
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.mft
File:                     LlwMrqX6-WreoBWKqPtS-jRn4Og.mft (raw, json)
Hash identifier:          fG45bBiQHZHUpqZv7QZyDuYc0uuHhZbvnLUgdNDVbCc=
Subject key identifier:   9F:40:55:66:5F:7B:EF:A4:D2:F3:E0:41:0E:B8:04:77:72:41:41:7E
Authority key identifier: 2E:5C:0C:AE:A5:FA:F9:6A:DE:A0:15:8A:A8:FB:52:FA:34:67:E0:E8
Certificate issuer:       /CN=A918F7E6/serialNumber=2E5C0CAEA5FAF96ADEA0158AA8FB52FA3467E0E8
Certificate serial:       06C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlwMrqX6-WreoBWKqPtS-jRn4Og.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.mft
Manifest number:          06C1
Signing time:             Sun 02 Nov 2025 22:08:02 +0000
Manifest this update:     Sun 02 Nov 2025 22:08:02 +0000
Manifest next update:     Sun 09 Nov 2025 22:08:02 +0000
Files and hashes:         1: LlwMrqX6-WreoBWKqPtS-jRn4Og.crl (hash: 8rxfbz7w8PJAyjBebl9hmQuLGajqijcItGFCwMzQ4eA=)
                          2: D676DC068A7311EEB46D5B0BC4F9AE02.roa (hash: xv4JOTBWCpuFMP+OVuJZ707b0iFlDSezqXisZkWjHnw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.crl
                          rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlwMrqX6-WreoBWKqPtS-jRn4Og.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 22:08:01 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1737 (0x6c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F7E6, serialNumber=2E5C0CAEA5FAF96ADEA0158AA8FB52FA3467E0E8
        Validity
            Not Before: Nov  2 22:08:02 2025 GMT
            Not After : Nov  9 22:08:02 2025 GMT
        Subject: CN=6907d642-34ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:23:58:9d:3b:0b:34:df:73:f7:6a:d4:f2:15:
                    6b:d8:5b:31:e3:90:e2:ad:b6:6d:b9:7f:ea:a2:70:
                    68:0d:2e:c6:ae:11:f6:2a:78:af:48:44:75:7b:f9:
                    df:3d:3b:cc:e0:6c:0e:c4:fd:4e:83:fa:12:ee:03:
                    72:78:3f:81:59:c2:4b:ee:be:1e:84:1c:d2:20:9c:
                    67:86:2a:90:4b:2a:42:1b:a1:1b:37:cf:d4:c5:15:
                    d2:05:36:16:79:03:eb:e7:55:e2:73:73:e8:cd:6f:
                    5b:1a:c9:f7:7f:ea:2e:6c:2c:d9:bc:4d:26:f7:2b:
                    ca:d3:48:38:57:d9:e2:ac:fa:91:83:67:dd:65:c7:
                    4b:68:73:28:83:96:e9:73:b4:03:12:08:6d:05:11:
                    e4:97:32:f4:48:b2:7a:36:64:ef:c7:8f:40:81:1f:
                    8d:55:a8:77:ce:30:7e:46:ee:50:60:d8:fc:17:0d:
                    16:8b:d1:fb:19:db:29:7e:44:b7:01:7d:e1:5f:08:
                    26:f6:93:6c:3e:5c:f0:53:a0:09:1b:13:95:d4:f6:
                    c6:93:4d:0f:9b:c3:17:67:81:92:de:f7:99:1c:a0:
                    a5:77:5a:4f:32:04:95:98:ba:fb:15:52:bc:92:5f:
                    24:78:a6:d4:0c:2c:07:48:db:07:36:40:a8:4a:42:
                    81:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:40:55:66:5F:7B:EF:A4:D2:F3:E0:41:0E:B8:04:77:72:41:41:7E
            X509v3 Authority Key Identifier:
                keyid:2E:5C:0C:AE:A5:FA:F9:6A:DE:A0:15:8A:A8:FB:52:FA:34:67:E0:E8
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlwMrqX6-WreoBWKqPtS-jRn4Og.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         4c:8f:9e:92:b3:b2:11:55:75:36:5f:f9:03:f3:a7:ab:3b:de:
         65:55:42:34:9c:65:4a:39:29:d6:d9:0e:e0:5d:28:3c:e9:94:
         6f:66:c1:f4:0b:6c:57:c6:a6:a4:1d:3f:de:b5:73:a2:38:63:
         58:0d:13:d5:99:2f:2d:01:cd:99:b4:02:a9:be:6f:c4:e5:9c:
         6e:4d:47:e1:0c:67:e5:6e:3c:ad:4f:54:35:83:f5:a5:1a:e8:
         ed:ec:99:db:ea:24:87:4f:ec:02:c7:f3:4d:ff:43:77:84:ba:
         f8:95:25:78:2c:fd:e6:b0:c2:16:84:89:9a:6c:9f:4d:f9:2a:
         8f:91:cc:48:03:57:c9:59:01:1b:2e:22:98:80:8b:1e:cf:94:
         98:b4:52:d4:6c:75:1c:54:d4:ea:1d:d7:af:57:6c:55:a1:8f:
         60:44:1c:25:7d:d9:5f:56:c0:fb:2a:a3:1f:df:70:17:1f:4d:
         dd:4e:cb:5c:1b:f5:35:17:42:6a:83:63:08:d8:fb:c0:94:d3:
         ab:e8:f7:c0:0b:90:b8:61:77:5b:ed:fa:d0:ef:d2:a5:d5:6e:
         38:1d:88:77:53:e1:a6:27:99:6a:6b:3e:f6:21:17:2b:47:aa:
         7e:02:29:ef:50:c4:3a:3e:06:e7:3f:61:ae:e6:4e:9a:81:01:
         cd:4b:6b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 08:17:50 2025 by rpki-client