
$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft
File:                     5DyCH7uc7qZ-unouUFzF3X92YFU.mft (raw, json)
Hash identifier:          JkLhj7u0Mq2CGSEKo7QirJ2cEZYgf2wKDXP34CpcUV0=
Subject key identifier:   E1:95:84:18:8B:0E:FB:90:4D:B8:03:5D:12:BF:90:47:CE:4B:10:7B
Authority key identifier: E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55
Certificate issuer:       /CN=A9114D2E/serialNumber=E43C821FBB9CEEA67EBA7A2E505CC5DD7F766055
Certificate serial:       0B26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft
Manifest number:          0B14
Signing time:             Sun 02 Nov 2025 19:17:44 +0000
Manifest this update:     Sun 02 Nov 2025 19:17:43 +0000
Manifest next update:     Sun 09 Nov 2025 19:17:43 +0000
Files and hashes:         1: 5DyCH7uc7qZ-unouUFzF3X92YFU.crl (hash: Khz30T0RaO28CHEgy4lL1nmA7u89RALZjph1jRdN/Nw=)
                          2: 8ABED0585F0911ECA629B815C4F9AE02.roa (hash: lHB3EjiVIRGj7eZK04nTZOWleSjetiCEVc7tdPvMiiA=)
                          3: 823433125F0C11EC8C2C2820C4F9AE02.roa (hash: iND3Lx5ArlZCn+bmlp3Mm/3K9nvCqz4EFEYZ5pfFFhc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl
                          rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 19:17:43 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2854 (0xb26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114D2E, serialNumber=E43C821FBB9CEEA67EBA7A2E505CC5DD7F766055
        Validity
            Not Before: Nov  2 19:17:43 2025 GMT
            Not After : Nov  9 19:17:43 2025 GMT
        Subject: CN=6907ae58-bbe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:69:0c:06:d3:a6:a6:24:d2:07:ef:eb:a9:9a:
                    b2:7a:58:67:2c:1c:61:49:4e:8b:89:f2:6c:1f:af:
                    f7:96:68:e4:41:cf:0f:5a:b9:7e:69:df:78:21:be:
                    b2:9e:b1:15:6d:77:2c:f9:65:65:fa:88:82:c8:48:
                    40:93:06:f7:ee:55:66:98:21:e4:5f:3d:e4:5e:39:
                    1a:80:46:4c:d8:57:5c:6a:01:c2:88:1a:3e:34:42:
                    fa:6d:bd:2f:c2:82:e3:d0:e2:7c:e7:55:25:97:c6:
                    9f:78:cc:df:52:00:7b:9d:13:a5:bc:3f:49:54:6f:
                    84:0d:1c:52:b7:1a:ef:d8:59:0a:65:dd:31:37:ca:
                    ab:f5:90:42:11:9b:9b:96:80:5f:66:32:70:cd:14:
                    02:18:86:a1:ef:65:10:9c:ff:a9:0f:97:ad:42:b3:
                    35:88:cb:cf:d1:69:33:6f:60:24:6f:b0:15:ec:00:
                    4c:c8:fd:7f:8f:02:ea:33:cc:0b:b0:77:89:ca:2b:
                    25:96:d9:65:da:e4:1a:3a:4e:4a:1d:77:3a:e0:87:
                    35:f2:77:54:cb:3c:8a:54:41:ab:6d:60:9e:84:41:
                    c9:b0:ae:07:0a:0e:ad:c1:77:9b:03:ee:c2:24:e8:
                    69:e1:93:bb:c8:75:1a:fd:5e:f9:52:63:8d:09:8a:
                    2d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:95:84:18:8B:0E:FB:90:4D:B8:03:5D:12:BF:90:47:CE:4B:10:7B
            X509v3 Authority Key Identifier:
                keyid:E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         6b:11:b9:4a:d3:a0:b0:00:1c:32:b8:fd:ac:b1:4c:6d:26:ad:
         90:dd:a1:d3:b2:1b:e8:fc:c1:1e:31:9b:14:ff:5c:08:88:42:
         67:c1:5d:d4:4a:38:9f:22:9f:76:c6:a4:6d:45:8c:8b:04:b9:
         e6:13:ba:fe:ce:96:ba:79:f0:9a:18:2b:46:e7:8e:85:5a:b8:
         8f:40:d4:71:8f:21:51:d8:30:08:a4:86:89:b2:e3:c4:5f:dc:
         de:fc:34:2d:f3:4c:3d:a5:e5:06:e6:02:a3:2f:9d:ca:d8:ad:
         1f:83:79:59:ae:b0:60:96:4b:bb:55:70:a5:93:e0:ba:55:9c:
         64:09:3c:61:dd:cf:a0:75:90:e5:ee:bd:e1:6f:f1:a6:0e:f6:
         ae:08:95:9d:b6:c9:f9:83:85:3a:dd:93:08:54:6a:b5:cb:02:
         9e:b0:90:b5:3a:29:35:bd:3b:2c:83:41:ae:8b:9e:25:ca:ba:
         f0:b6:0c:02:c0:2f:6f:f1:4b:d0:98:f5:2d:c3:bc:1e:97:1d:
         22:cc:82:14:b4:fc:8a:1f:04:33:4b:ab:de:24:e4:a1:c3:6f:
         af:50:61:ac:c2:5d:b5:1e:4e:0f:fa:ee:b0:d2:fe:7c:a7:45:
         a3:d9:1a:45:63:06:77:17:bd:9e:48:87:71:94:56:e5:d0:6c:
         a9:d3:a3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 07:23:39 2025 by rpki-client