
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEBC2/24712C9ED7E911EB8943247EC4F9AE02/V6UulqV__YXyDDjsMV2kB_6mhqg.mft
File:                     V6UulqV__YXyDDjsMV2kB_6mhqg.mft (raw, json)
Hash identifier:          Aayqul9wZzbBjK6n+HHyTQ5l2G5Zz87bJVC0HqdE8uo=
Subject key identifier:   71:49:72:BD:95:60:69:91:F4:96:36:5D:B5:BC:D1:C5:49:9F:B1:9C
Authority key identifier: 57:A5:2E:96:A5:7F:FD:85:F2:0C:38:EC:31:5D:A4:07:FE:A6:86:A8
Certificate issuer:       /CN=A91AEBC2/serialNumber=57A52E96A57FFD85F20C38EC315DA407FEA686A8
Certificate serial:       05D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V6UulqV__YXyDDjsMV2kB_6mhqg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEBC2/24712C9ED7E911EB8943247EC4F9AE02/V6UulqV__YXyDDjsMV2kB_6mhqg.mft
Manifest number:          05D2
Signing time:             Sun 02 Nov 2025 22:59:24 +0000
Manifest this update:     Sun 02 Nov 2025 22:59:24 +0000
Manifest next update:     Sun 09 Nov 2025 22:59:24 +0000
Files and hashes:         1: V6UulqV__YXyDDjsMV2kB_6mhqg.crl (hash: FzHft8pwIXRM4taNuUUg78PaildhnZInEAWSj60NU3A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEBC2/24712C9ED7E911EB8943247EC4F9AE02/V6UulqV__YXyDDjsMV2kB_6mhqg.crl
                          rsync://rpki.apnic.net/member_repository/A91AEBC2/24712C9ED7E911EB8943247EC4F9AE02/V6UulqV__YXyDDjsMV2kB_6mhqg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V6UulqV__YXyDDjsMV2kB_6mhqg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 22:59:23 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1490 (0x5d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEBC2, serialNumber=57A52E96A57FFD85F20C38EC315DA407FEA686A8
        Validity
            Not Before: Nov  2 22:59:24 2025 GMT
            Not After : Nov  9 22:59:24 2025 GMT
        Subject: CN=6907e24c-c20b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:04:b4:1a:90:7b:b3:7a:e2:c7:e2:30:3a:9e:
                    95:d9:db:40:65:81:81:9b:d6:ab:58:de:a1:b4:93:
                    6d:76:c1:8d:a4:3f:33:0e:bc:6d:bd:36:b9:f7:48:
                    62:77:9b:fd:cb:87:f6:70:ab:ab:cc:33:bb:7f:37:
                    c5:36:03:74:f7:80:d6:7d:f4:1d:10:c4:39:bc:ef:
                    1c:4e:95:c2:88:40:ed:31:56:e3:ff:09:48:ec:b0:
                    22:74:c6:8d:14:88:39:57:f4:3d:f8:fb:25:66:29:
                    d8:2b:c5:1e:11:a1:dc:98:68:7a:62:db:c1:6c:bf:
                    15:49:d9:7a:00:e7:84:16:33:84:d2:1c:5d:6d:a3:
                    f3:a5:ff:06:27:39:d7:4e:69:35:12:9b:0b:a6:b6:
                    b4:f5:87:50:6a:d0:d6:2e:c8:d2:cf:35:f4:f9:8f:
                    ec:be:1f:ed:d0:3c:75:5b:5d:27:e0:66:01:52:85:
                    60:90:f7:dc:6e:57:25:5b:16:79:81:ec:8e:a2:2f:
                    38:91:21:f0:d9:54:91:6a:61:9e:34:b4:e5:90:34:
                    14:47:1b:01:19:7c:7f:4a:98:90:4a:84:79:79:37:
                    ec:bc:ef:3b:38:a0:73:22:29:a2:6f:78:4e:73:7a:
                    89:57:76:a5:b3:56:78:60:ac:6e:f5:cc:07:91:38:
                    86:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:49:72:BD:95:60:69:91:F4:96:36:5D:B5:BC:D1:C5:49:9F:B1:9C
            X509v3 Authority Key Identifier:
                keyid:57:A5:2E:96:A5:7F:FD:85:F2:0C:38:EC:31:5D:A4:07:FE:A6:86:A8
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEBC2/24712C9ED7E911EB8943247EC4F9AE02/V6UulqV__YXyDDjsMV2kB_6mhqg.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V6UulqV__YXyDDjsMV2kB_6mhqg.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEBC2/24712C9ED7E911EB8943247EC4F9AE02/V6UulqV__YXyDDjsMV2kB_6mhqg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         3c:43:fe:40:be:86:eb:0a:8f:3c:46:59:53:17:80:91:d8:71:
         ca:aa:1d:8f:ca:24:d8:c1:6f:e9:c3:ea:32:47:fa:7a:7d:2c:
         db:18:4c:bb:6c:52:27:e5:98:af:9e:cd:ff:6a:f8:35:03:6c:
         12:00:ae:48:6a:cc:4a:1e:70:d5:3b:cb:44:98:b1:2c:9e:9f:
         a3:88:3d:71:b4:da:d0:2a:f9:86:f1:71:fc:ea:6a:53:1c:c6:
         12:13:5f:04:73:b4:f1:e1:43:1f:9a:fb:9d:bf:6f:b6:c6:c4:
         52:91:6d:8f:27:b9:77:1d:0c:65:92:72:ac:22:52:fb:53:2a:
         d3:17:ec:29:a3:e3:95:e4:fc:92:c2:e0:c9:cc:48:96:2e:10:
         1d:2a:36:e5:31:dd:7c:1b:ab:ea:37:88:df:74:46:23:32:f9:
         2b:80:54:81:02:14:18:35:29:37:3d:dd:b5:dd:a1:a9:6c:71:
         16:53:8d:b4:da:e7:68:33:7c:ca:e8:2d:db:52:d8:ba:3d:92:
         33:5d:f8:0d:f0:db:43:09:9a:f7:1c:2f:07:c2:c0:f6:0d:66:
         d2:95:75:e7:4d:9e:bc:e2:5e:8c:95:2e:f1:8a:d8:77:e8:63:
         29:f5:89:3a:0f:20:eb:39:0a:4c:0a:02:30:b3:e6:47:50:53:
         82:58:d9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 12:37:52 2025 by rpki-client