Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
File:                     125W2VTMXAD-XW6t2N9QJypb3yk.mft (raw, json)
Hash identifier:          1lbg1+OqG6T+8CQGGeJ9c68FUpd5moI6/JE90U0aom4=
Subject key identifier:   9F:56:A3:19:DE:44:4A:43:97:2D:B5:EF:92:A4:73:79:6A:8E:1B:0B
Authority key identifier: D7:6E:56:D9:54:CC:5C:00:FE:5D:6E:AD:D8:DF:50:27:2A:5B:DF:29
Certificate issuer:       /CN=A91ADB41/serialNumber=D76E56D954CC5C00FE5D6EADD8DF50272A5BDF29
Certificate serial:       0857
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
Manifest number:          0857
Signing time:             Tue 12 May 2026 20:49:44 +0000
Manifest this update:     Tue 12 May 2026 20:49:44 +0000
Manifest next update:     Tue 19 May 2026 20:49:44 +0000
Files and hashes:         1: 125W2VTMXAD-XW6t2N9QJypb3yk.crl (hash: vg8Uh+6r2D6cexhi5sGI05tTeVoQT6WUtwnLDYgOjt0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.crl
                          rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:49:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2135 (0x857)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADB41, serialNumber=D76E56D954CC5C00FE5D6EADD8DF50272A5BDF29
        Validity
            Not Before: May 12 20:49:44 2026 GMT
            Not After : May 19 20:49:44 2026 GMT
        Subject: CN=6a039268-c900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:82:34:6c:50:2e:07:cb:14:c9:54:e9:31:2e:
                    82:31:b2:4d:4c:58:bf:51:ed:50:1f:d4:99:b7:fc:
                    98:91:06:ab:c1:54:97:b3:b1:2d:24:27:b9:d5:dd:
                    a2:c8:85:9d:b4:8c:01:ec:b3:ef:e2:6d:61:5d:85:
                    51:be:06:05:ad:5e:d5:61:f3:09:85:05:0e:e5:5a:
                    5f:c7:ed:30:3f:04:b6:bc:8c:0b:2a:81:da:88:2d:
                    ad:f5:47:84:6a:0d:6e:92:f0:c6:a9:95:38:7d:4d:
                    c2:68:bb:17:a9:a3:a3:ff:ab:3e:ae:85:6b:c2:c2:
                    59:7c:a7:40:c2:c7:c2:f9:1c:6e:8e:57:56:bc:d0:
                    6b:57:ca:bc:b8:fc:80:3a:64:53:20:9b:10:a9:2e:
                    10:81:e0:b6:74:e9:11:40:8c:18:4c:6c:0d:cc:ca:
                    9f:cd:94:ad:c6:54:47:9b:fd:df:95:d3:80:da:cf:
                    e1:cd:ca:57:e4:3d:3d:70:23:60:61:48:05:0a:dc:
                    14:81:4f:29:92:81:eb:b0:ad:ed:48:1a:c0:c8:bc:
                    88:e7:85:dc:97:27:4f:58:4b:74:79:d2:91:82:fb:
                    31:c3:6c:31:af:59:a1:8c:e1:fa:43:46:41:6e:22:
                    a0:16:8c:23:48:d7:76:43:5b:b8:03:fc:26:b2:95:
                    bc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:56:A3:19:DE:44:4A:43:97:2D:B5:EF:92:A4:73:79:6A:8E:1B:0B
            X509v3 Authority Key Identifier:
                keyid:D7:6E:56:D9:54:CC:5C:00:FE:5D:6E:AD:D8:DF:50:27:2A:5B:DF:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:75:6d:af:c8:69:9f:3d:85:e8:0a:be:dc:36:f4:7c:33:e9:
         8a:7e:54:f0:db:9d:3a:ef:c1:13:43:c1:49:5a:06:da:1e:dc:
         26:c4:20:b8:b2:17:66:42:f5:1d:ac:6f:9e:2e:a6:30:eb:a6:
         3e:72:a4:0d:77:b3:9d:e3:26:ba:64:ce:47:a5:38:93:4b:e3:
         b9:3b:b6:c2:14:15:b1:22:84:c8:53:35:d2:b2:92:f8:46:b3:
         2e:09:85:14:79:5e:54:aa:5b:69:2d:34:37:70:60:29:9a:17:
         6f:13:65:39:b3:7d:d1:d6:40:31:0c:0c:da:bb:08:90:f0:aa:
         b1:3b:bb:9e:66:20:27:55:98:0b:87:44:36:e6:c5:d1:1a:c6:
         79:8e:4e:a1:76:5d:d4:c0:f1:30:20:98:5f:5f:fa:6d:45:f6:
         39:6f:9c:84:0f:29:4a:73:a5:4d:1b:ea:37:a8:04:58:09:3b:
         fa:87:07:18:1a:9f:de:bb:d5:52:c8:1c:bf:28:3c:49:46:b1:
         af:3c:c3:98:33:bf:fd:d0:db:88:ad:32:84:dd:25:22:0f:01:
         e9:0d:ca:9a:e2:ee:9f:52:6f:2c:a2:89:22:16:74:fc:8b:d1:
         43:30:19:a2:d0:e2:02:3c:fa:46:b5:5b:5a:c6:9d:be:55:a0:
         7d:85:d2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:27:20 2026 by rpki-client