Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
File:                     125W2VTMXAD-XW6t2N9QJypb3yk.mft (raw, json)
Hash identifier:          dNPWhg7ptUrFxubc7qhJaLdLJv9V6esYzhe+k55wpm4=
Subject key identifier:   80:AD:81:5D:B2:C2:CA:C2:F2:F6:BE:AA:54:3D:31:89:02:18:BC:23
Authority key identifier: D7:6E:56:D9:54:CC:5C:00:FE:5D:6E:AD:D8:DF:50:27:2A:5B:DF:29
Certificate issuer:       /CN=A91ADB41/serialNumber=D76E56D954CC5C00FE5D6EADD8DF50272A5BDF29
Certificate serial:       0889
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
Manifest number:          0889
Signing time:             Tue 18 Aug 2026 20:58:56 +0000
Manifest this update:     Tue 18 Aug 2026 20:58:55 +0000
Manifest next update:     Tue 25 Aug 2026 20:58:55 +0000
Files and hashes:         1: 125W2VTMXAD-XW6t2N9QJypb3yk.crl (hash: 9ZVVX4qGdZ/THZP5FDKw8zzDNv4WIaqRRb59fT6htf0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.crl
                          rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 20:58:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2185 (0x889)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADB41, serialNumber=D76E56D954CC5C00FE5D6EADD8DF50272A5BDF29
        Validity
            Not Before: Aug 18 20:58:55 2026 GMT
            Not After : Aug 25 20:58:55 2026 GMT
        Subject: CN=6a84c790-4561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:63:19:f4:5b:bd:3c:3a:53:2c:bc:94:e2:40:
                    3f:2b:c3:16:fa:03:28:17:9f:6d:a1:cc:54:30:03:
                    7d:ec:35:33:8c:45:b5:cb:2e:db:bf:fb:53:65:7c:
                    e4:14:70:2d:1f:ae:71:da:06:81:a8:0e:5b:79:a6:
                    89:2b:66:81:a0:d3:06:d8:98:ee:4f:d7:9c:ab:52:
                    8a:1a:55:62:f6:8f:ea:12:cb:bf:04:9e:41:33:44:
                    92:50:34:41:be:20:dc:b5:d7:bd:0b:cf:04:3e:4e:
                    be:b0:ea:cf:d4:ce:e6:ff:f6:aa:56:68:5c:47:a2:
                    d1:44:ef:36:c5:f1:4e:32:f2:aa:bd:6b:36:7d:4a:
                    ad:89:b0:9e:db:e9:9e:14:3f:90:38:1b:c9:1c:16:
                    a4:7b:28:67:07:4c:de:4d:cd:d1:0d:70:c1:c2:51:
                    0c:a7:65:26:c0:3f:d9:1e:cf:d8:04:50:9f:28:31:
                    92:43:dd:76:92:b8:9e:d4:8a:6d:a6:3b:92:fd:d5:
                    ea:77:d0:d4:27:eb:43:02:99:ac:b6:06:ec:94:b9:
                    97:9f:02:4f:45:2d:f5:0b:de:cd:12:99:19:7e:ab:
                    49:e4:96:4c:6f:a7:f0:52:5f:61:f1:f3:ae:87:8e:
                    35:98:18:79:65:ad:11:dc:3f:50:91:61:e1:5b:97:
                    20:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:AD:81:5D:B2:C2:CA:C2:F2:F6:BE:AA:54:3D:31:89:02:18:BC:23
            X509v3 Authority Key Identifier:
                keyid:D7:6E:56:D9:54:CC:5C:00:FE:5D:6E:AD:D8:DF:50:27:2A:5B:DF:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:6e:74:be:e0:31:99:6e:10:6d:69:5a:78:c3:e4:5c:d2:ec:
         08:90:67:dd:d9:3a:f9:4f:d6:62:db:bd:c5:8e:73:aa:cc:b8:
         be:79:3f:07:c8:a1:2a:26:a0:ae:21:0b:7b:3a:c6:76:e9:9a:
         bb:e0:20:4b:ba:99:5d:3c:41:3a:cb:96:a2:65:e9:f9:4d:11:
         97:b5:dc:08:52:b6:9e:9f:a9:b0:20:ac:bd:aa:3d:95:66:8a:
         70:da:cc:13:f9:d6:1a:b2:01:b0:9c:c5:80:b6:b1:8e:56:79:
         38:f7:77:54:42:71:86:74:16:77:0f:ae:bf:8e:b4:9d:ca:87:
         d1:8f:4d:c0:ee:10:23:ab:13:df:2d:b3:8f:a3:75:ac:98:67:
         fa:81:24:c9:6e:75:c2:97:c5:45:ac:58:c7:0b:07:00:f9:38:
         9d:1c:95:3c:f5:e4:74:c2:5b:3d:7f:e9:7c:63:07:a1:d7:f7:
         81:3b:dd:47:ab:4b:73:4f:0a:a8:f5:18:52:7c:62:05:e4:e2:
         30:72:80:3f:82:6e:24:28:1a:e1:0e:5a:ce:0c:8b:a1:50:35:
         ad:8d:66:4e:f2:6e:44:0e:48:74:3b:48:bc:a0:6d:85:ad:e2:
         1a:92:a2:a7:7b:15:bf:f2:49:82:09:0a:79:c5:b6:ad:31:21:
         fd:c5:0f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:04 2026 by rpki-client