Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
File:                     125W2VTMXAD-XW6t2N9QJypb3yk.mft (raw, json)
Hash identifier:          jLeqNTGDM6UZsFv6EuF0IwBn2p88tpzvYDMkYafKaq4=
Subject key identifier:   75:44:3D:48:89:9B:76:41:E7:94:51:B9:DB:44:0D:10:5A:B2:3E:35
Authority key identifier: D7:6E:56:D9:54:CC:5C:00:FE:5D:6E:AD:D8:DF:50:27:2A:5B:DF:29
Certificate issuer:       /CN=A91ADB41/serialNumber=D76E56D954CC5C00FE5D6EADD8DF50272A5BDF29
Certificate serial:       07C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
Manifest number:          07C6
Signing time:             Sun 10 Aug 2025 21:08:26 +0000
Manifest this update:     Sun 10 Aug 2025 21:08:26 +0000
Manifest next update:     Sun 17 Aug 2025 21:08:26 +0000
Files and hashes:         1: 125W2VTMXAD-XW6t2N9QJypb3yk.crl (hash: uVmWPc+Mj+MFUB460fkff4BV59TCX7cooIHh7+jCPf0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.crl
                          rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1990 (0x7c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADB41, serialNumber=D76E56D954CC5C00FE5D6EADD8DF50272A5BDF29
        Validity
            Not Before: Aug 10 21:08:26 2025 GMT
            Not After : Aug 17 21:08:26 2025 GMT
        Subject: CN=68990a4a-7c90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8c:b3:bf:0c:33:a5:5c:ee:97:0e:aa:c0:36:
                    98:10:20:19:57:c8:8f:4c:05:a2:de:ae:fb:53:00:
                    ab:8b:95:06:50:2a:73:6b:ff:bd:70:e8:67:0b:67:
                    bf:fc:64:6a:b9:a6:c4:57:c5:83:5f:7b:cf:f6:aa:
                    45:17:c0:16:5d:71:eb:b6:f9:0a:f1:3d:63:51:5c:
                    7f:13:51:bb:d9:95:7c:ba:7f:61:c1:e4:95:21:01:
                    05:fe:8d:60:37:5a:16:02:05:bc:1f:7e:db:92:ec:
                    ff:ac:56:d2:ea:b3:32:86:ed:93:1b:40:8a:58:55:
                    94:ec:91:d1:e9:c4:dc:b2:88:d4:11:de:9d:27:b8:
                    b1:a9:42:6e:46:02:6a:57:57:88:9a:75:33:30:49:
                    2f:ac:d3:09:51:56:d8:2e:7f:08:c4:7f:be:65:c8:
                    bd:e6:fc:8c:46:97:46:49:3d:7c:0e:85:c7:a3:50:
                    e8:17:9c:c9:35:21:ef:8f:53:e8:10:b3:af:f7:c3:
                    3a:8c:78:5a:86:dc:fe:13:3c:31:e3:75:89:aa:81:
                    2a:de:84:cb:46:4d:3a:f9:d5:1f:5c:6d:6c:21:c5:
                    f5:fd:94:bc:a4:ed:e8:f7:2c:1c:3e:2e:2c:54:f8:
                    f5:ca:be:3f:65:9c:9e:85:e5:bd:ab:3d:64:91:b1:
                    f8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:44:3D:48:89:9B:76:41:E7:94:51:B9:DB:44:0D:10:5A:B2:3E:35
            X509v3 Authority Key Identifier:
                keyid:D7:6E:56:D9:54:CC:5C:00:FE:5D:6E:AD:D8:DF:50:27:2A:5B:DF:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:12:c6:c5:4e:6f:36:a1:0e:81:b9:b5:f6:24:83:5f:c1:5b:
         27:87:15:72:b2:ea:b4:4a:64:dd:33:cf:64:70:07:8f:23:6d:
         24:0e:c0:4f:94:9b:7c:3b:08:41:42:96:c8:b1:bc:df:e8:ff:
         5f:cc:ae:35:53:0b:d8:c1:b1:ad:c2:5f:d2:4b:83:83:ba:4c:
         8a:ac:0b:a2:88:d8:84:e9:4d:b8:c6:57:bc:b4:6c:06:f0:7b:
         3a:6e:29:a4:14:5b:a3:7e:41:6c:b3:8c:2b:07:68:fb:f3:ff:
         65:67:a8:9f:dc:65:25:da:a2:86:c4:f2:96:7d:5b:68:37:60:
         9f:ec:08:5f:b8:3d:5f:b0:5a:3e:37:fe:bd:bb:a7:24:a0:e7:
         3c:7b:1c:0a:7f:f3:dc:c4:f4:f8:b6:7b:01:d3:12:a9:7e:26:
         21:a5:f4:f8:fd:cf:26:f4:7e:8b:d9:47:01:41:69:8e:fa:df:
         b2:ab:68:c8:d2:cc:be:81:ea:d5:51:92:02:be:ef:ce:d0:28:
         6b:8f:a7:b4:d0:db:24:87:bb:4b:c5:37:5e:80:30:b2:fd:89:
         36:f9:53:ec:42:e6:d6:b4:f6:35:98:77:96:5a:ef:a8:5f:a2:
         e4:e2:34:7f:19:b0:97:d4:83:15:4a:74:7a:8d:4b:85:fa:bb:
         70:b9:58:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:27:38 2025 by rpki-client