Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.mft
File:                     phcu6-H80al4zKRn4bWKMLN5Ues.mft (raw, json)
Hash identifier:          AWvaGvsdemLIy9G+cUqzfuLkaOrXBjmMc5QMt/lBEds=
Subject key identifier:   4C:19:77:2D:62:3D:86:8A:B9:46:36:C2:1B:78:C1:A5:0C:BC:B7:C8
Authority key identifier: A6:17:2E:EB:E1:FC:D1:A9:78:CC:A4:67:E1:B5:8A:30:B3:79:51:EB
Certificate issuer:       /CN=A917BB9A/serialNumber=A6172EEBE1FCD1A978CCA467E1B58A30B37951EB
Certificate serial:       0107
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phcu6-H80al4zKRn4bWKMLN5Ues.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.mft
Manifest number:          D5
Signing time:             Sun 19 Oct 2025 09:43:51 +0000
Manifest this update:     Sun 19 Oct 2025 09:43:50 +0000
Manifest next update:     Sun 26 Oct 2025 09:43:50 +0000
Files and hashes:         1: phcu6-H80al4zKRn4bWKMLN5Ues.crl (hash: 3GwqJzwjdV3MKUrj8eUFEi6wqpE5R6ysOO5PjMyL28I=)
                          2: CF6B95A22B0611F095AFC61DC4F9AE02.roa (hash: Z/zRPe2DhnITKsdqsZS/1BdNv028Ed4X3nLcFzmMS/g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.crl
                          rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phcu6-H80al4zKRn4bWKMLN5Ues.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:43:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BB9A, serialNumber=A6172EEBE1FCD1A978CCA467E1B58A30B37951EB
        Validity
            Not Before: Oct 19 09:43:50 2025 GMT
            Not After : Oct 26 09:43:50 2025 GMT
        Subject: CN=68f4b2d6-6d8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1a:95:ae:a8:d0:b1:31:41:84:4b:43:86:ad:
                    9f:4a:33:15:63:7f:97:fb:ce:74:a8:6f:62:7e:eb:
                    5f:0a:65:cc:97:72:8f:eb:d2:30:80:22:0a:07:2d:
                    6a:99:58:72:f2:84:d8:fa:46:cd:c5:38:4f:80:29:
                    e8:5d:f4:af:b9:45:07:b0:a2:2f:67:19:6f:0d:10:
                    18:90:e6:0a:b9:c6:93:09:0e:3b:b7:f2:02:bc:f9:
                    5e:e3:bc:a0:27:6b:93:3d:65:da:fe:e4:9e:af:d2:
                    da:40:59:ba:8e:8a:1e:34:20:cd:82:9f:ea:23:22:
                    c9:91:d0:3d:3b:0d:2c:35:e2:91:0b:b9:a0:25:19:
                    c7:b4:e2:8c:af:6f:31:a6:45:97:96:c2:8d:92:fe:
                    fe:c9:f2:c2:db:77:db:54:f9:31:38:7c:ff:b6:93:
                    64:38:34:0e:50:1c:18:34:a6:30:cf:16:20:a0:65:
                    ac:f9:99:04:c9:de:87:15:1f:be:44:47:cd:dc:0e:
                    c7:64:83:da:91:33:63:9f:de:e6:7a:f6:b3:2b:0b:
                    dd:48:6f:2f:97:7d:17:26:71:bb:4f:a8:79:6f:b0:
                    7c:5c:49:28:9a:30:ee:4c:63:d2:48:f9:c7:66:b8:
                    88:1b:44:7d:fb:ca:41:a0:b5:1a:ee:cc:37:c6:7c:
                    71:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:19:77:2D:62:3D:86:8A:B9:46:36:C2:1B:78:C1:A5:0C:BC:B7:C8
            X509v3 Authority Key Identifier:
                keyid:A6:17:2E:EB:E1:FC:D1:A9:78:CC:A4:67:E1:B5:8A:30:B3:79:51:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phcu6-H80al4zKRn4bWKMLN5Ues.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:76:c1:94:aa:5d:8b:53:78:50:23:bf:75:e5:84:78:2e:a6:
         6d:26:cb:89:4a:47:0b:80:94:29:c9:b3:d6:d5:df:d3:de:a2:
         8c:70:d1:27:e1:01:3c:ea:43:16:2e:63:98:5e:71:9c:72:97:
         3b:9b:35:67:94:7e:dc:75:be:e0:98:95:2d:51:ea:a5:f8:b5:
         c2:ca:93:21:4a:a4:09:53:39:54:a3:07:c6:0c:0d:54:0b:68:
         f2:d5:c2:8d:4b:da:c2:de:e1:ba:f4:3a:89:c0:e8:a2:09:7c:
         01:4b:e3:24:6c:f7:13:c9:a3:52:bd:7b:91:f9:19:79:c6:73:
         d3:64:36:4d:bb:da:77:93:ad:93:e0:69:2e:1b:98:8f:77:6f:
         5f:48:0d:d8:15:99:33:cb:66:8e:07:d2:e4:01:3c:62:a6:0f:
         3f:18:e3:22:94:22:fb:1d:e2:e8:af:4a:22:25:90:07:ab:e6:
         33:1b:cf:7d:2d:4e:c2:60:3b:0c:9e:f4:bd:2a:a5:61:09:38:
         26:f2:b7:39:79:98:fa:7e:73:4b:c6:0a:3f:5b:d1:12:bd:41:
         8d:7c:49:2d:73:05:31:8a:fa:5b:3b:0a:c4:04:d8:45:ab:bb:
         42:31:fc:f0:94:bd:ed:3c:fa:02:4f:95:ba:57:6e:e4:c6:83:
         43:b9:b4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:20:25 2025 by rpki-client