
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft
File:                     t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft (raw, json)
Hash identifier:          9CPmiUMl26sxFfWYfIBS19MuG3HSlg13xhQGcZXVIqU=
Subject key identifier:   22:43:63:29:E3:D5:27:D2:1C:DE:7C:3A:EF:9D:BC:3B:36:50:D5:E6
Authority key identifier: B7:FE:6A:42:4D:B5:65:26:1B:47:3A:71:23:1D:59:E2:18:DC:45:04
Certificate issuer:       /CN=A91A9197/serialNumber=B7FE6A424DB565261B473A71231D59E218DC4504
Certificate serial:       01CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft
Manifest number:          01C6
Signing time:             Mon 03 Nov 2025 02:56:25 +0000
Manifest this update:     Mon 03 Nov 2025 02:56:25 +0000
Manifest next update:     Mon 10 Nov 2025 02:56:25 +0000
Files and hashes:         1: t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl (hash: jQP8W7L6QSbyo0N57Bm3zDzcVCVx/rtYMI4iUGE/xzM=)
                          2: F4260C1C68DC11EE842D825BC4F9AE02.roa (hash: Bs60NAJODIvyPbTdOei+RIwraizPMP8YmkDLpLSSqzI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 02:56:24 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 458 (0x1ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9197, serialNumber=B7FE6A424DB565261B473A71231D59E218DC4504
        Validity
            Not Before: Nov  3 02:56:25 2025 GMT
            Not After : Nov 10 02:56:25 2025 GMT
        Subject: CN=690819d9-49ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:28:cd:50:61:df:4d:4f:59:5d:8d:aa:d0:3f:
                    92:1b:53:6f:4f:aa:7b:57:0c:46:f7:77:80:cc:c3:
                    aa:eb:f9:47:6a:72:3f:e4:db:27:44:bd:20:b9:00:
                    e6:27:9e:bd:e0:f1:3f:48:44:40:e7:10:1b:6a:23:
                    b7:c3:d6:7b:4f:05:cc:7e:d6:de:71:e8:42:15:03:
                    da:bf:b6:f7:50:dc:99:c8:23:51:5d:a9:e2:88:f4:
                    38:78:91:59:bb:78:3c:c7:5c:cd:a8:90:b6:23:f5:
                    52:1e:d5:b4:71:52:bc:22:bf:4d:8a:b7:ab:56:8c:
                    e8:10:f0:6b:8c:cf:82:a7:11:ab:16:ce:cf:e2:31:
                    00:a9:02:d4:a6:c3:ba:e8:af:c7:1a:e7:ae:84:15:
                    f6:25:b2:39:14:8e:8d:97:29:d0:26:81:e9:ca:c6:
                    7a:4d:4e:fe:c1:fe:77:2f:93:c0:8f:b1:08:a1:f6:
                    11:aa:69:b8:11:ff:e5:95:e0:dd:ab:c2:f2:1a:73:
                    7d:10:65:0d:37:5f:8e:ed:85:16:cc:e2:35:37:20:
                    f4:b2:0a:62:e2:42:a7:b8:86:0c:e1:07:46:36:4b:
                    e7:4e:60:fc:05:c3:da:32:17:03:a0:89:4e:53:b2:
                    5f:8e:fe:bd:70:be:11:52:ae:d5:d2:9e:78:db:5b:
                    9e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:43:63:29:E3:D5:27:D2:1C:DE:7C:3A:EF:9D:BC:3B:36:50:D5:E6
            X509v3 Authority Key Identifier:
                keyid:B7:FE:6A:42:4D:B5:65:26:1B:47:3A:71:23:1D:59:E2:18:DC:45:04
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         3f:b7:cb:da:15:0c:8b:8a:69:7c:67:c7:66:1b:4f:cc:c9:38:
         c6:ec:7c:e9:8d:84:70:3b:0d:8c:5c:05:2a:6d:51:66:d8:3a:
         6f:da:1f:44:1c:39:27:b0:dc:c3:6f:de:38:83:07:7b:01:23:
         bd:69:d8:62:bc:04:57:2d:cf:4e:64:3f:bf:09:5b:2d:cc:49:
         d2:f0:13:be:85:52:09:92:6a:56:88:1c:e9:72:31:09:f1:95:
         da:a2:f2:2f:f3:2d:2f:bc:7c:d7:cf:58:8a:3e:58:ec:ae:41:
         40:ec:ab:68:1b:40:0a:99:ea:c5:28:48:a2:32:e6:92:18:7e:
         69:7c:b3:7c:02:ca:8e:b5:80:33:40:48:49:fa:f1:e3:8b:51:
         fa:56:c8:96:31:b1:b5:a6:74:d2:94:9f:89:68:44:9c:99:43:
         4f:b8:c5:8b:9b:1b:fa:a3:14:35:2c:98:59:aa:b5:fc:92:dc:
         35:58:bd:80:cf:da:bb:a3:42:ea:14:19:dd:7a:a3:be:6e:a0:
         fa:3e:df:5c:0b:af:e0:05:3c:6e:2f:da:21:98:af:8b:ba:ef:
         2f:e7:b9:66:07:66:c9:a7:50:86:0b:db:dc:b5:df:02:f4:88:
         81:92:b1:f6:26:ea:6a:79:a8:15:79:5e:34:d6:48:7b:f5:78:
         5a:db:70:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 02:15:00 2025 by rpki-client