
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft
File:                     D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft (raw, json)
Hash identifier:          IwTGP1+QZ+k+8qOVq7BC9koX6AHbWhfguRtURQub+Rw=
Subject key identifier:   A6:E1:E5:94:E9:FD:BC:6E:0B:C2:7D:F4:16:34:38:10:F5:8F:8C:2C
Authority key identifier: 0F:D7:0E:78:A1:0E:09:18:EF:1C:9D:D8:2A:E2:E9:FD:C3:5A:A4:9F
Certificate issuer:       /CN=A9186883/serialNumber=0FD70E78A10E0918EF1C9DD82AE2E9FDC35AA49F
Certificate serial:       0188
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft
Manifest number:          0188
Signing time:             Mon 03 Nov 2025 03:32:37 +0000
Manifest this update:     Mon 03 Nov 2025 03:32:37 +0000
Manifest next update:     Mon 10 Nov 2025 03:32:37 +0000
Files and hashes:         1: D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl (hash: ou0/d/x4Zg6T/HmOkgp2/MShSxpe1QFIm0usk2H7Fcc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl
                          rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 03:32:36 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 392 (0x188)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186883, serialNumber=0FD70E78A10E0918EF1C9DD82AE2E9FDC35AA49F
        Validity
            Not Before: Nov  3 03:32:37 2025 GMT
            Not After : Nov 10 03:32:37 2025 GMT
        Subject: CN=69082255-fa7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b3:89:b5:d2:0b:8b:f1:cb:5a:bb:9b:bd:69:
                    e3:1e:ad:50:69:7d:7d:18:22:3a:82:d7:7c:33:51:
                    72:8a:ee:6b:62:37:4b:aa:bf:b1:82:d8:ee:b0:d3:
                    42:68:62:8f:cd:41:a9:82:68:86:38:70:c6:45:09:
                    7d:4d:f1:ec:ce:ac:fa:92:18:e8:12:b8:ee:34:86:
                    aa:98:5b:c2:60:6b:78:09:a6:e6:d1:76:7d:02:79:
                    44:5d:03:b5:e1:16:39:68:7f:b6:34:e1:42:69:04:
                    bd:dd:61:4d:7d:1a:af:bf:40:af:a1:72:88:64:09:
                    f2:58:7e:53:a4:0f:19:1f:9a:c5:e0:74:08:eb:39:
                    bd:b9:ec:be:31:4b:20:ea:ce:22:44:1f:0f:36:6d:
                    85:c1:7d:4f:24:5d:55:30:b2:f1:e7:8f:7d:fe:71:
                    a9:ec:80:0a:d4:b1:96:7f:59:78:85:2a:10:94:a4:
                    40:b3:0a:22:15:0a:26:1f:59:ea:8b:01:96:95:b3:
                    bd:1d:b7:de:e9:47:92:09:6d:3a:9a:b5:86:2c:98:
                    ab:e9:89:f5:96:f8:36:0b:b4:62:b9:88:59:d9:87:
                    3e:af:ab:94:1c:50:02:ed:60:0c:02:dd:c5:5e:be:
                    7e:25:e5:f2:38:f3:e5:7c:2c:35:05:02:d6:30:62:
                    e3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E1:E5:94:E9:FD:BC:6E:0B:C2:7D:F4:16:34:38:10:F5:8F:8C:2C
            X509v3 Authority Key Identifier:
                keyid:0F:D7:0E:78:A1:0E:09:18:EF:1C:9D:D8:2A:E2:E9:FD:C3:5A:A4:9F
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         16:fe:97:05:76:aa:05:06:6d:cd:4d:d3:5e:01:ef:b6:49:56:
         06:b0:3d:07:7c:b9:4c:e0:11:2d:3a:e6:a9:58:72:cb:7e:6e:
         e8:83:40:ea:54:f9:ad:c6:e8:f0:15:06:a4:da:94:4e:23:ce:
         8f:b1:fb:39:de:8c:e3:45:dd:77:e0:5c:79:e9:7c:00:68:65:
         52:0c:45:30:98:8e:06:40:ec:09:14:01:5f:88:74:e9:fc:2a:
         0b:9a:69:53:1e:a9:38:96:a4:28:74:25:3d:f6:81:40:a6:a0:
         75:90:46:4b:c1:b6:a1:bd:c9:7f:36:22:a7:90:d4:50:51:26:
         15:09:8d:a1:76:cc:f5:33:cd:e8:93:69:1f:a7:8d:f9:34:f4:
         1a:fc:f7:7e:24:4d:de:4c:65:40:9c:27:78:cc:38:70:e4:92:
         cd:b5:78:df:b3:ad:d7:e9:ba:b8:50:ee:a8:73:af:12:62:a2:
         11:0b:bd:bf:a3:6c:d6:fc:77:9b:1e:72:27:0f:7d:09:d8:cb:
         ae:8d:8e:e4:fb:44:b9:7f:d9:1b:5b:7a:fc:f7:47:35:d3:4e:
         bd:0f:f1:fd:dd:7d:30:1f:56:b9:d7:02:50:0f:d8:79:7c:8e:
         65:c0:08:90:2f:82:ea:53:00:c6:1f:cc:31:25:15:4a:cd:83:
         2f:d0:04:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 01:05:59 2025 by rpki-client