Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
File:                     125W2VTMXAD-XW6t2N9QJypb3yk.mft (raw, json)
Hash identifier:          cna99DJlLz3MQhgZ2wdjmg1Jb8yjEX/0NPlZXLEOYdY=
Subject key identifier:   7E:BD:B3:61:F3:A3:F7:22:A3:ED:78:DE:7E:48:5D:5A:1F:AB:3C:D0
Authority key identifier: D7:6E:56:D9:54:CC:5C:00:FE:5D:6E:AD:D8:DF:50:27:2A:5B:DF:29
Certificate issuer:       /CN=A91ADB41/serialNumber=D76E56D954CC5C00FE5D6EADD8DF50272A5BDF29
Certificate serial:       07F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
Manifest number:          07F1
Signing time:             Tue 04 Nov 2025 21:04:37 +0000
Manifest this update:     Tue 04 Nov 2025 21:04:37 +0000
Manifest next update:     Tue 11 Nov 2025 21:04:37 +0000
Files and hashes:         1: 125W2VTMXAD-XW6t2N9QJypb3yk.crl (hash: drh+9qT6vUL0W3baes2DnBSLjULYWSdKRgSmJyx9/VA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.crl
                          rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 21:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2033 (0x7f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADB41, serialNumber=D76E56D954CC5C00FE5D6EADD8DF50272A5BDF29
        Validity
            Not Before: Nov  4 21:04:37 2025 GMT
            Not After : Nov 11 21:04:37 2025 GMT
        Subject: CN=690a6a65-201c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ee:68:4e:34:bd:c7:86:d4:42:16:72:70:c0:
                    15:3a:7b:40:3b:6c:a0:78:9e:2d:8f:b5:70:85:34:
                    7a:96:f1:d6:c1:3c:39:8f:39:24:cd:81:64:e6:3c:
                    c4:6f:dd:42:ec:a7:11:7e:03:09:46:34:fa:4f:8e:
                    36:67:1b:6a:2e:a4:0a:9d:48:d7:23:d1:e1:5a:17:
                    09:dd:a2:a7:c1:25:c8:5e:49:14:09:9f:0b:6f:8f:
                    8e:9f:fd:ca:14:a8:c7:3d:17:39:aa:c3:b4:c4:27:
                    bd:9f:ab:11:cd:62:fb:95:e2:41:cb:79:10:78:7a:
                    3b:94:50:a8:3d:a9:f1:f4:8c:0f:6a:a3:ec:9d:80:
                    74:fe:3d:83:85:a6:5f:6a:03:2f:1b:1e:6f:27:0f:
                    2c:fb:db:2d:af:94:5c:4c:41:56:c2:7e:68:3b:8c:
                    ee:ea:a6:2d:bb:a1:5d:ef:a4:2c:2f:80:5a:38:3e:
                    b4:6f:e7:72:85:14:26:93:f2:1b:d8:ea:b0:ea:51:
                    c9:84:68:d8:c9:67:83:36:da:2e:12:d9:84:b7:a4:
                    11:54:b1:2f:52:3c:74:09:46:cf:46:58:a2:4d:7f:
                    7c:6a:02:b2:bd:67:7e:6c:a0:71:4c:2d:03:ec:56:
                    42:9e:22:ec:05:06:76:c7:47:c8:f9:c8:64:16:28:
                    19:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:BD:B3:61:F3:A3:F7:22:A3:ED:78:DE:7E:48:5D:5A:1F:AB:3C:D0
            X509v3 Authority Key Identifier:
                keyid:D7:6E:56:D9:54:CC:5C:00:FE:5D:6E:AD:D8:DF:50:27:2A:5B:DF:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:31:f1:00:7d:1b:17:e0:c2:3a:ad:1d:85:17:b3:13:3b:f0:
         85:88:60:8f:d8:25:b1:9f:7c:7b:94:bc:c9:6a:37:dd:2e:57:
         56:63:16:17:79:a7:64:e7:6d:87:ff:5e:f9:a5:aa:9b:ad:a9:
         26:87:6b:42:94:fc:85:75:d0:47:ab:d8:18:7e:2d:03:9a:05:
         93:38:ad:3a:4d:fe:54:e0:8e:47:d4:e3:88:cf:6a:de:c1:ea:
         f1:ee:23:03:b2:ef:cb:b9:3d:b8:4a:47:0a:3b:55:64:6c:96:
         40:36:e1:35:38:86:0b:4d:3f:63:58:47:3f:ec:d7:a9:f7:e5:
         1c:e6:ef:95:c4:ce:83:88:42:c2:d7:51:9b:40:24:32:18:30:
         1e:fb:53:18:7a:e9:31:be:5f:a1:ea:48:3f:00:b0:bd:c6:de:
         de:19:b2:73:d8:17:1c:39:54:36:09:d2:18:bb:2d:27:6b:03:
         85:a3:b7:e0:48:30:85:9c:1d:a3:49:a2:ae:ce:17:c2:94:b2:
         ad:0d:10:d5:ab:b8:5a:0f:01:83:cd:7a:d9:ca:a2:16:76:09:
         3c:10:40:84:69:40:7d:d5:71:cd:a3:3f:32:5e:21:0c:16:32:
         52:d3:3a:8c:4a:58:98:3a:49:f9:c2:a6:87:74:21:72:02:27:
         10:a0:a9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:25:32 2025 by rpki-client