
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
File:                     D6nlM-haGDwUUwAIqLliP4VtXes.mft (raw, json)
Hash identifier:          7nIT/X2tiFadXlgA6j0HbOKVYxuu4yZNvRCbN4Pqcls=
Subject key identifier:   3F:7E:EB:06:5D:41:31:69:82:80:D6:94:43:BE:25:D5:33:8D:CB:F0
Authority key identifier: 0F:A9:E5:33:E8:5A:18:3C:14:53:00:08:A8:B9:62:3F:85:6D:5D:EB
Certificate issuer:       /CN=A9160455/serialNumber=0FA9E533E85A183C14530008A8B9623F856D5DEB
Certificate serial:       0C78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
Manifest number:          0C61
Signing time:             Sun 02 Nov 2025 18:35:33 +0000
Manifest this update:     Sun 02 Nov 2025 18:35:33 +0000
Manifest next update:     Sun 09 Nov 2025 18:35:33 +0000
Files and hashes:         1: D6nlM-haGDwUUwAIqLliP4VtXes.crl (hash: v/UNv6071m+rCqnwD3KhFWaMmmTVXHe/zqLeni9T+rE=)
                          2: 49E515C2C0F211EEA14E0122C4F9AE02.roa (hash: hANV6ERnDblIoU8kPVg1/VC/XygDNvVoYUOvd3sESZc=)
                          3: AADE9E9C5B9511EEA8190143C4F9AE02.roa (hash: FO7phPYzfDla6aPOyvXALwSuyaWj8a9hgRlX/QWvNY4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.crl
                          rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 18:35:32 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3192 (0xc78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160455, serialNumber=0FA9E533E85A183C14530008A8B9623F856D5DEB
        Validity
            Not Before: Nov  2 18:35:33 2025 GMT
            Not After : Nov  9 18:35:33 2025 GMT
        Subject: CN=6907a475-3f1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cf:f7:24:86:2e:fc:76:8e:3c:71:c2:e7:a4:
                    d8:a2:47:25:36:59:e4:d5:5f:6b:8e:9b:fc:11:43:
                    b8:ae:29:c5:1e:26:eb:50:cf:76:8b:19:c1:93:15:
                    43:4a:01:21:83:f1:fa:77:a8:f7:7d:cc:11:b1:dc:
                    ec:51:23:79:eb:47:b1:75:34:bd:c5:b6:b5:b9:32:
                    ac:7d:a2:eb:27:93:2d:21:0d:c1:83:f7:b5:51:77:
                    61:87:a9:25:13:d5:c3:13:f6:9b:22:23:e8:63:34:
                    5b:d0:04:b2:7e:06:61:24:1e:a1:6d:ec:71:7b:15:
                    57:6a:9e:85:f4:f9:bc:96:7c:3a:e0:7b:6e:42:b0:
                    77:c8:64:d7:59:5f:0e:dd:eb:25:40:86:a6:2b:54:
                    8a:36:1a:bd:75:12:53:49:39:cd:41:57:96:d1:44:
                    57:a5:db:a2:0a:83:e8:22:e9:e8:a3:f6:41:d8:e4:
                    e6:c8:52:45:06:2c:46:84:12:5a:24:d7:30:59:20:
                    ed:cd:c0:b6:2d:9e:96:09:fb:3b:35:fa:f4:eb:68:
                    c6:ed:48:b4:ed:ad:0b:39:97:24:8d:70:e9:23:3a:
                    a5:b0:df:8f:87:3f:0c:11:a5:13:83:50:c9:1a:e6:
                    4b:09:8c:5e:b2:c4:d2:e0:3b:ca:3e:02:05:2b:5a:
                    48:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:7E:EB:06:5D:41:31:69:82:80:D6:94:43:BE:25:D5:33:8D:CB:F0
            X509v3 Authority Key Identifier:
                keyid:0F:A9:E5:33:E8:5A:18:3C:14:53:00:08:A8:B9:62:3F:85:6D:5D:EB
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         31:00:20:7d:a2:ef:54:75:34:9e:96:37:18:c0:e6:30:8d:42:
         ee:9b:28:f6:b9:33:25:a4:32:9a:71:09:2f:f8:53:b0:d9:60:
         67:7a:02:ca:1a:1c:90:39:39:7c:65:02:d1:48:f7:be:3a:d6:
         2a:8b:a1:f0:4f:9b:a9:13:e1:5d:6e:c5:c0:61:12:66:03:23:
         e7:06:92:ac:15:0d:2e:a2:01:94:c9:52:32:15:50:86:1e:21:
         7e:d2:1e:d8:e4:53:51:0f:36:93:14:2a:4d:e5:a3:d2:c0:88:
         8d:a9:b9:95:cc:91:67:7f:d1:b2:88:2d:3f:99:f4:e3:8b:33:
         4d:49:6b:2c:27:8d:c9:ae:f5:b8:e4:9b:fe:b8:7c:41:91:e5:
         e2:09:13:7e:05:ba:e6:94:5f:ff:00:25:61:e3:e1:d2:7f:8a:
         17:fd:eb:e4:24:7f:62:74:6a:22:ce:d3:78:e7:41:a0:7a:75:
         60:53:9b:c5:e8:4b:b9:e9:67:ba:9f:ab:49:f2:1f:1c:a3:e2:
         0c:28:26:98:52:30:06:00:e1:0d:f2:43:c6:bc:8b:b3:42:a1:
         24:37:e5:cd:83:56:21:99:64:73:fa:5b:8d:b5:a5:96:4d:bd:
         85:8c:ac:34:2f:ea:eb:e4:4b:a7:7f:55:36:57:88:80:b9:7d:
         d2:ac:c1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 16:04:40 2025 by rpki-client