
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft
File:                     ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft (raw, json)
Hash identifier:          m56r0UiAyXZdezBRFkiTjY/fg+baz6ZuGgjxXShx+lo=
Subject key identifier:   BC:83:08:3A:86:69:A8:41:AA:90:6E:EF:CA:17:18:44:8B:48:F4:9E
Authority key identifier: 00:33:4B:8F:21:8F:A5:25:33:98:86:C8:FB:C9:40:93:C8:8E:D5:7B
Certificate issuer:       /CN=A913C0C6/serialNumber=00334B8F218FA525339886C8FBC94093C88ED57B
Certificate serial:       0561
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft
Manifest number:          0547
Signing time:             Sun 02 Nov 2025 23:32:24 +0000
Manifest this update:     Sun 02 Nov 2025 23:32:23 +0000
Manifest next update:     Sun 09 Nov 2025 23:32:23 +0000
Files and hashes:         1: ADNLjyGPpSUzmIbI-8lAk8iO1Xs.crl (hash: xEqP0+5jXm7F//HigKge9PV2rK0XzFeaG2yA18B/eAw=)
                          2: 2D197F6E52E611F087152212C4F9AE02.roa (hash: CiJQQxhDCCCQD8vktVOuYMhsjAd42UiB+ub/sDeCltU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.crl
                          rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 23:32:23 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1377 (0x561)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C0C6, serialNumber=00334B8F218FA525339886C8FBC94093C88ED57B
        Validity
            Not Before: Nov  2 23:32:23 2025 GMT
            Not After : Nov  9 23:32:23 2025 GMT
        Subject: CN=6907ea08-1d47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a9:b2:45:e8:27:13:a5:8c:e4:2e:93:02:0e:
                    c2:d8:c7:06:8b:67:1b:39:7f:36:ed:18:54:a1:3c:
                    24:3e:bb:d7:86:1a:11:4e:12:7d:98:fa:42:cf:66:
                    b9:c9:65:88:28:65:20:02:e1:47:27:5c:e5:1e:3b:
                    85:e7:58:85:8c:d2:0b:05:21:9c:f8:ed:03:f1:82:
                    35:42:5a:5f:90:c4:93:90:25:13:d6:aa:b4:1e:1b:
                    dd:ca:64:3b:0d:20:14:01:d5:08:e0:dc:39:95:26:
                    52:69:e0:fb:da:90:63:2f:8d:53:5b:93:61:31:70:
                    bc:a8:58:50:f0:9a:65:23:6b:15:fa:f9:8f:6d:d6:
                    f9:09:0c:e4:f0:df:db:16:a6:39:ff:49:65:7c:e2:
                    bc:76:7d:66:59:11:c9:25:dc:ca:f9:03:55:97:ec:
                    bf:5c:2a:2d:a9:fe:4d:01:1b:2c:f5:e1:b1:d7:fd:
                    89:e9:28:d1:fb:3d:d7:ce:3c:7b:94:34:b2:09:26:
                    f3:69:a8:3d:77:fb:68:a6:01:a8:bb:fd:9d:68:46:
                    a2:a0:fe:47:c6:1d:20:0a:44:87:f3:77:b9:82:40:
                    88:9a:fb:33:ea:05:79:ef:47:17:f9:bc:09:07:62:
                    ea:1c:3a:e9:3c:e6:e3:bf:b9:a0:2d:1e:25:8b:b7:
                    ca:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:83:08:3A:86:69:A8:41:AA:90:6E:EF:CA:17:18:44:8B:48:F4:9E
            X509v3 Authority Key Identifier:
                keyid:00:33:4B:8F:21:8F:A5:25:33:98:86:C8:FB:C9:40:93:C8:8E:D5:7B
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         8f:38:da:c7:b6:c9:54:b3:55:d0:3f:c5:86:86:3f:ab:d1:5d:
         31:12:7b:1e:62:c7:38:f1:b1:8b:ae:ac:85:34:d9:23:d2:6e:
         74:9a:22:12:e7:38:3d:bc:f6:7c:13:02:5b:04:dc:8d:16:b6:
         3f:79:7e:9e:ee:7d:4b:7b:91:62:61:b8:62:20:d4:0b:2c:62:
         53:61:21:41:0e:ac:de:ce:fc:95:05:ee:b6:c9:bb:69:2d:d2:
         5f:a5:24:da:50:50:40:05:fe:4c:29:96:7f:46:15:b2:06:53:
         2a:1a:6f:36:2b:c3:49:b1:f2:3e:29:44:74:7d:80:e7:6f:18:
         50:c1:07:ee:21:af:0b:47:55:8d:3d:49:4f:a5:aa:4d:b6:d8:
         9b:f7:2c:aa:ea:b6:33:e4:3d:77:20:f3:e1:2e:83:87:34:78:
         a9:bd:c1:0d:9f:e7:6a:03:d1:b5:91:d6:0b:03:dc:7c:42:c7:
         1a:c0:68:0b:99:b8:5e:c7:d3:8c:b8:9d:75:33:24:f5:b2:aa:
         f1:8d:94:44:dc:53:d5:fa:7e:62:ab:1c:c4:4f:1c:e4:48:a1:
         e9:f8:c0:d9:9d:4e:11:d0:5a:4b:77:c5:7d:9e:11:b4:1d:31:
         22:54:27:d7:96:75:73:22:81:36:1b:3d:68:6a:bc:b3:31:d9:
         f2:33:cb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 02:19:24 2025 by rpki-client