Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.mft
File:                     phcu6-H80al4zKRn4bWKMLN5Ues.mft (raw, json)
Hash identifier:          BorQ1uHxt7D7FQ+91CqbQ6SvJMkz8VgTxllidRu+X54=
Subject key identifier:   2E:7A:23:55:69:52:1B:14:B9:CF:EE:59:BA:27:AE:07:77:60:F2:E2
Authority key identifier: A6:17:2E:EB:E1:FC:D1:A9:78:CC:A4:67:E1:B5:8A:30:B3:79:51:EB
Certificate issuer:       /CN=A917BB9A/serialNumber=A6172EEBE1FCD1A978CCA467E1B58A30B37951EB
Certificate serial:       EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phcu6-H80al4zKRn4bWKMLN5Ues.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.mft
Manifest number:          B8
Signing time:             Sat 23 Aug 2025 07:03:55 +0000
Manifest this update:     Sat 23 Aug 2025 07:03:55 +0000
Manifest next update:     Sat 30 Aug 2025 07:03:55 +0000
Files and hashes:         1: phcu6-H80al4zKRn4bWKMLN5Ues.crl (hash: RD2/MZq5KqU8UvCHt3+110Z7NmNkabEimt0dzil8Q3E=)
                          2: CF6B95A22B0611F095AFC61DC4F9AE02.roa (hash: Z/zRPe2DhnITKsdqsZS/1BdNv028Ed4X3nLcFzmMS/g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.crl
                          rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phcu6-H80al4zKRn4bWKMLN5Ues.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 07:03:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234 (0xea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BB9A, serialNumber=A6172EEBE1FCD1A978CCA467E1B58A30B37951EB
        Validity
            Not Before: Aug 23 07:03:55 2025 GMT
            Not After : Aug 30 07:03:55 2025 GMT
        Subject: CN=68a967db-224e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:06:28:8b:23:a2:da:29:e9:30:0c:1b:a8:fc:
                    8f:c3:44:0c:d0:bd:81:50:68:6f:f7:7b:5f:8c:7f:
                    3f:24:5c:6e:1f:1f:d6:55:48:3c:23:13:9d:af:57:
                    6d:b4:77:23:75:9b:a9:b4:62:8a:89:1c:03:8d:39:
                    eb:4e:71:d8:fe:23:53:39:a7:80:d1:d9:53:13:90:
                    87:12:25:89:f8:59:8b:79:75:1d:f4:dd:1e:9f:46:
                    81:22:56:65:9f:a6:27:a8:28:ce:32:b6:4e:67:0c:
                    3b:55:c9:0b:34:8f:d1:62:91:09:04:dc:7c:2c:02:
                    d4:21:1b:f1:34:33:57:92:2d:bb:33:fd:15:88:0c:
                    de:f7:4d:38:00:bb:c8:30:f7:bd:35:b7:0a:bc:f9:
                    a6:e7:85:98:7d:28:3b:cd:24:57:7d:bb:2e:ba:d0:
                    2c:32:f4:8a:b2:9e:77:f4:7d:6a:14:c5:83:c1:cc:
                    57:fa:98:cf:e4:c4:ed:87:6b:2d:65:9f:6e:1a:b8:
                    16:5e:0a:f1:91:55:48:dd:e8:29:c4:4e:47:3f:75:
                    14:69:75:34:00:4e:3e:42:7c:3e:4b:f0:fa:f8:aa:
                    ba:85:c5:01:c6:28:a8:90:b3:b9:97:f1:66:e1:f4:
                    ba:66:6b:11:2e:cf:d1:00:2e:61:89:f5:ce:05:64:
                    9c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:7A:23:55:69:52:1B:14:B9:CF:EE:59:BA:27:AE:07:77:60:F2:E2
            X509v3 Authority Key Identifier:
                keyid:A6:17:2E:EB:E1:FC:D1:A9:78:CC:A4:67:E1:B5:8A:30:B3:79:51:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phcu6-H80al4zKRn4bWKMLN5Ues.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:d7:f3:d3:13:df:1b:81:12:c6:bb:4e:c3:ad:d6:82:d5:0a:
         55:1c:1f:80:e7:57:19:00:39:4a:6c:69:99:a2:fc:5d:09:a0:
         20:50:e3:0f:01:9b:37:61:74:1e:ac:f9:3b:75:4c:b4:f8:8e:
         93:53:82:a9:36:2f:e2:f8:35:e5:a5:bc:6f:ec:ed:46:ea:c5:
         14:33:6f:b5:15:2d:8e:d9:f5:51:d3:2f:45:f7:4a:7b:f9:38:
         c5:1a:b3:8e:3a:cf:38:f3:d7:42:d9:b1:38:71:c1:6f:5e:9d:
         3e:06:ba:8a:8f:d5:ba:cb:34:10:03:e8:b4:15:18:2c:58:3b:
         b3:e6:15:33:32:41:8b:dc:30:b5:0b:8a:d6:89:cb:81:03:7b:
         1f:53:31:77:9d:f0:88:fc:76:f7:ea:cd:e3:52:89:07:4b:26:
         54:b6:9c:ef:b2:a8:d0:05:12:f0:ca:20:e2:c8:a6:d5:bb:00:
         b9:45:0b:a1:8e:3d:e2:62:7a:db:4d:44:b9:64:11:5b:31:44:
         4f:fc:b6:24:44:85:87:11:8c:37:0f:cc:6a:00:da:15:a5:71:
         cd:56:8c:47:2c:50:de:e8:c8:51:cf:10:c1:e4:9a:fe:91:4b:
         b7:58:85:28:e5:a5:ba:10:20:d0:6f:a9:91:2a:2d:0b:72:26:
         f8:ea:12:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:25:12 2025 by rpki-client