8
Authority key identifier: A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A
Certificate issuer:       /CN=A91684D0/serialNumber=A5E6F5C74BBCEB4009C55EEA68970349971FF63A
Certificate serial:       0271
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
Manifest number:          026C
Signing time:             Sun 01 Mar 2026 02:34:51 +0000
Manifest this update:     Sun 01 Mar 2026 02:34:51 +0000
Manifest next update:     Sun 08 Mar 2026 02:34:51 +0000
Files and hashes:         1: peb1x0u860AJxV7qaJcDSZcf9jo.crl (hash: 8mu6gNqwSXFiOjpt2pwJE7K6xdBmaBHmvM7ktuftpYE=)
                          2: DFB66DA85E9211ED83D40E65C4F9AE02.roa (hash: vYjDKJoL/LVvPBznc+DyGkQ1jp9r0XRmWXYGOVlx3uA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.crl
                          rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 02:34:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 625 (0x271)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91684D0, serialNumber=A5E6F5C74BBCEB4009C55EEA68970349971FF63A
        Validity
            Not Before: Mar  1 02:34:51 2026 GMT
            Not After : Mar  8 02:34:51 2026 GMT
        Subject: CN=69a3a5cb-38da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0a:3b:87:9b:f1:8d:de:48:82:e4:7f:52:f5:
                    9b:e1:ed:70:02:92:71:66:d5:54:d3:61:36:1a:53:
                    9d:00:ae:4b:d6:c3:46:48:ab:73:46:c5:97:55:e5:
                    e0:78:1d:8f:f4:87:35:dd:4a:a4:01:ec:39:67:8e:
                    90:56:3e:f4:8c:a1:29:61:e2:11:06:f1:01:32:4c:
                    98:bd:e1:80:89:45:3a:0b:35:cd:cc:28:d4:ed:98:
                    3c:7b:8e:e4:db:06:91:e8:5a:ac:bf:19:ae:d7:49:
                    2a:a9:99:72:93:03:80:c6:8d:a9:40:54:e7:e5:0e:
                    6e:2b:6f:1d:c0:c2:e8:cb:28:d7:93:e9:d9:6b:eb:
                    6a:21:a1:28:be:ee:d7:4f:da:96:a9:84:c4:1f:59:
                    04:2e:34:e6:16:96:15:4a:0a:d2:27:2e:29:08:68:
                    a7:23:77:8a:4a:a8:de:24:7c:f9:df:60:d7:d5:68:
                    85:3b:5e:9e:07:df:19:88:f1:fa:8d:d5:6e:5f:17:
                    2e:3b:a3:29:e3:77:4a:92:5a:32:31:7e:27:d8:6f:
                    e8:af:e3:47:b7:fd:08:9b:4f:dd:53:fb:47:c8:a8:
                    11:c0:a6:89:71:c8:d8:05:da:0d:0e:e9:a9:11:62:
                    77:6a:c4:cb:57:88:04:3e:33:55:ed:86:83:38:ba:
                    ca:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:52:BE:48:F9:B4:0C:F7:FF:5E:40:20:F0:AF:C7:6A:6A:53:6E:B8
            X509v3 Authority Key Identifier:
                keyid:A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:2d:98:ac:ed:87:8c:46:b6:50:88:7c:d9:eb:73:e0:7a:37:
         61:c6:86:ad:41:bb:8b:29:da:16:5c:46:21:58:0d:ec:49:5f:
         07:8a:15:14:1a:41:31:d1:1f:17:b2:ca:d8:04:33:7d:b9:81:
         78:ea:86:4f:d6:ec:ad:c9:a6:96:74:bd:09:16:27:df:1d:79:
         84:c2:5a:aa:51:e4:95:5b:f9:19:32:63:e5:5f:c1:6c:9a:bc:
         64:45:39:73:e3:59:fc:06:54:40:73:1a:a1:75:36:7b:fd:e6:
         41:2e:39:6f:6b:14:8d:b8:e9:0b:c6:c1:40:d7:a5:2c:99:b1:
         63:99:d5:9b:eb:09:ac:f4:1e:bd:7c:ab:e5:7d:d1:07:d2:20:
         2d:ab:68:5a:db:4e:08:39:75:e0:82:39:4c:ef:41:26:db:da:
         1c:71:0a:61:18:05:d8:73:f3:13:26:0b:46:c3:99:a4:c2:c1:
         7c:7f:f5:32:d3:b6:af:7a:8e:78:a8:60:2e:2d:4f:d5:4b:a5:
         ca:e7:48:25:94:64:1f:72:ad:5c:3d:f5:ac:a5:59:1c:36:62:
         c0:97:d3:75:54:de:66:09:56:11:d1:04:4c:44:ef:73:ba:f5:
         db:17:3e:64:a8:a0:cd:5c:2c:23:91:20:fe:c3:66:b7:64:be:
         ea:2c:d1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:38:50 2026 by rpki-client