Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.mft
File:                     phcu6-H80al4zKRn4bWKMLN5Ues.mft (raw, json)
Hash identifier:          TnniK9ADyxE916ux++W/zW2LluoDqNT/EY1m9oXH6eE=
Subject key identifier:   55:07:46:0D:49:7B:3E:D2:A0:BE:D0:AB:DC:8A:CD:20:CB:32:59:E9
Authority key identifier: A6:17:2E:EB:E1:FC:D1:A9:78:CC:A4:67:E1:B5:8A:30:B3:79:51:EB
Certificate issuer:       /CN=A917BB9A/serialNumber=A6172EEBE1FCD1A978CCA467E1B58A30B37951EB
Certificate serial:       010F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phcu6-H80al4zKRn4bWKMLN5Ues.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.mft
Manifest number:          DD
Signing time:             Wed 05 Nov 2025 06:35:31 +0000
Manifest this update:     Wed 05 Nov 2025 06:35:31 +0000
Manifest next update:     Wed 12 Nov 2025 06:35:31 +0000
Files and hashes:         1: phcu6-H80al4zKRn4bWKMLN5Ues.crl (hash: xbA2QSsBvaKvDs8A+OLWiI0V+zMB0m0tWE+RCM+pMak=)
                          2: CF6B95A22B0611F095AFC61DC4F9AE02.roa (hash: Z/zRPe2DhnITKsdqsZS/1BdNv028Ed4X3nLcFzmMS/g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.crl
                          rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phcu6-H80al4zKRn4bWKMLN5Ues.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 06:35:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 271 (0x10f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BB9A, serialNumber=A6172EEBE1FCD1A978CCA467E1B58A30B37951EB
        Validity
            Not Before: Nov  5 06:35:31 2025 GMT
            Not After : Nov 12 06:35:31 2025 GMT
        Subject: CN=690af033-bfa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b6:9c:84:26:7a:8c:bd:1d:32:eb:73:7e:20:
                    83:c7:42:c8:fe:4e:6b:b1:bc:a1:e6:44:d2:9f:3f:
                    86:7b:f5:52:de:49:dc:9e:06:16:f5:64:8d:83:d6:
                    f5:d3:85:9e:36:ce:60:21:86:54:37:38:ef:a9:00:
                    36:0d:aa:b0:e9:94:22:88:79:33:d4:df:a1:a2:ee:
                    d3:4c:cd:5e:bb:f3:0b:7b:e9:23:9f:55:ee:02:96:
                    54:4a:4b:dd:7c:0a:af:1f:03:b9:3a:93:05:1f:06:
                    17:82:b4:33:c5:b6:9d:33:98:c1:22:de:5c:47:b5:
                    ee:9f:ea:ec:df:03:12:e2:7b:73:0e:ac:fe:c5:11:
                    97:3d:68:da:a7:2d:4d:a9:6c:9d:77:17:94:94:b3:
                    65:cf:1d:e9:2a:fb:86:35:cf:77:77:15:a0:f0:52:
                    e9:4c:02:7c:ab:89:3c:a2:7b:15:7e:df:4b:97:a7:
                    cd:7b:14:d5:f9:2f:f0:4a:5b:83:55:c2:b9:1e:07:
                    bd:5e:34:28:77:59:cc:10:c4:31:97:42:c4:79:64:
                    66:f9:e1:3d:4b:e0:76:6f:3e:60:da:fd:b3:df:fd:
                    ed:31:e1:a3:a8:ed:7f:cd:f4:c9:53:73:db:c1:5a:
                    bf:0c:dc:f3:24:92:c0:9d:37:fc:f0:94:f4:79:03:
