
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.mft
File:                     5v6wYDITaH99TA3YxdHl8ycflmo.mft (raw, json)
Hash identifier:          JH2es51XJTYsC37+kqgzhQb25yavejX2uFeaPWNq9Tw=
Subject key identifier:   A0:35:05:D0:98:2A:47:71:64:A0:75:D5:42:B8:DD:7F:E8:FB:A7:D7
Authority key identifier: E6:FE:B0:60:32:13:68:7F:7D:4C:0D:D8:C5:D1:E5:F3:27:1F:96:6A
Certificate issuer:       /CN=A9117602/serialNumber=E6FEB0603213687F7D4C0DD8C5D1E5F3271F966A
Certificate serial:       0142
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5v6wYDITaH99TA3YxdHl8ycflmo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.mft
Manifest number:          013F
Signing time:             Mon 03 Nov 2025 04:24:24 +0000
Manifest this update:     Mon 03 Nov 2025 04:24:23 +0000
Manifest next update:     Mon 10 Nov 2025 04:24:23 +0000
Files and hashes:         1: 5v6wYDITaH99TA3YxdHl8ycflmo.crl (hash: pIPwUlx9M6dnE0Xu7EGz3ThZR3baOxNHrKC9FpIDCe4=)
                          2: 1EF0CB38CEFB11EE9D1FB686C4F9AE02.roa (hash: YSxv9P+ceb+T4PK5zL4uHyyDeIGTbdqAUVG/7oe35WE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.crl
                          rsync://rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5v6wYDITaH99TA3YxdHl8ycflmo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 04:24:23 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 322 (0x142)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117602, serialNumber=E6FEB0603213687F7D4C0DD8C5D1E5F3271F966A
        Validity
            Not Before: Nov  3 04:24:23 2025 GMT
            Not After : Nov 10 04:24:23 2025 GMT
        Subject: CN=69082e78-642b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b7:27:22:17:8f:d2:8b:6b:1b:e6:f7:a9:d9:
                    b9:19:7e:0b:64:8b:60:87:48:a1:41:13:69:a1:dd:
                    47:88:1f:6c:d9:07:93:72:63:52:68:10:8e:52:eb:
                    70:d7:d6:b3:44:43:62:d9:c3:38:c4:d2:55:70:ae:
                    64:76:80:97:cf:f1:cf:15:da:bc:bf:3b:3d:0e:14:
                    f2:e5:ce:50:cd:49:4d:69:9d:09:ff:09:87:2e:26:
                    d6:bb:1a:48:26:f9:9b:f2:f1:ec:3c:0c:29:cc:52:
                    3f:4e:b9:5a:95:cb:51:ee:03:a3:47:ee:5b:0e:04:
                    10:6c:c2:db:1f:63:00:d7:69:be:5e:ea:1c:a3:99:
                    f9:22:9d:3f:74:62:42:c8:36:97:f7:ec:6c:ae:1e:
                    c1:18:35:50:f1:ce:8d:01:8c:cf:ea:66:7e:a4:79:
                    fc:83:f8:76:f8:6d:17:a8:7b:1b:b9:c5:a4:b1:a2:
                    69:88:fe:fb:b6:87:b0:b5:f7:03:aa:9c:00:34:28:
                    ec:8f:f8:91:31:8c:c7:42:5d:0f:eb:aa:97:82:59:
                    8c:98:a9:47:ea:df:4b:32:63:ad:67:ae:e2:8b:af:
                    cf:bb:77:b0:51:1e:b9:f5:5c:6a:0f:aa:ed:d8:2a:
                    13:35:be:f1:cb:a4:eb:d4:76:a6:a5:7b:90:44:20:
                    35:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:35:05:D0:98:2A:47:71:64:A0:75:D5:42:B8:DD:7F:E8:FB:A7:D7
            X509v3 Authority Key Identifier:
                keyid:E6:FE:B0:60:32:13:68:7F:7D:4C:0D:D8:C5:D1:E5:F3:27:1F:96:6A
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5v6wYDITaH99TA3YxdHl8ycflmo.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         13:87:91:c8:5f:7d:8a:33:f9:15:11:f0:0c:c9:7a:dd:74:7e:
         7c:f6:2b:d5:d2:3d:08:d1:39:d9:60:cf:9d:77:26:99:3f:45:
         bc:31:01:85:dd:2c:d4:e6:c8:eb:91:68:8d:b1:d5:c4:55:2f:
         26:7e:41:a0:17:a5:ed:82:9b:7e:ca:c0:30:6f:7d:db:34:38:
         11:5f:ef:4b:80:34:46:20:6a:35:97:3d:c4:cc:b1:17:c4:f4:
         da:a7:35:e5:18:19:b3:29:86:39:6d:e8:57:20:7c:6e:05:33:
         ad:b5:80:ef:45:86:f5:9b:ea:fb:b2:1a:9f:e2:93:ad:3f:12:
         e4:eb:17:cc:01:d5:3d:20:10:6a:06:ee:c8:c0:2b:a5:36:c6:
         50:e5:cb:62:d8:e9:55:10:3c:cc:3a:8a:cf:50:bd:ce:1c:10:
         a3:2a:55:fb:7d:ce:36:3b:8d:09:28:85:5a:a6:10:cb:66:6b:
         d1:79:ac:fb:8c:79:28:53:41:26:3f:85:f9:99:49:f3:97:aa:
         35:0e:cf:91:39:25:6e:6d:4e:eb:b8:a6:dc:26:2f:4e:74:e0:
         6c:09:7c:a6:2d:01:1d:cc:17:71:d7:d7:a2:8a:21:1d:78:0a:
         ee:ab:47:d9:21:6b:30:c1:93:f2:ef:bf:80:e7:44:a9:26:54:
         a4:6e:ca:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 02:15:13 2025 by rpki-client