
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft
File:                     5muokllQFHlLtkUdFCgchAAgYgM.mft (raw, json)
Hash identifier:          v57J+C7Lp9iIIjv6cQX4q3YAijhJfCl+epr4oHUfQj8=
Subject key identifier:   06:06:71:76:64:C6:E3:02:5A:74:9B:BC:31:8C:8A:3C:FF:71:8D:22
Authority key identifier: E6:6B:A8:92:59:50:14:79:4B:B6:45:1D:14:28:1C:84:00:20:62:03
Certificate issuer:       /CN=A9140BA4/serialNumber=E66BA892595014794BB6451D14281C8400206203
Certificate serial:       14C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5muokllQFHlLtkUdFCgchAAgYgM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft
Manifest number:          14BD
Signing time:             Sun 02 Nov 2025 16:51:44 +0000
Manifest this update:     Sun 02 Nov 2025 16:51:43 +0000
Manifest next update:     Sun 09 Nov 2025 16:51:43 +0000
Files and hashes:         1: 5muokllQFHlLtkUdFCgchAAgYgM.crl (hash: 8TaaquzV8JX5Ks+f3lwz1vz/NvkNrCjjTW1iFEaYoB4=)
                          2: 3FF298D41AFF11EFB20C2648C4F9AE02.roa (hash: K3UhQQDhvIK9kiqYEaaLUGkHSXsQC8El8DjsvYMTmMc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.crl
                          rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5muokllQFHlLtkUdFCgchAAgYgM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 16:51:43 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5312 (0x14c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140BA4, serialNumber=E66BA892595014794BB6451D14281C8400206203
        Validity
            Not Before: Nov  2 16:51:43 2025 GMT
            Not After : Nov  9 16:51:43 2025 GMT
        Subject: CN=69078c20-0d93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f2:00:d9:55:35:30:fa:60:78:15:3a:f4:4f:
                    ce:68:a5:d5:82:a3:a0:dd:dc:c6:07:5e:74:f5:74:
                    32:fd:b2:90:f5:d2:58:b2:f8:12:6f:84:ff:44:02:
                    78:a8:a9:fe:22:c7:2d:27:d7:00:6a:18:5c:13:d8:
                    e5:24:24:c5:96:6b:ec:0d:d1:b4:9f:34:e4:57:1e:
                    77:14:b4:cb:0c:5d:65:c0:f3:44:a5:58:fa:31:02:
                    0b:ea:7b:19:dd:10:76:38:fe:a0:4c:eb:28:7a:d9:
                    1e:de:fc:59:90:3c:8a:f5:75:1d:46:5a:74:5f:8b:
                    33:41:bd:ad:6c:bf:9f:61:46:ef:1a:e9:57:1a:e1:
                    2b:32:cf:ac:88:13:24:28:55:e4:22:ad:00:5b:77:
                    55:f8:6e:fb:97:d0:61:c0:52:97:8f:51:a9:9b:8e:
                    c5:ea:b1:41:f3:9a:8b:c1:32:5a:8c:82:51:70:e3:
                    f9:c7:e9:d1:8e:73:7e:4f:a1:12:44:98:38:10:73:
                    31:f0:0d:19:f4:9f:da:43:2e:75:c2:4e:64:89:a7:
                    f3:89:86:fd:55:1b:a3:7d:83:63:38:fe:95:e9:fb:
                    27:ec:15:9c:73:91:3f:fe:b2:68:73:72:57:d8:85:
                    40:b0:41:b5:bf:a3:5a:cc:7b:72:63:45:f8:dd:a4:
                    ba:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:06:71:76:64:C6:E3:02:5A:74:9B:BC:31:8C:8A:3C:FF:71:8D:22
            X509v3 Authority Key Identifier:
                keyid:E6:6B:A8:92:59:50:14:79:4B:B6:45:1D:14:28:1C:84:00:20:62:03
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5muokllQFHlLtkUdFCgchAAgYgM.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         1f:09:b8:05:78:5f:64:87:7b:55:2f:0d:79:67:67:88:10:b2:
         30:b0:82:d8:77:ee:66:cd:4e:5e:95:b3:63:1e:43:cd:d0:d5:
         47:4d:0d:6a:fd:db:2c:e3:be:d5:a0:14:06:6f:44:c4:1b:26:
         d6:bf:55:06:06:41:69:77:0c:4b:ca:6f:6b:0b:71:12:37:e3:
         9a:44:3f:34:1f:66:fe:d0:94:f5:39:d5:6e:4c:80:49:11:f9:
         96:6f:64:94:8b:9b:7b:79:b9:c6:82:ec:31:e5:74:31:c5:9b:
         82:bb:6c:35:06:84:e8:47:8d:17:04:a3:31:71:79:4b:75:60:
         d8:1f:1d:47:1b:a4:c1:84:45:81:7b:ed:64:e1:45:46:80:1b:
         e4:ea:85:2a:52:7b:40:a0:e8:57:37:a0:1d:57:a5:c0:e4:d7:
         c9:8f:e6:2e:09:cf:e9:7c:94:b9:3c:0d:42:cd:80:36:89:54:
         ab:56:9c:92:c5:53:ad:c7:77:65:d6:5a:7d:7d:a1:1e:f7:67:
         25:30:af:c4:96:a7:59:c2:05:9a:ca:a5:9d:99:fc:df:2f:5a:
         b8:a8:a1:78:fe:b2:3a:be:a8:1d:19:80:bc:44:12:56:e6:d0:
         ed:da:ad:0a:5a:23:e8:7e:fa:78:c2:ac:ac:b6:9e:a7:a3:3b:
         dd:19:a8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 01:10:00 2025 by rpki-client