Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
File:                     125W2VTMXAD-XW6t2N9QJypb3yk.mft (raw, json)
Hash identifier:          2LVxmHORWvjhpKrM9dfthkR+BY2xe8I0bUZTyyFsn4w=
Subject key identifier:   D6:25:45:00:BC:9A:42:0E:B3:1B:9A:9A:BC:D7:15:F9:AB:B3:8F:B7
Authority key identifier: D7:6E:56:D9:54:CC:5C:00:FE:5D:6E:AD:D8:DF:50:27:2A:5B:DF:29
Certificate issuer:       /CN=A91ADB41/serialNumber=D76E56D954CC5C00FE5D6EADD8DF50272A5BDF29
Certificate serial:       07CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
Manifest number:          07CC
Signing time:             Fri 22 Aug 2025 21:13:54 +0000
Manifest this update:     Fri 22 Aug 2025 21:13:54 +0000
Manifest next update:     Fri 29 Aug 2025 21:13:54 +0000
Files and hashes:         1: 125W2VTMXAD-XW6t2N9QJypb3yk.crl (hash: Q62QPw8BK2df/nGS8vyS+UjzzDt0w3pUovwFhxYRpqg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.crl
                          rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 21:13:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1996 (0x7cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADB41, serialNumber=D76E56D954CC5C00FE5D6EADD8DF50272A5BDF29
        Validity
            Not Before: Aug 22 21:13:54 2025 GMT
            Not After : Aug 29 21:13:54 2025 GMT
        Subject: CN=68a8dd92-0371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:77:3d:81:89:ad:62:ef:94:55:4c:fd:94:11:
                    99:83:be:00:8b:d3:84:ea:dc:88:78:06:e5:41:2a:
                    59:a6:75:b1:ec:b8:57:3c:f0:25:6b:7c:c0:7a:ed:
                    1f:69:6e:dd:1c:23:f8:11:af:52:31:ce:c6:0f:78:
                    91:d8:2b:92:6e:77:cf:c7:81:4a:de:d1:71:da:c0:
                    1d:6b:8a:70:cc:4a:8a:bd:b3:51:2d:36:74:c3:ef:
                    f1:31:29:79:55:7e:05:cd:87:a7:e1:6d:fe:ec:3c:
                    39:fd:88:7d:a1:ef:d0:2e:4a:7c:3e:5d:15:2b:97:
                    e9:a8:a0:d2:99:e4:da:f5:3b:de:43:a5:ac:c7:2b:
                    2f:37:be:68:4a:56:59:70:81:08:14:26:5a:d3:08:
                    fc:fc:da:2e:da:2f:07:14:58:45:47:f4:b2:4a:4e:
                    61:af:bd:98:fc:26:4b:81:56:1a:95:bf:c4:5a:c6:
                    00:c9:e3:41:96:17:fa:7f:59:43:de:f7:3a:f6:70:
                    f1:cb:74:52:6e:3b:51:34:f9:db:c7:9e:e4:73:27:
                    88:5b:83:a9:50:db:a1:0c:c7:9b:70:eb:85:e6:07:
                    ab:94:79:55:a2:4c:bb:ee:1a:0f:7b:2a:b5:9b:ca:
                    75:d7:08:7b:35:29:b1:41:a8:e7:cf:ff:69:ed:eb:
                    2f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:25:45:00:BC:9A:42:0E:B3:1B:9A:9A:BC:D7:15:F9:AB:B3:8F:B7
            X509v3 Authority Key Identifier:
                keyid:D7:6E:56:D9:54:CC:5C:00:FE:5D:6E:AD:D8:DF:50:27:2A:5B:DF:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:83:41:04:4e:e4:62:24:73:a9:c8:c8:8b:84:c6:a0:54:8e:
         15:a0:c4:e2:b5:33:93:75:76:77:45:61:98:8a:ba:ed:64:44:
         7e:46:e3:a3:81:c3:be:d5:5b:7d:fc:5c:37:84:a3:7a:b8:58:
         e2:11:99:8b:36:fe:dd:28:ed:bd:a7:9d:61:53:3d:d4:6e:a3:
         43:e0:22:7c:62:aa:39:a0:21:49:14:c5:39:b7:9f:ae:30:6e:
         9a:c8:46:11:6f:3b:ab:6e:d8:50:58:6b:59:87:82:aa:a7:e1:
         45:24:46:e7:4f:94:b2:47:a5:d8:14:0e:35:59:68:32:c1:6c:
         6f:82:f1:3f:9f:a8:81:2c:aa:65:33:77:bb:74:9b:18:ce:d6:
         e6:06:8e:ba:1c:2f:0b:1d:fb:5b:f9:1c:89:66:ca:2a:04:c1:
         d3:a6:36:79:03:0b:0b:4c:29:ae:12:c8:8b:97:3c:5d:e3:75:
         63:f8:e2:11:f0:aa:33:ae:da:a3:3d:bc:11:e3:5d:f2:06:45:
         b6:7e:eb:78:05:b3:d5:a0:89:17:5d:03:38:66:86:71:63:6a:
         2a:ef:19:4c:06:47:56:2e:d8:b7:03:f1:be:6e:e7:97:6e:c9:
         7f:b3:d4:0e:01:69:b9:bf:36:87:6a:85:82:42:21:ad:80:91:
         69:b4:71:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:26:37 2025 by rpki-client