Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft
File:                     PHUP1suMdwFoHlNr3WtxXxkrivk.mft (raw, json)
Hash identifier:          OoLaM2PVI71asXzwzQIWOqQTqCImgW3pQ41qYpxGn8I=
Subject key identifier:   A4:8B:E4:F3:AF:C8:58:94:D8:84:F2:E0:CF:E3:40:90:8B:69:63:AE
Authority key identifier: 3C:75:0F:D6:CB:8C:77:01:68:1E:53:6B:DD:6B:71:5F:19:2B:8A:F9
Certificate issuer:       /CN=A914233F/serialNumber=3C750FD6CB8C7701681E536BDD6B715F192B8AF9
Certificate serial:       01A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft
Manifest number:          019B
Signing time:             Sun 19 Oct 2025 06:01:30 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:30 +0000
Manifest next update:     Sun 26 Oct 2025 06:01:30 +0000
Files and hashes:         1: PHUP1suMdwFoHlNr3WtxXxkrivk.crl (hash: o80GgYbTb3Rn+69r4Mu2u/ZZU1yPb8ZZrwtIqloGaBA=)
                          2: D2AD84364AE411EE95B72651C4F9AE02.roa (hash: PXugVBDjMMSZngC/IAk1O9uisIYx3s5Ti9BVaDUEHRI=)
                          3: D1DA657E4AE411EE95B72651C4F9AE02.roa (hash: rYuzAQ2V3DCYFm8hLaFsEVJnKAGKcFikbLAjBKDZ9TQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.crl
                          rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 421 (0x1a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914233F, serialNumber=3C750FD6CB8C7701681E536BDD6B715F192B8AF9
        Validity
            Not Before: Oct 19 06:01:30 2025 GMT
            Not After : Oct 26 06:01:30 2025 GMT
        Subject: CN=68f47eba-6144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8f:1b:41:3d:b1:9c:bc:80:ab:17:aa:05:21:
                    2e:cf:29:00:39:56:41:0a:bd:8e:64:47:05:cb:bf:
                    bb:24:46:43:d3:45:e5:b8:3e:2a:2c:0b:4a:30:68:
                    70:27:47:b1:ac:f5:f4:4c:75:e1:01:e7:33:61:bf:
                    dd:f0:00:f6:e5:0d:4d:57:c6:69:fb:b9:bc:c5:89:
                    e4:5c:f4:ec:47:6e:8a:1f:66:08:bf:d3:19:01:e4:
                    03:f5:3a:dc:cb:a5:84:c5:ab:98:fe:84:42:8f:80:
                    72:03:75:b8:2d:11:8b:db:29:07:1e:66:36:b3:39:
                    eb:f4:af:64:a0:f9:5c:04:b7:67:81:af:2f:6e:71:
                    8c:aa:9e:e4:7f:70:0d:d7:52:b8:50:2b:34:ab:a6:
                    96:2d:d1:ca:7a:ce:dd:43:fa:63:ea:3a:04:0b:4c:
                    46:a2:62:65:f7:80:9e:a2:f1:98:29:1d:4d:e0:e0:
                    10:7c:8d:22:17:f1:96:24:98:7e:38:3b:73:ed:26:
                    ab:24:75:c1:6d:ec:ef:cd:27:77:4e:30:ca:c2:36:
                    35:f7:a6:78:b3:c7:88:da:55:d6:ec:41:27:c4:14:
                    99:e8:72:5f:19:93:5e:51:2b:e2:68:ac:db:92:ea:
                    27:69:3a:fb:f0:4f:2e:94:b5:22:ea:f2:45:e3:56:
                    23:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:8B:E4:F3:AF:C8:58:94:D8:84:F2:E0:CF:E3:40:90:8B:69:63:AE
            X509v3 Authority Key Identifier:
                keyid:3C:75:0F:D6:CB:8C:77:01:68:1E:53:6B:DD:6B:71:5F:19:2B:8A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:27:40:b1:fa:b9:75:48:d7:0a:24:ca:38:3f:a2:bc:71:8f:
         fc:14:46:8b:9a:7b:bc:45:2b:89:83:72:69:ee:78:ee:be:e2:
         a4:e4:0f:8b:d9:32:bb:fd:58:3e:95:ea:88:6d:32:4b:cd:12:
         e5:e3:36:7b:3e:af:af:fc:78:e6:8a:9b:72:7d:03:d5:d1:8b:
         19:52:15:ed:fa:71:4a:d3:f7:9b:dc:ee:a7:85:57:97:aa:dd:
         4b:b2:b2:60:c5:42:e5:11:31:3d:a3:b2:49:0c:44:9b:79:0b:
         ff:82:e2:38:b5:44:45:5f:cf:08:39:f2:52:b6:d7:e4:e5:c1:
         d8:1d:02:f7:34:77:eb:6b:71:a5:e5:7a:50:04:ce:31:48:7f:
         24:96:cd:2a:99:08:0b:d4:25:fc:4d:0b:0e:55:36:cf:ee:e4:
         9d:5d:1a:1d:e3:37:02:e3:30:c3:ea:25:33:8d:16:b3:90:ee:
         04:2d:00:11:00:01:29:83:eb:2a:b7:9e:9e:53:e6:7a:de:04:
         b7:52:3b:0f:b8:6d:e8:ac:3c:ba:f0:af:82:97:ee:16:72:a5:
         4d:6e:66:c5:6b:dd:15:3f:d0:e3:f6:d8:99:68:38:6d:ce:57:
         92:9d:31:18:d4:ab:7e:2d:47:f8:07:26:d1:e3:d1:f5:a1:f2:
         d4:e8:fc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:31:54 2025 by rpki-client