Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft
File:                     PHUP1suMdwFoHlNr3WtxXxkrivk.mft (raw, json)
Hash identifier:          uGvfV74L9tiXJ1dD9cFQFk3wDhJN2XOfSe4oAyi75Rg=
Subject key identifier:   6F:13:64:17:AA:63:6B:40:55:F3:E3:19:7E:53:EA:52:A7:78:97:1E
Authority key identifier: 3C:75:0F:D6:CB:8C:77:01:68:1E:53:6B:DD:6B:71:5F:19:2B:8A:F9
Certificate issuer:       /CN=A914233F/serialNumber=3C750FD6CB8C7701681E536BDD6B715F192B8AF9
Certificate serial:       0160
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft
Manifest number:          0158
Signing time:             Fri 13 Jun 2025 03:07:38 +0000
Manifest this update:     Fri 13 Jun 2025 03:07:37 +0000
Manifest next update:     Fri 20 Jun 2025 03:07:37 +0000
Files and hashes:         1: PHUP1suMdwFoHlNr3WtxXxkrivk.crl (hash: kGOkoQ90NuGVcOO1Tp8RLpOtZqxg4ZNDMwAfQPN3ikg=)
                          2: D2AD84364AE411EE95B72651C4F9AE02.roa (hash: c3n7ErqEI7wUv0Zh/82IQ41rmFajxkaaakm4Lrf4zUE=)
                          3: D1DA657E4AE411EE95B72651C4F9AE02.roa (hash: OyzekySsh32QnXqLJ9xXpFy1GOqrIr4htNA7lulacc0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.crl
                          rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 03:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 352 (0x160)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914233F, serialNumber=3C750FD6CB8C7701681E536BDD6B715F192B8AF9
        Validity
            Not Before: Jun 13 03:07:37 2025 GMT
            Not After : Jun 20 03:07:37 2025 GMT
        Subject: CN=684b95fa-f0eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:69:f7:78:c8:c2:73:27:c4:af:a7:a9:e0:02:
                    18:76:1f:2e:f3:50:b9:7c:1c:64:1f:64:b5:f8:b9:
                    78:f0:71:29:51:39:ba:9f:9f:39:99:20:56:c2:10:
                    f7:6b:32:7c:c4:bb:27:d6:58:52:72:43:28:5e:a1:
                    62:cc:1c:6f:86:5c:73:e8:b5:99:10:a7:7b:8c:24:
                    d2:1f:d0:86:01:66:e8:b7:4a:f4:47:50:b7:e9:a1:
                    3c:87:28:18:6f:55:cd:3f:fa:25:2c:07:98:47:54:
                    78:ae:b9:dc:65:be:e8:70:3d:45:8c:e7:a7:81:62:
                    55:08:e1:80:af:35:9d:d6:7c:3d:1b:0e:62:e9:0e:
                    1d:1f:ce:fe:1c:b0:83:b6:1c:79:5c:30:87:9a:91:
                    8b:20:d2:23:dd:65:c1:43:b6:66:4c:1f:53:b9:b2:
                    0b:c5:0a:2b:1a:f8:e6:89:07:cd:f1:cc:72:8b:5a:
                    22:f3:f8:ec:8a:b4:53:75:35:8b:42:b5:98:3b:aa:
                    de:52:0b:2b:e1:6a:05:95:ad:b1:8c:e5:0b:e2:96:
                    02:49:80:fa:1b:ee:be:93:3a:c1:48:16:7c:43:65:
                    ac:a9:bd:fd:4e:a0:f8:6c:98:fb:f2:d4:1f:1e:e3:
                    36:f7:49:98:99:0f:51:e2:ab:4e:8b:91:97:be:1b:
                    f8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:13:64:17:AA:63:6B:40:55:F3:E3:19:7E:53:EA:52:A7:78:97:1E
            X509v3 Authority Key Identifier:
                keyid:3C:75:0F:D6:CB:8C:77:01:68:1E:53:6B:DD:6B:71:5F:19:2B:8A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:25:29:cf:c7:27:49:a0:0f:11:c7:32:f9:5e:8a:30:c0:d9:
         9f:c7:40:37:bc:da:72:f6:40:04:90:5e:3b:60:01:48:8b:2a:
         03:b8:0d:0d:70:9f:ee:4c:e8:b7:2e:b2:e5:92:ae:8e:63:be:
         eb:85:41:87:c0:b7:11:fe:aa:b4:2d:c6:87:a5:97:46:55:10:
         49:a9:bf:32:e2:74:fa:be:b8:22:eb:26:a1:28:f3:e9:46:21:
         ea:76:c4:0d:7e:3f:d5:92:11:3e:22:a6:15:d6:c4:1b:9a:e9:
         e3:e5:c0:6f:61:6a:28:e5:4f:69:4c:06:2d:48:4b:94:90:0f:
         c2:9a:5c:78:a4:5c:f3:4d:31:37:58:fd:bb:18:46:40:8a:80:
         52:2c:75:9a:94:9d:1a:27:17:f7:c5:38:4c:f4:c3:63:55:c7:
         7d:94:c3:8b:a5:b2:fa:03:46:7e:59:8c:e5:0a:82:54:3b:8d:
         06:ec:46:7d:10:9d:b2:66:0a:8f:d5:31:c3:42:3b:50:93:e8:
         ab:56:f9:fa:fe:fa:a8:ed:b0:4b:af:75:2b:a1:6e:97:0a:c1:
         32:18:fb:b2:9f:c3:78:77:63:2e:32:99:39:c8:be:f0:9f:0a:
         e6:c6:9e:d1:ef:1a:f2:57:ca:ac:58:de:51:ce:3f:fc:6e:88:
         9b:89:8d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 03:46:17 2025 by rpki-client