
$ rpki-client -vvf rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.mft
File:                     MxjodUE2Qh4kSmxB3aXezBDaj4E.mft (raw, json)
Hash identifier:          SYzc2VwjAcdWJaIl8a3joZyToRE1FB4BYTtEoyg+XVg=
Subject key identifier:   9A:6D:47:26:E1:F6:D3:E2:70:0E:9C:2A:6E:8E:73:A2:5C:EA:71:E1
Authority key identifier: 33:18:E8:75:41:36:42:1E:24:4A:6C:41:DD:A5:DE:CC:10:DA:8F:81
Certificate issuer:       /CN=A91490C8/serialNumber=3318E8754136421E244A6C41DDA5DECC10DA8F81
Certificate serial:       0181
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxjodUE2Qh4kSmxB3aXezBDaj4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.mft
Manifest number:          017E
Signing time:             Mon 03 Nov 2025 03:40:55 +0000
Manifest this update:     Mon 03 Nov 2025 03:40:54 +0000
Manifest next update:     Mon 10 Nov 2025 03:40:54 +0000
Files and hashes:         1: MxjodUE2Qh4kSmxB3aXezBDaj4E.crl (hash: Ds5oCL0lYBSfCecJpjna9BX00ZM1BqtF3M99FQ5SATI=)
                          2: 2201EFC86E5211EEB027A974C4F9AE02.roa (hash: mptcdiE9tQA9oGuwJ5pkSKgRaIV+xdsDpTyBHSSEXD8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.crl
                          rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxjodUE2Qh4kSmxB3aXezBDaj4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 03:40:54 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 385 (0x181)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91490C8, serialNumber=3318E8754136421E244A6C41DDA5DECC10DA8F81
        Validity
            Not Before: Nov  3 03:40:54 2025 GMT
            Not After : Nov 10 03:40:54 2025 GMT
        Subject: CN=69082447-f2b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cc:7d:72:b5:71:44:ae:af:56:7a:a4:2a:65:
                    3b:66:bb:67:08:8d:76:41:c4:3d:d9:7e:22:6d:77:
                    52:99:5d:6d:11:3d:bb:9a:0a:db:a8:f2:e5:97:13:
                    7c:92:9e:87:d1:80:f8:a3:1f:c3:13:82:c9:69:ee:
                    47:ba:f8:e2:1f:62:32:9a:c0:d8:73:cd:f5:ed:42:
                    ac:6e:0a:ab:2c:16:22:c3:b6:13:c3:e0:fd:1f:5f:
                    bf:77:8c:b2:01:3c:c1:b6:eb:2b:e2:4d:56:92:2a:
                    1d:5e:1f:fc:be:4a:ae:e6:e2:6b:8c:ff:33:54:3c:
                    a1:ac:18:ee:75:bb:7b:99:46:a6:32:b6:81:a1:a9:
                    83:27:3d:9c:fd:9a:9a:45:35:eb:39:8d:33:ee:51:
                    74:80:32:5e:ba:81:70:7f:64:ba:ad:91:1b:bb:74:
                    e9:3e:4d:ae:a1:ce:61:2b:3e:c6:40:d0:72:f3:db:
                    37:ea:8e:74:84:0d:8e:07:92:d3:0b:ce:0f:75:13:
                    24:b4:68:fd:7e:6f:24:e7:f6:a3:0f:14:d7:32:86:
                    0e:03:e5:12:16:eb:e2:11:ae:d2:f4:76:64:62:0a:
                    cd:bd:2b:d7:f5:91:d1:44:05:52:93:9f:7a:50:0a:
                    8a:e3:39:ec:75:32:0a:c7:0f:db:7b:a8:c9:d5:1f:
                    31:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:6D:47:26:E1:F6:D3:E2:70:0E:9C:2A:6E:8E:73:A2:5C:EA:71:E1
            X509v3 Authority Key Identifier:
                keyid:33:18:E8:75:41:36:42:1E:24:4A:6C:41:DD:A5:DE:CC:10:DA:8F:81
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxjodUE2Qh4kSmxB3aXezBDaj4E.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         0e:cc:e6:5d:6a:75:63:16:b4:6a:4f:1b:3a:90:b1:cd:d8:fd:
         25:ec:7d:af:8f:28:40:60:13:50:cf:5f:9a:75:ff:8c:cb:3a:
         7f:a5:c8:e9:bb:04:b3:da:3d:16:92:40:af:c7:b9:b2:66:58:
         a1:7e:4b:60:10:55:c6:58:b3:25:61:0b:e8:04:eb:7a:0e:3d:
         4a:54:65:56:d5:9a:79:a1:d6:0a:d4:af:80:f4:be:73:83:40:
         0f:29:eb:ea:e9:53:79:9f:1f:a3:b9:ed:8e:b8:c5:87:8b:73:
         38:7c:f4:c9:4a:40:fe:28:e7:be:6d:90:f2:26:96:e7:0b:af:
         94:ee:d5:85:58:67:31:80:22:a8:20:ea:5b:b0:00:02:4f:57:
         1f:95:a3:8f:33:f6:39:b8:5b:9d:10:2f:fe:b9:e3:ca:4d:44:
         e8:b7:2e:ae:a7:9d:a8:cc:bd:1b:a2:06:44:b2:61:ba:78:77:
         cb:78:6b:c5:10:05:39:eb:9b:e1:e4:54:50:8e:18:91:5f:ac:
         e0:ca:5e:9e:a6:94:72:d3:5c:72:1d:ad:6b:92:80:9d:23:7f:
         a2:e3:7f:6b:99:1a:89:f2:1c:19:ec:65:8c:4f:1d:0e:e0:9a:
         6f:6b:f8:fd:67:52:53:da:de:c9:f1:50:79:16:77:b8:84:0b:
         ca:3f:8d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 16:05:00 2025 by rpki-client