Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.mft
File:                     phcu6-H80al4zKRn4bWKMLN5Ues.mft (raw, json)
Hash identifier:          NThKb0ROSeYcMlN9gqw7ToO7yyE0MQjUSgWmtcCGxgA=
Subject key identifier:   71:56:91:B7:DA:1A:E4:86:36:05:A6:A4:AD:17:F8:49:16:AE:A4:A9
Authority key identifier: A6:17:2E:EB:E1:FC:D1:A9:78:CC:A4:67:E1:B5:8A:30:B3:79:51:EB
Certificate issuer:       /CN=A917BB9A/serialNumber=A6172EEBE1FCD1A978CCA467E1B58A30B37951EB
Certificate serial:       E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phcu6-H80al4zKRn4bWKMLN5Ues.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.mft
Manifest number:          AE
Signing time:             Sun 03 Aug 2025 07:19:54 +0000
Manifest this update:     Sun 03 Aug 2025 07:19:54 +0000
Manifest next update:     Sun 10 Aug 2025 07:19:54 +0000
Files and hashes:         1: phcu6-H80al4zKRn4bWKMLN5Ues.crl (hash: //gqqoUimrxPu3+q/DIZnkx/D5mFJouinXdSx6Z8a8U=)
                          2: CF6B95A22B0611F095AFC61DC4F9AE02.roa (hash: Z/zRPe2DhnITKsdqsZS/1BdNv028Ed4X3nLcFzmMS/g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.crl
                          rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phcu6-H80al4zKRn4bWKMLN5Ues.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 10 Aug 2025 07:19:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 224 (0xe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BB9A, serialNumber=A6172EEBE1FCD1A978CCA467E1B58A30B37951EB
        Validity
            Not Before: Aug  3 07:19:54 2025 GMT
            Not After : Aug 10 07:19:54 2025 GMT
        Subject: CN=688f0d9a-95da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:94:28:65:85:1a:3d:9d:d7:d3:0e:75:89:3c:
                    3a:d5:ac:df:5f:01:a8:00:a7:31:8f:0e:d3:78:ed:
                    5b:45:44:db:f0:cc:0c:9c:3a:d6:4a:71:7e:00:63:
                    8f:16:f1:ee:a3:8f:f9:28:fb:40:a8:a4:98:1a:12:
                    4b:f1:b1:66:95:ca:65:33:00:54:4e:ce:59:54:cd:
                    bd:8f:e3:23:f2:83:19:42:78:11:6e:50:9a:5a:ed:
                    ed:d8:f9:2f:c4:0c:12:dd:0e:cc:b7:67:ab:c0:68:
                    32:f8:87:1d:c4:c7:b0:62:ad:5a:dc:77:11:2b:eb:
                    5a:3c:dc:58:82:5f:fd:74:43:67:97:d8:6c:bb:55:
                    00:2d:63:3b:21:b6:52:44:1f:d1:a0:e5:f7:2b:33:
                    f4:c6:ba:a3:c7:ca:54:8c:38:58:52:5a:67:5c:e9:
                    9f:16:47:db:bd:e6:4f:ee:74:e4:16:45:d8:e2:6f:
                    66:cb:cd:d3:20:8f:32:fc:15:99:95:05:2a:35:c1:
                    e2:10:6f:5c:4a:42:c7:bd:0f:79:6b:41:84:b4:5d:
                    77:6b:e1:35:18:74:dd:11:b1:a3:1d:f6:8b:f8:ca:
                    12:de:ff:2f:ef:d0:58:43:98:25:27:7f:db:44:c4:
                    44:f9:d8:f9:a7:b3:75:22:06:cb:86:75:03:d8:99:
                    9b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:56:91:B7:DA:1A:E4:86:36:05:A6:A4:AD:17:F8:49:16:AE:A4:A9
            X509v3 Authority Key Identifier:
                keyid:A6:17:2E:EB:E1:FC:D1:A9:78:CC:A4:67:E1:B5:8A:30:B3:79:51:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phcu6-H80al4zKRn4bWKMLN5Ues.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:31:9d:bb:b5:ed:31:eb:df:15:9f:b9:11:33:db:01:0a:4a:
         e5:26:1e:b0:5b:92:4c:18:c5:ca:a7:63:a5:27:b5:f2:65:32:
         e5:7e:fb:87:07:60:91:18:7a:3c:d9:44:0a:82:52:52:29:15:
         1d:a3:65:80:8c:4c:37:ba:35:ba:bd:0a:2a:65:bc:12:04:5d:
         e3:7f:f5:4d:64:bd:3e:74:7b:ea:02:aa:01:24:11:24:0a:fc:
         2d:b1:50:99:b4:19:a7:78:0f:66:37:46:3e:eb:11:00:95:ca:
         10:d3:38:a5:fc:e4:b5:df:1f:5d:eb:6e:f1:a7:2d:4d:1d:e8:
         8e:de:6f:b5:43:9c:eb:99:a6:cc:14:13:ef:b2:cd:b9:b6:e5:
         69:89:7b:b6:30:45:9e:9a:fb:24:4e:65:10:0d:79:31:3e:b5:
         0e:21:3f:57:f1:80:1c:ff:26:53:8d:50:ea:a7:6b:02:57:85:
         e3:22:64:b8:99:7a:7d:66:6d:96:a9:b9:f3:0e:30:03:51:15:
         ae:a0:20:4c:66:4e:c1:c7:7d:e2:69:22:e9:3c:1b:da:b9:47:
         f3:34:44:01:ea:91:66:5e:90:4e:20:cd:b3:47:91:1a:e2:af:
         bc:17:f0:28:2f:5c:a4:07:fc:f1:e5:50:bf:63:9a:c2:fe:08:
         8f:4e:bc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:31 2025 by rpki-client