Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft
File:                     PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft (raw, json)
Hash identifier:          g6vciBDB1a4fHPDZa7bTwsGFt6B0Wvex3BkFB43pIWE=
Subject key identifier:   ED:D1:AF:55:79:B4:7F:12:08:08:3F:90:19:AD:37:C0:06:8B:A3:26
Authority key identifier: 3C:76:8F:0C:23:23:D4:6D:32:1E:8A:C9:93:E7:5B:0B:1B:82:1E:54
Certificate issuer:       /CN=A919089B/serialNumber=3C768F0C2323D46D321E8AC993E75B0B1B821E54
Certificate serial:       65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHaPDCMj1G0yHorJk-dbCxuCHlQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft
Manifest number:          62
Signing time:             Sat 31 May 2025 06:41:57 +0000
Manifest this update:     Sat 31 May 2025 06:41:56 +0000
Manifest next update:     Sat 07 Jun 2025 06:41:56 +0000
Files and hashes:         1: PHaPDCMj1G0yHorJk-dbCxuCHlQ.crl (hash: odmt/WCOu26P8kz96umY/NPDu4GcxvFZzndq2a7w1HA=)
                          2: A60814E423E811F0B464ED15C4F9AE02.roa (hash: Gjud9DBV5l2d7shu62YgWfFgE4K+4bhp6xDHyEbycw8=)
                          3: D428DE9420CD11F0B635AE70C4F9AE02.roa (hash: f3j7ze7nU/HicYJ4iTkEa5H/gPn17vSx4mQuxNQzZnw=)
                          4: 8284033420CD11F0BCFE4A70C4F9AE02.roa (hash: VRnXPjHcpYrC4h2blRdJhGhCl3ndeqDoavQMjgsusDc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.crl
                          rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHaPDCMj1G0yHorJk-dbCxuCHlQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 06:41:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919089B, serialNumber=3C768F0C2323D46D321E8AC993E75B0B1B821E54
        Validity
            Not Before: May 31 06:41:56 2025 GMT
            Not After : Jun  7 06:41:56 2025 GMT
        Subject: CN=683aa4b4-a708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:bd:42:6f:49:ef:10:75:bf:e5:8e:d3:00:8d:
                    1a:a3:66:0e:ec:c1:2d:16:be:5f:9c:04:0e:f9:0e:
                    f0:cf:01:c1:c6:a5:8f:e9:0a:42:ff:6a:d7:b9:1e:
                    d6:0b:2f:50:1d:48:e4:4a:18:60:e6:40:02:e1:1c:
                    2a:2c:d3:40:63:48:38:61:4a:0d:b1:ac:e2:0b:47:
                    c4:e8:20:52:09:58:30:1e:d6:ac:12:2e:06:41:cb:
                    80:75:d6:3d:d7:20:88:78:62:21:62:80:76:d1:f3:
                    c0:6a:4f:bf:d3:fd:5e:62:2a:8f:fa:68:a7:d6:c6:
                    1e:5a:08:91:c0:17:8a:96:30:f0:a3:a3:e8:56:8d:
                    54:03:80:8c:3a:5c:72:33:35:eb:dc:31:e8:1f:9a:
                    e1:41:b9:87:bf:53:a3:4a:14:50:b0:12:c1:f3:a0:
                    6b:98:cc:15:3d:d0:3a:55:23:25:93:48:c4:c8:e6:
                    7b:b6:14:f3:7d:77:d1:68:6e:3a:e7:40:d3:e8:79:
                    32:84:80:b6:c4:85:e3:3f:97:b0:f7:6c:27:16:d5:
                    c0:cc:53:90:75:0b:93:e7:3e:6d:61:00:d8:3f:a6:
                    65:b3:4e:bb:4b:7b:ef:d3:14:0d:53:61:00:b5:ed:
                    d3:f0:9c:48:14:d3:6d:5f:8d:8b:ad:f4:a9:28:ae:
                    31:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D1:AF:55:79:B4:7F:12:08:08:3F:90:19:AD:37:C0:06:8B:A3:26
            X509v3 Authority Key Identifier:
                keyid:3C:76:8F:0C:23:23:D4:6D:32:1E:8A:C9:93:E7:5B:0B:1B:82:1E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHaPDCMj1G0yHorJk-dbCxuCHlQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:07:d0:17:28:3c:ef:12:9c:ce:15:c0:45:3f:9c:1a:c6:9a:
         02:be:b0:2d:3d:13:e5:4f:e6:8b:78:52:61:f7:f1:66:07:9f:
         bb:5c:0d:b1:07:ea:f3:e3:50:c1:02:21:fd:2f:56:67:3c:f9:
         56:b8:86:61:e6:d0:f8:49:65:29:40:c9:fb:77:ad:af:53:48:
         e5:d0:ce:88:db:24:a7:28:66:98:19:a2:71:6c:2e:61:f8:c5:
         57:6e:10:3a:de:56:02:9b:65:d7:76:e0:f2:44:d6:2e:4a:12:
         2c:7a:3d:f7:88:0f:a8:8d:b2:7b:00:30:12:b5:66:29:22:cd:
         cb:e3:9a:c0:e7:14:2f:ee:fd:c5:6f:ef:94:bb:b1:dc:ed:08:
         ba:77:73:a1:a2:05:65:0f:d6:ae:06:2f:21:c4:7c:5b:ab:ec:
         cc:d7:6c:2d:13:e6:1b:56:ad:68:0e:e3:97:8b:c1:d0:88:69:
         84:fe:d6:2f:f0:a4:a1:e9:56:1b:5f:92:7d:d8:62:b2:8c:80:
         de:34:d6:b3:46:23:51:49:78:45:b4:bc:9d:d1:07:85:59:93:
         6e:1d:b7:75:05:1d:88:ad:bd:2c:5f:1a:4b:c9:85:31:87:bf:
         e1:4b:91:45:44:74:96:43:59:a6:56:70:c9:22:d5:2d:3c:2a:
         2a:42:d5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:36:46 2025 by rpki-client