
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
File:                     dwOm1WxxgCG9nInrPEvtgX7VauU.mft (raw, json)
Hash identifier:          Ou5TbsUtMaDg98XMsmDzWWOPCpDmMvEDbwiEjXHr9No=
Subject key identifier:   3A:7C:A4:25:7E:F8:4F:B2:22:1C:BC:4A:40:E2:28:6C:60:F4:8E:55
Authority key identifier: 77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5
Certificate issuer:       /CN=A918F20B/serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5
Certificate serial:       040D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
Manifest number:          03FD
Signing time:             Mon 03 Nov 2025 00:26:23 +0000
Manifest this update:     Mon 03 Nov 2025 00:26:22 +0000
Manifest next update:     Mon 10 Nov 2025 00:26:22 +0000
Files and hashes:         1: dwOm1WxxgCG9nInrPEvtgX7VauU.crl (hash: 9iekzMBPpj5TivVDSwv0Tg0c/qxOjnfLLUy7F++VGZ8=)
                          2: D9AD698C961211ECB515C474C4F9AE02.roa (hash: 0Y4nA/Aph2MoTUodk+O6k9Ce17owZ/QgLBqclqJBZ7I=)
                          3: B56F2E9697B811ECA8AA4230C4F9AE02.roa (hash: qLefOo7dvmrLJXMQn53EKJf0jFwExcla3oAdVHf5x9E=)
                          4: FC5AFF000BE011ED9E3AA135C4F9AE02.roa (hash: FkNOr2OAvQ+/2fjoQ+ttW/rGycCdH0fNwqceJH3qGXA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl
                          rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 00:26:21 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1037 (0x40d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F20B, serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5
        Validity
            Not Before: Nov  3 00:26:22 2025 GMT
            Not After : Nov 10 00:26:22 2025 GMT
        Subject: CN=6907f6ae-ae7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:56:bd:95:75:77:94:d4:de:29:0b:ed:00:3c:
                    94:15:75:bc:2d:2a:42:5e:d5:08:16:96:4f:20:a1:
                    92:f7:83:8a:d9:d7:dc:58:db:e1:b7:a7:39:91:5d:
                    dd:30:73:c2:6e:4b:74:78:d7:4a:5c:bb:d7:e7:f7:
                    36:f6:18:68:72:96:9e:bf:46:9f:d5:04:45:ff:d0:
                    9f:0a:e1:d2:70:a0:a1:e0:3c:4e:54:12:63:fb:30:
                    65:bb:87:35:6e:3a:b7:52:0d:32:c3:8e:79:13:be:
                    95:bc:f5:81:48:03:15:3b:81:16:83:98:6c:38:d4:
                    ec:00:bd:35:c3:44:cc:9a:fc:df:9a:5b:09:b7:c7:
                    27:ef:ad:46:81:1f:a8:05:54:24:7c:a7:7e:4e:fc:
                    17:c5:0a:f2:33:c9:84:70:53:92:ef:a5:db:e3:af:
                    1c:2f:25:7b:8f:6b:6c:7e:63:1d:7b:f4:ce:24:0f:
                    e8:54:52:1d:07:d3:f1:c6:2e:e5:85:97:b5:4b:42:
                    b0:7c:ea:68:fc:af:d9:f2:e2:12:4f:67:84:9f:f4:
                    f0:42:52:a1:cb:cb:80:42:b5:38:62:09:32:08:f1:
                    41:d5:eb:dc:0b:d5:8b:0d:5d:4c:01:da:35:0c:62:
                    fa:98:d0:1e:c6:25:5b:6f:db:00:36:00:d1:4e:6b:
                    17:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:7C:A4:25:7E:F8:4F:B2:22:1C:BC:4A:40:E2:28:6C:60:F4:8E:55
            X509v3 Authority Key Identifier:
                keyid:77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         0d:94:2f:98:ab:ed:97:a4:39:34:61:99:ea:74:98:a0:c2:71:
         9c:c0:54:64:1c:52:0a:6a:82:45:8e:6f:2c:78:1f:c6:b4:6e:
         98:5c:75:ff:42:66:fa:ac:78:dc:29:a8:d6:14:d1:56:1e:f6:
         71:e7:1d:3b:2c:9f:18:98:0b:b9:51:1f:95:0d:9d:c6:2a:c7:
         05:5d:a6:7d:ea:f7:f7:f0:ac:c1:af:9e:08:a3:0d:86:0e:32:
         11:fb:23:22:b5:10:b2:a7:e9:28:96:21:12:c9:0a:dc:39:25:
         33:e8:0c:bc:e7:67:43:af:84:5f:1d:c8:48:55:99:b5:88:ac:
         8f:9d:2f:85:24:6e:1b:4c:14:43:06:8c:80:19:99:b9:bb:b5:
         7b:23:df:30:56:31:3e:ca:6b:14:b7:72:9a:00:49:df:d2:ab:
         a3:71:84:b5:6a:cc:74:d7:36:ee:a6:50:2d:78:f7:16:8b:b1:
         15:0d:0a:bd:20:8d:e4:0c:71:96:08:f5:0a:8d:96:0c:12:5d:
         82:57:08:2e:d0:2a:74:cf:b7:91:56:69:54:3f:d2:ff:ac:c2:
         ee:c1:4f:f1:bb:9d:93:6c:31:9f:20:89:ff:6b:34:ce:b3:ee:
         53:76:8b:18:cd:dc:19:f1:da:d8:76:a9:6e:83:4d:55:54:1f:
         a1:89:01:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 16:04:23 2025 by rpki-client