Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
File:                     peb1x0u860AJxV7qaJcDSZcf9jo.mft (raw, json)
Hash identifier:          ar4GSgGJ9BPHkRxhMRzew833++Yg81sSK4+mS8qBDwM=
Subject key identifier:   2B:7E:3D:F6:7C:3F:EC:BA:B3:69:D9:6E:05:5C:B9:0B:33:CD:8C:2B
Authority key identifier: A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A
Certificate issuer:       /CN=A91684D0/serialNumber=A5E6F5C74BBCEB4009C55EEA68970349971FF63A
Certificate serial:       01F3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
Manifest number:          01EF
Signing time:             Thu 03 Jul 2025 02:34:26 +0000
Manifest this update:     Thu 03 Jul 2025 02:34:25 +0000
Manifest next update:     Thu 10 Jul 2025 02:34:25 +0000
Files and hashes:         1: peb1x0u860AJxV7qaJcDSZcf9jo.crl (hash: R+CIsvvbx0DecnmQuWhbnvEkai454/Z+TlNsbiIdhXo=)
                          2: DFB66DA85E9211ED83D40E65C4F9AE02.roa (hash: 1Kz/gacCnhM+fr3wXAjqYRKG+spIHUpJaLSQPwac8Js=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.crl
                          rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 02:34:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 499 (0x1f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91684D0, serialNumber=A5E6F5C74BBCEB4009C55EEA68970349971FF63A
        Validity
            Not Before: Jul  3 02:34:25 2025 GMT
            Not After : Jul 10 02:34:25 2025 GMT
        Subject: CN=6865ec31-bad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5a:9a:1c:09:b7:3b:7c:b8:bc:02:e1:75:f8:
                    ac:99:a5:69:5e:43:c5:70:b1:f4:40:f5:80:57:dc:
                    df:f2:ab:4d:c3:6f:66:c0:c2:bd:bb:ab:9f:13:0f:
                    af:fd:61:68:15:6d:a8:2c:2e:fb:ef:97:a3:28:43:
                    ac:ac:7c:13:a4:16:9b:f9:a1:f7:92:f9:ce:cd:db:
                    91:e4:3b:c9:12:a8:1b:b1:6c:2d:27:cf:cd:c7:bb:
                    69:32:68:a8:7e:c9:a3:62:be:2b:b6:db:1d:f5:b7:
                    4e:c4:a2:e1:8d:29:dc:00:ed:16:bb:26:f2:4d:34:
                    2e:34:1c:04:56:2b:19:69:61:44:78:8b:29:47:c2:
                    f5:f3:0b:93:aa:57:2e:04:d8:a3:f5:49:9e:0a:b6:
                    8a:a8:9d:25:f2:68:58:2d:28:5a:c7:c6:22:8b:fc:
                    db:ec:d2:b2:5c:89:5c:59:37:f3:16:bc:9d:10:29:
                    c9:4c:af:36:33:08:5a:2c:f5:43:38:cb:c6:aa:71:
                    08:a5:90:e1:0b:69:db:1e:69:ca:ee:82:d9:cd:98:
                    0e:de:67:22:a9:53:10:fe:5f:a1:1d:b3:1c:94:ec:
                    29:08:22:11:60:5d:9c:bb:18:b1:8c:05:9c:0a:7c:
                    cf:b0:74:17:38:2f:cf:7d:12:47:1b:15:45:ea:af:
                    94:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:7E:3D:F6:7C:3F:EC:BA:B3:69:D9:6E:05:5C:B9:0B:33:CD:8C:2B
