Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
File:                     125W2VTMXAD-XW6t2N9QJypb3yk.mft (raw, json)
Hash identifier:          4AY+7j04fWhQ2nXdjT4t/cr+B8ycADWwaiSbReiFYVw=
Subject key identifier:   89:98:F6:C8:73:FA:38:08:94:B3:8B:0A:85:EE:90:81:96:91:70:72
Authority key identifier: D7:6E:56:D9:54:CC:5C:00:FE:5D:6E:AD:D8:DF:50:27:2A:5B:DF:29
Certificate issuer:       /CN=A91ADB41/serialNumber=D76E56D954CC5C00FE5D6EADD8DF50272A5BDF29
Certificate serial:       089C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
Manifest number:          089C
Signing time:             Thu 24 Sep 2026 20:32:05 +0000
Manifest this update:     Thu 24 Sep 2026 20:32:04 +0000
Manifest next update:     Thu 01 Oct 2026 20:32:04 +0000
Files and hashes:         1: 125W2VTMXAD-XW6t2N9QJypb3yk.crl (hash: az3ZgdICwimJaRSRQbMhf/CtqUb/2MC7aqvTvfek7Dc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.crl
                          rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 20:32:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2204 (0x89c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADB41, serialNumber=D76E56D954CC5C00FE5D6EADD8DF50272A5BDF29
        Validity
            Not Before: Sep 24 20:32:04 2026 GMT
            Not After : Oct  1 20:32:04 2026 GMT
        Subject: CN=6ab588c4-90b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:13:a6:54:1d:26:84:fd:f3:8e:18:5d:76:ef:
                    d6:8f:42:b6:65:14:a1:cf:da:c8:d4:ca:2b:4a:07:
                    91:f3:3f:4d:e2:9f:32:58:40:b2:e9:2a:ae:cc:9b:
                    15:61:69:39:cc:9c:99:71:92:81:88:14:a5:6e:9e:
                    07:bd:dc:be:31:f5:b7:da:df:39:a2:49:46:e8:09:
                    ff:91:36:60:05:05:54:29:4c:1e:7b:38:49:0c:82:
                    4e:50:ca:c4:b7:af:bf:ed:d1:d7:cb:64:2a:c5:b3:
                    77:ea:11:ef:84:b5:d2:7c:de:75:3c:1f:60:77:12:
                    05:90:35:10:65:9c:cf:7d:0c:90:56:ea:a4:1c:86:
                    c1:8f:b6:dc:30:8b:31:29:f3:a9:e1:e7:6d:08:6e:
                    aa:f4:e7:46:b9:ce:b8:23:47:d7:af:02:5e:4a:ce:
                    4f:fb:95:02:bc:a7:38:91:f1:8a:19:22:d9:17:47:
                    75:84:90:6d:09:53:9d:83:de:c9:3c:91:46:df:a2:
                    60:cb:25:0f:d1:59:1f:89:92:49:b2:dc:1e:f1:08:
                    10:f1:a0:d7:f7:32:24:d3:23:3e:11:46:c0:86:5b:
                    fb:8f:0a:05:66:f0:e6:cf:48:18:bc:08:66:9c:33:
                    69:cd:99:37:75:b8:6f:12:a5:eb:10:4c:1a:bc:a4:
                    4f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:98:F6:C8:73:FA:38:08:94:B3:8B:0A:85:EE:90:81:96:91:70:72
            X509v3 Authority Key Identifier:
                keyid:D7:6E:56:D9:54:CC:5C:00:FE:5D:6E:AD:D8:DF:50:27:2A:5B:DF:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:e4:8b:c6:89:b7:46:12:ab:73:21:aa:cd:fd:16:ad:31:cd:
         14:11:34:b3:16:10:10:94:3a:c7:6b:97:fe:0c:d2:41:29:e9:
         68:fe:0d:09:fa:7c:4f:78:e8:b8:3c:74:12:ce:30:f2:b9:5f:
         ed:e7:cd:b1:65:c8:5a:99:20:ad:e3:9b:23:df:63:ae:c2:9a:
         3b:ba:9b:59:26:c5:e5:fa:f2:a9:0a:52:6c:ac:06:57:10:81:
         33:4f:42:a0:85:56:e9:70:fc:fd:1a:a0:4b:b9:fb:e8:c2:98:
         51:ca:bd:53:07:c6:e7:cd:45:e2:b4:09:18:85:df:74:4e:eb:
         91:95:f6:c6:f9:d0:47:e4:df:14:c4:e3:5e:9b:52:d2:9a:b1:
         96:75:63:9d:ca:49:3e:bf:10:6b:91:f8:36:19:5b:b5:44:9f:
         51:1f:5d:8d:36:17:11:ce:2a:f0:e7:a3:70:50:c4:25:bf:e3:
         2c:3d:47:93:d5:5b:c7:d2:4e:3f:fb:f8:06:4b:d8:46:87:71:
         a5:75:f2:d9:6c:78:0e:54:30:80:1a:65:3b:fa:c2:80:2c:de:
         b0:df:c0:4a:bd:fd:61:8c:ab:a0:7f:69:35:ab:7b:9b:57:89:
         71:f8:0b:92:34:c1:bb:cc:54:f3:67:32:00:74:24:67:ab:2e:
         4c:50:aa:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:46:56 2026 by rpki-client