Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft
File:                     PHUP1suMdwFoHlNr3WtxXxkrivk.mft (raw, json)
Hash identifier:          yPGoXpYj/cYnzPcqYUhjrcRJ5IGVxM3Hm3dvle8Rkik=
Subject key identifier:   C2:4C:80:AA:5D:FF:4E:CF:15:FF:C6:A7:94:02:C3:9E:5E:36:7D:7F
Authority key identifier: 3C:75:0F:D6:CB:8C:77:01:68:1E:53:6B:DD:6B:71:5F:19:2B:8A:F9
Certificate issuer:       /CN=A914233F/serialNumber=3C750FD6CB8C7701681E536BDD6B715F192B8AF9
Certificate serial:       0203
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft
Manifest number:          01F5
Signing time:             Sun 05 Apr 2026 02:51:21 +0000
Manifest this update:     Sun 05 Apr 2026 02:51:20 +0000
Manifest next update:     Sun 12 Apr 2026 02:51:20 +0000
Files and hashes:         1: PHUP1suMdwFoHlNr3WtxXxkrivk.crl (hash: MuYiXHekfxkcyu9w7jI3gT7lYeSuZPriqb3cexMpnbM=)
                          2: F451A8D61D3411F188270AE1183D8C67.roa (hash: HhAPddYZebVgFTklVhrNnb9AwfNFYy5EHwSBa4LUjG0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.crl
                          rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 02:51:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 515 (0x203)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914233F, serialNumber=3C750FD6CB8C7701681E536BDD6B715F192B8AF9
        Validity
            Not Before: Apr  5 02:51:20 2026 GMT
            Not After : Apr 12 02:51:20 2026 GMT
        Subject: CN=69d1ce29-0f72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a0:c1:d7:db:5c:fe:bc:98:43:99:2e:d5:cc:
                    c5:03:ee:c5:65:57:50:c4:c3:e7:16:04:d6:13:f5:
                    cc:92:47:3c:42:f3:42:c2:55:c8:cf:7f:27:ef:37:
                    a1:22:31:20:9e:93:f5:21:f3:5c:05:16:57:8c:ae:
                    e3:e3:e6:e1:96:67:ba:ca:0b:70:47:2c:e9:88:5d:
                    5f:eb:65:dc:bb:2f:61:f6:79:93:99:5e:b5:fc:f7:
                    d8:e0:ad:b7:cd:88:c3:2d:86:20:0e:f6:04:68:1a:
                    eb:62:dc:8b:8d:e8:2d:c6:14:7b:57:eb:5d:3a:d4:
                    85:43:a6:3c:b4:e0:60:41:15:49:76:9b:26:4f:6a:
                    bd:22:b3:a2:87:1d:1f:51:ca:62:59:f8:11:b5:0f:
                    bb:10:c8:21:c0:9a:1d:7b:e7:46:69:a1:e6:81:54:
                    30:de:e3:6e:66:01:61:7f:21:d7:4b:ec:72:1b:7b:
                    3b:5d:23:e4:d0:37:dc:19:cc:2c:99:7c:c1:66:d7:
                    ba:27:f0:dc:b7:0f:6b:89:95:bb:64:5b:be:bf:d8:
                    2b:10:44:dd:e4:6a:04:8f:67:b0:6f:5a:f2:a9:c9:
                    47:b4:b7:c5:60:7b:21:86:5b:4c:6f:c2:f7:97:09:
                    ef:2d:36:76:09:c8:a9:f7:a6:6a:e7:8a:a5:ea:1e:
                    b5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4C:80:AA:5D:FF:4E:CF:15:FF:C6:A7:94:02:C3:9E:5E:36:7D:7F
