Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
File:                     125W2VTMXAD-XW6t2N9QJypb3yk.mft (raw, json)
Hash identifier:          m15uHtA7IetK4QVt0rLG5IkMe15dOoiEVzWSSE6Nglo=
Subject key identifier:   1A:07:01:75:C8:B6:B3:CC:C0:60:5D:84:25:93:93:62:2A:33:46:85
Authority key identifier: D7:6E:56:D9:54:CC:5C:00:FE:5D:6E:AD:D8:DF:50:27:2A:5B:DF:29
Certificate issuer:       /CN=A91ADB41/serialNumber=D76E56D954CC5C00FE5D6EADD8DF50272A5BDF29
Certificate serial:       0790
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
Manifest number:          0790
Signing time:             Thu 24 Apr 2025 21:05:32 +0000
Manifest this update:     Thu 24 Apr 2025 21:05:31 +0000
Manifest next update:     Thu 01 May 2025 21:05:31 +0000
Files and hashes:         1: 125W2VTMXAD-XW6t2N9QJypb3yk.crl (hash: WyQy79u97eQYTXMm5gjJT5ec/cpkmgDj9pfw9NYB4uM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.crl
                          rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 21:05:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1936 (0x790)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADB41, serialNumber=D76E56D954CC5C00FE5D6EADD8DF50272A5BDF29
        Validity
            Not Before: Apr 24 21:05:31 2025 GMT
            Not After : May  1 21:05:31 2025 GMT
        Subject: CN=680aa79c-91ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:46:45:f3:91:2c:64:ea:5a:01:55:f4:e3:b2:
                    13:23:9c:fc:ef:70:50:ae:69:33:f1:ab:61:d5:98:
                    d8:87:e3:fe:5b:a9:87:d3:51:25:13:8e:38:a1:e4:
                    6c:08:44:40:bb:9b:95:98:f4:d8:7b:bc:6f:22:e7:
                    67:33:05:f4:e7:e7:6b:7e:b8:e9:28:d2:d4:b4:a5:
                    4b:5a:3d:f4:ba:27:3b:93:fe:dd:53:91:7d:ee:87:
                    9a:f2:36:bc:6a:ea:cf:3a:e3:7a:6f:03:df:3a:fc:
                    e6:21:40:1b:cd:9f:f2:64:3a:14:de:61:e6:e3:e0:
                    f5:a5:83:88:a4:7c:2a:ab:58:b0:3f:2f:4f:af:f4:
                    00:ee:63:75:22:f8:49:41:1e:4f:71:29:8b:2c:2d:
                    de:82:ff:87:a6:e5:3a:cc:8d:90:7d:28:c2:dc:f1:
                    91:2a:62:4f:43:35:87:84:af:6d:33:16:f7:e7:a0:
                    59:e0:71:bc:e5:9c:f5:0f:ba:0c:aa:28:af:24:a3:
                    cf:5c:62:f8:33:4f:36:2c:00:ba:42:dc:07:af:d0:
                    5e:e0:a2:cc:b6:e2:d5:78:54:ed:fc:76:94:8e:bb:
                    96:f6:96:2a:ae:1a:62:28:b7:43:e0:3b:15:ea:79:
                    8e:43:85:a2:2c:9c:e9:6a:88:0e:c2:d4:17:66:dc:
                    1c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:07:01:75:C8:B6:B3:CC:C0:60:5D:84:25:93:93:62:2A:33:46:85
            X509v3 Authority Key Identifier:
