Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.mft
File:                     phcu6-H80al4zKRn4bWKMLN5Ues.mft (raw, json)
Hash identifier:          8BAT0uy/nClibPAIPh9KZ+MGLXKwsv8e2Vm7zwmtYF4=
Subject key identifier:   AA:6B:44:98:17:85:F5:E0:E9:B3:42:10:4B:B7:5B:D0:DF:EA:25:FE
Authority key identifier: A6:17:2E:EB:E1:FC:D1:A9:78:CC:A4:67:E1:B5:8A:30:B3:79:51:EB
Certificate issuer:       /CN=A917BB9A/serialNumber=A6172EEBE1FCD1A978CCA467E1B58A30B37951EB
Certificate serial:       72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phcu6-H80al4zKRn4bWKMLN5Ues.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.mft
Manifest number:          5B
Signing time:             Sun 27 Apr 2025 06:22:27 +0000
Manifest this update:     Sun 27 Apr 2025 06:22:26 +0000
Manifest next update:     Sun 04 May 2025 06:22:26 +0000
Files and hashes:         1: phcu6-H80al4zKRn4bWKMLN5Ues.crl (hash: Vz5C9sO+3absD/E/MWWv78vEJtPGzrgb9OorBfcFUKU=)
                          2: B926074003DE11F0BE74EF4FC4F9AE02.roa (hash: yO8wrLfsa5iXZNjaq13V35mcBYp1h+ZJbpYI1FUk9vw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.crl
                          rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phcu6-H80al4zKRn4bWKMLN5Ues.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BB9A, serialNumber=A6172EEBE1FCD1A978CCA467E1B58A30B37951EB
        Validity
            Not Before: Apr 27 06:22:26 2025 GMT
            Not After : May  4 06:22:26 2025 GMT
        Subject: CN=680dcd22-02a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:13:35:0b:d4:08:70:0d:4f:e1:93:0c:2d:ea:
                    f1:00:16:8d:88:4a:b9:10:ad:a9:36:0f:03:f2:ed:
                    5a:8b:08:a6:31:01:20:70:63:0a:fe:7d:74:f4:bb:
                    97:49:92:26:e2:98:03:0d:9a:e8:e1:71:12:36:70:
                    24:6c:6e:79:bf:75:01:19:aa:4b:8f:63:3d:4a:b8:
                    50:a6:6f:10:a7:e4:ce:27:a0:14:18:96:70:67:47:
                    fc:98:0e:04:cf:39:76:de:b1:6a:2b:1b:9c:d8:d0:
                    95:15:07:aa:a9:d3:2b:77:e0:6b:4a:5b:e2:0a:c8:
                    0d:e3:84:52:30:1d:b8:e8:1e:19:04:ae:98:1d:3c:
                    ce:34:2f:3f:b9:3e:ce:4f:c8:8e:58:31:c3:4f:f2:
                    58:43:07:c7:18:d1:7a:18:ad:61:06:fb:3c:93:0e:
                    f6:15:49:ee:ab:49:14:9d:b8:a2:92:32:07:38:00:
                    f4:d3:3e:d8:73:a0:f6:26:aa:23:c7:5f:39:f3:d7:
                    01:be:eb:ff:63:77:2c:a6:28:69:70:9b:09:24:1f:
                    b6:eb:92:ea:99:1a:93:26:7a:d7:ed:cf:55:fd:33:
                    fc:3c:c4:2e:f6:01:84:2a:2d:6f:e9:6b:68:20:93:
                    cf:6e:30:28:a1:0a:62:15:ab:ef:bb:0c:fd:e4:70:
                    d8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:6B:44:98:17:85:F5:E0:E9:B3:42:10:4B:B7:5B:D0:DF:EA:25:FE
