Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft
File:                     PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft (raw, json)
Hash identifier:          7Tq8+b6NU1tfDX1uleUx1wWVTp4S2cx3kEYP5BRQm94=
Subject key identifier:   84:C3:BE:58:1D:53:74:3A:49:9B:67:6B:0E:6F:D5:0E:BD:0F:EA:91
Authority key identifier: 3C:76:8F:0C:23:23:D4:6D:32:1E:8A:C9:93:E7:5B:0B:1B:82:1E:54
Certificate issuer:       /CN=A919089B/serialNumber=3C768F0C2323D46D321E8AC993E75B0B1B821E54
Certificate serial:       AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHaPDCMj1G0yHorJk-dbCxuCHlQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft
Manifest number:          AA
Signing time:             Sun 19 Oct 2025 09:27:27 +0000
Manifest this update:     Sun 19 Oct 2025 09:27:26 +0000
Manifest next update:     Sun 26 Oct 2025 09:27:26 +0000
Files and hashes:         1: PHaPDCMj1G0yHorJk-dbCxuCHlQ.crl (hash: kh2vvy390oKDuEljsQh4qpgUnPWcgSVs3UAAEE9aM9Q=)
                          2: A60814E423E811F0B464ED15C4F9AE02.roa (hash: Gjud9DBV5l2d7shu62YgWfFgE4K+4bhp6xDHyEbycw8=)
                          3: D428DE9420CD11F0B635AE70C4F9AE02.roa (hash: f3j7ze7nU/HicYJ4iTkEa5H/gPn17vSx4mQuxNQzZnw=)
                          4: 8284033420CD11F0BCFE4A70C4F9AE02.roa (hash: VRnXPjHcpYrC4h2blRdJhGhCl3ndeqDoavQMjgsusDc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.crl
                          rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHaPDCMj1G0yHorJk-dbCxuCHlQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:27:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173 (0xad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919089B, serialNumber=3C768F0C2323D46D321E8AC993E75B0B1B821E54
        Validity
            Not Before: Oct 19 09:27:26 2025 GMT
            Not After : Oct 26 09:27:26 2025 GMT
        Subject: CN=68f4aeff-f681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:48:9e:58:5c:4a:ba:f5:aa:fe:92:31:b2:94:
                    44:18:0c:b9:b0:dc:8d:d1:cc:84:9b:df:06:53:98:
                    87:4d:f3:b6:55:c3:94:2f:fd:e2:33:5e:f2:ae:63:
                    7e:80:73:a7:d9:cb:01:91:ee:4e:82:51:a7:4d:ea:
                    66:0b:73:23:58:8b:85:4a:35:8b:1e:dd:bf:7b:48:
                    e4:1a:79:e3:78:e0:fc:c4:e9:4b:1e:08:51:01:75:
                    f3:45:7d:b9:a9:e7:f8:76:d3:ec:7c:8a:48:71:cb:
                    96:76:42:5f:a5:cd:d1:2a:89:58:ac:77:f2:20:1e:
                    6c:71:bf:3c:84:a7:55:7e:26:db:e7:6b:b0:3c:20:
                    99:95:5b:7b:2e:05:06:59:e9:c4:c6:82:c5:d7:75:
                    4f:72:a5:13:89:bc:15:af:20:2b:6a:29:d6:4e:8a:
                    c0:b8:7e:72:4a:17:c4:d7:21:b9:3e:8b:cb:37:78:
                    b0:f2:a2:41:40:47:40:8c:92:1e:e4:55:71:30:20:
                    3e:97:db:86:f5:be:61:48:77:b0:53:2f:42:ce:a1:
                    d6:8a:f7:7c:31:97:fe:23:3b:94:53:17:de:e5:b4:
                    a3:ff:45:2d:0e:77:7c:59:1d:de:a8:fa:26:ad:ca:
                    88:89:70:f2:d7:91:07:30:c3:9f:40:7c:de:51:aa:
                    b1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C3:BE:58:1D:53:74:3A:49:9B:67:6B:0E:6F:D5:0E:BD:0F:EA:91
            X509v3 Authority Key Identifier:
                keyid:3C:76:8F:0C:23:23:D4:6D:32:1E:8A:C9:93:E7:5B:0B:1B:82:1E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHaPDCMj1G0yHorJk-dbCxuCHlQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:8a:bf:86:3f:d9:30:2e:c1:15:a5:b9:13:16:e0:95:d6:b8:
         b1:dd:39:78:6a:27:6e:8e:15:eb:be:56:0e:43:e5:7a:d3:d6:
         73:f8:b4:ff:71:ba:b9:95:b0:3e:96:82:ef:78:9b:92:48:b5:
         88:22:4a:83:9d:61:e5:d6:56:af:d2:5a:82:e0:65:4c:91:c8:
         de:ee:be:f4:44:23:70:f9:a7:f6:b8:66:07:87:9a:dc:6a:f8:
         cf:60:dd:73:69:cb:bb:35:08:96:44:2f:02:5e:80:70:2d:60:
         0c:e8:25:c5:b3:7d:a8:29:7f:30:3d:38:39:ac:5b:e8:c6:33:
         ec:43:4a:85:c8:80:8b:a4:fb:44:97:00:40:15:f9:e3:f1:19:
         dd:8c:90:11:4a:64:38:66:16:d6:7a:96:af:b7:2e:0a:c8:f4:
         32:84:07:78:ad:b5:88:67:fc:0a:de:3b:9a:f0:21:95:6d:aa:
         89:69:91:3b:7a:70:ce:e0:19:a5:71:b2:93:df:d2:d0:3d:46:
         86:74:be:27:a6:de:fc:db:08:8f:16:d7:b4:d5:5c:04:95:c6:
         e0:79:55:47:da:cf:c5:8e:9e:49:95:9a:25:15:08:9e:1d:3b:
         01:ec:4f:fe:10:58:7f:dd:29:93:83:7e:65:7c:2e:55:8e:bc:
         6c:a5:d6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:05:02 2025 by rpki-client