                keyid:D7:6E:56:D9:54:CC:5C:00:FE:5D:6E:AD:D8:DF:50:27:2A:5B:DF:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:0d:34:01:36:89:06:b0:59:33:4b:7f:54:0c:90:56:2f:6d:
         3a:36:60:59:bd:a3:04:14:eb:aa:3f:5d:73:4d:74:b7:50:6a:
         7a:99:e8:53:77:92:8c:5e:ce:c6:74:45:0e:0a:27:b3:aa:3e:
         28:6d:d5:c2:04:f6:74:eb:bf:45:ed:65:08:e2:8d:9a:88:37:
         11:99:be:20:b6:d9:03:fb:b4:c1:08:de:2d:7b:ad:22:78:51:
         14:24:d8:2a:c6:60:6a:ca:64:e1:6c:db:3d:57:54:ec:e3:93:
         1a:15:22:80:91:e8:77:c5:41:23:32:4f:f8:40:e8:10:40:b8:
         ac:79:ce:b6:d1:eb:fd:98:3b:f5:ae:81:c9:5d:d2:eb:7a:66:
         78:0d:a8:8f:71:db:09:dc:38:31:c9:7c:6e:e2:b6:b0:ce:fa:
         65:d6:16:ec:f2:dd:af:99:74:89:d2:89:99:09:ae:b7:25:73:
         b0:a8:5f:91:51:3b:93:60:23:1d:40:f7:2d:54:75:ee:10:c3:
         21:82:76:ef:8c:f2:e6:93:c1:12:0a:42:63:60:a5:4d:32:07:
         7f:2b:35:c6:a7:8f:83:9b:fd:c1:c2:fc:e8:40:e8:6a:12:d2:
         87:40:56:50:92:a4:08:59:39:e7:6e:d5:c0:8b:ab:2c:a2:5e:
         13:23:23:bb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QURCNDExMTAvBgNVBAUTKEQ3NkU1NkQ5NTRDQzVDMDBGRTVENkVBREQ4REY1MDI3
MkE1QkRGMjkwHhcNMjUwNDI0MjEwNTMxWhcNMjUwNTAxMjEwNTMxWjAYMRYwFAYD
VQQDEw02ODBhYTc5Yy05MWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy0ZF85EsZOpaAVX047ITI5z873BQrmkz8ath1ZjYh+P+W6mH01ElE444oeRs
CERAu5uVmPTYe7xvIudnMwX05+drfrjpKNLUtKVLWj30uic7k/7dU5F97oea8ja8
aurPOuN6bwPfOvzmIUAbzZ/yZDoU3mHm4+D1pYOIpHwqq1iwPy9Pr/QA7mN1IvhJ
QR5PcSmLLC3egv+HpuU6zI2QfSjC3PGRKmJPQzWHhK9tMxb356BZ4HG85Zz1D7oM
qiivJKPPXGL4M082LAC6QtwHr9Be4KLMtuLVeFTt/HaUjruW9pYqrhpiKLdD4DsV
6nmOQ4WiLJzpaogOwtQXZtwcnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBoHAXXI
trPMwGBdhCWTk2IqM0aFMB8GA1UdIwQYMBaAFNduVtlUzFwA/l1urdjfUCcqW98p
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI0MS8xNjBCODI0RTAy
MDExMUVCOEU0N0I5NUNDNEY5QUUwMi8xMjVXMlZUTVhBRC1YVzZ0Mk45UUp5cGIz
eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzEyNVcyVlRNWEFELVhXNnQyTjlRSnlwYjN5ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
REI0MS8xNjBCODI0RTAyMDExMUVCOEU0N0I5NUNDNEY5QUUwMi8xMjVXMlZUTVhB
RC1YVzZ0Mk45UUp5cGIzeWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAFDTQBNokGsFkzS39UDJBWL206NmBZvaMEFOuqP11zTXS3UGp6mehT
d5KMXs7GdEUOCiezqj4obdXCBPZ0679F7WUI4o2aiDcRmb4gttkD+7TBCN4te60i
eFEUJNgqxmBqymThbNs9V1Ts45MaFSKAkeh3xUEjMk/4QOgQQLisec620ev9mDv1
roHJXdLremZ4DaiPcdsJ3DgxyXxu4rawzvpl1hbs8t2vmXSJ0omZCa63JXOwqF+R
UTuTYCMdQPctVHXuEMMhgnbvjPLmk8ESCkJjYKVNMgd/KzXGp4+Dm/3BwvzoQOhq
EtKHQFZQkqQIWTnnbtXAi6ssol4TIyO7
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:13:08 2025 by rpki-client