            X509v3 Authority Key Identifier:
                keyid:A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:a0:3e:3a:df:ea:30:29:b7:06:09:01:17:66:04:37:a3:c4:
         4b:d2:8c:77:da:3d:0b:c1:79:d7:bb:30:1a:46:cd:0b:10:fd:
         df:76:75:48:71:03:b2:93:18:05:98:43:ce:94:d8:35:a0:f0:
         a7:dc:85:6b:d8:74:8b:13:d0:35:c3:6e:6e:f6:e4:33:2b:87:
         23:b5:18:6b:61:2a:f9:25:59:2d:81:d0:63:50:d5:20:81:29:
         26:3e:3c:9c:12:6e:8b:73:32:06:89:c8:f2:70:bd:40:55:6c:
         f3:99:62:6d:50:d8:97:d7:29:92:96:45:3f:9a:ea:12:0b:b9:
         01:60:1f:20:f3:74:69:4b:ff:13:90:29:e8:f0:c5:4b:76:9c:
         b8:a0:f0:ad:be:60:40:c6:ba:ae:d4:67:20:40:89:cc:d2:e2:
         d4:f9:20:bc:37:9b:fe:91:2f:e4:43:e4:89:e2:af:f4:48:1d:
         18:27:38:cc:70:34:92:fb:01:da:25:e4:a1:28:c0:89:9e:f9:
         65:d6:b2:d1:46:d2:36:ed:08:4c:de:e5:c4:98:51:77:37:9a:
         cc:ea:c9:8b:c1:d3:89:58:7a:e5:cc:ca:27:e3:20:ad:5c:38:
         00:09:76:8f:98:0c:03:d1:b0:8c:cc:c6:07:3a:24:8f:4a:fe:
         c1:9a:79:2a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg0RDAxMTAvBgNVBAUTKEE1RTZGNUM3NEJCQ0VCNDAwOUM1NUVFQTY4OTcwMzQ5
OTcxRkY2M0EwHhcNMjUwNzAzMDIzNDI1WhcNMjUwNzEwMDIzNDI1WjAYMRYwFAYD
VQQDEw02ODY1ZWMzMS1iYWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt1qaHAm3O3y4vALhdfismaVpXkPFcLH0QPWAV9zf8qtNw29mwMK9u6ufEw+v
/WFoFW2oLC7775ejKEOsrHwTpBab+aH3kvnOzduR5DvJEqgbsWwtJ8/Nx7tpMmio
fsmjYr4rttsd9bdOxKLhjSncAO0WuybyTTQuNBwEVisZaWFEeIspR8L18wuTqlcu
BNij9UmeCraKqJ0l8mhYLShax8Yii/zb7NKyXIlcWTfzFrydECnJTK82MwhaLPVD
OMvGqnEIpZDhC2nbHmnK7oLZzZgO3mciqVMQ/l+hHbMclOwpCCIRYF2cuxixjAWc
CnzPsHQXOC/PfRJHGxVF6q+U+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCt+PfZ8
P+y6s2nZbgVcuQszzYwrMB8GA1UdIwQYMBaAFKXm9cdLvOtACcVe6miXA0mXH/Y6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODREMC9EMzE0MkRCODVF
OEYxMUVEOEM5OTY5NjNDNEY5QUUwMi9wZWIxeDB1ODYwQUp4VjdxYUpjRFNaY2Y5
am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3BlYjF4MHU4NjBBSnhWN3FhSmNEU1pjZjlqby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
ODREMC9EMzE0MkRCODVFOEYxMUVEOEM5OTY5NjNDNEY5QUUwMi9wZWIxeDB1ODYw
QUp4VjdxYUpjRFNaY2Y5am8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAvoD463+owKbcGCQEXZgQ3o8RL0ox32j0LwXnXuzAaRs0LEP3fdnVI
cQOykxgFmEPOlNg1oPCn3IVr2HSLE9A1w25u9uQzK4cjtRhrYSr5JVktgdBjUNUg
gSkmPjycEm6LczIGicjycL1AVWzzmWJtUNiX1ymSlkU/muoSC7kBYB8g83RpS/8T
kCno8MVLdpy4oPCtvmBAxrqu1GcgQInM0uLU+SC8N5v+kS/kQ+SJ4q/0SB0YJzjM
cDSS+wHaJeShKMCJnvll1rLRRtI27QhM3uXEmFF3N5rM6smLwdOJWHrlzMon4yCt
XDgACXaPmAwD0bCMzMYHOiSPSv7Bmnkq
-----END CERTIFICATE-----
Generated at Thu Jul 3 22:32:08 2025 by rpki-client