
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.mft
File:                     uMMvxNeTGtQkFAcwaguZasjJn-s.mft (raw, json)
Hash identifier:          CH1SSYMCwkvvBAfq6CyWOaZpNh7XMCNnmgDiQZNuj/k=
Subject key identifier:   3C:E5:F6:EC:BB:13:D3:B6:33:CA:AB:BA:27:99:AD:7C:9C:FF:EF:42
Authority key identifier: B8:C3:2F:C4:D7:93:1A:D4:24:14:07:30:6A:0B:99:6A:C8:C9:9F:EB
Certificate issuer:       /CN=A9140467/serialNumber=B8C32FC4D7931AD4241407306A0B996AC8C99FEB
Certificate serial:       0838
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMMvxNeTGtQkFAcwaguZasjJn-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.mft
Manifest number:          082B
Signing time:             Sun 02 Nov 2025 20:49:13 +0000
Manifest this update:     Sun 02 Nov 2025 20:49:13 +0000
Manifest next update:     Sun 09 Nov 2025 20:49:13 +0000
Files and hashes:         1: uMMvxNeTGtQkFAcwaguZasjJn-s.crl (hash: wf08MiCEzdxKWqqYWDtRCOZHLUjTV7hoFYfIcrQ/VDY=)
                          2: 02E60C72F1E211EAA2361B34C4F9AE02.roa (hash: af5uMeHzt9MTz6ZREM+PIjD4gLSqGSG2u3tqcHLex6c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.crl
                          rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMMvxNeTGtQkFAcwaguZasjJn-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 20:49:12 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2104 (0x838)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140467, serialNumber=B8C32FC4D7931AD4241407306A0B996AC8C99FEB
        Validity
            Not Before: Nov  2 20:49:13 2025 GMT
            Not After : Nov  9 20:49:13 2025 GMT
        Subject: CN=6907c3c9-45f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:55:bf:1d:66:cc:74:c7:ff:fd:a8:70:58:d6:
                    a5:df:52:07:62:63:3b:30:7c:a2:7d:f8:83:84:3f:
                    06:bc:9e:e4:ee:7f:d2:92:88:95:42:f4:c6:0d:a0:
                    3d:13:5a:9f:c5:2a:4d:5e:db:a1:38:9b:ef:ca:a0:
                    17:0e:43:62:9c:66:40:4c:b4:c0:dc:66:28:81:e0:
                    ac:43:bd:cb:10:4f:00:7a:a3:75:c8:76:f9:7a:86:
                    ba:90:8a:2d:01:96:09:95:2d:df:41:df:b2:1f:88:
                    e3:9a:a2:09:df:91:90:e8:25:f8:a7:b9:f1:14:2e:
                    09:3a:1e:b6:ff:3c:4e:00:6d:84:ee:2b:31:f3:45:
                    fd:a0:3e:b4:94:e1:f8:56:fd:41:bf:2c:a9:54:38:
                    91:25:ef:c2:b8:bd:a5:e4:6f:44:bf:13:4a:aa:13:
                    d4:51:80:66:51:63:43:50:34:32:1f:65:3a:f7:51:
                    06:3c:5c:73:b7:1c:c9:b8:18:47:cf:16:07:2c:47:
                    f9:1b:c8:f2:a2:be:d4:51:0d:50:58:dc:1d:70:e0:
                    ff:20:95:6d:d0:3d:3c:37:23:9e:d7:ec:80:1e:56:
                    f9:4d:48:ac:34:94:e9:51:4c:bc:93:6f:e0:d8:7c:
                    12:24:98:03:83:f2:75:56:c2:3d:f5:e0:01:10:ae:
                    c0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E5:F6:EC:BB:13:D3:B6:33:CA:AB:BA:27:99:AD:7C:9C:FF:EF:42
            X509v3 Authority Key Identifier:
                keyid:B8:C3:2F:C4:D7:93:1A:D4:24:14:07:30:6A:0B:99:6A:C8:C9:9F:EB
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMMvxNeTGtQkFAcwaguZasjJn-s.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140467/9AA980D6F1E011EA8D4A9E32C4F9AE02/uMMvxNeTGtQkFAcwaguZasjJn-s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         bb:ac:b4:73:9d:b4:27:44:d8:e8:5c:de:72:4a:c2:03:a3:a2:
         f1:a4:43:90:58:18:2e:78:4c:a3:20:98:84:dd:ce:7d:d3:4b:
         17:c3:38:39:98:aa:e3:03:25:b6:7b:16:7c:7e:6f:c2:29:71:
         3a:81:e7:91:6b:ef:1c:34:e1:62:c3:82:d4:97:f0:90:4c:f8:
         b5:a4:b4:a2:16:1f:1f:ae:ba:14:8d:3f:e9:7f:28:5c:37:e8:
         6c:d7:10:17:60:b3:ff:60:39:8a:3f:46:95:25:2f:2f:dc:14:
         56:85:6d:86:20:50:f4:33:5a:b6:3d:39:e4:5c:cd:50:b3:aa:
         8c:df:df:a5:01:1d:9d:30:94:27:16:ad:77:6c:d6:4f:9d:0a:
         48:62:38:ae:1d:50:3c:89:c9:4b:25:97:58:6b:cb:00:e7:cc:
         25:0a:c8:9a:91:fc:2d:e1:97:3e:08:8d:9d:ce:6f:27:5f:13:
         c7:36:8f:b5:2a:60:a5:00:2a:5e:78:af:a0:6c:46:46:73:07:
         cd:73:91:32:e3:85:9d:76:8d:2d:96:d8:0c:d5:67:79:13:ac:
         b3:9b:fd:80:e2:4e:94:3b:b9:44:53:64:13:ba:d4:7c:c7:e9:
         9e:ed:15:40:4e:e3:1c:ba:98:55:65:51:da:94:43:0d:74:3c:
         74:21:e4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 12:36:45 2025 by rpki-client