Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
File:                     peb1x0u860AJxV7qaJcDSZcf9jo.mft (raw, json)
Hash identifier:          5BBpMcKTPm5SwJXrCAMIsmcz8pG2RNzNn+swnjL0Lik=
Subject key identifier:   9B:F7:A7:3C:D8:40:16:F8:C2:8E:AA:9D:4C:0D:FC:6A:7F:32:20:49
Authority key identifier: A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A
Certificate issuer:       /CN=A91684D0/serialNumber=A5E6F5C74BBCEB4009C55EEA68970349971FF63A
Certificate serial:       02BA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
Manifest number:          02B3
Signing time:             Fri 17 Jul 2026 02:10:18 +0000
Manifest this update:     Fri 17 Jul 2026 02:10:18 +0000
Manifest next update:     Fri 24 Jul 2026 02:10:18 +0000
Files and hashes:         1: peb1x0u860AJxV7qaJcDSZcf9jo.crl (hash: iMJGsLiugvTkxT5TRZTPDnaWM+VFf5Gsv2YBtjAvnVs=)
                          2: DFB66DA85E9211ED83D40E65C4F9AE02.roa (hash: ivTW0Fo1wkmwXRc6syZMFMsxEz+/+R5DvemCPq4YiTQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.crl
                          rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 02:10:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 698 (0x2ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91684D0, serialNumber=A5E6F5C74BBCEB4009C55EEA68970349971FF63A
        Validity
            Not Before: Jul 17 02:10:18 2026 GMT
            Not After : Jul 24 02:10:18 2026 GMT
        Subject: CN=6a598f0a-f27c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5e:a3:c8:6a:75:94:1c:57:e1:55:05:e9:b5:
                    4c:22:32:9c:96:f1:fb:32:55:34:03:68:04:c7:e7:
                    23:44:ab:7d:36:fc:72:e1:68:f9:56:66:13:0b:31:
                    f3:c9:45:35:65:b2:6d:e9:ef:b1:59:2d:60:01:55:
                    c8:4d:00:91:b6:96:d6:3e:de:a9:a3:0b:9a:3a:75:
                    2c:9f:bd:7c:26:c8:c2:10:ed:f8:9f:46:a6:09:40:
                    8b:48:d5:d4:b2:1b:93:be:8d:da:81:1a:a0:74:cc:
                    13:6b:e7:4b:9b:f7:b9:b6:63:e0:ba:20:00:4f:c1:
                    5e:2e:61:2b:6b:cd:4b:2f:37:d2:37:ff:c0:cf:ba:
                    a8:ad:83:b8:08:81:ff:dc:62:b3:88:78:28:9e:38:
                    2a:a3:16:ce:bf:a1:73:b5:19:eb:75:be:9a:d8:45:
                    51:c1:6c:b1:31:69:c2:53:4b:9f:c3:1d:70:bc:6b:
                    a7:c2:5a:f3:2d:6c:30:ee:ed:a3:7c:9f:21:4f:ce:
                    f6:b1:61:f2:70:b0:47:fc:2e:e3:68:24:1c:5b:0d:
                    86:b0:33:62:c0:a8:89:7e:fe:83:8c:2a:0e:1a:ae:
                    eb:89:cf:80:a5:2e:60:ff:9a:20:1a:e9:2a:c4:d7:
                    4a:3e:22:40:ae:45:0d:6e:78:a5:cd:49:c1:f5:9d:
                    cd:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F7:A7:3C:D8:40:16:F8:C2:8E:AA:9D:4C:0D:FC:6A:7F:32:20:49
