
$ rpki-client -vvf rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft
File:                     IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft (raw, json)
Hash identifier:          4UIEwsWF7dFMikKZevwrUsjT06qZoKUVcm5Zhv2meaE=
Subject key identifier:   ED:9F:A0:B5:C3:74:37:4F:97:50:70:7A:08:E5:3A:AA:67:D1:74:19
Authority key identifier: 20:CB:58:BB:7C:D4:24:E7:61:BC:39:3B:FC:B8:D6:76:68:5F:6C:0D
Certificate issuer:       /CN=A918754F/serialNumber=20CB58BB7CD424E761BC393BFCB8D676685F6C0D
Certificate serial:       265B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft
Manifest number:          25CC
Signing time:             Sun 02 Nov 2025 15:44:46 +0000
Manifest this update:     Sun 02 Nov 2025 15:44:46 +0000
Manifest next update:     Sun 09 Nov 2025 15:44:46 +0000
Files and hashes:         1: IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl (hash: fYnrxRpTZmB3jmgXoLg80dA7hISei7R6Fycz1K0InJ4=)
                          2: 9ED46D5C72F611EE857CC13FC4F9AE02.roa (hash: /CgW1RCBBKg0G9J60cVrkPNi3RQ9sxBskKzs6426hF8=)
                          3: B6C42C027E7111ECA6454787C4F9AE02.roa (hash: wmE3dy22cCh7DDeNE31Jx/DmkbwsEQ9KR2+uUk3Z/H8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl
                          rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 15:44:45 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9819 (0x265b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918754F, serialNumber=20CB58BB7CD424E761BC393BFCB8D676685F6C0D
        Validity
            Not Before: Nov  2 15:44:46 2025 GMT
            Not After : Nov  9 15:44:46 2025 GMT
        Subject: CN=69077c6e-1688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ef:70:b8:bc:51:d3:a2:54:6f:d3:97:85:61:
                    18:cb:ae:0c:27:c4:14:82:f1:c6:f9:0d:b4:13:56:
                    0a:00:82:d3:c4:10:6f:5c:37:e7:0d:91:1e:a0:8a:
                    56:cf:4d:85:84:d6:9b:86:ee:c9:5d:bc:38:59:19:
                    70:56:ac:f6:6e:3d:f4:4a:d4:70:27:bd:5c:ea:e7:
                    fb:a2:2b:26:33:92:a6:be:2d:f0:33:01:be:f9:fd:
                    5b:21:39:34:34:39:bc:c1:4d:49:72:fb:19:f3:a0:
                    ea:6a:b4:25:d1:1b:3b:ca:59:1f:50:0f:d3:7e:ec:
                    cc:ca:ee:4a:76:c9:f7:70:e6:11:4e:5b:3e:dc:dc:
                    0e:f2:d8:bb:e2:17:87:70:b7:01:33:ad:a2:1a:aa:
                    8c:d2:29:74:66:3c:67:27:f8:a2:ce:24:cf:11:42:
                    f4:fb:93:fc:61:2e:6c:b1:72:8d:fd:fd:76:14:e5:
                    75:8e:1c:e5:7c:d1:7c:05:23:81:42:38:ab:b8:7d:
                    3f:f4:25:4e:2c:e8:56:bf:02:da:e5:20:be:21:52:
                    77:6d:86:ef:a9:f3:a8:d2:a8:4a:d8:18:0c:24:14:
                    6c:d4:cf:a3:47:11:a7:62:f3:c6:1c:cf:8c:02:d6:
                    1d:7c:54:2e:4d:d4:a2:51:ee:c9:71:24:03:94:06:
                    f0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:9F:A0:B5:C3:74:37:4F:97:50:70:7A:08:E5:3A:AA:67:D1:74:19
            X509v3 Authority Key Identifier:
                keyid:20:CB:58:BB:7C:D4:24:E7:61:BC:39:3B:FC:B8:D6:76:68:5F:6C:0D
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         3f:59:2e:3c:61:8d:a1:1d:07:f6:ab:46:aa:83:80:a8:fb:b7:
         ae:7d:bb:28:0f:d1:7c:d6:48:84:36:48:20:7a:5a:a1:d5:5a:
         2c:5d:f5:a1:a4:4a:53:2e:46:03:a3:69:42:c0:5e:a9:4e:26:
         df:bb:fb:7f:9a:9f:11:10:df:98:1d:32:63:21:87:6c:a0:67:
         c0:c7:bd:f3:28:13:8f:cd:cf:98:40:0d:ac:dd:d5:93:58:aa:
         d0:12:0f:b2:bf:d3:30:de:09:bd:26:69:f8:5e:8a:8c:63:2f:
         c8:2b:7e:85:b5:6a:ef:5c:f7:87:28:0f:d7:74:0e:2a:45:f8:
         77:b4:3c:a0:54:78:b5:66:11:82:8f:e4:b0:63:24:db:c6:e4:
         0a:7f:b9:79:09:eb:e0:96:b5:a3:fc:f2:d8:25:8a:f2:5e:f2:
         f8:01:04:1b:6f:eb:9c:a2:9d:08:68:cb:92:2a:0f:bc:3d:75:
         81:2c:9f:fb:82:97:92:a6:68:d2:9a:0f:91:6d:6a:7f:32:5b:
         1b:16:f6:a5:a6:5d:11:e7:3f:04:7f:18:92:3a:ab:f6:60:c7:
         40:d7:29:8b:09:2d:3f:a7:a9:d4:fa:d2:77:eb:d1:d8:12:e6:
         ee:57:72:54:ba:fd:08:77:09:65:13:31:9d:a4:8a:3c:0f:77:
         6c:3f:ce:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 01:03:47 2025 by rpki-client