Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
File:                     125W2VTMXAD-XW6t2N9QJypb3yk.mft (raw, json)
Hash identifier:          bN7doZdcXnVq5gPW8M9k93UmMvbYThB646/cT8EitEU=
Subject key identifier:   D3:B1:9B:9C:E0:9A:2F:1A:70:86:48:48:BF:4B:6E:49:4A:41:8B:57
Authority key identifier: D7:6E:56:D9:54:CC:5C:00:FE:5D:6E:AD:D8:DF:50:27:2A:5B:DF:29
Certificate issuer:       /CN=A91ADB41/serialNumber=D76E56D954CC5C00FE5D6EADD8DF50272A5BDF29
Certificate serial:       0785
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
Manifest number:          0785
Signing time:             Wed 02 Apr 2025 21:16:47 +0000
Manifest this update:     Wed 02 Apr 2025 21:16:46 +0000
Manifest next update:     Wed 09 Apr 2025 21:16:46 +0000
Files and hashes:         1: 125W2VTMXAD-XW6t2N9QJypb3yk.crl (hash: AwAb9wRjNU34nWFXP6rK9hqu2KQcuWp+AI+eyhk83Ik=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.crl
                          rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 21:16:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1925 (0x785)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADB41
        Validity
            Not Before: Apr  2 21:16:46 2025 GMT
            Not After : Apr  9 21:16:46 2025 GMT
        Subject: CN=67eda93e-90f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:91:1f:ba:9c:45:31:1d:e3:bf:47:58:68:bc:
                    97:9b:2e:24:10:a4:6c:47:8b:c8:50:6a:1c:b8:2c:
                    b9:76:72:ea:3f:78:f5:1e:18:88:78:56:f8:88:bb:
                    9a:fa:96:b7:1f:23:21:d4:80:73:72:ba:ff:5c:e8:
                    83:f8:b5:04:1e:38:2b:ff:d8:94:bc:27:9f:56:ff:
                    a4:15:f9:7d:be:cd:9c:1f:65:2d:2a:c2:75:83:72:
                    2a:69:9d:1b:ec:58:c6:f8:ac:9a:38:a3:b3:0b:e1:
                    e8:da:a9:15:a6:4c:03:f5:0e:a3:f9:7e:ad:d3:56:
                    32:2f:5a:f9:b8:33:99:3d:6a:be:1a:2d:43:d7:43:
                    06:bd:e3:26:2b:2b:e4:7a:bf:aa:4e:8a:a4:7c:65:
                    80:13:ac:40:af:4e:84:c3:f5:49:2b:59:27:98:46:
                    87:e3:c1:15:11:68:16:08:50:ca:d2:25:ff:ee:9a:
                    5f:9f:8b:92:e7:c8:11:3a:2e:fd:60:db:da:dd:1a:
                    14:02:13:30:db:e1:08:b0:a8:46:32:5b:fc:aa:8f:
                    de:7f:31:4f:8a:60:23:79:02:26:eb:a3:cd:ca:9d:
                    32:fe:b5:fb:34:1b:34:35:e5:d4:aa:41:81:ae:64:
                    ce:37:81:c6:1e:fd:20:30:4e:cf:62:06:59:98:01:
                    c1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B1:9B:9C:E0:9A:2F:1A:70:86:48:48:BF:4B:6E:49:4A:41:8B:57
            X509v3 Authority Key Identifier:
