Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
File:                     125W2VTMXAD-XW6t2N9QJypb3yk.mft (raw, json)
Hash identifier:          jLKsum1cWNg0ZKMbyNrCvAXtOtbIc34SrB6duYCGrpg=
Subject key identifier:   B5:3B:C4:9A:11:D3:F8:6C:41:6D:EF:CD:48:0C:EC:F1:A2:30:7C:73
Authority key identifier: D7:6E:56:D9:54:CC:5C:00:FE:5D:6E:AD:D8:DF:50:27:2A:5B:DF:29
Certificate issuer:       /CN=A91ADB41/serialNumber=D76E56D954CC5C00FE5D6EADD8DF50272A5BDF29
Certificate serial:       084A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
Manifest number:          084A
Signing time:             Thu 16 Apr 2026 20:42:04 +0000
Manifest this update:     Thu 16 Apr 2026 20:42:03 +0000
Manifest next update:     Thu 23 Apr 2026 20:42:03 +0000
Files and hashes:         1: 125W2VTMXAD-XW6t2N9QJypb3yk.crl (hash: hzpwY3e2hLBfW8QAD3BIgdAyr2KNyiqBtND84JoIXLs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.crl
                          rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:42:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2122 (0x84a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADB41, serialNumber=D76E56D954CC5C00FE5D6EADD8DF50272A5BDF29
        Validity
            Not Before: Apr 16 20:42:03 2026 GMT
            Not After : Apr 23 20:42:03 2026 GMT
        Subject: CN=69e1499b-40dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:05:29:f1:2f:62:4f:06:6b:9d:8f:c3:60:f8:
                    40:72:62:95:5b:e9:c0:16:da:4c:08:29:56:54:25:
                    4a:7c:de:26:5e:3a:5b:fb:0c:f9:67:f6:4a:b6:98:
                    8d:9f:25:94:89:5f:38:5b:cd:cc:0d:00:d6:b1:2c:
                    d6:96:f9:fe:88:70:60:ba:94:54:97:92:d5:f5:ad:
                    3a:72:40:da:56:c5:6b:49:8d:ba:fc:ba:d1:dc:23:
                    9b:e1:a4:b1:b9:3f:ce:b7:7b:ca:4d:b6:f4:06:5a:
                    cc:f3:f5:91:56:96:a0:29:72:d9:2b:18:5a:a5:76:
                    dd:7a:21:28:4c:68:82:c3:a0:e2:7f:ec:97:44:9c:
                    98:bf:f2:ba:85:06:d7:c5:e1:f6:c3:98:6e:e9:cb:
                    e7:bf:33:8b:65:77:f7:cb:53:fd:38:9b:c1:e9:96:
                    c6:d7:4c:c7:c5:4b:d5:89:13:f4:41:49:c0:3c:81:
                    f7:72:66:99:a3:c1:fd:38:9e:5d:1c:2a:64:6c:20:
                    d9:fc:b9:29:75:6d:f4:70:2a:bc:48:c4:0a:24:7b:
                    95:78:7e:2b:c7:47:0b:9f:39:38:f3:1c:0e:0d:6f:
                    96:c8:40:4f:86:f9:9d:dc:64:7a:0e:d8:54:9a:6e:
                    f8:c7:8b:be:60:de:d7:10:41:9a:38:9b:b0:d4:53:
                    97:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:3B:C4:9A:11:D3:F8:6C:41:6D:EF:CD:48:0C:EC:F1:A2:30:7C:73
            X509v3 Authority Key Identifier:
                keyid:D7:6E:56:D9:54:CC:5C:00:FE:5D:6E:AD:D8:DF:50:27:2A:5B:DF:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:00:6e:ca:54:f0:c4:bd:a8:98:6f:3b:98:8d:e9:23:d3:f0:
         69:1f:9d:5a:81:1d:8a:fb:bc:a9:60:9c:67:2e:56:17:b0:ac:
         ab:6f:d9:72:9e:1b:58:89:e2:eb:14:a6:71:c7:5e:34:a4:29:
         58:11:af:5b:cf:18:f2:47:3a:d9:0f:ab:87:2b:ad:c8:0f:7f:
         36:f2:d1:f6:7a:27:ba:f8:f4:35:94:ad:ea:29:01:cb:4f:1d:
         40:2a:02:8d:dd:7c:c0:c9:03:a2:4b:04:18:d3:78:75:47:64:
         d1:c8:44:ae:8d:57:a2:ab:1f:62:93:ed:3d:53:e8:d4:a5:4d:
         6b:a9:30:e4:5a:aa:d8:f1:91:a0:c8:db:6b:31:13:69:28:f9:
         7d:c0:3b:04:89:9b:84:bb:b5:cf:39:a0:5d:ba:e2:44:25:f0:
         30:db:52:c8:e0:73:cd:67:80:f8:6c:f2:73:d5:d6:e0:30:58:
         fd:4b:f6:43:2e:7d:dd:65:9a:70:5a:02:f6:50:64:2b:15:d0:
         de:22:f3:da:1a:1b:e3:be:84:14:51:d4:3f:22:0a:d9:aa:56:
         ed:4a:35:57:77:61:04:04:91:1e:1e:43:19:9b:7a:61:0c:bd:
         b5:ff:e0:14:8a:82:5b:35:68:e8:5f:b7:e2:0a:82:e8:98:8e:
         63:2b:1b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:53:12 2026 by rpki-client