
$ rpki-client -vvf rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/vNgnSl8YLOQAgCwIPo0VQi-bthE.mft
File:                     vNgnSl8YLOQAgCwIPo0VQi-bthE.mft (raw, json)
Hash identifier:          OyI7Ctozo2WpyKr+4I6r6jliZ9VeqGWcwc9Wmiq7fak=
Subject key identifier:   47:48:37:07:52:BB:94:45:71:6A:98:AC:E2:A5:06:03:65:95:87:31
Authority key identifier: BC:D8:27:4A:5F:18:2C:E4:00:80:2C:08:3E:8D:15:42:2F:9B:B6:11
Certificate issuer:       /CN=A91554E6/serialNumber=BCD8274A5F182CE400802C083E8D15422F9BB611
Certificate serial:       0320
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNgnSl8YLOQAgCwIPo0VQi-bthE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/vNgnSl8YLOQAgCwIPo0VQi-bthE.mft
Manifest number:          049C
Signing time:             Mon 03 Nov 2025 01:04:27 +0000
Manifest this update:     Mon 03 Nov 2025 01:04:27 +0000
Manifest next update:     Mon 10 Nov 2025 01:04:27 +0000
Files and hashes:         1: vNgnSl8YLOQAgCwIPo0VQi-bthE.crl (hash: Sj912CRRDUUgkm1oq1HtmnT5hqPdxbmTWFA16Mg0pQ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/vNgnSl8YLOQAgCwIPo0VQi-bthE.crl
                          rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/vNgnSl8YLOQAgCwIPo0VQi-bthE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNgnSl8YLOQAgCwIPo0VQi-bthE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 01:04:26 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 800 (0x320)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91554E6, serialNumber=BCD8274A5F182CE400802C083E8D15422F9BB611
        Validity
            Not Before: Nov  3 01:04:27 2025 GMT
            Not After : Nov 10 01:04:27 2025 GMT
        Subject: CN=6907ff9b-4507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:27:62:86:80:22:7c:a6:c2:ff:52:06:db:82:
                    7a:eb:9e:27:e1:ab:ad:c5:24:b6:a4:6a:be:43:9d:
                    07:0e:42:c8:bd:ed:f8:c0:48:19:a6:82:8d:d6:53:
                    71:24:4f:43:4d:43:d1:56:25:4c:77:f3:1c:df:01:
                    88:40:6a:24:52:0d:94:e3:cd:82:29:3d:80:c5:2a:
                    59:e8:d5:c6:10:10:05:c2:75:5e:17:47:71:64:b7:
                    3f:77:79:e0:29:fd:74:4c:46:83:97:40:ba:91:89:
                    01:73:c7:99:d6:5a:b4:4d:96:ad:ca:ad:cc:32:0c:
                    7d:23:05:06:03:2e:e2:2f:45:fe:ef:89:19:b2:c5:
                    57:e8:ca:7c:8a:ce:30:41:c0:6a:bd:f1:f2:59:4e:
                    ce:de:c7:28:fe:c3:1d:e0:85:be:eb:c0:09:33:0a:
                    33:7d:fb:50:17:5f:c1:8b:5c:5c:a7:21:c6:ef:bd:
                    a8:05:57:1a:94:3e:b9:47:d8:7a:be:cc:95:16:16:
                    bb:0f:57:76:1d:55:13:09:53:8b:4e:a8:36:a2:0f:
                    20:49:18:6a:8e:df:82:b2:98:0b:72:fb:5b:d1:4c:
                    82:eb:6e:e4:df:e7:c6:63:19:20:b9:d1:0f:5a:c1:
                    5a:7d:3b:3e:1a:5a:ea:7d:76:2b:c1:a8:d5:0b:11:
                    b7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:48:37:07:52:BB:94:45:71:6A:98:AC:E2:A5:06:03:65:95:87:31
            X509v3 Authority Key Identifier:
                keyid:BC:D8:27:4A:5F:18:2C:E4:00:80:2C:08:3E:8D:15:42:2F:9B:B6:11
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/vNgnSl8YLOQAgCwIPo0VQi-bthE.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNgnSl8YLOQAgCwIPo0VQi-bthE.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/vNgnSl8YLOQAgCwIPo0VQi-bthE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         9a:df:77:14:f2:11:ba:14:8a:d7:86:c9:13:2e:c5:1a:59:74:
         f5:65:2c:f2:6b:7f:69:47:fe:35:c9:1e:0b:41:f6:b8:ba:3c:
         2a:a4:cc:b1:f6:d2:39:1b:49:7d:39:64:c2:c7:9f:2a:18:7b:
         6f:f9:aa:94:4e:94:24:12:a3:cb:8d:c2:22:ba:22:a0:cb:35:
         b0:c9:0c:67:32:1e:3d:ea:af:5f:2a:4b:ee:d3:05:71:c1:c4:
         76:4f:bd:80:f5:1a:67:88:ee:68:cd:64:4e:37:9f:ac:7d:85:
         ac:a2:af:a3:74:2d:ec:0b:c7:2a:8f:b6:91:2a:02:5e:8e:2f:
         f1:66:27:a2:af:63:ee:74:01:af:f1:be:88:20:dd:fa:2e:03:
         16:71:56:05:f4:73:81:0d:55:5a:54:3a:04:15:77:8d:95:29:
         8a:43:dc:16:bd:df:eb:ef:36:cc:7b:51:3f:5c:0a:12:0d:60:
         23:c4:b2:ac:72:96:24:e9:78:4e:9a:5e:08:a7:16:06:f9:6f:
         b1:3d:ff:8f:25:8c:f7:39:5a:c6:50:22:95:dd:2c:f6:78:24:
         63:5e:21:e3:4d:4b:98:19:4c:05:66:06:c7:35:40:35:4c:85:
         4d:5d:96:3f:8e:1c:76:e8:d2:34:77:c6:ca:1f:ba:e3:6f:b3:
         b0:56:38:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 08:28:06 2025 by rpki-client