                    29:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:07:46:0D:49:7B:3E:D2:A0:BE:D0:AB:DC:8A:CD:20:CB:32:59:E9
            X509v3 Authority Key Identifier:
                keyid:A6:17:2E:EB:E1:FC:D1:A9:78:CC:A4:67:E1:B5:8A:30:B3:79:51:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phcu6-H80al4zKRn4bWKMLN5Ues.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:bf:71:bc:41:c7:f1:1c:ed:31:75:24:64:28:69:8e:49:a9:
         ba:6a:86:4a:c9:e7:81:e0:d3:85:a1:13:b1:71:19:7a:ea:2a:
         fa:9a:b5:c1:8e:64:0d:d5:9a:9d:45:ee:38:54:1e:98:73:d4:
         ab:4f:0e:2b:ba:52:c0:f9:f7:de:f9:9b:3d:70:80:ad:ea:6e:
         c8:42:65:66:ca:28:2f:fb:1f:74:69:b9:05:d5:70:12:39:33:
         35:b0:8f:50:ef:e9:47:be:96:43:ed:bb:ad:1f:55:70:52:09:
         34:f4:a5:7f:86:76:68:e7:36:b8:a0:26:7a:8d:77:0d:99:30:
         42:ea:d7:cd:a0:8f:1d:bb:b4:03:d0:ad:99:cf:41:20:6f:44:
         51:78:81:4f:53:a4:34:00:2b:b4:2a:9e:a5:f1:7b:53:7c:36:
         a3:1d:37:19:63:76:b0:27:f1:5e:ab:d1:c3:4e:2b:86:2c:58:
         12:f8:33:32:1e:e8:8a:d8:64:75:f4:4c:d8:ea:00:3b:19:a8:
         71:03:3b:44:b6:6c:77:40:7b:c7:71:7d:c7:91:42:94:a2:d2:
         3d:97:d2:eb:cb:ee:d9:ec:e1:8a:45:b2:b8:dc:fd:8d:86:81:
         02:4c:63:ea:ab:8e:14:3d:b7:cf:4d:e6:ef:6d:15:f7:4f:72:
         af:58:a5:3b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0JCOUExMTAvBgNVBAUTKEE2MTcyRUVCRTFGQ0QxQTk3OENDQTQ2N0UxQjU4QTMw
QjM3OTUxRUIwHhcNMjUxMTA1MDYzNTMxWhcNMjUxMTEyMDYzNTMxWjAYMRYwFAYD
VQQDEw02OTBhZjAzMy1iZmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzrachCZ6jL0dMutzfiCDx0LI/k5rsbyh5kTSnz+Ge/VS3kncngYW9WSNg9b1
04WeNs5gIYZUNzjvqQA2Daqw6ZQiiHkz1N+hou7TTM1eu/MLe+kjn1XuApZUSkvd
fAqvHwO5OpMFHwYXgrQzxbadM5jBIt5cR7Xun+rs3wMS4ntzDqz+xRGXPWjapy1N
qWyddxeUlLNlzx3pKvuGNc93dxWg8FLpTAJ8q4k8onsVft9Ll6fNexTV+S/wSluD
VcK5Hge9XjQod1nMEMQxl0LEeWRm+eE9S+B2bz5g2v2z3/3tMeGjqO1/zfTJU3Pb
wVq/DNzzJJLAnTf88JT0eQMp5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFUHRg1J
ez7SoL7Qq9yKzSDLMlnpMB8GA1UdIwQYMBaAFKYXLuvh/NGpeMykZ+G1ijCzeVHr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkI5QS80OUNEMDMwNENG
RjMxMUVGOTA2MkU1MjFDNEY5QUUwMi9waGN1Ni1IODBhbDR6S1JuNGJXS01MTjVV
ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BoY3U2LUg4MGFsNHpLUm40YldLTUxONVVlcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QkI5QS80OUNEMDMwNENGRjMxMUVGOTA2MkU1MjFDNEY5QUUwMi9waGN1Ni1IODBh
bDR6S1JuNGJXS01MTjVVZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA7v3G8QcfxHO0xdSRkKGmOSam6aoZKyeeB4NOFoROxcRl66ir6mrXB
jmQN1ZqdRe44VB6Yc9SrTw4rulLA+ffe+Zs9cICt6m7IQmVmyigv+x90abkF1XAS
OTM1sI9Q7+lHvpZD7butH1VwUgk09KV/hnZo5za4oCZ6jXcNmTBC6tfNoI8du7QD
0K2Zz0Egb0RReIFPU6Q0ACu0Kp6l8XtTfDajHTcZY3awJ/Feq9HDTiuGLFgS+DMy
HuiK2GR19EzY6gA7GahxAztEtmx3QHvHcX3HkUKUotI9l9Lry+7Z7OGKRbK43P2N
hoECTGPqq44UPbfPTebvbRX3T3KvWKU7
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:14:29 2025 by rpki-client