Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
File:                     peb1x0u860AJxV7qaJcDSZcf9jo.mft (raw, json)
Hash identifier:          zVoIrY5IHJQdbEGuVygO327kih8Kw+XrM3pAdZwjwfo=
Subject key identifier:   81:1F:EC:50:AE:97:00:92:A8:84:59:24:8B:E7:66:3D:C4:59:23:EB
Authority key identifier: A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A
Certificate issuer:       /CN=A91684D0/serialNumber=A5E6F5C74BBCEB4009C55EEA68970349971FF63A
Certificate serial:       0203
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
Manifest number:          01FF
Signing time:             Sun 03 Aug 2025 02:42:45 +0000
Manifest this update:     Sun 03 Aug 2025 02:42:45 +0000
Manifest next update:     Sun 10 Aug 2025 02:42:44 +0000
Files and hashes:         1: peb1x0u860AJxV7qaJcDSZcf9jo.crl (hash: 4tnLmYQrt3NZ4t0ne9zs+QKtT7I01oDCJeuyswmFDms=)
                          2: DFB66DA85E9211ED83D40E65C4F9AE02.roa (hash: 1Kz/gacCnhM+fr3wXAjqYRKG+spIHUpJaLSQPwac8Js=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.crl
                          rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 10 Aug 2025 02:42:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 515 (0x203)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91684D0, serialNumber=A5E6F5C74BBCEB4009C55EEA68970349971FF63A
        Validity
            Not Before: Aug  3 02:42:45 2025 GMT
            Not After : Aug 10 02:42:44 2025 GMT
        Subject: CN=688ecca5-dbbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f1:37:17:94:53:e4:fa:dd:79:6d:63:ea:5b:
                    21:92:ac:88:4d:c1:f1:d6:8d:34:a2:92:a5:2e:e5:
                    6b:af:b2:c5:f2:9c:75:37:2e:b3:5e:96:53:40:76:
                    73:ab:e8:05:3a:2d:82:15:98:62:ce:49:ff:17:a2:
                    f4:48:e3:21:b2:bc:5d:a8:3d:bb:d1:bb:d0:61:dd:
                    7b:2b:af:b3:d1:6b:af:2a:06:4c:cd:0c:4c:cd:14:
                    28:86:8c:af:b1:2a:ef:d5:f4:6c:26:92:86:ac:44:
                    8a:7c:0a:a4:59:f5:5e:5c:9e:a1:26:24:94:7e:f8:
                    18:7c:fb:a1:a4:7a:7b:75:68:25:89:ea:a6:a0:fb:
                    90:13:70:56:59:02:ec:2f:93:77:30:ba:e0:0d:5e:
                    bd:35:16:66:fa:2f:7a:de:62:54:99:cd:03:d6:1d:
                    1b:f4:81:85:94:33:17:39:91:21:83:ce:fd:28:da:
                    fe:09:e4:bc:68:df:42:f0:d4:ae:2c:b9:c1:69:b8:
                    5b:20:49:f1:65:fe:04:c2:2e:7f:9f:ea:1b:dc:4b:
                    12:d2:60:a8:d5:55:f0:44:96:f2:6d:23:40:d5:66:
                    0a:a2:40:e4:e3:a2:81:3c:b8:74:76:08:4e:37:8e:
                    2a:f0:49:fa:7a:83:68:76:62:dc:db:d0:1d:1a:ba:
                    3d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:1F:EC:50:AE:97:00:92:A8:84:59:24:8B:E7:66:3D:C4:59:23:EB
            X509v3 Authority Key Identifier:
                keyid:A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:47:8e:ea:6b:0c:22:0b:ef:16:2f:7b:85:71:75:c3:60:9e:
         71:5d:c9:a6:3f:cc:ac:0f:f5:56:c6:61:c5:58:7a:49:2d:11:
         b4:ed:2e:91:b4:89:8b:e0:fc:af:5a:fe:ca:b0:61:8e:60:fb:
         fc:f9:c2:d1:e8:cc:3f:24:a3:62:4c:26:20:a3:51:7a:a4:24:
         e0:b2:a8:aa:60:ed:ec:0b:37:0a:33:0c:7e:f2:23:92:4a:a5:
         55:3e:b5:21:6e:a3:7e:8e:d4:77:55:6d:75:44:78:e6:03:6c:
         84:6b:4f:39:98:8c:bd:27:e9:1f:35:eb:38:2f:ce:67:d8:e7:
         d5:64:90:12:18:9e:35:22:0b:af:36:17:ab:16:b5:7c:81:3d:
         c4:f6:3d:50:0a:14:2e:9a:ba:8b:85:ee:f3:47:c0:62:bf:0a:
         83:8c:6d:4f:ab:8b:5d:5f:53:e0:d3:62:b7:af:9f:da:de:ce:
         84:90:15:bd:7b:3f:d9:67:53:68:db:bf:fb:48:95:41:23:a3:
         3b:3c:92:87:7a:36:d0:4e:93:08:77:1a:31:07:df:8c:32:a1:
         44:60:5e:1b:b7:3c:6b:b1:f7:48:b9:2c:92:75:09:8e:c0:20:
         90:d9:5c:e9:07:4e:81:2f:c2:19:12:07:80:ef:0d:99:64:95:
         62:ed:35:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:01:37 2025 by rpki-client