
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft
File:                     RhQllCdGSHS-fet79CEnLLI9oYg.mft (raw, json)
Hash identifier:          q8u0N92u9ZJsnvl5YCNYCicLwJhTC9OJuJtEDPWJ3GU=
Subject key identifier:   43:3A:73:05:23:0B:47:8B:40:6C:A4:E6:7A:39:C0:B9:A4:89:EA:91
Authority key identifier: 46:14:25:94:27:46:48:74:BE:7D:EB:7B:F4:21:27:2C:B2:3D:A1:88
Certificate issuer:       /CN=A9146304/serialNumber=4614259427464874BE7DEB7BF421272CB23DA188
Certificate serial:       1116
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhQllCdGSHS-fet79CEnLLI9oYg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft
Manifest number:          110F
Signing time:             Sun 02 Nov 2025 17:17:44 +0000
Manifest this update:     Sun 02 Nov 2025 17:17:44 +0000
Manifest next update:     Sun 09 Nov 2025 17:17:44 +0000
Files and hashes:         1: RhQllCdGSHS-fet79CEnLLI9oYg.crl (hash: aWHFVAl3gG/61iLrQwq4i42Lv79xMvop83CVx1MRN+I=)
                          2: 65B35A86577011EC8F00A65AC4F9AE02.roa (hash: 4ddMyzUmIiWucVfUmzZbGoeIuz/De3rIfnynVpK/dAw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.crl
                          rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhQllCdGSHS-fet79CEnLLI9oYg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 17:17:43 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4374 (0x1116)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146304, serialNumber=4614259427464874BE7DEB7BF421272CB23DA188
        Validity
            Not Before: Nov  2 17:17:44 2025 GMT
            Not After : Nov  9 17:17:44 2025 GMT
        Subject: CN=69079238-a848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e3:a6:71:6c:2c:41:e2:1b:36:28:eb:c5:71:
                    6d:2c:ac:8c:01:68:98:ba:12:9e:ce:56:a3:3d:21:
                    f0:b9:c3:52:61:3a:4a:78:ff:58:d8:0c:54:3a:09:
                    70:7c:77:d4:fa:33:de:97:c7:f2:bc:00:a6:2c:26:
                    22:61:5b:eb:92:91:75:2f:5a:72:0c:b6:34:ae:9f:
                    a8:47:a4:57:ec:96:5b:61:7d:73:15:b0:13:04:24:
                    d1:4b:32:ba:9e:86:a2:53:1f:c7:6e:08:0b:f6:33:
                    bc:38:1f:b0:cc:35:32:01:90:10:16:79:3b:8e:54:
                    7d:56:7d:4e:60:c2:c6:5e:a4:a7:90:f0:4e:1a:d3:
                    fd:af:b3:d2:4b:c5:e8:3f:65:bb:45:c5:76:ef:79:
                    49:a5:ac:e3:6d:cd:42:e3:c5:71:50:cf:bd:d6:0e:
                    53:2e:fd:79:e7:7d:83:1c:83:2f:09:53:ae:66:2c:
                    8d:ba:db:98:4c:49:f0:b1:56:ef:4c:dd:41:78:2a:
                    3b:65:4d:f4:b2:e6:15:b7:89:f6:49:cb:2f:82:7c:
                    b3:50:6c:99:8a:dd:5a:77:01:e7:9f:5c:9f:dc:cd:
                    99:7a:01:dd:0c:fd:9f:53:69:be:50:c5:2d:6a:37:
                    72:96:24:1e:1f:88:b8:6a:b5:61:b7:07:bd:86:49:
                    2e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:3A:73:05:23:0B:47:8B:40:6C:A4:E6:7A:39:C0:B9:A4:89:EA:91
            X509v3 Authority Key Identifier:
                keyid:46:14:25:94:27:46:48:74:BE:7D:EB:7B:F4:21:27:2C:B2:3D:A1:88
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhQllCdGSHS-fet79CEnLLI9oYg.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         22:3d:c6:81:f0:43:de:9c:db:5c:ae:bc:7d:25:27:44:96:3d:
         f8:8f:2d:1b:da:a8:1f:3d:59:be:c2:a1:81:91:55:0b:b3:ad:
         4c:b0:35:fc:db:35:f7:a0:29:65:a4:eb:c7:20:dd:6d:e1:38:
         6a:85:77:e9:8b:41:48:36:09:a0:f3:75:de:ab:f6:71:d7:92:
         9a:71:99:79:cf:c5:b5:b4:4a:66:ca:a2:f4:b5:4b:f9:fc:0f:
         30:b2:0c:40:41:00:bd:cc:c9:fe:db:53:7c:b7:58:3a:42:2b:
         f2:dd:1a:01:0f:f2:6c:96:d3:6f:09:e6:ce:12:53:79:07:63:
         cd:0e:c5:2e:37:c2:e5:48:df:bc:7d:1e:54:f5:26:04:c1:5a:
         4c:3b:28:aa:2f:d3:05:87:e1:ef:04:d4:ab:1f:e9:6b:02:c3:
         2c:40:81:01:00:c2:43:0d:64:85:35:44:71:28:77:bd:0f:ed:
         ba:32:e4:6a:49:ae:aa:b1:90:be:3c:d6:e6:00:01:7d:86:cb:
         40:89:cf:c6:a6:70:e3:20:06:32:fc:19:32:62:dc:bf:54:38:
         47:c6:2d:a8:eb:be:75:2a:45:5d:20:18:a3:c6:40:7e:21:9d:
         25:cb:19:25:b3:39:5d:9f:81:81:ef:e7:b2:c6:24:94:46:2a:
         3c:46:0a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 12:40:34 2025 by rpki-client