            X509v3 Authority Key Identifier:
                keyid:A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:4c:6f:b4:53:19:8e:be:08:ac:6c:11:c8:cc:31:3b:97:3f:
         39:42:ec:76:31:35:b9:17:e5:e9:c1:69:db:5f:e3:4a:1a:d9:
         cf:a8:3f:cc:e6:ea:0f:10:28:d4:da:f1:02:ec:59:70:73:33:
         c8:31:91:fe:30:68:fb:51:8f:16:ed:92:cb:d3:a3:bc:4a:2d:
         f2:03:db:35:cd:79:06:9d:0d:c5:c2:9a:73:29:aa:47:01:46:
         59:c5:68:e2:d0:b8:fc:d2:27:99:77:a5:0b:85:61:4b:9b:94:
         31:7f:d4:98:63:ab:be:eb:fd:3e:9a:e4:ea:2b:da:5f:17:71:
         ea:ff:30:ae:be:56:99:b8:2a:1f:9c:3f:ba:92:21:c6:cc:fa:
         4d:c4:ca:a2:93:94:83:3b:d7:2b:01:b8:63:12:92:bb:17:22:
         7b:e6:28:58:13:8a:5f:7a:41:e9:11:8f:6d:f0:21:d5:f8:f9:
         0b:d3:db:e0:c9:c2:2c:cd:ff:d5:80:bc:5e:9d:6c:a6:f5:05:
         55:e3:5d:37:b4:c9:ac:bb:f9:ee:c5:f3:5b:b2:8b:ce:68:9c:
         a5:42:77:6d:2a:fe:f2:00:67:ce:1b:b4:07:9d:ac:e2:c9:15:
         34:55:1d:a3:f6:f0:23:10:f0:d6:31:51:89:22:f7:38:18:73:
         30:96:c9:0f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICArowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg0RDAxMTAvBgNVBAUTKEE1RTZGNUM3NEJCQ0VCNDAwOUM1NUVFQTY4OTcwMzQ5
OTcxRkY2M0EwHhcNMjYwNzE3MDIxMDE4WhcNMjYwNzI0MDIxMDE4WjAYMRYwFAYD
VQQDEw02YTU5OGYwYS1mMjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlF6jyGp1lBxX4VUF6bVMIjKclvH7MlU0A2gEx+cjRKt9Nvxy4Wj5VmYTCzHz
yUU1ZbJt6e+xWS1gAVXITQCRtpbWPt6powuaOnUsn718JsjCEO34n0amCUCLSNXU
shuTvo3agRqgdMwTa+dLm/e5tmPguiAAT8FeLmEra81LLzfSN//Az7qorYO4CIH/
3GKziHgonjgqoxbOv6FztRnrdb6a2EVRwWyxMWnCU0ufwx1wvGunwlrzLWww7u2j
fJ8hT872sWHycLBH/C7jaCQcWw2GsDNiwKiJfv6DjCoOGq7ric+ApS5g/5ogGukq
xNdKPiJArkUNbnilzUnB9Z3NRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJv3pzzY
QBb4wo6qnUwN/Gp/MiBJMB8GA1UdIwQYMBaAFKXm9cdLvOtACcVe6miXA0mXH/Y6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODREMC9EMzE0MkRCODVF
OEYxMUVEOEM5OTY5NjNDNEY5QUUwMi9wZWIxeDB1ODYwQUp4VjdxYUpjRFNaY2Y5
am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3BlYjF4MHU4NjBBSnhWN3FhSmNEU1pjZjlqby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
ODREMC9EMzE0MkRCODVFOEYxMUVEOEM5OTY5NjNDNEY5QUUwMi9wZWIxeDB1ODYw
QUp4VjdxYUpjRFNaY2Y5am8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAI0xvtFMZjr4IrGwRyMwxO5c/OULsdjE1uRfl6cFp21/jShrZz6g/zObqDxAo
1NrxAuxZcHMzyDGR/jBo+1GPFu2Sy9OjvEot8gPbNc15Bp0NxcKacymqRwFGWcVo
4tC4/NInmXelC4VhS5uUMX/UmGOrvuv9Pprk6ivaXxdx6v8wrr5WmbgqH5w/upIh
xsz6TcTKopOUgzvXKwG4YxKSuxcie+YoWBOKX3pB6RGPbfAh1fj5C9Pb4MnCLM3/
1YC8Xp1spvUFVeNdN7TJrLv57sXzW7KLzmicpUJ3bSr+8gBnzhu0B52s4skVNFUd
o/bwIxDw1jFRiSL3OBhzMJbJDw==
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:28:23 2026 by rpki-client