
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          Xe0mCn2WEVPO6IQLepE8UVjxy+AI3P0Pf/nb6MMpsM4=
Subject key identifier:   A7:AC:C6:89:9C:FB:2B:AC:39:6C:FC:DD:BF:D8:CE:DC:38:41:16:01
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       0500
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          042F
Signing time:             Mon 03 Nov 2025 00:58:59 +0000
Manifest this update:     Mon 03 Nov 2025 00:58:58 +0000
Manifest next update:     Mon 10 Nov 2025 00:58:58 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: GizgyfeX3TLJHJzC2EIGfCXIhEayln2F4GHQtbwm5Rw=)
                          2: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: pE0TeYdIKCgc/QwPZRV1/6gtn2PDxZWuZWypXfqUCBk=)
                          3: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: 3+hYQrTmF+e7jJciHHC9Syz1XLKiAuOCDuMHFEIoOO8=)
                          4: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: yoHxToNdVsEl2/mlXGoTSTZxsnICbltZ8OX7V22JdbQ=)
                          5: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: xMiHMYItwXrD425Qd67NbjvjX4HrJ3EnpnA8c/QF/4k=)
                          6: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: SilbnDSMyvFBaNxXZnHVsn7YIdcJKbT+9vzuxU+MumM=)
                          7: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: A8LP0mnaTBBKppNqPSMaDhPFCk6GGBkjSaBDc8dCjBI=)
                          8: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: y7UxQPzEfI3HoqpYaog23DQiTZxRgqBo5bC5YqQdvKI=)
                          9: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: soHDXhn1e2qK0BUfZsT/7EMAgURekf6y4K6+rsJFtvU=)
                          10: E984676EB5E611F0BCCCFA59C4F9AE02.roa (hash: l0B97lYyMn0o989Hi/HPTZ+TBf/ToOdx3ELGptgmk6A=)
                          11: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: 9J2iOFdXW0WTaVQoSkjTpRubYQV1uYwslH5WX54SWS8=)
                          12: B6E083D46E2F11EEB9C12A34C4F9AE02.roa (hash: cEUErhxJhRs9Ayd1OjEDxa3aUEaS/H1Cn1wGLQy/Hdo=)
                          13: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: OKC561ca7ASLfOkgXrHgKbplp4PP/4v4yOXE3sio9JA=)
                          14: DD12F48AEC2611EF94F85F09C4F9AE02.roa (hash: 5x3hwbD6OKSIDNRFPjnTH18AkwSHTg00pMz0FKOos+E=)
                          15: D3A8EA649F0911EE98065E23C4F9AE02.roa (hash: R2/WUKzxoHuFFd/QsgqeEUvYq+HCK78+7w9Z8fUIsWc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 00:58:58 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1280 (0x500)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Nov  3 00:58:58 2025 GMT
            Not After : Nov 10 00:58:58 2025 GMT
        Subject: CN=6907fe52-63c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f7:73:8e:96:e6:ef:46:7d:82:ef:1a:0f:6c:
                    dc:1e:43:6d:42:bf:23:89:c9:a2:43:14:14:b5:4f:
                    7f:fd:02:7c:43:1c:3e:7b:76:f8:31:0d:af:65:ef:
                    f8:3c:9d:5e:b2:66:05:9e:c4:fd:d0:1b:43:9f:f7:
                    b6:fa:9f:ff:b0:bc:83:de:62:7e:93:eb:b1:52:7d:
                    f8:0a:01:94:c1:20:31:4f:5e:87:c0:c1:28:bf:ed:
                    c2:21:91:e5:fc:23:19:a7:43:77:68:5f:13:5a:f3:
                    ee:ad:ab:43:ae:88:a0:9d:d2:74:2b:3c:0c:ca:31:
                    44:13:56:a7:75:c8:3f:c2:1d:c1:ed:48:97:29:d8:
                    19:ab:c0:78:1e:34:18:42:35:e0:87:6a:38:0f:df:
                    69:e8:20:f5:59:78:37:43:cc:28:85:8e:69:84:38:
                    43:a6:1a:69:09:fe:b0:53:76:20:fe:40:dc:e9:37:
                    12:4b:b1:cc:1d:8f:c0:d5:91:15:49:81:cd:e7:22:
                    c0:a8:a9:07:54:16:d1:1b:8d:3a:42:6b:3c:4a:f0:
                    26:e0:1e:88:a7:ab:42:2c:b2:59:81:95:23:f8:1b:
                    a3:eb:b3:a1:3d:c6:2e:87:f5:e5:92:28:30:1c:87:
                    e2:2d:c0:ef:02:f1:a7:58:b9:8c:ae:f7:c9:10:86:
                    58:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:AC:C6:89:9C:FB:2B:AC:39:6C:FC:DD:BF:D8:CE:DC:38:41:16:01
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         88:f7:37:93:88:01:46:3c:6d:60:e0:54:6d:b8:e1:ef:da:4a:
         fb:1e:e9:0c:03:aa:b0:bc:5c:90:a2:fe:61:a6:2b:10:02:53:
         b7:6f:ca:f0:90:c8:12:73:99:e3:dd:ec:7b:a9:97:49:d4:55:
         40:a6:7b:92:66:93:c0:5b:6b:55:23:64:f3:48:a1:42:65:34:
         03:2d:be:41:e9:7f:08:51:c1:3f:07:1c:4b:99:4e:63:49:11:
         24:7a:a8:35:28:75:12:76:b3:26:d6:2a:1c:db:5f:ac:e7:38:
         2f:a4:17:9b:bb:7a:8f:83:28:36:ca:81:36:55:07:7a:44:66:
         d0:97:15:64:0d:25:15:7d:2c:d8:ac:d1:4e:7f:5f:4e:f1:7c:
         d7:18:a6:bf:22:bc:94:0d:fd:58:a0:e0:6d:e0:03:9b:32:50:
         cb:66:c4:cd:ae:f4:47:9d:c3:b6:1d:51:a9:1f:c6:fb:55:03:
         9c:61:68:40:de:6c:da:a0:11:da:63:78:d7:86:10:ab:49:76:
         f6:94:35:3b:8b:85:0a:2b:74:9d:7f:79:b9:0d:26:06:ec:3d:
         c9:23:48:ea:fb:f1:7c:3f:cc:00:9e:ce:4e:93:e5:0d:d7:4e:
         d3:0d:34:d2:98:6e:56:93:c6:f4:83:b5:2a:ed:6c:6d:d2:fb:
         a4:62:17:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 05:29:18 2025 by rpki-client