
$ rpki-client -vvf rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft
File:                     lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft (raw, json)
Hash identifier:          VxVlFL75yLPTXqWfyS7exooLcd8vFzNAg8PVu1VuSLA=
Subject key identifier:   77:A6:C4:3A:BB:97:0E:18:48:53:CD:6A:B3:6D:90:DF:56:B1:4B:B5
Authority key identifier: 95:95:1E:CF:C9:1D:0F:55:AD:8E:D8:AF:BF:E6:3C:B4:16:19:FC:47
Certificate issuer:       /CN=A919546B/serialNumber=95951ECFC91D0F55AD8ED8AFBFE63CB41619FC47
Certificate serial:       06AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft
Manifest number:          06A4
Signing time:             Sun 02 Nov 2025 22:17:30 +0000
Manifest this update:     Sun 02 Nov 2025 22:17:29 +0000
Manifest next update:     Sun 09 Nov 2025 22:17:29 +0000
Files and hashes:         1: lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.crl (hash: k2BW6NCMB4MQObrc6st8BBNv6JyjrZWnGkcyK0t7SlA=)
                          2: 652993B4884F11EBB2A8337FC4F9AE02.roa (hash: Xrevk4k6Cchylp30Kd2GrTW0U2Yau9k0gu1MIRCl1Z0=)
                          3: 270CD9841A7111F09FFEDF3BC4F9AE02.roa (hash: nNWr6J3AcReiPHvNk6340B1sT6j8vw6YrQdSHa29JIE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.crl
                          rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 22:17:29 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1707 (0x6ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919546B, serialNumber=95951ECFC91D0F55AD8ED8AFBFE63CB41619FC47
        Validity
            Not Before: Nov  2 22:17:29 2025 GMT
            Not After : Nov  9 22:17:29 2025 GMT
        Subject: CN=6907d879-5ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:44:c4:c6:dc:3a:86:fb:42:28:ad:76:f3:06:
                    b9:90:ae:8b:34:02:ad:3b:90:96:b3:a3:4c:7f:9e:
                    9b:70:73:5f:4a:36:83:0b:2b:e8:a0:e1:62:ee:31:
                    02:b1:92:d4:3e:64:f3:c8:43:ce:34:13:e5:f7:9e:
                    db:3f:53:53:8a:9a:d1:43:8f:63:7d:b5:20:00:47:
                    ce:5a:f4:2c:07:88:82:e5:34:83:90:86:7e:4a:d8:
                    12:30:95:ec:ab:9a:df:98:01:e3:f6:98:9d:7e:5e:
                    da:66:d9:e7:ee:0c:d6:d4:e1:98:a0:c5:e4:45:b7:
                    c0:81:8d:2e:c2:e8:06:34:9e:c2:a8:0f:8a:65:59:
                    9e:d8:e3:f5:f4:10:54:e6:29:4e:88:22:33:e0:43:
                    fd:39:5c:40:e0:06:8f:b7:4d:a5:19:80:b0:cb:36:
                    bf:6a:c3:da:7e:4f:e2:b9:4b:d7:74:8b:4a:87:e3:
                    e3:8e:bd:a9:69:3f:8d:c8:2d:78:24:88:ad:3b:14:
                    c0:26:b9:99:65:b8:3d:36:b3:6f:c2:3b:f3:3c:61:
                    97:cd:01:53:08:f8:45:fd:87:3a:1b:24:52:62:56:
                    f1:b6:43:48:20:74:f5:68:fe:72:32:3c:ae:1d:82:
                    14:70:a9:c6:63:4d:ee:f7:8b:23:50:7d:5a:f7:bc:
                    2f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A6:C4:3A:BB:97:0E:18:48:53:CD:6A:B3:6D:90:DF:56:B1:4B:B5
            X509v3 Authority Key Identifier:
                keyid:95:95:1E:CF:C9:1D:0F:55:AD:8E:D8:AF:BF:E6:3C:B4:16:19:FC:47
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         2b:6d:f2:43:0d:a6:0d:f9:3a:76:c1:2b:4b:f7:68:92:67:a5:
         dc:64:10:42:7a:0f:c4:a5:ba:fc:e2:0c:24:ba:5a:79:6b:44:
         e8:d6:f1:28:37:31:3d:19:45:0f:44:91:82:24:22:44:09:37:
         eb:fc:42:b0:99:ae:ed:a0:96:11:c6:68:37:9e:d3:ff:da:db:
         c0:5a:6f:f1:a6:96:a5:39:47:d3:a9:68:ee:00:63:00:da:3b:
         1b:d6:dc:c2:01:28:19:f2:68:41:74:41:be:16:e6:3c:72:2a:
         60:6a:f4:10:6a:14:a3:f6:54:94:0a:53:d0:86:4b:48:af:12:
         b1:12:b7:1b:fe:a1:52:9c:de:c6:ec:b1:a5:2e:9d:8a:1b:59:
         01:e4:07:7f:e6:6b:f1:4f:9f:53:04:a1:d6:85:8e:4b:ec:e8:
         1f:f8:ea:e3:81:1a:85:d0:d5:35:2f:0c:2e:c7:67:02:78:45:
         7a:40:98:f8:25:74:b6:e7:1c:00:01:aa:45:ce:1e:d2:d5:f3:
         ca:cd:47:58:eb:13:47:0e:16:1a:fb:2c:98:e6:0e:70:d0:02:
         71:39:df:1a:ea:44:c3:ee:5c:31:ea:60:01:31:bd:6e:09:49:
         53:51:4b:f6:95:89:ba:16:2b:30:45:51:0a:c2:65:12:4d:7f:
         79:cc:9c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 02:15:01 2025 by rpki-client