
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
File:                     Qg2MLsPSR5xUI6v_dHgriopLfeo.mft (raw, json)
Hash identifier:          HwKOYeJA/HKFBcjZ8KQ7aEEbVPNXCeIUCPTippr0A2I=
Subject key identifier:   4E:38:DE:D2:59:DA:C0:85:18:5F:3A:8F:1E:9F:A7:09:A2:B9:01:91
Authority key identifier: 42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA
Certificate issuer:       /CN=A9182F75/serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA
Certificate serial:       1C4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
Manifest number:          1C2A
Signing time:             Sun 02 Nov 2025 16:14:19 +0000
Manifest this update:     Sun 02 Nov 2025 16:14:18 +0000
Manifest next update:     Sun 09 Nov 2025 16:14:18 +0000
Files and hashes:         1: Qg2MLsPSR5xUI6v_dHgriopLfeo.crl (hash: RKL6ZsIv8TeFeiVzaFQMis/1/gRyDOFZPDncsPwNGh0=)
                          2: 6892F5F2663C11F08C247C68C4F9AE02.roa (hash: Q0+hX7TsyFyWEUhoyFXxRcuYnmI5ezzOdvEkCo3BkCI=)
                          3: A770EFB01E5611EFAF3FCB38C4F9AE02.roa (hash: BbGcUbwtP+aZHPYce4149SbFzjL1B5hYLShi68qQcek=)
                          4: DD55266E1E5611EFAFFD4839C4F9AE02.roa (hash: HlwCeu7nRQrhAHteeDH8/AzpstkCTMTYbzNnFUCPtI8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl
                          rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 16:14:17 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7244 (0x1c4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182F75, serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA
        Validity
            Not Before: Nov  2 16:14:18 2025 GMT
            Not After : Nov  9 16:14:18 2025 GMT
        Subject: CN=6907835a-00c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:26:7f:6b:a8:6e:57:24:ff:11:f4:44:f1:0e:
                    22:23:9a:ba:7d:1f:2b:8f:7e:e7:be:23:cb:fd:fa:
                    66:31:d2:1b:63:ba:26:0c:bb:78:d9:a5:a7:0e:ec:
                    b9:10:6f:3d:66:cc:5a:e5:21:79:c7:59:5b:71:eb:
                    75:0e:7d:55:5b:45:c1:38:f3:34:35:f9:2f:7a:e1:
                    ed:06:d6:4f:60:0b:85:f0:15:7b:a4:9c:d9:59:34:
                    d6:38:98:13:c0:ae:4f:74:05:50:55:cd:61:f6:0c:
                    e4:b8:73:98:8f:d9:6b:05:f2:ae:f9:3a:01:2e:89:
                    56:54:09:53:22:40:41:8c:dc:56:8f:25:26:8c:29:
                    01:31:9b:41:ee:40:0f:77:0a:39:8a:73:8a:d6:58:
                    e2:23:14:41:74:7a:b6:11:54:e6:01:9e:03:32:19:
                    8b:94:a8:e2:7e:02:0a:a3:b6:a8:c8:89:c3:95:bb:
                    bf:6c:1e:b4:b1:20:be:0e:9f:69:fc:82:3f:fe:d4:
                    13:73:29:c1:d0:30:24:73:eb:b5:35:60:7d:14:1a:
                    a8:3c:d4:e0:60:56:ad:35:f4:4b:cc:26:49:13:fe:
                    a0:75:f5:79:72:40:66:31:80:1c:da:21:f9:96:d1:
                    0c:66:8a:b1:70:84:2f:0f:a0:ac:bf:11:3f:7d:3c:
                    59:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:38:DE:D2:59:DA:C0:85:18:5F:3A:8F:1E:9F:A7:09:A2:B9:01:91
            X509v3 Authority Key Identifier:
                keyid:42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         80:53:ed:bf:a8:b7:25:a3:81:94:1c:78:9e:b2:c5:0a:43:b9:
         d1:6c:77:6f:eb:e6:e4:bc:e1:fa:92:26:76:78:e9:33:5b:78:
         f4:57:09:74:0f:91:f0:35:21:4b:88:eb:ee:23:65:f9:0f:c8:
         d6:0f:5c:9d:ef:38:c5:a8:50:d0:d5:f5:b5:a3:e2:ba:f0:85:
         27:b2:3f:f5:67:80:0e:85:80:c0:c4:42:07:8a:11:11:00:9c:
         8e:bc:f4:e5:83:53:d3:bb:22:eb:47:33:2c:e8:ce:81:2e:67:
         5c:45:cb:f7:64:17:eb:73:d7:fa:07:c4:3f:d2:0e:d3:b1:79:
         cb:0d:e9:c8:dd:4a:47:7b:86:fa:59:a8:7c:7e:6e:05:5d:9b:
         4c:9d:ad:df:75:8a:39:9b:50:a9:b2:9b:a9:00:8f:16:70:80:
         30:0b:d9:8a:b8:ea:56:8f:cf:4b:42:c2:cb:54:27:81:96:47:
         d8:e1:0d:c3:65:f9:f0:f9:28:74:07:f2:c4:eb:bd:70:9e:26:
         d2:7f:1a:dd:97:36:b8:db:bd:a5:ee:e4:f9:11:44:10:b8:d5:
         87:f8:3b:59:cd:ee:83:8a:81:91:3d:fc:c8:38:4b:2c:a5:27:
         f3:d0:1e:b6:10:40:de:9d:08:88:82:17:59:35:b4:af:bb:6c:
         c6:e1:c9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 08:29:02 2025 by rpki-client