
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft
File:                     18ttHdz5NKH1nk_-SYLwtMUsNfU.mft (raw, json)
Hash identifier:          3f1IO/FFd8FIYcLn8rEFxbYY2aAVOrFmTlrNWT+mTjA=
Subject key identifier:   F8:38:D4:C9:E0:D5:91:ED:A2:07:D8:00:76:5B:B1:AC:95:4C:8C:46
Authority key identifier: D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5
Certificate issuer:       /CN=A914DA2D/serialNumber=D7CB6D1DDCF934A1F59E4FFE4982F0B4C52C35F5
Certificate serial:       0392
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft
Manifest number:          037E
Signing time:             Sun 02 Nov 2025 16:21:25 +0000
Manifest this update:     Sun 02 Nov 2025 16:21:24 +0000
Manifest next update:     Sun 09 Nov 2025 16:21:24 +0000
Files and hashes:         1: 18ttHdz5NKH1nk_-SYLwtMUsNfU.crl (hash: JgQr+h1vSynqRk3K3rykQdSMHWkZRfGx9AJHKQSDkms=)
                          2: 6C330F2C7E3711F0BFE28E3AC4F9AE02.roa (hash: rRV3ULmc3s28UHX3IfHIa+Sp5XP4XAzVw9QLu0Fytsg=)
                          3: 83C2F8EE2F1F11F0AC29D057C4F9AE02.roa (hash: 03Y5aZgZbiR8AXRbH0v7oX9h0nIRsdQvo8UEKJF+mQs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.crl
                          rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 16:21:24 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 914 (0x392)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DA2D, serialNumber=D7CB6D1DDCF934A1F59E4FFE4982F0B4C52C35F5
        Validity
            Not Before: Nov  2 16:21:24 2025 GMT
            Not After : Nov  9 16:21:24 2025 GMT
        Subject: CN=69078505-b355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ad:85:25:e1:48:3c:d7:c0:60:17:6e:c2:d2:
                    9f:77:56:b9:39:43:1c:ce:7e:a6:49:cc:1e:8b:1e:
                    7a:46:f5:69:29:c1:43:12:8f:8a:ec:2a:21:e5:a2:
                    ad:bc:44:62:61:ea:9a:18:ba:f2:5d:2d:e3:7d:8a:
                    cd:be:81:ce:34:c0:36:39:1c:cf:cb:ce:c4:92:70:
                    78:fe:44:af:28:92:61:8a:0e:ed:ae:ff:2c:ed:ea:
                    9b:0b:67:08:53:d9:63:cf:3a:82:6a:36:62:7d:31:
                    56:9f:49:4a:66:7f:2a:9b:62:4b:00:b0:23:62:e6:
                    76:bc:a9:8d:0f:47:3c:56:63:b0:a0:ea:6f:9e:f7:
                    27:c0:78:fa:d6:bb:bf:6c:93:1a:85:65:63:f0:f8:
                    06:7d:77:6d:07:89:47:e1:e4:71:3f:f6:ae:ab:d6:
                    ca:c7:9a:6e:e0:b9:db:90:99:63:9e:89:16:79:27:
                    76:4e:09:6f:6a:27:ef:0e:7b:bf:7d:c2:b4:1a:ae:
                    5b:8c:ea:ae:8d:88:56:20:a4:7c:c6:aa:b1:f2:8a:
                    cc:9a:cc:74:db:fc:86:eb:7e:8f:f5:0e:77:8f:66:
                    52:fd:b3:c1:3d:2b:91:fa:08:fc:c6:eb:b3:32:45:
                    23:6e:46:ce:93:e1:7a:86:9d:85:b0:3f:2e:eb:77:
                    65:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:38:D4:C9:E0:D5:91:ED:A2:07:D8:00:76:5B:B1:AC:95:4C:8C:46
            X509v3 Authority Key Identifier:
                keyid:D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         0b:f0:4c:66:5c:97:4e:c0:13:04:1c:cf:58:5c:a0:51:65:94:
         13:25:20:06:04:14:22:6f:88:9b:5e:ac:a7:47:1b:98:82:3e:
         ef:f1:24:24:34:1c:bc:8d:ba:37:54:a5:fc:a6:dc:7d:50:34:
         3e:43:c6:fa:97:e0:dc:e9:12:21:df:87:c5:cb:e7:70:f3:b0:
         e8:52:77:c3:1f:1b:f1:52:cc:23:43:de:89:29:04:8e:7a:46:
         48:ee:5d:2b:52:81:0b:30:9d:23:1f:97:b8:cd:17:c3:18:7e:
         c4:4f:cb:14:3a:7e:f0:3d:31:5e:3f:21:f6:a0:65:ef:04:0e:
         46:da:e1:c1:ee:fb:16:ac:7d:7c:24:5f:e2:90:65:0c:ef:63:
         54:be:b6:a9:b5:e5:cb:f7:4b:06:c5:cc:6a:ac:12:de:04:92:
         e1:d1:b6:44:d5:ec:48:ab:2c:70:09:12:cd:97:e1:10:b1:e2:
         e7:ea:27:5e:0a:d2:3d:6b:3b:e1:94:26:f7:9f:ef:26:09:ba:
         5a:d4:bf:5b:bf:42:a0:43:c1:8c:b4:fe:b7:fd:a2:0c:3a:a4:
         75:e0:7e:d6:50:39:9f:9d:59:3e:e1:e9:0f:fc:1b:c4:fb:5b:
         2f:26:89:23:4d:b5:4f:8e:9d:23:c2:b6:dc:45:65:12:a0:4e:
         2e:67:6c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 15:56:37 2025 by rpki-client