            X509v3 Authority Key Identifier:
                keyid:3C:75:0F:D6:CB:8C:77:01:68:1E:53:6B:DD:6B:71:5F:19:2B:8A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:17:38:b0:d6:6e:33:ee:40:15:9a:9f:23:07:18:de:73:ec:
         73:fb:89:9b:d1:b4:2c:44:a8:03:b6:0e:05:af:0f:4d:05:55:
         93:14:4d:f2:71:42:71:cd:1e:7e:b8:24:75:f7:40:16:0a:f0:
         ce:3e:8d:29:e7:67:8e:7a:9d:61:98:8d:15:53:44:24:ec:cc:
         5e:95:80:23:13:cb:22:19:2f:9b:e6:fa:09:7b:94:94:9a:f6:
         21:97:26:2d:19:28:07:01:4a:2c:70:08:8c:2d:da:bd:af:cb:
         8d:42:8c:9d:ad:23:97:1f:e7:72:2d:e1:ec:d1:42:83:8f:bf:
         ca:03:77:06:8e:67:db:04:55:20:7a:b1:27:28:00:73:c4:40:
         a7:8a:ae:a0:54:5a:4b:bc:c3:2e:ee:50:47:77:57:b7:7e:20:
         6a:99:4b:15:9b:b8:65:b2:b4:0a:fd:f5:e3:3b:f6:72:65:56:
         37:79:57:35:19:30:99:a6:9e:00:16:96:c8:ec:b7:a1:9c:ff:
         be:36:3c:d3:65:af:29:96:1b:f6:b4:8b:3d:ec:16:b1:b2:40:
         0e:a2:2c:0b:3a:51:21:a2:9b:ef:36:b9:3b:51:90:2e:94:30:
         59:25:ca:40:91:5c:3d:a1:01:e4:61:42:6e:57:fc:5d:6f:96:
         dc:b7:04:a4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDIzM0YxMTAvBgNVBAUTKDNDNzUwRkQ2Q0I4Qzc3MDE2ODFFNTM2QkRENkI3MTVG
MTkyQjhBRjkwHhcNMjYwNDA1MDI1MTIwWhcNMjYwNDEyMDI1MTIwWjAYMRYwFAYD
VQQDEw02OWQxY2UyOS0wZjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApaDB19tc/ryYQ5ku1czFA+7FZVdQxMPnFgTWE/XMkkc8QvNCwlXIz38n7zeh
IjEgnpP1IfNcBRZXjK7j4+bhlme6ygtwRyzpiF1f62Xcuy9h9nmTmV61/PfY4K23
zYjDLYYgDvYEaBrrYtyLjegtxhR7V+tdOtSFQ6Y8tOBgQRVJdpsmT2q9IrOihx0f
UcpiWfgRtQ+7EMghwJode+dGaaHmgVQw3uNuZgFhfyHXS+xyG3s7XSPk0DfcGcws
mXzBZte6J/Dctw9riZW7ZFu+v9grEETd5GoEj2ewb1ryqclHtLfFYHshhltMb8L3
lwnvLTZ2Ccip96Zq54ql6h61wQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMJMgKpd
/07PFf/Gp5QCw55eNn1/MB8GA1UdIwQYMBaAFDx1D9bLjHcBaB5Ta91rcV8ZK4r5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjMzRi84NUMyMEJEQTQ2
M0MxMUVFOUI3ODkxMzlDNEY5QUUwMi9QSFVQMXN1TWR3Rm9IbE5yM1d0eFh4a3Jp
dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BIVVAxc3VNZHdGb0hsTnIzV3R4WHhrcml2ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjMzRi84NUMyMEJEQTQ2M0MxMUVFOUI3ODkxMzlDNEY5QUUwMi9QSFVQMXN1TWR3
Rm9IbE5yM1d0eFh4a3JpdmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaxc4sNZuM+5AFZqfIwcY3nPsc/uJm9G0LESoA7YOBa8PTQVVkxRN8nFCcc0e
frgkdfdAFgrwzj6NKednjnqdYZiNFVNEJOzMXpWAIxPLIhkvm+b6CXuUlJr2IZcm
LRkoBwFKLHAIjC3ava/LjUKMna0jlx/nci3h7NFCg4+/ygN3Bo5n2wRVIHqxJygA
c8RAp4quoFRaS7zDLu5QR3dXt34gaplLFZu4ZbK0Cv314zv2cmVWN3lXNRkwmaae
ABaWyOy3oZz/vjY802WvKZYb9rSLPewWsbJADqIsCzpRIaKb7za5O1GQLpQwWSXK
QJFcPaEB5GFCblf8XW+W3LcEpA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:28:52 2026 by rpki-client