            X509v3 Authority Key Identifier:
                keyid:A6:17:2E:EB:E1:FC:D1:A9:78:CC:A4:67:E1:B5:8A:30:B3:79:51:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phcu6-H80al4zKRn4bWKMLN5Ues.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:f6:07:f7:92:04:4d:b2:94:44:3c:59:55:9d:23:3b:4d:11:
         f7:69:69:43:79:21:a4:f1:c9:f9:3f:fe:1f:fa:0b:c7:ae:f2:
         45:8b:df:6b:80:ac:52:e9:17:4a:8f:06:cc:10:55:2c:de:71:
         9f:3c:04:b6:86:3c:54:35:50:05:b8:3d:b9:cd:59:7b:5e:a1:
         9b:40:5e:a4:f6:7c:9f:20:4d:3c:eb:35:65:a2:22:b9:93:f7:
         aa:b5:66:5b:66:0f:af:87:49:1b:4a:b3:fe:07:1b:1f:71:06:
         6d:79:eb:79:65:6b:dd:b3:14:53:87:df:3a:32:67:a1:48:79:
         17:ce:b0:1d:20:77:68:55:50:25:e4:52:1e:f1:1c:9a:61:54:
         4c:12:33:06:d6:4f:a2:19:c2:94:a1:19:b6:f5:3c:a1:7c:39:
         4e:73:8b:ab:fd:86:2a:db:a5:53:8f:29:02:d5:d5:a1:a9:73:
         62:be:79:66:1c:13:c1:5c:f8:58:48:90:3a:73:ef:28:ec:89:
         f7:38:6f:01:18:71:df:94:8e:99:19:9a:32:bd:de:dd:5b:29:
         7d:ca:09:6d:8b:99:29:b6:54:e7:ed:8b:86:58:ec:86:47:d3:
         f7:cc:91:f5:4b:04:6b:55:34:b8:5a:9b:45:31:92:0a:24:1b:
         c7:0f:ec:39
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
QkI5QTExMC8GA1UEBRMoQTYxNzJFRUJFMUZDRDFBOTc4Q0NBNDY3RTFCNThBMzBC
Mzc5NTFFQjAeFw0yNTA0MjcwNjIyMjZaFw0yNTA1MDQwNjIyMjZaMBgxFjAUBgNV
BAMTDTY4MGRjZDIyLTAyYTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQD1EzUL1AhwDU/hkwwt6vEAFo2ISrkQrak2DwPy7VqLCKYxASBwYwr+fXT0u5dJ
kibimAMNmujhcRI2cCRsbnm/dQEZqkuPYz1KuFCmbxCn5M4noBQYlnBnR/yYDgTP
OXbesWorG5zY0JUVB6qp0yt34GtKW+IKyA3jhFIwHbjoHhkErpgdPM40Lz+5Ps5P
yI5YMcNP8lhDB8cY0XoYrWEG+zyTDvYVSe6rSRSduKKSMgc4APTTPthzoPYmqiPH
Xznz1wG+6/9jdyymKGlwmwkkH7brkuqZGpMmetftz1X9M/w8xC72AYQqLW/pa2gg
k89uMCihCmIVq++7DP3kcNjHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqmtEmBeF
9eDps0IQS7db0N/qJf4wHwYDVR0jBBgwFoAUphcu6+H80al4zKRn4bWKMLN5Uesw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCQjlBLzQ5Q0QwMzA0Q0ZG
MzExRUY5MDYyRTUyMUM0RjlBRTAyL3BoY3U2LUg4MGFsNHpLUm40YldLTUxONVVl
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcGhjdTYtSDgwYWw0ektSbjRiV0tNTE41VWVzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC
QjlBLzQ5Q0QwMzA0Q0ZGMzExRUY5MDYyRTUyMUM0RjlBRTAyL3BoY3U2LUg4MGFs
NHpLUm40YldLTUxONVVlcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAGz2B/eSBE2ylEQ8WVWdIztNEfdpaUN5IaTxyfk//h/6C8eu8kWL32uA
rFLpF0qPBswQVSzecZ88BLaGPFQ1UAW4PbnNWXteoZtAXqT2fJ8gTTzrNWWiIrmT
96q1ZltmD6+HSRtKs/4HGx9xBm1563lla92zFFOH3zoyZ6FIeRfOsB0gd2hVUCXk
Uh7xHJphVEwSMwbWT6IZwpShGbb1PKF8OU5zi6v9hirbpVOPKQLV1aGpc2K+eWYc
E8Fc+FhIkDpz7yjsifc4bwEYcd+UjpkZmjK93t1bKX3KCW2LmSm2VOfti4ZY7IZH
0/fMkfVLBGtVNLham0UxkgokG8cP7Dk=
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:50 2025 by rpki-client on console.sobornost.net