
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
File:                     dmhXuj98cotoBSWsQfp84qHwCS0.mft (raw, json)
Hash identifier:          10dsqJs7aaaN8ShctiHvGIWJ7UtDtcFeNsygN0Qn5so=
Subject key identifier:   D7:2C:79:66:5E:C8:1F:71:F4:6A:E1:7D:83:63:8D:C2:FA:05:27:90
Authority key identifier: 76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D
Certificate issuer:       /CN=A9148AC0/serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
Certificate serial:       01B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
Manifest number:          01A8
Signing time:             Mon 03 Nov 2025 03:14:44 +0000
Manifest this update:     Mon 03 Nov 2025 03:14:44 +0000
Manifest next update:     Mon 10 Nov 2025 03:14:44 +0000
Files and hashes:         1: dmhXuj98cotoBSWsQfp84qHwCS0.crl (hash: 9LMCgZSFZU+EQGxHcxl0BuYDHcab1HRMkLuuSa/GK58=)
                          2: 5D313B1C31DA11EEBE28A546C4F9AE02.roa (hash: FoAylNmdesRHU3oexctbCd7CtqneWbl6QUSlHnFcNTI=)
                          3: 47854B9031DB11EEA02CF647C4F9AE02.roa (hash: ILe+omtD9enCtMD3zyN9u23MElv4YiFIQdXMJ2ToBto=)
                          4: 5C9259B631DA11EEBE28A546C4F9AE02.roa (hash: V/GHEmcZXIPqnvjusU9+mbGUzJT92uVcYMqnl8YTyFc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl
                          rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 03:14:44 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434 (0x1b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148AC0, serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
        Validity
            Not Before: Nov  3 03:14:44 2025 GMT
            Not After : Nov 10 03:14:44 2025 GMT
        Subject: CN=69081e24-3456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2e:9a:21:b8:ef:bb:7d:2a:82:63:8a:8b:83:
                    73:70:ee:08:9f:11:c8:23:1a:7f:3e:2c:1f:61:34:
                    20:ce:90:a7:fb:38:a7:e3:46:0e:14:81:79:e1:a0:
                    7f:54:6b:0e:e0:de:bc:e7:e0:4e:ef:b9:39:a7:3a:
                    bc:74:41:47:60:ab:58:30:c0:2b:13:fd:82:b9:40:
                    33:80:90:d6:92:85:f2:67:cd:a2:51:60:a1:f5:be:
                    68:85:d8:47:e7:81:c1:84:63:34:bd:0e:82:57:7d:
                    8b:4b:9c:10:08:4d:2a:4c:8f:31:e7:32:3b:75:cf:
                    8b:d3:c3:4e:df:0a:0d:a0:5e:99:fa:b3:70:3c:d7:
                    fc:ce:1c:f5:3b:29:ac:b7:d5:d4:a9:00:76:0d:f6:
                    b9:8a:52:c6:46:46:48:e7:2f:96:bd:05:9e:4a:f0:
                    65:f1:87:e4:95:3e:9d:a1:a2:7d:c9:ff:97:08:7e:
                    af:0b:f4:78:10:8d:a2:fc:80:ec:16:93:7b:58:b1:
                    90:69:a3:67:b4:09:da:76:1f:39:63:55:53:f1:d7:
                    13:64:05:eb:08:fb:5d:4e:97:d7:8d:e4:0a:c0:e2:
                    87:89:71:d0:21:56:fe:22:b8:cd:e0:31:19:69:4c:
                    96:bb:39:37:c9:0b:f1:52:73:05:d3:7e:a6:77:87:
                    cb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:2C:79:66:5E:C8:1F:71:F4:6A:E1:7D:83:63:8D:C2:FA:05:27:90
            X509v3 Authority Key Identifier:
                keyid:76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         70:5a:ec:47:75:12:92:cf:9b:94:b2:06:86:a1:92:ba:d4:99:
         34:af:e4:b1:3b:66:76:22:43:4f:86:7c:8a:5f:67:7f:16:e6:
         d8:f6:7c:d4:5a:30:e1:e7:47:2b:ee:ab:fc:87:bb:e1:95:0a:
         4b:da:f1:82:50:88:bc:50:f8:08:27:ec:9c:a5:f6:bb:fc:18:
         4a:ec:b3:92:69:69:f2:b9:41:2d:e5:64:da:30:e9:7e:07:b8:
         42:3c:33:ef:16:50:c5:37:eb:58:27:49:4a:15:43:ab:d9:60:
         04:34:2e:a1:c9:3d:4c:ef:23:3f:04:cc:f2:23:cb:ed:36:5a:
         b2:68:c3:ea:eb:17:78:ef:d5:77:3c:e5:53:68:36:2b:7c:9b:
         83:c1:82:1e:6d:7d:9a:36:65:e0:30:b5:c2:b4:09:57:92:76:
         82:1d:53:0e:f5:0a:5e:f2:45:79:17:1d:e4:7e:8b:ee:cc:27:
         f3:c3:de:37:65:8c:8c:0d:d7:44:73:50:b6:a9:a0:ee:6d:ce:
         cc:74:a5:90:7a:3c:5e:71:33:21:12:0d:6f:a5:2e:b0:a6:4d:
         8c:07:43:7d:5a:a5:a9:f6:16:5b:ad:b0:df:a1:f1:68:52:50:
         94:11:22:7b:78:9e:47:f2:32:2f:18:f3:4d:72:16:f7:67:0a:
         4f:5a:73:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 12:39:06 2025 by rpki-client