
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft
File:                     jMMEPUtGxI8SbAboKXDrtItkY8g.mft (raw, json)
Hash identifier:          UgMbMIbr2UaH0KmAjF5hYPsVv2fVuFFTSf5+duw+vAc=
Subject key identifier:   AD:F7:DF:33:AB:A7:73:6E:DA:DB:AB:E4:35:51:C4:BF:F8:68:3B:26
Authority key identifier: 8C:C3:04:3D:4B:46:C4:8F:12:6C:06:E8:29:70:EB:B4:8B:64:63:C8
Certificate issuer:       /CN=A91A64F6/serialNumber=8CC3043D4B46C48F126C06E82970EBB48B6463C8
Certificate serial:       0175
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMMEPUtGxI8SbAboKXDrtItkY8g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft
Manifest number:          016D
Signing time:             Mon 03 Nov 2025 03:56:42 +0000
Manifest this update:     Mon 03 Nov 2025 03:56:42 +0000
Manifest next update:     Mon 10 Nov 2025 03:56:42 +0000
Files and hashes:         1: jMMEPUtGxI8SbAboKXDrtItkY8g.crl (hash: XBjeVz2XXS9IOYjzQaSRZhvDs8ME1BguKv0Q/cfNMoQ=)
                          2: 005C6D6EC17A11EEB919C476C4F9AE02.roa (hash: VQyak9S3rqjmq1eWDpbqLTY2ZUcqqjPeCQJPKCoBRvQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.crl
                          rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMMEPUtGxI8SbAboKXDrtItkY8g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 03:56:41 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 373 (0x175)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A64F6, serialNumber=8CC3043D4B46C48F126C06E82970EBB48B6463C8
        Validity
            Not Before: Nov  3 03:56:42 2025 GMT
            Not After : Nov 10 03:56:42 2025 GMT
        Subject: CN=690827fa-c214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:01:76:55:f9:60:80:7c:ff:83:e1:ed:4a:64:
                    53:e9:66:ee:00:d4:41:57:bf:36:d1:68:4a:24:1a:
                    8a:07:e8:8c:9b:c9:1f:0a:35:0d:ad:ed:b0:70:5e:
                    35:89:e2:59:b2:17:3a:09:be:c1:fc:45:63:ca:73:
                    59:8a:93:e7:bb:97:18:3d:1c:c5:2a:2f:58:be:16:
                    a8:3b:1f:a6:2f:74:a0:d0:85:2f:0a:2d:b2:6a:d1:
                    45:c8:da:3b:bc:78:e8:51:84:e0:8c:8b:16:ff:e0:
                    de:d9:8e:ce:73:39:39:44:11:2d:b6:8c:64:7a:f9:
                    07:7b:bb:53:99:cd:54:7a:cd:d7:b8:83:d5:85:6b:
                    8d:60:5d:a2:52:24:8e:62:ec:2b:f2:75:41:cd:ba:
                    79:cb:bf:1b:22:04:8e:43:03:fc:f1:6f:fb:b8:48:
                    53:19:5d:77:94:60:a1:cb:70:0a:4f:f8:d6:5e:0e:
                    55:ad:89:de:af:c1:7b:d0:d3:fd:d7:91:d2:72:fe:
                    c6:94:c9:29:99:82:45:f2:b8:6e:fc:f1:81:ca:20:
                    54:15:4f:cf:12:14:d4:55:c3:62:94:83:97:17:1b:
                    a6:f3:43:4d:25:96:c9:fc:33:b5:aa:08:dd:69:4a:
                    8f:ba:c9:67:a4:c6:36:3c:20:25:3b:06:d0:b6:32:
                    d4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F7:DF:33:AB:A7:73:6E:DA:DB:AB:E4:35:51:C4:BF:F8:68:3B:26
            X509v3 Authority Key Identifier:
                keyid:8C:C3:04:3D:4B:46:C4:8F:12:6C:06:E8:29:70:EB:B4:8B:64:63:C8
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMMEPUtGxI8SbAboKXDrtItkY8g.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         99:28:38:19:5f:fe:f8:ce:34:ea:db:3c:0e:6a:3b:de:28:40:
         a0:15:c4:cf:a7:e0:de:58:a7:18:52:9b:a2:90:7f:7a:60:f6:
         82:17:96:c4:a7:61:64:73:b2:6a:54:41:c9:62:56:32:53:83:
         c2:4a:41:55:56:38:87:9b:21:46:94:e2:ba:5e:66:50:52:55:
         c5:77:1b:1f:16:be:96:c5:1e:2c:a1:84:e7:cb:5b:98:46:90:
         c9:36:59:a3:50:f5:96:cc:52:17:7d:75:12:39:3f:ba:ad:cf:
         28:dc:1d:c9:f9:cb:89:69:60:c1:2c:d0:14:6f:68:17:1e:f2:
         70:c1:97:27:8d:45:6e:dc:95:2f:3d:08:a6:52:fe:75:1e:d7:
         60:24:e4:f9:0e:aa:c7:ab:31:d7:ae:64:68:a8:8a:1a:f8:a6:
         72:63:c6:a7:f7:07:61:cd:a5:ae:59:f8:dc:95:4b:07:a1:38:
         dd:fe:0e:0d:bf:06:21:15:97:9f:ef:0b:2e:66:59:72:96:ea:
         2b:cb:40:41:a5:b0:a5:ba:f3:9e:fe:5b:fb:8e:59:c3:ee:25:
         f5:90:f6:fb:b1:b9:3f:7e:2d:de:2f:6f:08:bc:82:74:ac:be:
         1c:76:52:fc:00:33:5a:73:5b:a4:f6:f0:08:95:e3:1e:fd:c3:
         ad:74:e2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 08:21:18 2025 by rpki-client