
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft
File:                     _4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft (raw, json)
Hash identifier:          uTTU0CQQdp237Dbj+/AI38J9ZM0i6h9pzXZpq8kfThY=
Subject key identifier:   29:91:CC:81:E1:E2:FA:43:87:91:D5:0E:12:99:F0:82:19:51:B0:60
Authority key identifier: FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA
Certificate issuer:       /CN=A915BC98/serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA
Certificate serial:       E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft
Manifest number:          B3
Signing time:             Mon 03 Nov 2025 06:51:30 +0000
Manifest this update:     Mon 03 Nov 2025 06:51:29 +0000
Manifest next update:     Mon 10 Nov 2025 06:51:29 +0000
Files and hashes:         1: _4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl (hash: WCtXBYnVzEh5BtBR85MMa4EGaR53LwQMuowYv4UHBUo=)
                          2: 13B46272139511F0BAC02735C4F9AE02.roa (hash: lunzyAvH2WnGuuqjQcMC7tzE6PiUkG2ZqHNZmlQ3Mow=)
                          3: 0AAD710010B111F0A46DA723C4F9AE02.roa (hash: bk09MGKmA1KtNu/8fLfir0D9n+KVGE5j0LJioJGLi+A=)
                          4: 71A92448186E11F083760527C4F9AE02.roa (hash: fEhJNoYQsvAhpUWy30zyzhm+f82+0YX6EDfhlwxFPqw=)
                          5: C4A5B394A86711F0BD0D193DC4F9AE02.roa (hash: EzdO0E9s+3cgAs/ZEX/Wfo2/4xk/HK6LBfwW3sjjoC0=)
                          6: 95E16734187411F099AC2133C4F9AE02.roa (hash: GF8rCTpf/VJlJeNEZPKA8ehDu40GNOcfTE2tHrOTJPA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl
                          rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 06:51:29 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 224 (0xe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BC98, serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA
        Validity
            Not Before: Nov  3 06:51:29 2025 GMT
            Not After : Nov 10 06:51:29 2025 GMT
        Subject: CN=690850f2-d5b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:60:27:04:b4:5f:43:be:b8:6a:93:71:9e:96:
                    dd:0d:2d:b9:df:eb:c0:e7:02:30:88:ec:84:b3:b0:
                    a0:a0:97:16:06:c6:05:54:b7:c1:32:63:b8:42:3b:
                    2e:e1:a1:70:81:72:2d:61:cb:3f:62:6f:8a:b9:d5:
                    dd:90:f4:eb:ac:d9:de:62:1e:cb:65:02:d5:00:89:
                    6a:6f:c5:84:b7:64:94:e5:35:e2:35:e4:57:81:a6:
                    58:da:f0:c3:84:1f:7e:65:92:5f:3a:7a:08:83:fe:
                    8d:0b:71:ea:d8:ff:84:fb:ac:23:25:94:81:78:7b:
                    20:70:ba:df:47:dc:e5:f0:dd:32:97:71:de:13:a0:
                    06:ec:41:3d:eb:2a:1c:4b:15:25:58:16:d4:6a:1e:
                    49:77:1d:76:27:40:73:cf:b1:7f:f1:a1:4c:27:02:
                    26:ef:6a:f8:e9:ad:3c:bc:4f:1d:a6:44:3f:f8:cb:
                    fd:2e:42:08:22:4f:03:ba:13:28:e7:66:b2:45:0f:
                    c0:9b:26:e3:81:d7:13:5a:27:a8:25:f3:b9:71:d1:
                    68:43:34:a6:5e:aa:38:f1:47:79:74:f4:db:2a:2f:
                    c7:4a:15:21:b9:78:07:db:06:ca:04:70:65:6f:79:
                    88:0e:3c:e4:00:75:14:48:55:f5:c9:ab:c3:aa:69:
                    34:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:91:CC:81:E1:E2:FA:43:87:91:D5:0E:12:99:F0:82:19:51:B0:60
            X509v3 Authority Key Identifier:
                keyid:FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         7c:1e:b3:52:31:78:ec:4b:82:6b:61:c4:3e:a6:4e:22:1b:17:
         a6:5b:42:81:33:ee:1a:ac:15:1e:49:78:9b:ca:d6:0c:6e:cb:
         78:98:3d:59:1e:b8:84:49:dd:03:ef:e1:6c:53:ea:28:4d:c0:
         41:19:64:6e:9e:8e:ff:f7:85:23:2c:e8:92:9d:a1:a3:f8:82:
         17:51:dd:32:39:dc:db:45:96:d3:23:a6:d6:35:6a:d1:e4:53:
         c1:31:53:df:0e:2e:9a:b7:6b:31:88:e8:e9:41:e8:3e:c7:74:
         4a:b2:67:4c:73:05:cd:a6:00:83:b0:f3:14:8a:f4:dc:9a:4f:
         5b:29:4e:22:00:4e:c3:4f:3f:f5:f8:47:fe:49:0f:7a:32:d8:
         fb:36:f7:4a:e1:2f:b4:78:e4:fc:e6:37:7d:81:24:4c:72:e4:
         66:71:34:f1:73:6e:39:fa:0b:6c:c1:7a:e3:e2:51:58:b9:b1:
         19:d6:6c:5c:7b:c1:b3:a2:4d:f9:a3:f2:0b:aa:cb:be:77:ba:
         59:de:92:1d:39:ec:be:4e:cc:76:88:29:22:d5:7c:39:40:d2:
         13:87:db:da:50:f0:6e:ec:4c:d2:1a:40:56:21:24:ab:4d:c4:
         f1:d8:fd:b7:48:c7:4a:76:09:a0:80:14:71:b5:53:6b:a5:db:
         68:c0:29:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 08:03:27 2025 by rpki-client