                keyid:D7:6E:56:D9:54:CC:5C:00:FE:5D:6E:AD:D8:DF:50:27:2A:5B:DF:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:ec:4d:85:08:4a:61:a7:1c:82:6c:64:c0:aa:5b:cb:90:64:
         80:44:c4:64:2b:83:60:c3:75:a8:84:a9:89:f5:d3:9c:3a:3b:
         85:5a:dc:6f:0c:15:0c:b9:55:40:03:68:19:4e:c3:c3:e4:3a:
         c1:e4:0e:49:1b:43:f9:58:f3:c9:80:1b:1f:ee:2c:ef:85:a7:
         a2:87:32:a7:c6:41:8e:41:10:6a:28:76:a0:cb:a4:0d:90:d8:
         ca:75:b3:99:bd:24:79:16:66:90:7c:0f:39:36:69:74:0d:38:
         94:3d:ba:e1:99:22:9a:4e:47:1c:be:bf:e3:83:b5:96:f5:4f:
         48:b6:e5:01:52:7a:5f:9d:0b:f8:d2:f3:89:57:b0:32:9b:fe:
         be:6f:aa:e0:8a:65:14:21:d6:36:96:03:bf:f1:ba:a4:b4:05:
         31:f5:4e:48:62:ce:cb:30:1b:89:e2:8e:d8:cd:25:bb:cb:1e:
         ed:de:55:93:83:46:a3:6a:49:b7:74:40:21:53:1b:dc:9a:35:
         91:99:22:45:ba:88:7b:92:d7:a0:c1:ea:60:a4:dc:d0:33:93:
         0f:03:d7:a1:91:a8:a4:2b:85:cd:3e:8b:f8:09:11:22:c6:58:
         28:ba:84:13:5d:e9:91:a5:b2:c4:5f:f0:9c:cb:5d:d1:31:48:
         11:5c:34:57
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QURCNDExMTAvBgNVBAUTKEQ3NkU1NkQ5NTRDQzVDMDBGRTVENkVBREQ4REY1MDI3
MkE1QkRGMjkwHhcNMjUwNDAyMjExNjQ2WhcNMjUwNDA5MjExNjQ2WjAYMRYwFAYD
VQQDEw02N2VkYTkzZS05MGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAupEfupxFMR3jv0dYaLyXmy4kEKRsR4vIUGocuCy5dnLqP3j1HhiIeFb4iLua
+pa3HyMh1IBzcrr/XOiD+LUEHjgr/9iUvCefVv+kFfl9vs2cH2UtKsJ1g3IqaZ0b
7FjG+KyaOKOzC+Ho2qkVpkwD9Q6j+X6t01YyL1r5uDOZPWq+Gi1D10MGveMmKyvk
er+qToqkfGWAE6xAr06Ew/VJK1knmEaH48EVEWgWCFDK0iX/7ppfn4uS58gROi79
YNva3RoUAhMw2+EIsKhGMlv8qo/efzFPimAjeQIm66PNyp0y/rX7NBs0NeXUqkGB
rmTON4HGHv0gME7PYgZZmAHBLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNOxm5zg
mi8acIZISL9LbklKQYtXMB8GA1UdIwQYMBaAFNduVtlUzFwA/l1urdjfUCcqW98p
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI0MS8xNjBCODI0RTAy
MDExMUVCOEU0N0I5NUNDNEY5QUUwMi8xMjVXMlZUTVhBRC1YVzZ0Mk45UUp5cGIz
eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzEyNVcyVlRNWEFELVhXNnQyTjlRSnlwYjN5ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
REI0MS8xNjBCODI0RTAyMDExMUVCOEU0N0I5NUNDNEY5QUUwMi8xMjVXMlZUTVhB
RC1YVzZ0Mk45UUp5cGIzeWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA87E2FCEphpxyCbGTAqlvLkGSARMRkK4Ngw3WohKmJ9dOcOjuFWtxv
DBUMuVVAA2gZTsPD5DrB5A5JG0P5WPPJgBsf7izvhaeihzKnxkGOQRBqKHagy6QN
kNjKdbOZvSR5FmaQfA85Nml0DTiUPbrhmSKaTkccvr/jg7WW9U9ItuUBUnpfnQv4
0vOJV7Aym/6+b6rgimUUIdY2lgO/8bqktAUx9U5IYs7LMBuJ4o7YzSW7yx7t3lWT
g0ajakm3dEAhUxvcmjWRmSJFuoh7ktegwepgpNzQM5MPA9ehkaikK4XNPov4CREi
xlgouoQTXemRpbLEX/Ccy13RMUgRXDRX
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:34:51 2025 by rpki-client