
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.mft
File:                     mVh7qcf_9rbFmelODc5H61a-au0.mft (raw, json)
Hash identifier:          ZtSakaULGXXCQO8hswF7Tgam0AwibF+JRJnRaDUtVGA=
Subject key identifier:   9B:CF:85:47:F8:C9:DE:CE:54:9C:99:21:0F:01:FC:DB:26:C1:AB:43
Authority key identifier: 99:58:7B:A9:C7:FF:F6:B6:C5:99:E9:4E:0D:CE:47:EB:56:BE:6A:ED
Certificate issuer:       /CN=A9131B40/serialNumber=99587BA9C7FFF6B6C599E94E0DCE47EB56BE6AED
Certificate serial:       0673
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mVh7qcf_9rbFmelODc5H61a-au0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.mft
Manifest number:          066C
Signing time:             Sun 02 Nov 2025 22:33:44 +0000
Manifest this update:     Sun 02 Nov 2025 22:33:43 +0000
Manifest next update:     Sun 09 Nov 2025 22:33:43 +0000
Files and hashes:         1: mVh7qcf_9rbFmelODc5H61a-au0.crl (hash: i1Cw6ERy9fVYNaNx/+umssqT9oEOQ8+zDFrhKuyLxgY=)
                          2: B9BE8D0659BE11EE8F460C79C4F9AE02.roa (hash: z+r11I4kETfi6x1JK+1UUHWKz71oPMVXUIqi8/SAQCY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.crl
                          rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mVh7qcf_9rbFmelODc5H61a-au0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 22:33:43 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1651 (0x673)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131B40, serialNumber=99587BA9C7FFF6B6C599E94E0DCE47EB56BE6AED
        Validity
            Not Before: Nov  2 22:33:43 2025 GMT
            Not After : Nov  9 22:33:43 2025 GMT
        Subject: CN=6907dc48-605b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:03:d0:5f:57:18:5d:93:0f:c2:5f:3b:e3:86:
                    db:0c:ae:b3:71:4d:a3:48:a1:5e:bf:6b:1d:d2:c8:
                    9f:9e:1c:0e:d3:36:e8:1f:ca:cc:6b:cb:ab:63:4a:
                    a2:ec:b3:07:14:ee:7a:c7:18:0a:3f:dd:5f:b3:7f:
                    0a:d8:c9:e2:26:e6:49:06:c4:1a:e1:85:5e:42:68:
                    21:f6:e6:fc:b2:d7:39:5e:2d:2a:07:c6:48:d9:13:
                    d9:8b:90:9f:05:64:d6:2a:27:a6:36:01:f2:dd:39:
                    90:3d:27:d1:fd:36:33:ac:f2:8f:9a:5e:12:27:c6:
                    ab:b2:3b:be:7b:11:3d:ea:5b:79:74:80:63:dd:d3:
                    41:3a:e9:b7:85:75:e8:6a:76:29:ea:57:c7:f2:6a:
                    56:4f:d7:51:09:f1:09:49:7b:08:1d:ec:d1:2f:cd:
                    ef:57:6e:d9:8b:f9:72:6a:68:7c:18:a4:21:83:16:
                    72:51:c7:5a:c1:dd:86:a8:97:bf:1f:c5:5c:3e:12:
                    12:bc:eb:bb:1f:c1:bf:5c:c9:eb:aa:4b:cc:11:35:
                    a7:8e:01:90:b6:3d:2c:2f:fc:2a:46:6a:9d:dc:c3:
                    de:ce:30:b7:60:26:fc:01:b5:59:93:d5:c5:9a:ae:
                    da:58:1a:56:96:56:ed:9b:1d:c8:db:a3:df:00:9a:
                    0a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:CF:85:47:F8:C9:DE:CE:54:9C:99:21:0F:01:FC:DB:26:C1:AB:43
            X509v3 Authority Key Identifier:
                keyid:99:58:7B:A9:C7:FF:F6:B6:C5:99:E9:4E:0D:CE:47:EB:56:BE:6A:ED
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mVh7qcf_9rbFmelODc5H61a-au0.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         45:16:9d:19:33:b6:8b:56:cd:f3:f2:12:9e:ca:78:d0:62:2d:
         fa:b9:39:e5:ce:1a:88:2c:f6:7f:7e:96:2d:59:ac:5a:42:d6:
         d2:21:0c:53:f7:c3:5e:9b:de:6e:f3:6a:2d:12:64:35:45:8d:
         55:75:12:33:39:5b:85:3b:0b:d9:7c:d2:5d:79:d0:8a:80:ef:
         ff:27:b0:cf:8c:45:16:9f:19:aa:23:f3:e8:a0:86:ba:38:32:
         c5:2f:9f:7c:7c:82:74:37:0e:05:c4:d1:b0:ce:60:03:87:fd:
         98:54:8b:ab:03:78:15:52:c5:29:03:80:31:58:32:76:81:2a:
         8b:31:18:ac:04:38:58:4b:aa:cd:e4:02:30:8e:c2:1e:a7:26:
         41:77:f1:10:47:1e:e6:58:0f:c0:96:15:be:db:e5:0e:a3:5a:
         05:20:5a:c2:ee:a8:2f:39:e7:4c:44:9f:3e:e6:16:73:be:72:
         a6:98:9e:b6:46:30:69:47:9b:53:56:62:3e:84:85:f8:6f:12:
         16:fa:19:0d:51:5b:6d:10:b7:84:73:d5:98:25:ba:18:1e:49:
         39:52:f2:ac:34:9d:c6:e3:d7:fe:b4:2e:b6:17:ef:4d:c8:db:
         2d:88:fc:71:25:59:c8:ab:92:0b:f7:07:dd:29:16:7c:9c:cf:
         e9:37:e0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 16:04:25 2025 by rpki-client