
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft
File:                     4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft (raw, json)
Hash identifier:          KN6k75lUwJ4rY/y7uJhxlW1Tns51c0ldmh35plReHSU=
Subject key identifier:   6C:DE:20:E2:C9:5B:76:EF:56:D1:3C:A3:65:71:87:CA:AE:A6:0E:A2
Authority key identifier: E0:AB:6D:97:72:65:DB:0D:5C:58:D4:33:A2:8B:3C:C2:05:1A:0C:29
Certificate issuer:       /CN=A917A93E/serialNumber=E0AB6D977265DB0D5C58D433A28B3CC2051A0C29
Certificate serial:       B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft
Manifest number:          AF
Signing time:             Mon 03 Nov 2025 06:15:06 +0000
Manifest this update:     Mon 03 Nov 2025 06:15:05 +0000
Manifest next update:     Mon 10 Nov 2025 06:15:05 +0000
Files and hashes:         1: 4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl (hash: aMNWmUVol34+fZaUMVvAbdnrG/Xb3UHhhszB6MUEyVM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl
                          rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 06:15:05 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179 (0xb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A93E, serialNumber=E0AB6D977265DB0D5C58D433A28B3CC2051A0C29
        Validity
            Not Before: Nov  3 06:15:05 2025 GMT
            Not After : Nov 10 06:15:05 2025 GMT
        Subject: CN=69084869-003c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9a:b6:5b:f6:92:fe:0e:68:be:8c:d1:93:14:
                    a1:e4:73:81:24:be:ec:d2:18:1c:ae:6b:82:e3:ce:
                    c4:99:91:6f:8e:8a:24:f3:ee:f5:ad:0c:3f:c2:cd:
                    9b:fe:86:75:33:3d:08:a5:3d:4a:70:2c:17:46:f8:
                    34:ac:8a:c1:2a:bc:91:2e:0f:b9:95:f9:4e:37:a2:
                    a8:c1:3b:d1:13:f2:82:10:cb:d2:84:08:39:1e:35:
                    2f:94:8e:f1:76:af:5d:fe:33:4e:d4:32:ba:ad:b2:
                    65:33:40:0c:70:9d:f4:2d:b1:86:a5:ce:a7:c1:b4:
                    9f:84:22:f5:70:4f:7c:00:fc:79:4e:ea:3f:0b:00:
                    4e:df:21:b2:db:dc:e3:50:e4:8b:5c:3b:eb:94:d6:
                    c2:fa:d9:06:67:51:8c:2d:69:e2:71:76:77:5d:40:
                    e5:ae:0d:54:be:8c:48:0a:3a:8d:4b:3c:5c:58:4f:
                    3c:e8:cc:1b:ba:c0:89:b7:ba:bc:bd:99:4e:8c:a3:
                    24:f6:91:90:9d:16:35:67:c0:5c:b2:e4:72:44:54:
                    9c:2c:b9:8d:fc:ff:3f:af:38:e5:12:be:f8:f3:88:
                    7f:9c:f8:a5:b8:21:c8:93:11:7a:9f:ac:1a:b2:4e:
                    37:e1:e6:0f:e3:f8:51:67:3c:9c:5f:36:9b:22:61:
                    ed:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:DE:20:E2:C9:5B:76:EF:56:D1:3C:A3:65:71:87:CA:AE:A6:0E:A2
            X509v3 Authority Key Identifier:
                keyid:E0:AB:6D:97:72:65:DB:0D:5C:58:D4:33:A2:8B:3C:C2:05:1A:0C:29
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         4d:4d:c4:02:a5:95:18:63:b4:d4:53:b4:25:a4:9b:97:58:ae:
         c7:96:78:a8:6f:cd:ae:6d:5b:3f:0d:7a:5c:0b:6d:68:da:60:
         d9:0b:b5:bc:fd:9c:43:4e:f6:c0:40:fa:42:89:32:97:11:c3:
         c7:83:32:d1:5e:07:bb:e7:7f:ac:76:1b:2f:9b:2e:9d:55:96:
         a0:60:59:c8:11:75:19:c0:b5:8f:b2:b0:31:96:7c:da:a7:c2:
         f9:06:bc:c3:df:39:12:f6:21:a0:d1:a0:7e:57:3a:6b:c1:41:
         2b:b7:ec:18:c7:03:02:15:67:4e:be:75:90:a4:df:c2:60:e3:
         c1:9b:01:61:4f:94:fa:f6:2f:bd:96:bf:c2:6b:81:97:ac:0e:
         7c:86:ce:af:f2:c8:8e:7a:68:8f:78:6c:68:7d:cf:c9:81:87:
         9b:78:a1:70:7c:22:9d:2e:a4:b8:06:a4:9a:e6:c2:af:35:3f:
         18:a3:25:1e:e4:4b:90:6f:ad:97:d6:83:ab:6f:8d:88:77:0f:
         b5:c8:50:ef:3a:b2:78:f5:d2:bf:f2:38:77:11:b6:38:73:50:
         7c:a0:f4:f5:b0:3b:64:91:22:49:f6:2a:a1:55:f9:3a:da:1c:
         c1:6a:fc:eb:98:21:99:3e:4c:d5:b7:96:c7:ca:51:8b:69:e1:
         b6:1b:6d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 01:10:04 2025 by rpki-client